constellation/hack/package-hasher/Containerfile.apk.hasher
Paul Meyer 88b4bc5857 ci: pin apk packages used in container base image
Signed-off-by: Paul Meyer <49727155+katexochen@users.noreply.github.com>
2023-01-30 16:05:00 +01:00

28 lines
805 B
Plaintext

# syntax=docker/dockerfile:1.5-labs
FROM alpine:3.17.1@sha256:93d5a28ff72d288d69b5997b8ba47396d2cbb62a72b5d87cd3351094b5d578a0 as builder
ADD --checksum=sha256:11968a8b706095a081ac30168849b351b0263a6df5c224119aa914d7e5afb0c1 \
https://github.com/reproducible-containers/repro-get/releases/download/v0.3.0/repro-get-v0.3.0.linux-amd64 \
/usr/bin/repro-get
RUN chmod +x /usr/bin/repro-get
RUN apk update && apk add \
alpine-base \
cryptsetup-dev \
gcompat \
libvirt-dev \
abuild
WORKDIR /out
# Dump the hashes of the installed packages
RUN repro-get hash generate > SHA256SUMS
# Export the apks
RUN repro-get cache export repository-apk
FROM scratch as output
COPY --from=builder /out/SHA256SUMS SHA256SUMS-apk-amd64
COPY --from=builder /out/repository-apk repository-apk