Makefile 2.37 KB
Newer Older
1
DOCKER_USER:=pierres
2
3
DOCKER_ORGANIZATION=archlinux
DOCKER_IMAGE:=base
4
BUILDDIR=build
5
PWD=$(shell pwd)
Pierre Schmitz's avatar
Pierre Schmitz committed
6

Santiago Torres's avatar
Santiago Torres committed
7
8
hooks:
	mkdir -p alpm-hooks/usr/share/libalpm/hooks
9
	find /usr/share/libalpm/hooks -exec ln -sf /dev/null $(PWD)/alpm-hooks{} \;
Santiago Torres's avatar
Santiago Torres committed
10
11

rootfs: hooks
12
	mkdir -vp $(BUILDDIR)/var/lib/pacman/
13
14
	cp /usr/share/devtools/pacman-extra.conf rootfs/etc/pacman.conf
	cat pacman-conf.d-noextract.conf >> rootfs/etc/pacman.conf
Santiago Torres's avatar
Santiago Torres committed
15
	fakechroot -- fakeroot -- pacman -Sy -r $(BUILDDIR) \
16
		--noconfirm --dbpath $(PWD)/$(BUILDDIR)/var/lib/pacman \
17
		--config rootfs/etc/pacman.conf \
18
		--noscriptlet \
Santiago Torres's avatar
Santiago Torres committed
19
		--hookdir $(PWD)/alpm-hooks/usr/share/libalpm/hooks/ $(shell cat packages)
20
	cp --recursive --preserve=timestamps --backup --suffix=.pacnew rootfs/* $(BUILDDIR)/
21
22
23
24
	
	# remove passwordless login for root (see CVE-2019-5021 for reference)
	sed -i -e 's/^root::/root:!:/' "$(BUILDDIR)/etc/shadow"

25
26
27
	# fakeroot to map the gid/uid of the builder process to root
	# fixes #22
	fakeroot -- tar --numeric-owner --xattrs --acls --exclude-from=exclude -C $(BUILDDIR) -c . -f archlinux.tar
Santiago Torres's avatar
Santiago Torres committed
28
	rm -rf $(BUILDDIR) alpm-hooks
Pierre Schmitz's avatar
Pierre Schmitz committed
29

30
31
archlinux.tar: rootfs

32
compress-rootfs: archlinux.tar
33
	xz -f archlinux.tar
34
	xz -9e -T0 -f archlinux.tar
35
36

docker-image: compress-rootfs
37
	docker build -t $(DOCKER_ORGANIZATION)/$(DOCKER_IMAGE) .
Pierre Schmitz's avatar
Pierre Schmitz committed
38

39
40
docker-image-test: docker-image
	# FIXME: /etc/mtab is hidden by docker so the stricter -Qkk fails
41
	docker run --rm $(DOCKER_ORGANIZATION)/$(DOCKER_IMAGE) sh -c "/usr/bin/pacman -Sy && /usr/bin/pacman -Qqk"
42
	docker run --rm $(DOCKER_ORGANIZATION)/$(DOCKER_IMAGE) sh -c "/usr/bin/pacman -Syu --noconfirm docker && docker -v" # Ensure that the image does not include a private key
43
	! docker run --rm $(DOCKER_ORGANIZATION)/$(DOCKER_IMAGE) pacman-key --lsign-key pierre@archlinux.de
44
	docker run --rm $(DOCKER_ORGANIZATION)/$(DOCKER_IMAGE) sh -c "/usr/bin/id -u http"
45
	docker run --rm $(DOCKER_ORGANIZATION)/$(DOCKER_IMAGE) sh -c "/usr/bin/pacman -Syu --noconfirm grep && locale | grep -q UTF-8"
46

47
ci-test:
48
	docker run --rm --privileged --tmpfs=/tmp:exec --tmpfs=/run/shm -v /run/docker.sock:/run/docker.sock \
49
		-v $(PWD):/app -w /app $(DOCKER_ORGANIZATION)/$(DOCKER_IMAGE) \
50
		sh -c 'pacman -Syu --noconfirm fakechroot fakeroot make devtools docker && make docker-image-test'
51

Pierre Schmitz's avatar
Pierre Schmitz committed
52
docker-push:
Pierre Schmitz's avatar
Pierre Schmitz committed
53
	docker login -u $(DOCKER_USER)
54
	docker push $(DOCKER_ORGANIZATION)/$(DOCKER_IMAGE)
Pierre Schmitz's avatar
Pierre Schmitz committed
55

56
.PHONY: rootfs docker-image docker-image-test ci-test docker-push