mirror of
https://github.com/linuxkit/linuxkit.git
synced 2026-01-14 18:04:20 +00:00
4434ecc4af
This checks if any CDROM in the system has metadata. Useful if you boot off CDROM and also have a metadata CDROM. Also switch the metadata container to read only, as it is only writing to bind mounted in directories, and /tmp. Signed-off-by: Justin Cormack <justin.cormack@docker.com>
19 lines
580 B
Docker
19 lines
580 B
Docker
FROM linuxkit/alpine:2e362f4459ba4491655061cccdd2fcc7a2de5eb3 AS mirror
|
|
|
|
RUN apk add --no-cache go musl-dev
|
|
ENV GOPATH=/go PATH=$PATH:/go/bin
|
|
|
|
COPY . /go/src/metadata/
|
|
RUN go-compile.sh /go/src/metadata
|
|
|
|
RUN mkdir -p out/tmp out/var out/dev out/etc
|
|
|
|
FROM scratch
|
|
ENTRYPOINT []
|
|
CMD []
|
|
WORKDIR /
|
|
COPY --from=mirror /go/bin/metadata /usr/bin/metadata
|
|
COPY --from=mirror /out/ /
|
|
CMD ["/usr/bin/metadata"]
|
|
LABEL org.mobyproject.config='{"binds": ["/dev:/dev", "/var:/var", "/etc/resolv.conf:/etc/resolv.conf"], "tmpfs": ["/tmp"], "readonly": true, "capabilities": ["CAP_SYS_ADMIN"]}'
|