toolbox/images/fedora/f36/Containerfile

44 lines
1.1 KiB
Text
Raw Normal View History

FROM registry.fedoraproject.org/fedora:36
ENV NAME=fedora-toolbox VERSION=36
LABEL com.github.containers.toolbox="true" \
com.redhat.component="$NAME" \
name="$NAME" \
version="$VERSION" \
usage="This image is meant to be used with the toolbox command" \
summary="Base image for creating Fedora toolbox containers" \
maintainer="Debarshi Ray <rishi@fedoraproject.org>"
COPY README.md /
RUN rm /etc/rpm/macros.image-language-conf
RUN sed -i '/tsflags=nodocs/d' /etc/dnf/dnf.conf
images: Avoid unexpected DNF behaviour when reinstalling or swapping The RPM packages in the base 'fedora' image can be older than the those currently available in the DNF 'updates' repository [1], but at the same time newer than those available in the DNF 'fedora' repository [1]. The first part happens because the base image isn't updated as often as the individual packages, so the 'updates' repository can have newer RPMs. The second part happens because the base image does get updated after a stable Fedora has been released, and hence can have newer RPMs than the 'fedora' repository. This is complicated by the fact that packages can get pulled directly from Fedora's Koji build system into the base 'fedora' image before they make it to one of the well-known repositories like 'fedora' or 'updates' [1]. These packages are marked as having come from the koji-override-0 repository. All that combined can lead to unexpected behaviour when DNF is invoked to reinstall or swap the RPM packages in the base image. Some examples below. The base fedora:36 image contains glibc-minimal-langpack-2.35-20.fc36 that came from koji-override-0, while 'fedora' and 'updates' have glibc-all-langpacks-2.35-4.fc36 and glibc-all-langpacks-2.35-22.fc36 respectively. This leads to: STEP 8/15: RUN dnf -y swap glibc-minimal-langpack glibc-all-langpacks Last metadata expiration check: 0:00:03 ago on Wed Feb 1 12:37:04... Dependencies resolved. ====================================================================== Package Arch Version Repository ====================================================================== Installing: glibc-all-langpacks x86_64 2.35-4.fc36 fedora Removing: glibc-minimal-langpack x86_64 2.35-20.fc36 @koji-override-0 Downgrading: glibc x86_64 2.35-4.fc36 fedora glibc-common x86_64 2.35-4.fc36 fedora That's unexpected. Instead of upgrading all the glibc sub-packages to the latest version from 'updates', it's downgrading them to the older version from 'fedora'. Similarly, the base fedora:36 image has bash-5.2.9-2.fc36.x86_64 from koji-override-0, and there is bash-5.2.15-1.fc36.x86_64 in 'updates'. This leads to: STEP 10/15: RUN dnf -y reinstall $(<missing-docs) Last metadata expiration check: 0:00:06 ago on Wed Feb 1 12:37:04... Package acl available, but not installed. No match for argument: acl Installed package bash-5.2.9-2.fc36.x86_64 (from koji-override-0) not available. That's unexpected. Instead of upgrading bash to the latest version from 'updates', it's simply skipping the 'reinstall', which means that the documentation that was stripped out in the base image doesn't get restored. Updating all the RPM packages in the base 'fedora' image to match the contents of the 'updates' repository before making any changes to the image's package set will avoid such unexpected behaviour. Only the images for currently maintained Fedoras (ie., 36, 37 and 38) were updated. [1] https://docs.fedoraproject.org/en-US/quick-docs/repositories/ https://github.com/containers/toolbox/pull/1226
2023-02-01 14:25:06 +00:00
RUN dnf -y upgrade
RUN dnf -y swap coreutils-single coreutils-full
RUN dnf -y swap glibc-minimal-langpack glibc-all-langpacks
COPY missing-docs /
RUN dnf -y reinstall $(<missing-docs)
RUN rm /missing-docs
COPY extra-packages /
RUN dnf -y install $(<extra-packages)
RUN rm /extra-packages
COPY ensure-files /
RUN ret_val=0; \
while read file; do \
if ! compgen -G "$file" >/dev/null; then \
echo "$file: No such file or directory" >&2; \
ret_val=1; \
break; \
fi; \
done <ensure-files; \
if [ "$ret_val" -ne 0 ]; then \
false; \
fi
RUN rm /ensure-files
RUN dnf clean all