mirror of
https://github.com/kata-containers/kata-containers.git
synced 2025-04-27 11:31:05 +00:00
7c4049aabb
Since we are introducing an agent API for interacting with guest iptables, let's ensure that our example rootfs' have iptables-save/restore installed. Fixes: #4356 Signed-off-by: Eric Ernst <eric_ernst@apple.com>
32 lines
893 B
Bash
32 lines
893 B
Bash
#
|
|
# Copyright (c) 2018 Intel Corporation
|
|
#
|
|
# SPDX-License-Identifier: Apache-2.0
|
|
|
|
OS_NAME="Clear"
|
|
REPO_NAME="clear"
|
|
|
|
OS_VERSION=${OS_VERSION:-latest}
|
|
|
|
clr_url="https://download.clearlinux.org"
|
|
|
|
# resolve version
|
|
[ "${OS_VERSION}" = "latest" ] && OS_VERSION=$(curl -sL "${clr_url}/latest")
|
|
|
|
BASE_URL="${clr_url}/releases/${OS_VERSION}/${REPO_NAME}/${ARCH}/os/"
|
|
|
|
PACKAGES="libudev0-shim kmod-bin iptables-bin"
|
|
|
|
#Optional packages:
|
|
# systemd: An init system that will start kata-agent if kata-agent
|
|
# itself is not configured as init process.
|
|
[ "$AGENT_INIT" = "no" ] && PACKAGES+=" systemd chrony util-linux-bin" || true
|
|
|
|
# Init process must be one of {systemd,kata-agent}
|
|
INIT_PROCESS=systemd
|
|
# List of zero or more architectures to exclude from build,
|
|
# as reported by `uname -m`
|
|
ARCH_EXCLUDE_LIST=( aarch64 ppc64le s390x )
|
|
|
|
[ "$SECCOMP" = "yes" ] && PACKAGES+=" libseccomp" || true
|