mirror of
https://github.com/coreos/chunkah.git
synced 2026-11-03 21:49:44 -09:00
d7e05550c2
One annoying thing about Rust packaging is that it's very easy to miss when you're bundling what is normally distributed as a shared library. We almost always want to avoid that. We avoided it for openssl, but we need the same treatment for zlib.
35 lines
1.1 KiB
Docker
35 lines
1.1 KiB
Docker
# Use `just buildimg` to build this, or:
|
|
#
|
|
# buildah build --skip-unused-stages=false -t chunkah .
|
|
|
|
ARG BASE=quay.io/fedora/fedora-minimal:43
|
|
ARG FINAL_FROM=oci-archive:out.ociarchive
|
|
ARG DNF_FLAGS="-y --setopt=install_weak_deps=False"
|
|
|
|
FROM ${BASE} AS builder
|
|
ARG DNF_FLAGS
|
|
RUN --mount=type=cache,rw,id=dnf,target=/var/cache/libdnf5 \
|
|
dnf install ${DNF_FLAGS} cargo rust pkg-config openssl-devel zlib-devel
|
|
WORKDIR /build
|
|
COPY Cargo.toml Cargo.lock ./
|
|
COPY src ./src
|
|
RUN --mount=type=cache,rw,id=cargo,target=/root/.cargo \
|
|
--mount=type=cache,rw,id=target,target=/build/target \
|
|
cargo build --release && cp /build/target/release/chunkah /usr/bin
|
|
|
|
FROM ${BASE} AS rootfs
|
|
ARG DNF_FLAGS
|
|
RUN --mount=type=cache,id=dnf,target=/mnt \
|
|
cp -a /mnt /var/cache/libdnf5 && \
|
|
dnf install ${DNF_FLAGS} openssl zlib skopeo && rm -rf /var/cache/*
|
|
COPY --from=builder /usr/bin/chunkah /usr/bin/chunkah
|
|
|
|
FROM rootfs AS rechunk
|
|
COPY --from=rootfs / /rootfs
|
|
RUN --mount=type=bind,target=/run/src,rw \
|
|
chunkah build --rootfs /rootfs > /run/src/out.ociarchive
|
|
|
|
FROM ${FINAL_FROM}
|
|
ENTRYPOINT ["/usr/bin/chunkah"]
|
|
ENV CHUNKAH_ROOTFS=/chunkah
|
|
WORKDIR /srv
|