Skip to content

Instantly share code, notes, and snippets.

@runcom
Created November 7, 2023 13:00
Show Gist options
  • Select an option

  • Save runcom/97a5f1223afd0d01e05a7e699a3540a7 to your computer and use it in GitHub Desktop.

Select an option

Save runcom/97a5f1223afd0d01e05a7e699a3540a7 to your computer and use it in GitHub Desktop.

Revisions

  1. runcom created this gist Nov 7, 2023.
    102 changes: 102 additions & 0 deletions Dockerfile
    Original file line number Diff line number Diff line change
    @@ -0,0 +1,102 @@
    FROM registry.gitlab.com/centos/cloud/sagano/centos-boot-tier-1:stream9
    USER root
    COPY 80-iot.preset /usr/lib/systemd/system-preset
    COPY 01-edge-base.conf /usr/lib/dracut/dracut.conf.d
    RUN update-crypto-policies --set DEFAULT:SHA1 && \
    rpm-ostree install \
    ignition \
    ignition-edge \
    ssh-key-dir \
    grub2 \
    grub2-efi-x64 \
    efibootmgr \
    shim-x64 \
    microcode_ctl \
    iwl1000-firmware \
    iwl100-firmware \
    iwl105-firmware \
    iwl135-firmware \
    iwl2000-firmware \
    iwl2030-firmware \
    iwl3160-firmware \
    iwl5000-firmware \
    iwl5150-firmware \
    iwl6050-firmware \
    iwl7260-firmware \
    redhat-release \
    glibc \
    rpm \
    rpm-ostree \
    glibc-minimal-langpack \
    nss-altfiles \
    dracut-config-generic \
    dracut-network \
    basesystem \
    bash \
    platform-python \
    shadow-utils \
    chrony \
    setup \
    shadow-utils \
    sudo \
    systemd \
    coreutils \
    util-linux \
    curl \
    vim-minimal \
    polkit \
    lvm2 \
    cryptsetup \
    pinentry \
    e2fsprogs \
    dosfstools \
    keyutils \
    gnupg2 \
    attr \
    xz \
    gzip \
    firewalld \
    iptables \
    NetworkManager \
    NetworkManager-wifi \
    NetworkManager-wwan \
    wpa_supplicant \
    dnsmasq \
    traceroute \
    hostname \
    iproute \
    iputils \
    procps-ng \
    #rootfiles \
    passwd \
    policycoreutils \
    policycoreutils-python-utils \
    setools-console \
    less \
    tar \
    rsync \
    usbguard \
    bash-completion \
    tmux \
    ima-evm-utils \
    audit \
    podman \
    containernetworking-plugins \
    container-selinux \
    skopeo \
    criu \
    slirp4netns \
    fuse-overlayfs \
    clevis \
    clevis-dracut \
    clevis-luks \
    greenboot \
    greenboot-default-health-checks \
    fdo-client \
    fdo-owner-cli \
    sos \
    && ostree container commit
    RUN KERNEL_VERSION=$(rpm -q kernel | cut -c 8-); \
    dracut --reproducible -v -f \
    /lib/modules/$KERNEL_VERSION/initramfs.img $KERNEL_VERSION && \
    ostree container commit