Initial commit
This commit is contained in:
commit
24c5f713e9
47
SOURCES/docker.service
Normal file
47
SOURCES/docker.service
Normal file
@ -0,0 +1,47 @@
|
||||
[Unit]
|
||||
Description=Docker Application Container Engine
|
||||
Documentation=https://docs.docker.com
|
||||
After=network-online.target docker.socket firewalld.service containerd.service
|
||||
Wants=network-online.target
|
||||
Requires=docker.socket containerd.service
|
||||
|
||||
[Service]
|
||||
Type=notify
|
||||
# the default is not to use systemd for cgroups because the delegate issues still
|
||||
# exists and systemd currently does not support the cgroup feature set required
|
||||
# for containers run by docker
|
||||
ExecStart=/usr/bin/dockerd -H fd:// --containerd=/run/containerd/containerd.sock
|
||||
ExecReload=/bin/kill -s HUP $MAINPID
|
||||
TimeoutSec=0
|
||||
RestartSec=2
|
||||
Restart=always
|
||||
|
||||
# Note that StartLimit* options were moved from "Service" to "Unit" in systemd 229.
|
||||
# Both the old, and new location are accepted by systemd 229 and up, so using the old location
|
||||
# to make them work for either version of systemd.
|
||||
StartLimitBurst=3
|
||||
|
||||
# Note that StartLimitInterval was renamed to StartLimitIntervalSec in systemd 230.
|
||||
# Both the old, and new name are accepted by systemd 230 and up, so using the old name to make
|
||||
# this option work for either version of systemd.
|
||||
StartLimitInterval=60s
|
||||
|
||||
# Having non-zero Limit*s causes performance problems due to accounting overhead
|
||||
# in the kernel. We recommend using cgroups to do container-local accounting.
|
||||
LimitNOFILE=infinity
|
||||
LimitNPROC=infinity
|
||||
LimitCORE=infinity
|
||||
|
||||
# Comment TasksMax if your systemd version does not support it.
|
||||
# Only systemd 226 and above support this option.
|
||||
TasksMax=infinity
|
||||
|
||||
# set delegate yes so that systemd does not reset the cgroups of docker containers
|
||||
Delegate=yes
|
||||
|
||||
# kill only the docker process, not all processes in the cgroup
|
||||
KillMode=process
|
||||
OOMScoreAdjust=-500
|
||||
|
||||
[Install]
|
||||
WantedBy=multi-user.target
|
||||
11
SOURCES/docker.socket
Normal file
11
SOURCES/docker.socket
Normal file
@ -0,0 +1,11 @@
|
||||
[Unit]
|
||||
Description=Docker Socket for the API
|
||||
|
||||
[Socket]
|
||||
ListenStream=/var/run/docker.sock
|
||||
SocketMode=0660
|
||||
SocketUser=root
|
||||
SocketGroup=docker
|
||||
|
||||
[Install]
|
||||
WantedBy=sockets.target
|
||||
137
SPECS/docker-ce.spec
Normal file
137
SPECS/docker-ce.spec
Normal file
@ -0,0 +1,137 @@
|
||||
%global debug_package %{nil}
|
||||
|
||||
# BTRFS is enabled by default, but can be disabled by defining _without_btrfs
|
||||
%if %{undefined _with_btrfs} && %{undefined _without_btrfs}
|
||||
%define _with_btrfs 1
|
||||
%endif
|
||||
|
||||
Name: docker-ce
|
||||
Version: %{_version}
|
||||
Release: %{_release}%{?dist}
|
||||
Epoch: 3
|
||||
Source0: engine.tgz
|
||||
Source1: docker.service
|
||||
Source2: docker.socket
|
||||
Summary: The open-source application container engine
|
||||
Group: Tools/Docker
|
||||
License: ASL 2.0
|
||||
URL: https://www.docker.com
|
||||
Vendor: Docker
|
||||
Packager: Docker <support@docker.com>
|
||||
|
||||
Requires: /usr/sbin/groupadd
|
||||
Requires: docker-ce-cli
|
||||
Requires: docker-ce-rootless-extras
|
||||
Requires: container-selinux >= 2:2.74
|
||||
Requires: libseccomp >= 2.3
|
||||
Requires: systemd
|
||||
Requires: iptables
|
||||
%if %{undefined rhel} || 0%{?rhel} < 9
|
||||
# Libcgroup is no longer available in RHEL/CentOS >= 9 distros.
|
||||
Requires: libcgroup
|
||||
%endif
|
||||
Requires: containerd.io >= 1.4.1
|
||||
Requires: tar
|
||||
Requires: xz
|
||||
|
||||
BuildRequires: bash
|
||||
%{?_with_btrfs:BuildRequires: btrfs-progs-devel}
|
||||
BuildRequires: ca-certificates
|
||||
BuildRequires: cmake
|
||||
BuildRequires: device-mapper-devel
|
||||
BuildRequires: gcc
|
||||
BuildRequires: git
|
||||
BuildRequires: golang
|
||||
BuildRequires: glibc-static
|
||||
BuildRequires: libarchive
|
||||
BuildRequires: libseccomp-devel
|
||||
BuildRequires: libselinux-devel
|
||||
BuildRequires: libtool
|
||||
BuildRequires: libtool-ltdl-devel
|
||||
BuildRequires: make
|
||||
BuildRequires: pkgconfig
|
||||
BuildRequires: pkgconfig(systemd)
|
||||
BuildRequires: selinux-policy-devel
|
||||
BuildRequires: systemd-devel
|
||||
BuildRequires: tar
|
||||
BuildRequires: which
|
||||
|
||||
# conflicting packages
|
||||
Conflicts: docker
|
||||
Conflicts: docker-io
|
||||
Conflicts: docker-engine-cs
|
||||
Conflicts: docker-ee
|
||||
|
||||
# Obsolete packages
|
||||
Obsoletes: docker-ce-selinux
|
||||
Obsoletes: docker-engine-selinux
|
||||
Obsoletes: docker-engine
|
||||
|
||||
%description
|
||||
Docker is a product for you to build, ship and run any application as a
|
||||
lightweight container.
|
||||
|
||||
Docker containers are both hardware-agnostic and platform-agnostic. This means
|
||||
they can run anywhere, from your laptop to the largest cloud compute instance
|
||||
and everything in between - and they don't require you to use a particular
|
||||
language, framework or packaging system. That makes them great building blocks
|
||||
for deploying and scaling web apps, databases, and backend services without
|
||||
depending on a particular stack or provider.
|
||||
|
||||
%prep
|
||||
%setup -q -c -n src -a 0
|
||||
|
||||
%build
|
||||
|
||||
export DOCKER_GITCOMMIT=%{_gitcommit_engine}
|
||||
go env -w GO111MODULE=off
|
||||
export PREFIX=${RPM_BUILD_DIR}
|
||||
export AUTO_GOPATH=1
|
||||
|
||||
mkdir -p ${RPM_BUILD_DIR}/go/src/github.com/docker
|
||||
ln -s ${RPM_BUILD_DIR}/src/engine ${RPM_BUILD_DIR}/go/src/github.com/docker/docker
|
||||
pushd ${RPM_BUILD_DIR}/src/engine
|
||||
for component in tini "proxy dynamic";do
|
||||
TMP_GOPATH="${RPM_BUILD_DIR}/go" hack/dockerfile/install/install.sh $component
|
||||
done
|
||||
VERSION=%{_origversion} PRODUCT=docker hack/make.sh dynbinary
|
||||
popd
|
||||
|
||||
%check
|
||||
ver="$(${RPM_BUILD_DIR}/bundles/dynbinary-daemon/dockerd --version)"; \
|
||||
test "$ver" = "Docker version %{_origversion}, build %{_gitcommit_engine}" && echo "PASS: daemon version OK" || (echo "FAIL: daemon version ($ver) did not match" && exit 1)
|
||||
|
||||
%install
|
||||
# install daemon binary
|
||||
install -D -p -m 0755 $(readlink -f ${RPM_BUILD_DIR}/bundles/dynbinary-daemon/dockerd) ${RPM_BUILD_ROOT}%{_bindir}/dockerd
|
||||
|
||||
# install proxy
|
||||
install -D -p -m 0755 ${RPM_BUILD_DIR}/docker-proxy ${RPM_BUILD_ROOT}%{_bindir}/docker-proxy
|
||||
|
||||
# install tini
|
||||
install -D -p -m 755 ${RPM_BUILD_DIR}/docker-init ${RPM_BUILD_ROOT}%{_bindir}/docker-init
|
||||
|
||||
# install systemd scripts
|
||||
install -D -m 0644 ${RPM_SOURCE_DIR}/docker.service ${RPM_BUILD_ROOT}%{_unitdir}/docker.service
|
||||
install -D -m 0644 ${RPM_SOURCE_DIR}/docker.socket ${RPM_BUILD_ROOT}%{_unitdir}/docker.socket
|
||||
|
||||
%files
|
||||
%{_bindir}/dockerd
|
||||
%{_bindir}/docker-proxy
|
||||
%{_bindir}/docker-init
|
||||
%{_unitdir}/docker.service
|
||||
%{_unitdir}/docker.socket
|
||||
|
||||
%post
|
||||
%systemd_post docker.service
|
||||
if ! getent group docker > /dev/null; then
|
||||
groupadd --system docker
|
||||
fi
|
||||
|
||||
%preun
|
||||
%systemd_preun docker.service
|
||||
|
||||
%postun
|
||||
%systemd_postun_with_restart docker.service
|
||||
|
||||
%changelog
|
||||
Loading…
Reference in New Issue
Block a user