2026-06-30 20:31:12 +02:00
|
|
|
FROM local/gitea-runner-base:latest
|
|
|
|
|
|
|
|
|
|
# cicd-base runner profile: common CI build and release tooling.
|
|
|
|
|
USER root
|
2026-07-06 21:13:11 +02:00
|
|
|
RUN apt-get update && apt-get install -y --no-install-recommends \
|
|
|
|
|
buildah \
|
2026-06-30 20:31:12 +02:00
|
|
|
ca-certificates \
|
|
|
|
|
curl \
|
2026-07-06 21:13:11 +02:00
|
|
|
fuse-overlayfs \
|
2026-06-30 20:31:12 +02:00
|
|
|
git \
|
2026-07-06 21:13:11 +02:00
|
|
|
iptables \
|
2026-06-30 20:31:12 +02:00
|
|
|
jq \
|
|
|
|
|
make \
|
|
|
|
|
openssh-client \
|
2026-07-06 21:13:11 +02:00
|
|
|
podman \
|
2026-06-30 20:31:12 +02:00
|
|
|
python3 \
|
2026-07-06 21:13:11 +02:00
|
|
|
python3-pip \
|
2026-06-30 20:31:12 +02:00
|
|
|
rsync \
|
2026-07-06 21:13:11 +02:00
|
|
|
skopeo \
|
|
|
|
|
slirp4netns \
|
|
|
|
|
uidmap \
|
2026-06-30 20:31:12 +02:00
|
|
|
unzip \
|
2026-07-06 21:13:11 +02:00
|
|
|
zip \
|
|
|
|
|
&& rm -rf /var/lib/apt/lists/*
|
|
|
|
|
|
|
|
|
|
RUN mkdir -p /etc/containers /var/lib/containers /run/containers && \
|
|
|
|
|
printf '%s\n' '[storage]' 'driver = "vfs"' > /etc/containers/storage.conf && \
|
|
|
|
|
printf '%s\n' '[engine]' > /etc/containers/containers.conf
|
|
|
|
|
|
|
|
|
|
ENV BUILDAH_ISOLATION=chroot
|
|
|
|
|
ENV STORAGE_DRIVER=vfs
|
|
|
|
|
|
|
|
|
|
ARG TRIVY_VERSION=0.72.0
|
|
|
|
|
RUN curl -fsSL -o /tmp/trivy.tar.gz \
|
|
|
|
|
"https://github.com/aquasecurity/trivy/releases/download/v${TRIVY_VERSION}/trivy_${TRIVY_VERSION}_Linux-64bit.tar.gz" && \
|
|
|
|
|
tar -xzf /tmp/trivy.tar.gz -C /tmp && \
|
|
|
|
|
install -m 0755 /tmp/trivy /usr/local/bin/trivy && \
|
|
|
|
|
rm -f /tmp/trivy.tar.gz /tmp/trivy
|
