mirror of
https://github.com/linuxkit/linuxkit.git
synced 2026-04-11 14:15:02 +00:00
24e432d9cb
- use jq to fix up the output where there are still issues - some issues will need fixing up in future too - can remove fixes later - still plan to restructure the code around containers to make it easier and clearer Signed-off-by: Justin Cormack <justin.cormack@docker.com>
31 lines
1.1 KiB
Makefile
31 lines
1.1 KiB
Makefile
# Tag 7cb780fd6b60c089964e81efd6553853c491d59f
|
|
TINI_IMAGE=mobylinux/tini@sha256:7da8c5b371e0d7d3fb1778e96c0bc634e39ace7bf1e7a73bffbf1f8360127fdb
|
|
TINI_BINARY=tini
|
|
|
|
default: config.json
|
|
|
|
$(TINI_BINARY): Dockerfile
|
|
docker run --rm --net=none $(TINI_IMAGE) tar cf - -C /bin $@ | tar xf -
|
|
|
|
EXCLUDE=--exclude .dockerenv --exclude Dockerfile \
|
|
--exclude dev/console --exclude dev/pts --exclude dev/shm \
|
|
--exclude etc/hostname --exclude etc/hosts --exclude etc/mtab --exclude etc/resolv.conf
|
|
|
|
config.json: Dockerfile fix-textrels-on-PIC-x86.patch sha256sums $(TINI_BINARY)
|
|
mkdir -p rootfs
|
|
BUILD=$$( tar cf - $^ | docker build -q - ) && \
|
|
[ -n "$$BUILD" ] && \
|
|
echo "Built $$BUILD" && \
|
|
IMAGE=$$( docker run --rm --net=none $$BUILD | docker build -q - ) && \
|
|
[ -n "$$IMAGE" ] && \
|
|
echo "Built $$IMAGE" && \
|
|
CONTAINER=$$( docker create $$IMAGE /dev/null ) && \
|
|
docker export $$CONTAINER | tar -xf - -C rootfs $(EXCLUDE) && \
|
|
docker rm $$CONTAINER && \
|
|
../riddler.sh --cap-drop all --cap-add SYS_ADMIN --read-only $$IMAGE /bin/tini /usr/sbin/rngd -f >$@
|
|
|
|
clean:
|
|
rm -rf rootfs config.json $(TINI_BINARY)
|
|
|
|
.DELETE_ON_ERROR:
|