act-runner-dind-rootless (nightly-root-linux-amd64)

2023-08-16T21:49:52Z

Pull the image from the command line:

docker pull gitea.jbrumond.me/images/act-runner-dind-rootless:nightly-root-linux-amd64

Digest

sha256:d59f1887207ee2811a016d7fcb9168dbcf1bae22e1c3d26c2daefbb56bee3d0b

For more information on the Container registry, see the documentation.

ADD file:32ff5e7a78b890996ee4681cc0a26185d3e9acdb4eb1e2aaccb2411f922fed6b in /

CMD ["/bin/sh"]

RUN /bin/sh -c apk add --no-cache ca-certificates openssh-client # buildkit

RUN /bin/sh -c [ -e /etc/nsswitch.conf ] && grep '^hosts: files dns' /etc/nsswitch.conf # buildkit

ENV DOCKER_VERSION=24.0.5

RUN /bin/sh -c set -eux; apkArch="$(apk --print-arch)"; case "$apkArch" in 'x86_64') url='https://download.docker.com/linux/static/stable/x86_64/docker-24.0.5.tgz'; ;; 'armhf') url='https://download.docker.com/linux/static/stable/armel/docker-24.0.5.tgz'; ;; 'armv7') url='https://download.docker.com/linux/static/stable/armhf/docker-24.0.5.tgz'; ;; 'aarch64') url='https://download.docker.com/linux/static/stable/aarch64/docker-24.0.5.tgz'; ;; *) echo >&2 "error: unsupported 'docker.tgz' architecture ($apkArch)"; exit 1 ;; esac; wget -O 'docker.tgz' "$url"; tar --extract --file docker.tgz --strip-components 1 --directory /usr/local/bin/ --no-same-owner 'docker/docker' ; rm docker.tgz; docker --version # buildkit

ENV DOCKER_BUILDX_VERSION=0.11.2

RUN /bin/sh -c set -eux; apkArch="$(apk --print-arch)"; case "$apkArch" in 'x86_64') url='https://github.com/docker/buildx/releases/download/v0.11.2/buildx-v0.11.2.linux-amd64'; sha256='311568ee69715abc46163fd688e56c77ab0144ff32e116d0f293bfc3470e75b7'; ;; 'armhf') url='https://github.com/docker/buildx/releases/download/v0.11.2/buildx-v0.11.2.linux-arm-v6'; sha256='c1bab0c7374406d5069f60b291971d71161fbd3c00e8a8fb1b68b9053eda8a4e'; ;; 'armv7') url='https://github.com/docker/buildx/releases/download/v0.11.2/buildx-v0.11.2.linux-arm-v7'; sha256='4defdf463ca2516d3f58fef69a6f78cbbb8baf16d936cdfc54df4a4be0d48f7f'; ;; 'aarch64') url='https://github.com/docker/buildx/releases/download/v0.11.2/buildx-v0.11.2.linux-arm64'; sha256='565e36085a35bba5104f37365ba796c111338eea1a0902b3a7ff42e2e1248815'; ;; 'ppc64le') url='https://github.com/docker/buildx/releases/download/v0.11.2/buildx-v0.11.2.linux-ppc64le'; sha256='c5f5cb9957890873a537c7ff5c4eef36132339622baeabb37a4b9b7251ddf836'; ;; 'riscv64') url='https://github.com/docker/buildx/releases/download/v0.11.2/buildx-v0.11.2.linux-riscv64'; sha256='c0adc4b4625f7e3df7dcdec840568f918673f2ed4bcd03ca1e63ea2a5627ca35'; ;; 's390x') url='https://github.com/docker/buildx/releases/download/v0.11.2/buildx-v0.11.2.linux-s390x'; sha256='02916c76c3872fd0b3fa57e71403fee92b6be10f350b96a5ff99e7914dd277b8'; ;; *) echo >&2 "warning: unsupported 'docker-buildx' architecture ($apkArch); skipping"; exit 0 ;; esac; wget -O 'docker-buildx' "$url"; echo "$sha256 *"'docker-buildx' | sha256sum -c -; plugin='/usr/local/libexec/docker/cli-plugins/docker-buildx'; mkdir -p "$(dirname "$plugin")"; mv -vT 'docker-buildx' "$plugin"; chmod +x "$plugin"; docker buildx version # buildkit

ENV DOCKER_COMPOSE_VERSION=2.20.3

RUN /bin/sh -c set -eux; apkArch="$(apk --print-arch)"; case "$apkArch" in 'x86_64') url='https://github.com/docker/compose/releases/download/v2.20.3/docker-compose-linux-x86_64'; sha256='f45e4cb687df8b48a57f656097ce7175fa8e8bef70be407b011e29ff663f475f'; ;; 'armhf') url='https://github.com/docker/compose/releases/download/v2.20.3/docker-compose-linux-armv6'; sha256='e2010f160f5077c6d4d777965d21147328dbfb29894e60a5fbbce716284fd3cf'; ;; 'armv7') url='https://github.com/docker/compose/releases/download/v2.20.3/docker-compose-linux-armv7'; sha256='f62e5fb2e1908152c5f3e250faa2057c3d3351207eedd4c042ff540bba5f7575'; ;; 'aarch64') url='https://github.com/docker/compose/releases/download/v2.20.3/docker-compose-linux-aarch64'; sha256='9d6a6396b7604a390977ffff78379090f7c6910160bbd3b9669e2fcc635633c5'; ;; 'ppc64le') url='https://github.com/docker/compose/releases/download/v2.20.3/docker-compose-linux-ppc64le'; sha256='463d3d220da0fe49c40605a1fc9e4ed7414f47c0ac028c80c55d2e758e99d7ee'; ;; 'riscv64') url='https://github.com/docker/compose/releases/download/v2.20.3/docker-compose-linux-riscv64'; sha256='03b0ec338482f61593074b62ffab482ae67ecdc5d868eb72bb8fe3f8a7680c91'; ;; 's390x') url='https://github.com/docker/compose/releases/download/v2.20.3/docker-compose-linux-s390x'; sha256='3b24ddd85e859757801a8b9a7e53b96882fa5fd18cc12ee8750770f43b6afa14'; ;; *) echo >&2 "warning: unsupported 'docker-compose' architecture ($apkArch); skipping"; exit 0 ;; esac; wget -O 'docker-compose' "$url"; echo "$sha256 *"'docker-compose' | sha256sum -c -; plugin='/usr/local/libexec/docker/cli-plugins/docker-compose'; mkdir -p "$(dirname "$plugin")"; mv -vT 'docker-compose' "$plugin"; chmod +x "$plugin"; ln -sv "$plugin" /usr/local/bin/; docker-compose --version; docker compose version # buildkit

COPY modprobe.sh /usr/local/bin/modprobe # buildkit

COPY docker-entrypoint.sh /usr/local/bin/ # buildkit

ENV DOCKER_TLS_CERTDIR=/certs

RUN /bin/sh -c mkdir /certs /certs/client && chmod 1777 /certs /certs/client # buildkit

ENTRYPOINT ["docker-entrypoint.sh"]

CMD ["sh"]

RUN /bin/sh -c set -eux; apk add --no-cache btrfs-progs e2fsprogs e2fsprogs-extra ip6tables iptables openssl shadow-uidmap xfsprogs xz pigz ; if zfs="$(apk info --no-cache --quiet zfs)" && [ -n "$zfs" ]; then apk add --no-cache zfs; fi # buildkit

RUN /bin/sh -c set -eux; addgroup -S dockremap; adduser -S -G dockremap dockremap; echo 'dockremap:165536:65536' >> /etc/subuid; echo 'dockremap:165536:65536' >> /etc/subgid # buildkit

RUN /bin/sh -c set -eux; apkArch="$(apk --print-arch)"; case "$apkArch" in 'x86_64') url='https://download.docker.com/linux/static/stable/x86_64/docker-24.0.5.tgz'; ;; 'armhf') url='https://download.docker.com/linux/static/stable/armel/docker-24.0.5.tgz'; ;; 'armv7') url='https://download.docker.com/linux/static/stable/armhf/docker-24.0.5.tgz'; ;; 'aarch64') url='https://download.docker.com/linux/static/stable/aarch64/docker-24.0.5.tgz'; ;; *) echo >&2 "error: unsupported 'docker.tgz' architecture ($apkArch)"; exit 1 ;; esac; wget -O 'docker.tgz' "$url"; tar --extract --file docker.tgz --strip-components 1 --directory /usr/local/bin/ --no-same-owner --exclude 'docker/docker' ; rm docker.tgz; dockerd --version; containerd --version; ctr --version; runc --version # buildkit

ENV DIND_COMMIT=d58df1fc6c866447ce2cd129af10e5b507705624

RUN /bin/sh -c set -eux; wget -O /usr/local/bin/dind "https://raw.githubusercontent.com/docker/docker/${DIND_COMMIT}/hack/dind"; chmod +x /usr/local/bin/dind # buildkit

COPY dockerd-entrypoint.sh /usr/local/bin/ # buildkit

VOLUME [/var/lib/docker]

EXPOSE map[2375/tcp:{} 2376/tcp:{}]

ENTRYPOINT ["dockerd-entrypoint.sh"]

CMD []

RUN /bin/sh -c apk add --no-cache iproute2 fuse-overlayfs # buildkit

RUN /bin/sh -c mkdir /run/user && chmod 1777 /run/user # buildkit

RUN /bin/sh -c set -eux; adduser -h /home/rootless -g 'Rootless' -D -u 1000 rootless; echo 'rootless:100000:65536' >> /etc/subuid; echo 'rootless:100000:65536' >> /etc/subgid # buildkit

RUN /bin/sh -c set -eux; apkArch="$(apk --print-arch)"; case "$apkArch" in 'x86_64') url='https://download.docker.com/linux/static/stable/x86_64/docker-rootless-extras-24.0.5.tgz'; ;; 'aarch64') url='https://download.docker.com/linux/static/stable/aarch64/docker-rootless-extras-24.0.5.tgz'; ;; *) echo >&2 "error: unsupported 'rootless.tgz' architecture ($apkArch)"; exit 1 ;; esac; wget -O 'rootless.tgz' "$url"; tar --extract --file rootless.tgz --strip-components 1 --directory /usr/local/bin/ 'docker-rootless-extras/rootlesskit' 'docker-rootless-extras/rootlesskit-docker-proxy' 'docker-rootless-extras/vpnkit' ; rm rootless.tgz; rootlesskit --version; vpnkit --version # buildkit

RUN /bin/sh -c set -eux; mkdir -p /home/rootless/.local/share/docker; chown -R rootless:rootless /home/rootless/.local/share/docker # buildkit

VOLUME [/home/rootless/.local/share/docker]

USER rootless

USER root

RUN /bin/sh -c apk add --no-cache git bash supervisor # buildkit

COPY /opt/src/act_runner/act_runner /usr/local/bin/act_runner # buildkit

COPY /scripts/supervisord.conf /etc/supervisord.conf # buildkit

COPY /scripts/run.sh /opt/act/run.sh # buildkit

COPY /scripts/rootless.sh /opt/act/rootless.sh # buildkit

RUN /bin/sh -c mkdir /data && chown rootless:rootless /data # buildkit

USER rootless

ENTRYPOINT ["/usr/bin/supervisord" "-c" "/etc/supervisord.conf"]

USER root

/bin/sh -c ln -s /var/run/user/1000/docker.sock /var/run/docker.sock

LABEL org.opencontainers.image.created=2023-08-16T21:49:38Z

LABEL org.opencontainers.image.revision=927071a53c5cca9f191b3e27cebc41197b59ecf7

LABEL org.opencontainers.image.source=https://gitea.jbrumond.me/images/act-runner-dind-rootless.git

LABEL org.opencontainers.image.url=https://gitea.jbrumond.me/images/act-runner-dind-rootless

Key	Value
org.opencontainers.image.created	2023-08-16T21:49:38Z
org.opencontainers.image.revision	927071a53c5cca9f191b3e27cebc41197b59ecf7
org.opencontainers.image.source	https://gitea.jbrumond.me/images/act-runner-dind-rootless.git
org.opencontainers.image.url	https://gitea.jbrumond.me/images/act-runner-dind-rootless