mirror of
https://github.com/linuxkit/linuxkit.git
synced 2025-09-16 23:29:38 +00:00
sshd+getty: Add apk to these containers
Since these are the user login containers, having the ability to add packages is useful (e.g. I quite often find I want strace). Doing this requires that we not share `/var` with the login containers since we want the apk database therein. Previously it was thought that the containers might need some parts of `/var` for `ctr` to work (e.g. `/var/lib/containerd`) but this is not the case now (if it ever was) based on my testing. Fixes #2206. Signed-off-by: Ian Campbell <ijc@docker.com>
This commit is contained in:
@@ -1,15 +1,17 @@
|
||||
FROM linuxkit/alpine:9bcf61f605ef0ce36cc94d59b8eac307862de6e1 AS mirror
|
||||
FROM linuxkit/alpine:a39a433162a873519910a07beeb3e8db22529956 AS mirror
|
||||
|
||||
RUN mkdir -p /out/etc/apk && cp -r /etc/apk/* /out/etc/apk/
|
||||
RUN apk add --no-cache --initdb -p /out \
|
||||
alpine-baselayout \
|
||||
apk-tools \
|
||||
busybox \
|
||||
ca-certificates \
|
||||
musl \
|
||||
tini \
|
||||
util-linux \
|
||||
&& true
|
||||
RUN rm -rf /out/etc/apk /out/lib/apk /out/var/cache
|
||||
RUN mv /out/etc/apk/repositories.upstream /out/etc/apk/repositories
|
||||
|
||||
#
|
||||
# We require a version of `setsid(1)` which supports the `-w`
|
||||
# option, which is not available in all implementations (e.g. the
|
||||
@@ -29,4 +31,4 @@ COPY --from=mirror /out/ /
|
||||
COPY usr/ /usr/
|
||||
COPY etc/ /etc/
|
||||
CMD ["/usr/bin/rungetty.sh"]
|
||||
LABEL org.mobyproject.config='{"pid": "host", "net":"host", "binds": ["/run:/run", "/tmp:/tmp", "/etc:/hostroot/etc", "/usr/bin/ctr:/usr/bin/ctr", "/usr/bin/runc:/usr/bin/runc", "/var:/var","/containers:/containers","/dev:/dev","/sys:/sys"], "capabilities": ["all"]}'
|
||||
LABEL org.mobyproject.config='{"pid": "host", "net":"host", "binds": ["/run:/run", "/tmp:/tmp", "/etc:/hostroot/etc", "/usr/bin/ctr:/usr/bin/ctr", "/usr/bin/runc:/usr/bin/runc", "/containers:/containers","/dev:/dev","/sys:/sys"], "capabilities": ["all"]}'
|
||||
|
Reference in New Issue
Block a user