mirror of
https://github.com/xen-project/xen.git
synced 2026-10-28 10:11:27 +01:00
Andrew Cooper
a8bc31be01
Existing as suse:opensuse-tumbleweed is a historical quirk, and adjusted for consistency with all the other containers. Make it non-root, use heredocs for legibility, and use the zypper long names for the benefit of those wondering what was being referenced or duplicated. Trim the dependencies substantially. Testing docs isn't very interesting and saves a lot of space. Other savings come from removing a huge pile of optional QEMU dependencies (QEMU just needs to build the Xen parts to be useful here, not have a full GUI environment). Finally, there where some packages such as bc, libssh2-devel, libtasn1-devel and nasm that I'm not aware of any reason to have had, even historically. This shaves 1G off the size of the container: registry.gitlab.com/xen-project/xen/opensuse tumbleweed-x86_64 1.39GB registry.gitlab.com/xen-project/xen/suse opensuse-tumbleweed 2.35GB Furthermore, identify which components of the build use which dependencies, which will help managing them in the future. Thanks to Olaf Hering for dependency fixes that have been subsumed into this total overhaul. Signed-off-by: Andrew Cooper <andrew.cooper3@citrix.com> Reviewed-by: Anthony PERARD <anthony.perard@vates.tech> Release-Acked-By: Oleksii Kurochko <oleksii.kurochko@gmail.com>
113 lines
3.6 KiB
Bash
Executable File
113 lines
3.6 KiB
Bash
Executable File
#!/bin/bash
|
|
|
|
#
|
|
# DOCKER_CMD should be either `docker` or `podman`.
|
|
#
|
|
# if using (rootless) podman, remember to set /etc/subuid
|
|
# and /etc/subgid.
|
|
#
|
|
docker_cmd=${DOCKER_CMD:-"docker"}
|
|
[ "$DOCKER_CMD" = "podman" ] && userns_podman="--userns=keep-id" selinux=",z"
|
|
|
|
einfo() {
|
|
echo "$*" >&2
|
|
}
|
|
|
|
die() {
|
|
echo "$*" >&2
|
|
exit 1
|
|
}
|
|
|
|
#
|
|
# The caller is expected to override the CONTAINER environment
|
|
# variable with the container they wish to launch.
|
|
#
|
|
BASE="registry.gitlab.com/xen-project/xen"
|
|
case "_${CONTAINER}" in
|
|
_alpine) CONTAINER="${BASE}/alpine:3.18" ;;
|
|
_alpine-arm64v8) CONTAINER="${BASE}/alpine:3.18-arm64v8" ;;
|
|
_archlinux|_arch) CONTAINER="${BASE}/archlinux:current" ;;
|
|
_centos7) CONTAINER="${BASE}/centos:7" ;;
|
|
_fedora) CONTAINER="${BASE}/fedora:29";;
|
|
_focal) CONTAINER="${BASE}/ubuntu:focal" ;;
|
|
_bullseye-ppc64le) CONTAINER="${BASE}/debian:11-ppc64le" ;;
|
|
_bookworm-ppc64le) CONTAINER="${BASE}/debian:12-ppc64le" ;;
|
|
_bullseye-riscv64) CONTAINER="${BASE}/debian:11-riscv64" ;;
|
|
_bookworm-riscv64) CONTAINER="${BASE}/debian:12-riscv64" ;;
|
|
_bookworm-x86_64-gcc-ibt) CONTAINER="${BASE}/debian:12-x86_64-gcc-ibt" ;;
|
|
_bookworm|_) CONTAINER="${BASE}/debian:bookworm" ;;
|
|
_bookworm-i386) CONTAINER="${BASE}/debian:bookworm-i386" ;;
|
|
_bookworm-arm64v8-arm32-gcc) CONTAINER="${BASE}/debian:bookworm-arm64v8-arm32-gcc" ;;
|
|
_bookworm-arm64v8) CONTAINER="${BASE}/debian:bookworm-arm64v8" ;;
|
|
_bookworm-cppcheck) CONTAINER="${BASE}/debian:bookworm-cppcheck" ;;
|
|
_bionic) CONTAINER="${BASE}/ubuntu:bionic" ;;
|
|
_xenial) CONTAINER="${BASE}/ubuntu:xenial" ;;
|
|
_opensuse-leap|_leap) CONTAINER="${BASE}/suse:opensuse-leap" ;;
|
|
_opensuse-tumbleweed|_tumbleweed) CONTAINER="${BASE}/opensuse:tumbleweed-x86_64" ;;
|
|
esac
|
|
|
|
# Use this variable to control whether root should be used
|
|
case "_${CONTAINER_UID0}" in
|
|
_1) userarg="-u 0" ;;
|
|
_0|_) userarg="-u $(id -u) $userns_podman" ;;
|
|
esac
|
|
|
|
# Save the commands for future use
|
|
cmd=("$@")
|
|
|
|
# If no command was specified, just drop us into a shell if we're interactive
|
|
[ $# -eq 0 ] && tty -s && cmd=("/bin/bash")
|
|
|
|
# Are we in an interactive terminal?
|
|
tty -s && termint=t
|
|
|
|
#
|
|
# Fetch the latest version of the container in hub.docker.com,
|
|
# unless it's a newly created local copy.
|
|
#
|
|
if [[ "_${CONTAINER_NO_PULL}" != "_1" ]]; then
|
|
einfo "*** Ensuring ${CONTAINER} is up to date"
|
|
${docker_cmd} pull ${CONTAINER} > /dev/null || \
|
|
die "Failed to update container"
|
|
fi
|
|
|
|
if hash greadlink > /dev/null 2>&1; then
|
|
READLINK=greadlink
|
|
elif [[ $(uname -s) == "Darwin" ]]; then
|
|
echo "Unable to forward SSH agent without coreutils installed"
|
|
unset SSH_AUTH_SOCK
|
|
else
|
|
READLINK=readlink
|
|
fi
|
|
|
|
# Ensure we've got what we need for SSH_AUTH_SOCK
|
|
if [[ -n ${SSH_AUTH_SOCK} ]]; then
|
|
fullpath_sock=$(${READLINK} -f ${SSH_AUTH_SOCK} 2> /dev/null)
|
|
if [ $? -ne 0 ]; then
|
|
echo "Invalid SSH_AUTH_SOCK: ${SSH_AUTH_SOCK}"
|
|
unset SSH_AUTH_SOCK
|
|
else
|
|
SSH_AUTH_DIR=$(dirname ${fullpath_sock})
|
|
SSH_AUTH_NAME=$(basename ${fullpath_sock})
|
|
fi
|
|
fi
|
|
|
|
# Figure out the base of what we want as our sources
|
|
# by using the top of the git repo
|
|
if [[ -z ${CONTAINER_PATH} ]]; then
|
|
CONTAINER_PATH=$(git rev-parse --show-toplevel)
|
|
fi
|
|
|
|
# Kick off Docker
|
|
einfo "*** Launching container ..."
|
|
exec ${docker_cmd} run \
|
|
${userarg} \
|
|
${SSH_AUTH_SOCK:+-e SSH_AUTH_SOCK="/tmp/ssh-agent/${SSH_AUTH_NAME}"} \
|
|
-v "${CONTAINER_PATH}":/build:rw${selinux} \
|
|
-v "${HOME}/.ssh":/root/.ssh:ro \
|
|
${SSH_AUTH_DIR:+-v "${SSH_AUTH_DIR}":/tmp/ssh-agent${selinux}} \
|
|
${CONTAINER_ARGS} \
|
|
-${termint}i --rm -- \
|
|
${CONTAINER} \
|
|
"${cmd[@]}"
|