···

       
11
       
11
       
 
       


     

       
12
       
12
       
 
       
dependencies:

     

       
13
       
13
       
 
       
  nixpkgs:

     

       
14
       
14
       
-
       
    - buildah

     

       
15
       
15
       
-
       
    - shadow

     

       
16
       
16
       
-
       
    - curl

     

       
17
       
17
       
-
       


     

       
18
       
18
       
-
       
environment:

     

       
19
       
19
       
-
       
  HOME: "/root"

     

       
20
       
20
       
-
       
  TMPDIR: "/root/tmp"

     

       
21
       
21
       
-
       
  BUILDAH_ISOLATION: "chroot"

     

       
14
       
14
       
+
       
    - kaniko

     

       
22
       
15
       
 
       


     

       
23
       
16
       
 
       
steps:

     

       
24
       
24
       
-
       
  - name: set up buildah

     

       
25
       
25
       
-
       
    command: |

     

       
26
       
26
       
-
       
      cat >/etc/passwd <<'EOF'

     

       
27
       
27
       
-
       
      root:x:0:0:root:/root:/bin/sh

     

       
28
       
28
       
-
       
      EOF

     

       
29
       
29
       
-
       


     

       
30
       
30
       
-
       
      echo 'root:x:0:' >/etc/group

     

       
31
       
31
       
-
       
      mkdir -p /root

     

       
32
       
32
       
-
       
      chown 0:0 /root

     

       
33
       
33
       
-
       


     

       
34
       
34
       
-
       
      mkdir -p "$HOME/tmp" "$HOME/.local/share/containers/storage" "$HOME/.local/run/containers/storage" "$HOME/.config/containers"

     

       
35
       
35
       
-
       
      chmod 1777 "$HOME/tmp"

     

       
36
       
36
       
-
       


     

       
37
       
37
       
-
       
      cat > "$HOME/.config/containers/policy.json" <<'EOF'

     

       
38
       
38
       
-
       
      { "default": [ { "type": "insecureAcceptAnything" } ] }

     

       
39
       
39
       
-
       
      EOF

     

       
40
       
40
       
-
       


     

       
41
       
41
       
-
       
      cat > "$HOME/.config/containers/registries.conf" <<'EOF'

     

       
42
       
42
       
-
       
      unqualified-search-registries = ["docker.io"]

     

       
43
       
43
       
-
       
      EOF

     

       
44
       
44
       
-
       


     

       
45
       
45
       
-
       
      cat > "$HOME/.config/containers/storage.conf" <<'EOF'

     

       
46
       
46
       
-
       
      [storage]

     

       
47
       
47
       
-
       
        driver = "vfs"

     

       
48
       
48
       
-
       
        graphroot = "$HOME/.local/share/containers/storage"

     

       
49
       
49
       
-
       
        runroot = "$HOME/.local/run/containers/storage"

     

       
50
       
50
       
-
       
      EOF

     

       
51
       
51
       
-
       


     

       
52
       
17
       
 
       
  - name: build image

     

       
53
       
18
       
 
       
    command: |

     

       
54
       
54
       
-
       
      buildah --storage-driver vfs bud --isolation chroot -t zenfyr/xcaddy:latest .

     

       
19
       
19
       
+
       
      executor \

     

       
20
       
20
       
+
       
        --context=git://tangled.org/did:web:melontini.me/xpost \

     

       
21
       
21
       
+
       
        --dockerfile=Containerfile-alpine \

     

       
22
       
22
       
+
       
        --no-push \

     

       
23
       
23
       
+
       
        --verbosity=info