mirror of
https://github.com/linuxkit/linuxkit.git
synced 2026-04-05 13:41:56 +00:00
As this does not use containerd at all, this means you can run very minimal setups with just `runc` if you use no services, for example most of our tests do not actually use services, or if you have other similar very minimal use cases. Move ulimit setup to `init` which makes more sense. Signed-off-by: Justin Cormack <justin.cormack@docker.com>
29 lines
726 B
Docker
29 lines
726 B
Docker
FROM linuxkit/alpine:8bb8664eec04e02a8a131c53aa7d5d94119270ef as alpine
|
|
RUN \
|
|
apk add \
|
|
bash \
|
|
gcc \
|
|
git \
|
|
go \
|
|
libc-dev \
|
|
libseccomp-dev \
|
|
linux-headers \
|
|
make \
|
|
&& true
|
|
ENV GOPATH=/root/go
|
|
ENV RUNC_COMMIT=429a5387123625040bacfbb60d96b1cbd02293ab
|
|
RUN mkdir -p $GOPATH/src/github.com/opencontainers && \
|
|
cd $GOPATH/src/github.com/opencontainers && \
|
|
git clone https://github.com/opencontainers/runc.git
|
|
WORKDIR $GOPATH/src/github.com/opencontainers/runc
|
|
RUN git checkout $RUNC_COMMIT
|
|
# TODO static pie, currently no easy way to change build options
|
|
RUN make static BUILDTAGS="seccomp"
|
|
RUN cp runc /usr/bin/
|
|
|
|
FROM scratch
|
|
WORKDIR /
|
|
ENTRYPOINT []
|
|
COPY --from=alpine /usr/bin/runc /usr/bin/
|
|
COPY etc etc/
|