mirror of
https://github.com/linuxkit/linuxkit.git
synced 2025-12-25 08:02:55 +00:00
da86df1ad6
The metadata package has binds - /dev - /var - /sys - /etc/resolv.conf - /etc/ssl/certs but unfortunately `/etc/ssl/certs` doesn't exist and this causes the following commands: cd blueprints/docker-for-mac # easy example moby build -name docker-for-mac base.yml docker-17.06-ce.yml linuxkit run hyperkit -networking=vpnkit -vsock-ports=2376 -disk size=500M docker-for-mac to produce the following error on the VM console: container_linux.go:265: starting container process caused "process_linux.go:348: container init caused \"rootfs_linux.go:57: mounting \\\"/etc/ssl/certs\\\" to rootfs \\\"/containers/onboot/000-metadata/rootfs\\\" at \\\"/etc/ssl/certs\\\" caused \\\"stat /etc/ssl/certs: no such file or directory\\\"\"" 2017/08/21 16:39:40 Error creating 000-metadata: exit status 1 This patch creates /etc/ssl/certs in the `init` package. The metadata package will now say things like 2017/08/21 16:44:39 No metadata/userdata found. Bye Signed-off-by: David Scott <dave.scott@docker.com>
36 lines
1.1 KiB
Docker
36 lines
1.1 KiB
Docker
FROM linuxkit/alpine:a120ad6aead3fe583eaa20e9b75a05ac1b3487da AS build
|
|
RUN apk add --no-cache --initdb alpine-baselayout make gcc musl-dev git linux-headers
|
|
|
|
ADD usermode-helper.c ./
|
|
RUN LDFLAGS=-static CFLAGS=-Werror make usermode-helper
|
|
|
|
RUN apk add --no-cache go musl-dev
|
|
ENV GOPATH=/go PATH=$PATH:/go/bin
|
|
|
|
COPY cmd /go/src/cmd
|
|
RUN go-compile.sh /go/src/cmd/init
|
|
|
|
RUN cd /go/src/cmd/service && ./skanky-vendor.sh $GOPATH/src/github.com/containerd/containerd
|
|
RUN go-compile.sh /go/src/cmd/service
|
|
|
|
FROM linuxkit/alpine:a120ad6aead3fe583eaa20e9b75a05ac1b3487da AS mirror
|
|
RUN mkdir -p /out/etc/apk && cp -r /etc/apk/* /out/etc/apk/
|
|
RUN apk add --no-cache --initdb -p /out alpine-baselayout busybox musl
|
|
|
|
# Add /etc/ssl/certs so it can be bind-mounted into metadata package
|
|
RUN mkdir -p /out/etc/ssl/certs
|
|
|
|
# Remove apk residuals. We have a read-only rootfs, so apk is of no use.
|
|
RUN rm -rf /out/etc/apk /out/lib/apk /out/var/cache
|
|
|
|
FROM scratch
|
|
ENTRYPOINT []
|
|
CMD []
|
|
WORKDIR /
|
|
COPY --from=build /go/bin/init /
|
|
COPY --from=build /go/bin/service /usr/bin/
|
|
COPY --from=build usermode-helper /sbin/
|
|
COPY --from=mirror /out/ /
|
|
COPY etc etc/
|
|
COPY bin bin/
|