/
create_base_image.sh
executable file
·110 lines (94 loc) · 3.33 KB
/
create_base_image.sh
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
#!/usr/bin/env bash
###############################################################
#
# Copyright (C) 2023 James Fuller, <[email protected]>, et al.
#
# SPDX-License-Identifier: curl-container
###############################################################
#
#
# base images for reuse
#
#
#
# ex.
# > create_base_image.sh {arch} {dist} {builder image} {deps} {resultant_image_name} {release_tag}
#
#
echo "####### creating curl base image."
# set default (will rarely change)
SO_NAME="libcurl.so.4.8.0"
# get invoke opts
platform=${1}
dist=${2}
builder_dist=${3}
deps=${4}
image_name=${5}
release_tag=${6}
# set base and platform
if [[ -n $platform ]]; then
echo "creating with platform=${platform}"
ctr=$(buildah --platform ${platform} from ${dist})
else
echo "creating ..."
ctr=$(buildah from ${dist})
fi
ctrmnt=$(buildah mount $ctr)
# label/env
buildah config --label maintainer="James Fuller <[email protected]>" $ctr
buildah config --label name="${image_name}" $ctr
buildah config --label version="${release_tag}" $ctr
buildah config --label docker.cmd="podman run -it quay.io/curl/${IMAGE_NAME_DEFAULT}:${release_tag}" $ctr
# determine dist package manager
if [[ "$dist" =~ .*"alpine".* ]]; then
package_manage_update="apk upgrade --no-cache"
package_manage_add="apk add --no-cache "
fi
if [[ "$dist" =~ .*"fedora".* ]]; then
package_manage_update="dnf update upgrade"
package_manage_add="dnf add"
fi
if [[ "$dist" =~ .*"debian".* ]]; then
package_manage_update="deb update upgrade"
package_manage_add="deb add"
fi
# deps
buildah run $ctr ${package_manage_update}
buildah run $ctr ${package_manage_add} ${deps}
# mount dev image containing build artifacts
if [[ -n $platform ]]; then
echo "creating with platform=${platform}"
bdr=$(buildah --platform ${platform} from ${builder_dist})
else
echo "creating ..."
bdr=$(buildah from ${builder_dist})
fi
bdrmnt=$(buildah mount $bdr)
# copy build artifacts
cp $bdrmnt/build/usr/local/bin/curl $ctrmnt/usr/bin/curl
cp -r $bdrmnt/build/usr/local/include/curl $ctrmnt/usr/include/curl
cp -r $bdrmnt/build/usr/local/lib/* $ctrmnt/usr/lib/.
# link
buildah run $ctr rm /usr/lib/libcurl.so.4 /usr/lib/libcurl.so
buildah run $ctr ln -s /usr/lib/${SO_NAME} /usr/lib/libcurl.so.4
buildah run $ctr ln -s /usr/lib/libcurl.so.4 /usr/lib/libcurl.so
# set ca bundle
buildah run $ctr curl https://curl.se/ca/cacert.pem -L -o /cacert.pem
buildah config --env CURL_CA_BUNDLE="/cacert.pem" $ctr
# setup curl_group and curl_user though it is not used directly in this image
buildah run $ctr addgroup -S curl_group
buildah run $ctr adduser -S curl_user -G curl_group
# set entrypoint
buildah config --cmd curl $ctr
buildah copy --chmod 755 --chown curl_user:curl_group $ctr etc/entrypoint.sh /entrypoint.sh
#buildah run $ctr run chgrp -R 0 /entrypoint.sh
#buildah run $ctr run chmod -R g+rwX /entrypoint.sh
buildah config --entrypoint '["/entrypoint.sh"]' $ctr
# label image
buildah config --label org.opencontainers.image.source="https://github.com/curl/curl-container" $ctr
buildah config --label org.opencontainers.image.description="minimal base image for curl" $ctr
buildah config --label org.opencontainers.image.licenses="MIT" $ctr
# set working directory
buildah config --workingdir /home/curl_user $ctr
# commit image
buildah commit $ctr "${image_name}" # --disable-compression false --squash --sign-by --tls-verify