mirror of
https://github.com/kata-containers/kata-containers.git
synced 2025-05-09 08:57:25 +00:00
The permissions on .docker/buildx/activity/default are regularly broken by us passing docker.sock + $HOME/.docker to a container running as root and then using buildx inside. Fixup ownership before executing docker commands. Fixes: #8027 Signed-off-by: Jeremi Piotrowski <jpiotrowski@microsoft.com>
48 lines
1023 B
Bash
Executable File
48 lines
1023 B
Bash
Executable File
#!/usr/bin/env bash
|
|
#
|
|
# Copyright 2022 Intel
|
|
#
|
|
# SPDX-License-Identifier: Apache-2.0
|
|
#
|
|
|
|
[ -z "${DEBUG}" ] || set -x
|
|
set -o errexit
|
|
set -o nounset
|
|
set -o pipefail
|
|
set -o errtrace
|
|
|
|
KATA_DEPLOY_DIR="`dirname ${0}`/../../kata-deploy"
|
|
KATA_DEPLOY_ARTIFACT="${1:-"kata-static.tar.xz"}"
|
|
REGISTRY="${2:-"quay.io/kata-containers/kata-deploy"}"
|
|
TAG="${3:-}"
|
|
|
|
echo "Copying ${KATA_DEPLOY_ARTIFACT} to ${KATA_DEPLOY_DIR}"
|
|
cp ${KATA_DEPLOY_ARTIFACT} ${KATA_DEPLOY_DIR}
|
|
|
|
pushd ${KATA_DEPLOY_DIR}
|
|
|
|
arch=$(uname -m)
|
|
[ "$arch" = "x86_64" ] && arch="amd64"
|
|
IMAGE_TAG="${REGISTRY}:kata-containers-$(git rev-parse HEAD)-${arch}"
|
|
|
|
sudo chown -R $USER $HOME/.docker
|
|
|
|
echo "Building the image"
|
|
docker build --tag ${IMAGE_TAG} .
|
|
|
|
echo "Pushing the image to the registry"
|
|
docker push ${IMAGE_TAG}
|
|
|
|
if [ -n "${TAG}" ]; then
|
|
ADDITIONAL_TAG="${REGISTRY}:${TAG}"
|
|
|
|
echo "Building the ${ADDITIONAL_TAG} image"
|
|
|
|
docker build --tag ${ADDITIONAL_TAG} .
|
|
|
|
echo "Pushing the image ${ADDITIONAL_TAG} to the registry"
|
|
docker push ${ADDITIONAL_TAG}
|
|
fi
|
|
|
|
popd
|