Commit Graph

54 Commits

Author SHA1 Message Date
Clement Verna
fcf1418f19 Add sudo to the fedora container base image.
sudo is needed in the base image for it to be used in Azure services

Signed-off-by: Clement Verna <cverna@tutanota.com>
2019-05-05 14:12:59 +02:00
Mikhail Zabaluev
1b4000eb73 fedora-docker-base: Disable dnf-makecache.timer
When containers based on this image are run with systemd as PID 1,
there should not be dnf cache updates inside the container, at least
by default.

https://bugzilla.redhat.com/show_bug.cgi?id=1576993
2018-05-11 21:41:11 +03:00
Colin Walters
f0b48b67f1 f28: Enable modularity in container base image by default
It's confusing to have it be underneath Server, when in actuality
we really want at least the people using containers to have it
by default.  So let's enable it by default there.
2018-04-04 11:25:10 -04:00
Dusty Mabe
49357c4246
container: rm nologin file from container image
This allows one to create an sshd container if they want.

See https://pagure.io/atomic-wg/issue/316
2017-08-11 09:15:27 -04:00
Tomas Tomecek
51d65e6bb1 docker base image: don't install docs by default
Signed-off-by: Tomas Tomecek <ttomecek@redhat.com>
2017-08-01 13:04:42 +02:00
Dusty Mabe
a4ae071339
docker-base: ignore return code of systemd-tmpfiles
Ignore the return code of the systemd-tmpfiles command because
at this point we have already removed the /etc/machine-id (8f3beac)
and all tmpfiles lines with %m in them will fail and cause a bad
return code. Example failure:
  [/usr/lib/tmpfiles.d/systemd.conf:26] Failed to replace specifiers: /run/log/journal/%m
2017-05-19 10:59:06 -04:00
Dusty Mabe
93205adc7d
docker-base: limit systemd-tmpfiles to /run/
In 96a6711 we added re-running systemd-tmpfiles to add files to /run
on the root fs of the container. Here we'll limit where systemd-tmpfiles
puts files by passing it --prefix /var and --prefix /var/run/
2017-05-19 10:58:59 -04:00
Peter Robinson
eae48ec488 Add a docker common kickstart as a central bit for shared config.
There's a lot of similarities between base and base-minimal so
introduce a docker-common.ks to ensure as much as possible is shared
between the two ensure as much shared as possible.

Signed-off-by: Peter Robinson <pbrobinson@fedoraproject.org>
2017-03-23 17:40:57 +00:00
Dennis Gilmore
89abaa8c89 import just the primary rpm gpg key
anaconda apparently fails now if the scriptlet fails which happens
on 32 bit arm:
Error

  There was an error running the kickstart script at line 28.  This is a fatal
  error and installation will be aborted.  The details of this error are:

  + LANG=en_US
  + echo '%_install_langs en_US'
  + echo 'Import RPM GPG key'
  Import RPM GPG key
  ++ rpm -q --qf '%{version}\n' fedora-release
  + releasever=27
  ++ uname -i
  + basearch=armv7l
  + rpm --import /etc/pki/rpm-gpg/RPM-GPG-KEY-fedora-27-armv7l
  error: /etc/pki/rpm-gpg/RPM-GPG-KEY-fedora-27-armv7l: import read failed(2).

  Press ENTER to exit: systemd-localed.service: Got notification message from PID 2286 (STOPPING=1)

as all the rpms in f27 are signed by the sole key lets just import that

Signed-off-by: Dennis Gilmore <dennis@ausil.us>
2017-03-10 10:56:48 -06:00
Peter Robinson
21e02e29c7 Adjust docker-base ks for aarch64
Add the EFI partition in so anaconda doesn't lose it. Ulimately doesn't affect
docker image size as boot and friends are discarded as part of the process.

Signed-off-by: Peter Robinson <pbrobinson@fedoraproject.org>
2017-03-03 15:41:29 +00:00
Dusty Mabe
7ba27d5891
docker-min,docker-base: remove reference to yum in kickstart 2017-01-24 18:07:07 -05:00
Dusty Mabe
f6ecdc348a
docker, cloud: don't use cmdline for install mode
cmdline makes it so that %post --erroronfail won't actually stop the
installation in a way that imagefactory will detect the problem and
fail the build. See [1] for more details.

[1] https://github.com/rhinstaller/anaconda/issues/931
2017-01-19 20:57:24 -05:00
Dusty Mabe
28a845d586
docker: add some more comments to %post script
Putting in references to BZ's so that we can determine if we can
remove these pieces of the %post in the future.
2017-01-19 20:57:24 -05:00
Dusty Mabe
12bbaac8dd
docker: fixup comment about install_langs macro 2017-01-19 20:57:24 -05:00
Dusty Mabe
461523481b
docker: fix some paths on file cleanup
Point to dnf cache and clean up everything in tmp.
2017-01-19 20:57:24 -05:00
Dusty Mabe
e5815d62cd
docker: remove call to localedef
It fails because no locale archive exists.
2017-01-19 20:57:24 -05:00
Dusty Mabe
5f54ddd686
docker: no need to rm locale-archive
glibc-all-langpacks is not installed and thus no locale archive
exists.
2017-01-19 20:57:24 -05:00
Dusty Mabe
608769b442
docker: error on unset vars and more verbose logs for %post 2017-01-19 20:57:23 -05:00
Dusty Mabe
a4835bbc67
docker: add --erroronfail to %post
If %post fails we want the whole install to fail.
2017-01-19 20:57:20 -05:00
Dusty Mabe
b73439c2ca
docker: store the post logs along with ks files in /root/ 2017-01-19 20:56:43 -05:00
Dusty Mabe
7efa34edb0
docker: remove create/delete of user
Anaconda doesn't seem to require it anymore so no need to create it
and then delete it.
2017-01-19 14:22:14 -05:00
Adam Miller
548fde04fd add tar to address BZ#1409920
Signed-off-by: Adam Miller <maxamillion@fedoraproject.org>
2017-01-04 15:34:16 -06:00
Pavel Raiskup
fa73086cf1 Don't hack 'override_install_langs' yum option
This shouldn't be needed, re-defining %_install_langs should be
enough.
2016-11-24 11:23:06 +01:00
Peter Robinson
30c3f7e721 Touch the machine-id file
So is seems that if you remove the machine-id file it won't regenerate the file
but if you touch the file and leave it empty on boot it'll put a new machine-id
in the empty file. So work around this bug ("feature"?) by touching the file
so we don't have other issues in the process.

We're track the outcome of this in RHBZ 1379800
2016-09-27 20:17:46 +01:00
Peter Robinson
890829fdbb Remove machine-id on pre generated images so it's unique on each deployed device
As referenced on the arm list [1] and as already being done on the docker image we
should remove the unique /etc/machine-id file on compose artifacts to ensure it's
regenerated and unique on each deployed host/device. This unifies the process across
all base ks so it's inherited for each artifact.

[1] https://lists.fedoraproject.org/archives/list/arm@lists.fedoraproject.org/message/Q3YZVF5P2OLLPUJQ2LYZSTKWGGDIU6QO/

Signed-off-by: Peter Robinson <pbrobinson@gmail.com>
2016-09-13 09:11:57 +01:00
Adam Miller
96a6711bb7 fix missing /run/lock in docker base image BZ#1343138
Signed-off-by: Adam Miller <maxamillion@fedoraproject.org>
2016-07-22 15:26:49 -05:00
Jan Pazdziora
27c2ec431d Make the %post fail when its commands no longer pass. 2016-06-08 21:00:09 +02:00
Kevin Fenzi
20b2147482 Merge #27 1343111 - Purge fstab to stop systemd from attempting to mount filesystems. 2016-06-07 18:09:05 +00:00
Jan Pazdziora
1a5dea70fc 1343136 - the default OOMScoreAdjust=-900 does not cause any ill effects on fedora:rawhide. 2016-06-07 09:54:16 +02:00
Jan Pazdziora
4d39c5ca63 1343111 - Purge fstab to stop systemd from attempting to mount filesystems. 2016-06-07 09:11:29 +02:00
Peter Robinson
b2eb0a44ea Docker: Base: add arm config, use includes for ppc config 2016-04-12 15:43:30 +01:00
Jan Pazdziora
ee22a9c00c Add sssd-client with .so's for easy integration with SSSD container. 2015-10-30 09:20:42 -05:00
Adam Miller
6ea47a9570 add tsflags=nodocs to dnf.conf as well as yum.conf 2015-09-01 15:55:14 -05:00
Colin Walters
4dc7946ad4 docker: Use bootloader --none to work around Anaconda regression
We were getting grub2 in the base image again.  Apparently
for a while Anaconda has supported a cleaner syntax for this, and
since it fixes the bug, let's use it.

https://bugzilla.redhat.com/show_bug.cgi?id=1222132
2015-05-15 17:35:52 -04:00
Colin Walters
6ba647a663 docker: Don't use a hardcoded root password
Best practice is to use unprivileged service daemons inside Docker
containers.  But with this hardcoded root password, in the case of
remote code execution, an attacker could trivially escalate their
privileges to root/uid 0.  And while that's uid 0 inside a container,
that's a much larger attack surface.

Instead, do the same thing we're doing for the Cloud images: lock the
root password, create a user to make Anaconda happy, then delete the
user in %post.

https://bugzilla.redhat.com/show_bug.cgi?id=1175997
2015-05-06 14:36:59 -04:00
Colin Walters
7d0d94b23d Revert "we can not install dnf-yum until FESCo signs off on it being allowed"
It's now agreed.

This reverts commit c3c01cfa0a.
2015-03-25 15:33:35 -04:00
Dennis Gilmore
c3c01cfa0a we can not install dnf-yum until FESCo signs off on it being allowed 2015-03-19 20:06:04 -05:00
Colin Walters
961b78fbd8 docker-base: Add dnf-yum
Per the FESCo ticket.
2015-03-19 17:43:34 -04:00
Colin Walters
bf523267e2 docker-base: Add some instructions for local builds 2015-03-19 17:41:48 -04:00
Colin Walters
f2ad1bb926 docker-base: Start shipping fstab again
Even though it's silly, the ImageFactory-in-Koji use case calls into
libguestfs to introspect the target system, and libguestfs relies on
/etc/fstab to detect installed operating systems.
2015-03-19 17:37:37 -04:00
Dennis Gilmore
44178ef0b3 Remove the firewall line as it causes anaconda to add firewalld to the
package set. revert back to fedora-release
2015-03-13 13:36:10 -05:00
Dennis Gilmore
d4fa62eaab pull in fedora-release-cloud to make the docker base image smaller
during install dnf was pulling in fedora-release-server which added a lot of bloat
2015-03-11 10:38:08 -05:00
Dennis Gilmore
e897975918 switch teh docker base image to dnf 2015-03-07 11:12:24 -06:00
Vaclav Pavlin
cf6ffa1988 fedora-docker-base: Remove fstab in %post 2015-02-12 13:48:19 +01:00
Vaclav Pavlin
8f3beacf10 fedora-docker-base: remove machine-id after installation so that systemd can set it properly 2015-02-06 13:43:59 +01:00
Kushal Das
6bf1907a10 Updates the timezone in docker image to UTC.
Closes trac #91.
2015-01-28 14:08:40 +05:30
Vaclav Pavlin
20a9971686 fedora-docker-base: adjust dbus.service to run in a container, mask some units to get rid of fails in boot transaction 2015-01-21 10:17:49 +01:00
Vaclav Pavlin
7c09012288 fedora-docker-base: Add rootfiles and regenerate locale after removal
https://fedorahosted.org/cloud/ticket/92
2015-01-21 09:23:04 +01:00
Dennis Gilmore
b947d49831 use link as the device for netwrok in the cloud images 2014-12-12 16:07:54 -08:00
Dennis Gilmore
94283bfff2 Revert "docker: Add fakesystemd to %packages to keep systemd out of base image"
This reverts commit f42fe5d85a.
2014-09-10 13:13:48 -05:00