diff --git a/build.sh b/build.sh deleted file mode 100755 index 51e2ec7..0000000 --- a/build.sh +++ /dev/null @@ -1,19 +0,0 @@ -#!/usr/bin/env bash - -set -eufo pipefail - -if [[ ! -f build/libs/glvd-0.0.1-SNAPSHOT.jar ]]; then - ./gradlew bootJar -fi - -podman build --tag ghcr.io/gardenlinux/glvd-api:edge . - -podman save --format oci-archive ghcr.io/gardenlinux/glvd-api:edge > glvd.oci - -podman pull ubuntu:22.04 -podman save --format oci-archive ubuntu:22.04 > ubuntu.oci - -./unbase_oci --exclude exclude --include include --ldd-dependencies --print-tree ubuntu.oci glvd.oci glvd_bare.oci - -image="$(podman load < glvd_bare.oci | awk '{ print $NF }')" -podman tag "$image" ghcr.io/gardenlinux/glvd-api:edge_bare diff --git a/unbase_oci b/unbase_oci index 1a6db1b..3e536d0 100755 --- a/unbase_oci +++ b/unbase_oci @@ -2,7 +2,7 @@ set -eufo pipefail -container_image=ghcr.io/gardenlinux/unbase_oci:233f4213036fadd4b91b965b4ca71b457f1a6b88 +container_image=localhost/unbase_oci container_engine=podman container_mount_opts=() @@ -52,4 +52,4 @@ container_mount_opts+=(-v "$(realpath "$1"):/mnt$(realpath "$1")") container_mount_opts+=(-v "$(realpath "$3"):/mnt$(realpath "$3")") args+=("/mnt$(realpath "$1")" "/mnt$(realpath "$2")" "/mnt$(realpath "$3")") -"$container_engine" run --rm --read-only --tmpfs /tmp:rw,exec "${container_mount_opts[@]}" "$container_image" "${args[@]}" +"$container_engine" run --rm --security-opt seccomp=unconfined --security-opt apparmor=unconfined --security-opt label=disable --read-only --tmpfs /tmp:rw,exec "${container_mount_opts[@]}" "$container_image" "${args[@]}"