fedora-kickstarts/fedora-docker-base.ks

# See docker-base-common.ks for details on how to hack on docker image kickstarts
# This base is a standard Fedora image with python3 and dnf

%include fedora-docker-common.ks

%packages --excludedocs --instLangs=en --nocore
rootfiles
# https://communityblog.fedoraproject.org/modularity-dead-long-live-modularity/
fedora-repos-modular
tar # https://bugzilla.redhat.com/show_bug.cgi?id=1409920
vim-minimal
dnf
dnf-yum  # https://fedorahosted.org/fesco/ticket/1312#comment:29
sssd-client
sudo
%end

%post --erroronfail --log=/root/anaconda-post.log
# remove some extraneous files
rm -rf /var/cache/dnf/*
rm -rf /tmp/*

# https://pagure.io/atomic-wg/issue/308
printf "tsflags=nodocs\n" >>/etc/dnf/dnf.conf

# https://bugzilla.redhat.com/show_bug.cgi?id=1576993
systemctl disable dnf-makecache.timer

#Mask mount units and getty service so that we don't get login prompt
systemctl mask systemd-remount-fs.service dev-hugepages.mount sys-fs-fuse-connections.mount systemd-logind.service getty.target console-getty.service

# https://bugzilla.redhat.com/show_bug.cgi?id=1343138
# Fix /run/lock breakage since it's not tmpfs in docker
# This unmounts /run (tmpfs) and then recreates the files
# in the /run directory on the root filesystem of the container
#
# We ignore the return code of the systemd-tmpfiles command because
# at this point we have already removed the /etc/machine-id and all
# tmpfiles lines with %m in them will fail and cause a bad return
# code. Example failure:
#   [/usr/lib/tmpfiles.d/systemd.conf:26] Failed to replace specifiers: /run/log/journal/%m
#
umount /run
systemd-tmpfiles --prefix=/run/ --prefix=/var/run/ --create --boot || true
rm /run/nologin # https://pagure.io/atomic-wg/issue/316

%end
Add a docker common kickstart as a central bit for shared config. There's a lot of similarities between base and base-minimal so introduce a docker-common.ks to ensure as much as possible is shared between the two ensure as much shared as possible. Signed-off-by: Peter Robinson <pbrobinson@fedoraproject.org> 2017-03-23 17:40:57 +00:00			`# See docker-base-common.ks for details on how to hack on docker image kickstarts`
			`# This base is a standard Fedora image with python3 and dnf`
Add kickstart for Docker base image 2014-07-29 12:30:03 +00:00
Add a docker common kickstart as a central bit for shared config. There's a lot of similarities between base and base-minimal so introduce a docker-common.ks to ensure as much as possible is shared between the two ensure as much shared as possible. Signed-off-by: Peter Robinson <pbrobinson@fedoraproject.org> 2017-03-23 17:40:57 +00:00			`%include fedora-docker-common.ks`
Add kickstart for Docker base image 2014-07-29 12:30:03 +00:00
			`%packages --excludedocs --instLangs=en --nocore`
fedora-docker-base: Add rootfiles and regenerate locale after removal https://fedorahosted.org/cloud/ticket/92 2015-01-12 11:42:18 +00:00			`rootfiles`
f28: Enable modularity in container base image by default It's confusing to have it be underneath Server, when in actuality we really want at least the people using containers to have it by default. So let's enable it by default there. 2018-04-04 15:25:10 +00:00			`# https://communityblog.fedoraproject.org/modularity-dead-long-live-modularity/`
			`fedora-repos-modular`
Add a docker common kickstart as a central bit for shared config. There's a lot of similarities between base and base-minimal so introduce a docker-common.ks to ensure as much as possible is shared between the two ensure as much shared as possible. Signed-off-by: Peter Robinson <pbrobinson@fedoraproject.org> 2017-03-23 17:40:57 +00:00			`tar # https://bugzilla.redhat.com/show_bug.cgi?id=1409920`
Add kickstart for Docker base image 2014-07-29 12:30:03 +00:00			`vim-minimal`
switch teh docker base image to dnf 2015-03-07 17:12:24 +00:00			`dnf`
Revert "we can not install dnf-yum until FESCo signs off on it being allowed" It's now agreed. This reverts commit c3c01cfa0ad385ee105d76e2c50461cebef2ccfa. 2015-03-25 19:33:35 +00:00			`dnf-yum # https://fedorahosted.org/fesco/ticket/1312#comment:29`
Add sssd-client with .so's for easy integration with SSSD container. 2015-10-30 14:06:48 +00:00			`sssd-client`
Add sudo to the fedora container base image. sudo is needed in the base image for it to be used in Azure services Signed-off-by: Clement Verna <cverna@tutanota.com> 2019-05-05 12:12:59 +00:00			`sudo`
Add kickstart for Docker base image 2014-07-29 12:30:03 +00:00			`%end`

docker: add --erroronfail to %post If %post fails we want the whole install to fail. 2017-01-19 19:19:24 +00:00			`%post --erroronfail --log=/root/anaconda-post.log`
docker: fix some paths on file cleanup Point to dnf cache and clean up everything in tmp. 2017-01-19 19:32:47 +00:00			`# remove some extraneous files`
			`rm -rf /var/cache/dnf/*`
			`rm -rf /tmp/*`
Add kickstart for Docker base image 2014-07-29 12:30:03 +00:00
docker base image: don't install docs by default Signed-off-by: Tomas Tomecek <ttomecek@redhat.com> 2017-08-01 11:04:42 +00:00			`# https://pagure.io/atomic-wg/issue/308`
			`printf "tsflags=nodocs\n" >>/etc/dnf/dnf.conf`

fedora-docker-base: Disable dnf-makecache.timer When containers based on this image are run with systemd as PID 1, there should not be dnf cache updates inside the container, at least by default. https://bugzilla.redhat.com/show_bug.cgi?id=1576993 2018-05-11 18:34:21 +00:00			`# https://bugzilla.redhat.com/show_bug.cgi?id=1576993`
			`systemctl disable dnf-makecache.timer`

fedora-docker-base: adjust dbus.service to run in a container, mask some units to get rid of fails in boot transaction 2015-01-21 09:17:49 +00:00			`#Mask mount units and getty service so that we don't get login prompt`
			`systemctl mask systemd-remount-fs.service dev-hugepages.mount sys-fs-fuse-connections.mount systemd-logind.service getty.target console-getty.service`

docker: add some more comments to %post script Putting in references to BZ's so that we can determine if we can remove these pieces of the %post in the future. 2017-01-19 20:31:38 +00:00			`# https://bugzilla.redhat.com/show_bug.cgi?id=1343138`
fix missing /run/lock in docker base image BZ#1343138 Signed-off-by: Adam Miller <maxamillion@fedoraproject.org> 2016-07-22 20:26:49 +00:00			`# Fix /run/lock breakage since it's not tmpfs in docker`
docker: add some more comments to %post script Putting in references to BZ's so that we can determine if we can remove these pieces of the %post in the future. 2017-01-19 20:31:38 +00:00			`# This unmounts /run (tmpfs) and then recreates the files`
			`# in the /run directory on the root filesystem of the container`
docker-base: ignore return code of systemd-tmpfiles Ignore the return code of the systemd-tmpfiles command because at this point we have already removed the /etc/machine-id (8f3beac) and all tmpfiles lines with %m in them will fail and cause a bad return code. Example failure: [/usr/lib/tmpfiles.d/systemd.conf:26] Failed to replace specifiers: /run/log/journal/%m 2017-05-19 13:40:49 +00:00			`#`
			`# We ignore the return code of the systemd-tmpfiles command because`
			`# at this point we have already removed the /etc/machine-id and all`
			`# tmpfiles lines with %m in them will fail and cause a bad return`
			`# code. Example failure:`
			`# [/usr/lib/tmpfiles.d/systemd.conf:26] Failed to replace specifiers: /run/log/journal/%m`
			`#`
fix missing /run/lock in docker base image BZ#1343138 Signed-off-by: Adam Miller <maxamillion@fedoraproject.org> 2016-07-22 20:26:49 +00:00			`umount /run`
docker-base: ignore return code of systemd-tmpfiles Ignore the return code of the systemd-tmpfiles command because at this point we have already removed the /etc/machine-id (8f3beac) and all tmpfiles lines with %m in them will fail and cause a bad return code. Example failure: [/usr/lib/tmpfiles.d/systemd.conf:26] Failed to replace specifiers: /run/log/journal/%m 2017-05-19 13:40:49 +00:00			`systemd-tmpfiles --prefix=/run/ --prefix=/var/run/ --create --boot \|\| true`
container: rm nologin file from container image This allows one to create an sshd container if they want. See https://pagure.io/atomic-wg/issue/316 2017-08-11 13:11:36 +00:00			`rm /run/nologin # https://pagure.io/atomic-wg/issue/316`
fix missing /run/lock in docker base image BZ#1343138 Signed-off-by: Adam Miller <maxamillion@fedoraproject.org> 2016-07-22 20:26:49 +00:00
Add kickstart for Docker base image 2014-07-29 12:30:03 +00:00			`%end`