mirror of
https://github.com/jessfraz/dockerfiles.git
synced 2025-12-10 15:02:41 +01:00
create repro for bug in runc
Signed-off-by: Jess Frazelle <acidburn@microsoft.com>
This commit is contained in:
33
runc-rootless/Dockerfile
Normal file
33
runc-rootless/Dockerfile
Normal file
@@ -0,0 +1,33 @@
|
||||
FROM golang:1.9-alpine AS runc
|
||||
ARG RUNC_VERSION=9f9c96235cc97674e935002fc3d78361b696a69e
|
||||
RUN apk add --no-cache \
|
||||
bash \
|
||||
curl \
|
||||
g++ \
|
||||
git \
|
||||
libseccomp-dev \
|
||||
linux-headers \
|
||||
make
|
||||
RUN git clone https://github.com/jessfraz/runc.git "$GOPATH/src/github.com/opencontainers/runc" \
|
||||
&& cd "$GOPATH/src/github.com/opencontainers/runc" \
|
||||
&& git checkout -q "demo-rootless" \
|
||||
&& make static BUILDTAGS="seccomp" EXTRA_FLAGS="-buildmode pie" EXTRA_LDFLAGS="-extldflags \\\"-fno-PIC -static\\\"" \
|
||||
&& mv runc /usr/bin/runc
|
||||
|
||||
FROM alpine
|
||||
MAINTAINER Jessica Frazelle <jess@linux.com>
|
||||
RUN apk add --no-cache \
|
||||
bash \
|
||||
shadow \
|
||||
shadow-uidmap \
|
||||
strace
|
||||
COPY --from=runc /usr/bin/runc /usr/bin/runc
|
||||
COPY start.sh /usr/bin/start.sh
|
||||
ENV HOME /home/user
|
||||
RUN useradd --create-home --home-dir $HOME user
|
||||
COPY busybox.tar /home/user/busybox.tar
|
||||
RUN chown -R user:user $HOME /run /tmp
|
||||
USER user
|
||||
WORKDIR $HOME
|
||||
|
||||
CMD ["start.sh"]
|
||||
Reference in New Issue
Block a user