2021-11-19 01:44:52 +00:00
|
|
|
FROM registry.fedoraproject.org/fedora:36
|
|
|
|
|
|
|
|
ENV NAME=fedora-toolbox VERSION=36
|
|
|
|
LABEL com.github.containers.toolbox="true" \
|
|
|
|
com.redhat.component="$NAME" \
|
|
|
|
name="$NAME" \
|
|
|
|
version="$VERSION" \
|
|
|
|
usage="This image is meant to be used with the toolbox command" \
|
|
|
|
summary="Base image for creating Fedora toolbox containers" \
|
|
|
|
maintainer="Debarshi Ray <rishi@fedoraproject.org>"
|
|
|
|
|
|
|
|
COPY README.md /
|
|
|
|
|
2023-01-31 23:02:46 +00:00
|
|
|
RUN rm /etc/rpm/macros.image-language-conf
|
2021-11-19 01:44:52 +00:00
|
|
|
RUN sed -i '/tsflags=nodocs/d' /etc/dnf/dnf.conf
|
2023-01-31 23:02:46 +00:00
|
|
|
|
images: Avoid unexpected DNF behaviour when reinstalling or swapping
The RPM packages in the base 'fedora' image can be older than the those
currently available in the DNF 'updates' repository [1], but at the same
time newer than those available in the DNF 'fedora' repository [1]. The
first part happens because the base image isn't updated as often as the
individual packages, so the 'updates' repository can have newer RPMs.
The second part happens because the base image does get updated after a
stable Fedora has been released, and hence can have newer RPMs than the
'fedora' repository.
This is complicated by the fact that packages can get pulled directly
from Fedora's Koji build system into the base 'fedora' image before
they make it to one of the well-known repositories like 'fedora' or
'updates' [1]. These packages are marked as having come from the
koji-override-0 repository.
All that combined can lead to unexpected behaviour when DNF is invoked
to reinstall or swap the RPM packages in the base image. Some examples
below.
The base fedora:36 image contains glibc-minimal-langpack-2.35-20.fc36
that came from koji-override-0, while 'fedora' and 'updates' have
glibc-all-langpacks-2.35-4.fc36 and glibc-all-langpacks-2.35-22.fc36
respectively. This leads to:
STEP 8/15: RUN dnf -y swap glibc-minimal-langpack glibc-all-langpacks
Last metadata expiration check: 0:00:03 ago on Wed Feb 1 12:37:04...
Dependencies resolved.
======================================================================
Package Arch Version Repository
======================================================================
Installing:
glibc-all-langpacks x86_64 2.35-4.fc36 fedora
Removing:
glibc-minimal-langpack x86_64 2.35-20.fc36 @koji-override-0
Downgrading:
glibc x86_64 2.35-4.fc36 fedora
glibc-common x86_64 2.35-4.fc36 fedora
That's unexpected. Instead of upgrading all the glibc sub-packages to
the latest version from 'updates', it's downgrading them to the older
version from 'fedora'.
Similarly, the base fedora:36 image has bash-5.2.9-2.fc36.x86_64 from
koji-override-0, and there is bash-5.2.15-1.fc36.x86_64 in 'updates'.
This leads to:
STEP 10/15: RUN dnf -y reinstall $(<missing-docs)
Last metadata expiration check: 0:00:06 ago on Wed Feb 1 12:37:04...
Package acl available, but not installed.
No match for argument: acl
Installed package bash-5.2.9-2.fc36.x86_64 (from koji-override-0) not
available.
That's unexpected. Instead of upgrading bash to the latest version from
'updates', it's simply skipping the 'reinstall', which means that the
documentation that was stripped out in the base image doesn't get
restored.
Updating all the RPM packages in the base 'fedora' image to match the
contents of the 'updates' repository before making any changes to the
image's package set will avoid such unexpected behaviour.
Only the images for currently maintained Fedoras (ie., 36, 37 and 38)
were updated.
[1] https://docs.fedoraproject.org/en-US/quick-docs/repositories/
https://github.com/containers/toolbox/pull/1226
2023-02-01 14:25:06 +00:00
|
|
|
RUN dnf -y upgrade
|
2021-11-19 01:44:52 +00:00
|
|
|
RUN dnf -y swap coreutils-single coreutils-full
|
2023-01-31 23:02:46 +00:00
|
|
|
RUN dnf -y swap glibc-minimal-langpack glibc-all-langpacks
|
2021-11-19 01:44:52 +00:00
|
|
|
|
|
|
|
COPY missing-docs /
|
|
|
|
RUN dnf -y reinstall $(<missing-docs)
|
|
|
|
RUN rm /missing-docs
|
|
|
|
|
|
|
|
COPY extra-packages /
|
|
|
|
RUN dnf -y install $(<extra-packages)
|
|
|
|
RUN rm /extra-packages
|
|
|
|
|
2023-02-01 17:32:30 +00:00
|
|
|
COPY ensure-files /
|
|
|
|
RUN ret_val=0; \
|
|
|
|
while read file; do \
|
|
|
|
if ! compgen -G "$file" >/dev/null; then \
|
|
|
|
echo "$file: No such file or directory" >&2; \
|
|
|
|
ret_val=1; \
|
|
|
|
break; \
|
|
|
|
fi; \
|
|
|
|
done <ensure-files; \
|
|
|
|
if [ "$ret_val" -ne 0 ]; then \
|
|
|
|
false; \
|
|
|
|
fi
|
|
|
|
RUN rm /ensure-files
|
|
|
|
|
2021-11-19 01:44:52 +00:00
|
|
|
RUN dnf clean all
|