Dockerfile: put fuse3 to rootless-base-internal
Signed-off-by: Akihiro Suda <akihiro.suda.cz@hco.ntt.co.jp>v0.7
parent
b42528249a
commit
dc70bca748
|
@ -267,9 +267,10 @@ RUN ./autogen.sh --disable-nls --disable-man --without-audit --without-selinux -
|
||||||
&& cp src/newuidmap src/newgidmap /usr/bin
|
&& cp src/newuidmap src/newgidmap /usr/bin
|
||||||
|
|
||||||
FROM alpine:3.11 AS rootless-base-internal
|
FROM alpine:3.11 AS rootless-base-internal
|
||||||
RUN apk add --no-cache git xz
|
RUN apk add --no-cache fuse3 git xz
|
||||||
COPY --from=idmap /usr/bin/newuidmap /usr/bin/newuidmap
|
COPY --from=idmap /usr/bin/newuidmap /usr/bin/newuidmap
|
||||||
COPY --from=idmap /usr/bin/newgidmap /usr/bin/newgidmap
|
COPY --from=idmap /usr/bin/newgidmap /usr/bin/newgidmap
|
||||||
|
COPY --from=fuse-overlayfs /out/fuse-overlayfs /usr/bin/
|
||||||
# we could just set CAP_SETUID filecap rather than `chmod u+s`, but requires kernel >= 4.14
|
# we could just set CAP_SETUID filecap rather than `chmod u+s`, but requires kernel >= 4.14
|
||||||
RUN chmod u+s /usr/bin/newuidmap /usr/bin/newgidmap \
|
RUN chmod u+s /usr/bin/newuidmap /usr/bin/newgidmap \
|
||||||
&& adduser -D -u 1000 user \
|
&& adduser -D -u 1000 user \
|
||||||
|
@ -282,10 +283,7 @@ FROM tonistiigi/buildkit:rootless-base@sha256:0008b156dedd0220a5a0a1aa8840afe0ea
|
||||||
FROM rootless-base-$ROOTLESS_BASE_MODE AS rootless-base
|
FROM rootless-base-$ROOTLESS_BASE_MODE AS rootless-base
|
||||||
|
|
||||||
# Rootless mode.
|
# Rootless mode.
|
||||||
# Still requires `--privileged`.
|
|
||||||
FROM rootless-base AS rootless
|
FROM rootless-base AS rootless
|
||||||
RUN apk add --no-cache fuse3
|
|
||||||
COPY --from=fuse-overlayfs /out/fuse-overlayfs /usr/bin/
|
|
||||||
COPY --from=rootlesskit /rootlesskit /usr/bin/
|
COPY --from=rootlesskit /rootlesskit /usr/bin/
|
||||||
COPY --from=binaries / /usr/bin/
|
COPY --from=binaries / /usr/bin/
|
||||||
COPY examples/buildctl-daemonless/buildctl-daemonless.sh /usr/bin/
|
COPY examples/buildctl-daemonless/buildctl-daemonless.sh /usr/bin/
|
||||||
|
|
Loading…
Reference in New Issue