forgejo-runner-dind (sha256:ad9a5750ab840efc40437a58065e4ef6d474e4225803a84d6bc8b4c13c3dcbc7)

Published 2024-03-31 10:58:56 +00:00 by royalcat in royalcat/forgejo-runner-dind

Pull the image from the command line:

docker pull git.kmsign.ru/royalcat/forgejo-runner-dind@sha256:ad9a5750ab840efc40437a58065e4ef6d474e4225803a84d6bc8b4c13c3dcbc7

Digest:

sha256:ad9a5750ab840efc40437a58065e4ef6d474e4225803a84d6bc8b4c13c3dcbc7

For more information on the Container registry, see the documentation.

ADD file:d0764a717d1e9d0aff3fa84779b11bfa0afe4430dcb6b46d965b209167639ba0 in /

CMD ["/bin/sh"]

RUN /bin/sh -c apk add --no-cache ca-certificates openssh-client # buildkit

RUN /bin/sh -c [ -e /etc/nsswitch.conf ] && grep '^hosts: files dns' /etc/nsswitch.conf # buildkit

RUN /bin/sh -c set -eux; addgroup -g 2375 -S docker # buildkit

ENV DOCKER_VERSION=26.0.0

RUN /bin/sh -c set -eux; apkArch="$(apk --print-arch)"; case "$apkArch" in 'x86_64') url='https://download.docker.com/linux/static/stable/x86_64/docker-26.0.0.tgz'; ;; 'armhf') url='https://download.docker.com/linux/static/stable/armel/docker-26.0.0.tgz'; ;; 'armv7') url='https://download.docker.com/linux/static/stable/armhf/docker-26.0.0.tgz'; ;; 'aarch64') url='https://download.docker.com/linux/static/stable/aarch64/docker-26.0.0.tgz'; ;; *) echo >&2 "error: unsupported 'docker.tgz' architecture ($apkArch)"; exit 1 ;; esac; wget -O 'docker.tgz' "$url"; tar --extract --file docker.tgz --strip-components 1 --directory /usr/local/bin/ --no-same-owner 'docker/docker' ; rm docker.tgz; docker --version # buildkit

ENV DOCKER_BUILDX_VERSION=0.13.1

RUN /bin/sh -c set -eux; apkArch="$(apk --print-arch)"; case "$apkArch" in 'x86_64') url='https://github.com/docker/buildx/releases/download/v0.13.1/buildx-v0.13.1.linux-amd64'; sha256='3e2bc8ed25a9125d6aeec07df4e0211edea6288e075b524160ef3fd305d3d74c'; ;; 'armhf') url='https://github.com/docker/buildx/releases/download/v0.13.1/buildx-v0.13.1.linux-arm-v6'; sha256='643063c656098e312533fe5ee3411523fa06cc3926bd2e96b4c6239b9cecbf88'; ;; 'armv7') url='https://github.com/docker/buildx/releases/download/v0.13.1/buildx-v0.13.1.linux-arm-v7'; sha256='8d42e7823237e777b121070fda6ad68159539aa6597aedfa7630384643ad6f9a'; ;; 'aarch64') url='https://github.com/docker/buildx/releases/download/v0.13.1/buildx-v0.13.1.linux-arm64'; sha256='3ba35a5d38361a64b62aeb9d20acc835ff6862a711cb438e610026b29c0ac489'; ;; 'ppc64le') url='https://github.com/docker/buildx/releases/download/v0.13.1/buildx-v0.13.1.linux-ppc64le'; sha256='1d16f7b15706d98523889a1ca50e9dfc44bbaec1f736d883a0528805795b9de2'; ;; 'riscv64') url='https://github.com/docker/buildx/releases/download/v0.13.1/buildx-v0.13.1.linux-riscv64'; sha256='202221c9b7fb881d092986e8ec2497ee71729f17c4afd912384a086af700e1ad'; ;; 's390x') url='https://github.com/docker/buildx/releases/download/v0.13.1/buildx-v0.13.1.linux-s390x'; sha256='71d7c39192b1b07790eb71e46742cc69a559f3eb00a1512f4a8d2ea1067408da'; ;; *) echo >&2 "warning: unsupported 'docker-buildx' architecture ($apkArch); skipping"; exit 0 ;; esac; wget -O 'docker-buildx' "$url"; echo "$sha256 *"'docker-buildx' | sha256sum -c -; plugin='/usr/local/libexec/docker/cli-plugins/docker-buildx'; mkdir -p "$(dirname "$plugin")"; mv -vT 'docker-buildx' "$plugin"; chmod +x "$plugin"; docker buildx version # buildkit

ENV DOCKER_COMPOSE_VERSION=2.26.0

RUN /bin/sh -c set -eux; apkArch="$(apk --print-arch)"; case "$apkArch" in 'x86_64') url='https://github.com/docker/compose/releases/download/v2.26.0/docker-compose-linux-x86_64'; sha256='59c6b262bedc4a02f46c8400e830e660935684899c770c3f5e804a2b7079fc16'; ;; 'armhf') url='https://github.com/docker/compose/releases/download/v2.26.0/docker-compose-linux-armv6'; sha256='97dac0aa10961ea30a79f6fe2c4a13bfe4da562926365a63042fcceb88d9d125'; ;; 'armv7') url='https://github.com/docker/compose/releases/download/v2.26.0/docker-compose-linux-armv7'; sha256='d607ed69f5fe92ee1fd831cf764f977174c86192957a4de678c01db671c3dc52'; ;; 'aarch64') url='https://github.com/docker/compose/releases/download/v2.26.0/docker-compose-linux-aarch64'; sha256='6f00ed24a846046b441c0f0a0f8c1e00194f4b0e33f2433fac0d2dd0e486fc80'; ;; 'ppc64le') url='https://github.com/docker/compose/releases/download/v2.26.0/docker-compose-linux-ppc64le'; sha256='e3afa6956f6cd4fdbaa8fe19781ae07a1bb8fb2f4d54a1aac857090d6fe1710d'; ;; 'riscv64') url='https://github.com/docker/compose/releases/download/v2.26.0/docker-compose-linux-riscv64'; sha256='1d080f5bc04b4b97c61ce3f57ff4a7bd11299f486bc287833f162360be201a7d'; ;; 's390x') url='https://github.com/docker/compose/releases/download/v2.26.0/docker-compose-linux-s390x'; sha256='5f302fb8e7d973b53f1f9dc808d2b1af08f94687cb14b3f26cc7b358854184b5'; ;; *) echo >&2 "warning: unsupported 'docker-compose' architecture ($apkArch); skipping"; exit 0 ;; esac; wget -O 'docker-compose' "$url"; echo "$sha256 *"'docker-compose' | sha256sum -c -; plugin='/usr/local/libexec/docker/cli-plugins/docker-compose'; mkdir -p "$(dirname "$plugin")"; mv -vT 'docker-compose' "$plugin"; chmod +x "$plugin"; ln -sv "$plugin" /usr/local/bin/; docker-compose --version; docker compose version # buildkit

COPY modprobe.sh /usr/local/bin/modprobe # buildkit

COPY docker-entrypoint.sh /usr/local/bin/ # buildkit

ENV DOCKER_TLS_CERTDIR=/certs

RUN /bin/sh -c mkdir /certs /certs/client && chmod 1777 /certs /certs/client # buildkit

ENTRYPOINT ["docker-entrypoint.sh"]

CMD ["sh"]

RUN /bin/sh -c set -eux; apk add --no-cache btrfs-progs e2fsprogs e2fsprogs-extra git ip6tables iptables openssl pigz shadow-uidmap xfsprogs xz zfs ; # buildkit

RUN /bin/sh -c set -eux; apk add --no-cache iptables-legacy; mkdir -p /usr/local/sbin/.iptables-legacy; for f in iptables iptables-save iptables-restore ip6tables ip6tables-save ip6tables-restore ; do b="/sbin/${f/tables/tables-legacy}"; "$b" --version; ln -svT "$b" "/usr/local/sbin/.iptables-legacy/$f"; done; export PATH="/usr/local/sbin/.iptables-legacy:$PATH"; iptables --version | grep legacy # buildkit

RUN /bin/sh -c set -eux; addgroup -S dockremap; adduser -S -G dockremap dockremap; echo 'dockremap:165536:65536' >> /etc/subuid; echo 'dockremap:165536:65536' >> /etc/subgid # buildkit

RUN /bin/sh -c set -eux; apkArch="$(apk --print-arch)"; case "$apkArch" in 'x86_64') url='https://download.docker.com/linux/static/stable/x86_64/docker-26.0.0.tgz'; ;; 'armhf') url='https://download.docker.com/linux/static/stable/armel/docker-26.0.0.tgz'; ;; 'armv7') url='https://download.docker.com/linux/static/stable/armhf/docker-26.0.0.tgz'; ;; 'aarch64') url='https://download.docker.com/linux/static/stable/aarch64/docker-26.0.0.tgz'; ;; *) echo >&2 "error: unsupported 'docker.tgz' architecture ($apkArch)"; exit 1 ;; esac; wget -O 'docker.tgz' "$url"; tar --extract --file docker.tgz --strip-components 1 --directory /usr/local/bin/ --no-same-owner --exclude 'docker/docker' ; rm docker.tgz; dockerd --version; containerd --version; ctr --version; runc --version # buildkit

ENV DIND_COMMIT=65cfcc28ab37cb75e1560e4b4738719c07c6618e

RUN /bin/sh -c set -eux; wget -O /usr/local/bin/dind "https://raw.githubusercontent.com/docker/docker/${DIND_COMMIT}/hack/dind"; chmod +x /usr/local/bin/dind # buildkit

COPY dockerd-entrypoint.sh /usr/local/bin/ # buildkit

VOLUME [/var/lib/docker]

EXPOSE map[2375/tcp:{} 2376/tcp:{}]

ENTRYPOINT ["dockerd-entrypoint.sh"]

CMD []

RUN /bin/sh -c apk add --no-cache iproute2 fuse-overlayfs # buildkit

RUN /bin/sh -c mkdir /run/user && chmod 1777 /run/user # buildkit

RUN /bin/sh -c set -eux; adduser -h /home/rootless -g 'Rootless' -D -u 1000 rootless; echo 'rootless:100000:65536' >> /etc/subuid; echo 'rootless:100000:65536' >> /etc/subgid # buildkit

RUN /bin/sh -c set -eux; apkArch="$(apk --print-arch)"; case "$apkArch" in 'x86_64') url='https://download.docker.com/linux/static/stable/x86_64/docker-rootless-extras-26.0.0.tgz'; ;; 'aarch64') url='https://download.docker.com/linux/static/stable/aarch64/docker-rootless-extras-26.0.0.tgz'; ;; *) echo >&2 "error: unsupported 'rootless.tgz' architecture ($apkArch)"; exit 1 ;; esac; wget -O 'rootless.tgz' "$url"; tar --extract --file rootless.tgz --strip-components 1 --directory /usr/local/bin/ 'docker-rootless-extras/rootlesskit' 'docker-rootless-extras/rootlesskit-docker-proxy' 'docker-rootless-extras/vpnkit' ; rm rootless.tgz; rootlesskit --version; vpnkit --version # buildkit

RUN /bin/sh -c set -eux; mkdir -p /home/rootless/.local/share/docker; chown -R rootless:rootless /home/rootless/.local/share/docker # buildkit

VOLUME [/home/rootless/.local/share/docker]

USER rootless

USER root

RUN /bin/sh -c apk add --no-cache git bash # buildkit

USER rootless

COPY /bin/forgejo-runner /bin/forgejo-runner # buildkit

ENV HOME=/data

USER 1000:1000

WORKDIR /data

VOLUME [/data]

CMD ["/bin/forgejo-runner"]

Key	Value
org.opencontainers.image.created	2024-03-31T10:57:43.274Z
org.opencontainers.image.description
org.opencontainers.image.licenses
org.opencontainers.image.revision	5091ba45e9ca3d8fcdc42fe56b0250c4c5c804da
org.opencontainers.image.source	https://git.kmsign.ru/royalcat/forgejo-runner-dind
org.opencontainers.image.title	forgejo-runner-dind
org.opencontainers.image.url	https://git.kmsign.ru/royalcat/forgejo-runner-dind
org.opencontainers.image.version	master