guix-builder/Dockerfile

FROM scratch
ADD guix-tarball-pack.tar.gz /guix-builder
ADD links.tar.gz /
ADD passwd /etc/passwd
ADD passwd /tmp/proot/delete-me

ENV SSL_CERT_DIR=/etc/ssl/certs
ENV SSL_CERT_FILE=/etc/ssl/certs/ca-certificates.crt
ENV GUIX_LOCPATH=/guix-builder/lib/locale
ENV PROOT_TMP_DIR=/tmp/proot
RUN rm /tmp/proot/delete-me

VOLUME /var/guix/daemon-socket/socket /gnu/store /etc/ssl
ENTRYPOINT ["/guix-builder/bin/bash"]
CI: Cleanup Dockerfile and Makefile (following 5764deb) 2023-12-29 16:30:17 +00:00			`FROM scratch`
Initial commit 2023-07-15 20:37:59 +00:00			`ADD guix-tarball-pack.tar.gz /guix-builder`
Ensure /bin->/guix-builder/bin exists within the container 2023-12-29 01:55:50 +00:00			`ADD links.tar.gz /`
Place /etc/passwd file inside the container for root user This is needed because ssh requires the user that runs it to exist in /etc/passwd. 2023-12-29 17:03:48 +00:00			`ADD passwd /etc/passwd`
Correct hidden dependency on host /gnu/store Unbeknownst to me, the docker image produced by previous versions of guix-builder actually had a hidden dependency on the hosts /gnu/store. I have not been able to fully characterize it, but the following proves it to be true. This fails with an error 139, segfault: docker run -it guix-builder:latest However it succeeds when provided the hosts guix store: docker run -it -v /gnu/store:/gnu/store:ro guix-builder:latest By using GUIX_EXECUTION_ENGINE=proot (which is implied by the '-RR' option to 'guix pack'), we avoid the segfaults and hidden dependency on the hosts /gnu/store. Sadly using proot will have performance impacts, but I'm not sure yet to what extent this will impact my usecase. 2023-12-30 02:32:46 +00:00			`ADD passwd /tmp/proot/delete-me`

Dockerfile: Allow ssl to be used 2023-12-31 20:01:01 +00:00			`ENV SSL_CERT_DIR=/etc/ssl/certs`
			`ENV SSL_CERT_FILE=/etc/ssl/certs/ca-certificates.crt`
Dockerfile: Set the env var GUIX_LOCALES to the now installed locales * Makefile: Provide a symlink for the profiles lib/locale 2023-12-31 19:20:47 +00:00			`ENV GUIX_LOCPATH=/guix-builder/lib/locale`
Correct hidden dependency on host /gnu/store Unbeknownst to me, the docker image produced by previous versions of guix-builder actually had a hidden dependency on the hosts /gnu/store. I have not been able to fully characterize it, but the following proves it to be true. This fails with an error 139, segfault: docker run -it guix-builder:latest However it succeeds when provided the hosts guix store: docker run -it -v /gnu/store:/gnu/store:ro guix-builder:latest By using GUIX_EXECUTION_ENGINE=proot (which is implied by the '-RR' option to 'guix pack'), we avoid the segfaults and hidden dependency on the hosts /gnu/store. Sadly using proot will have performance impacts, but I'm not sure yet to what extent this will impact my usecase. 2023-12-30 02:32:46 +00:00			`ENV PROOT_TMP_DIR=/tmp/proot`
			`RUN rm /tmp/proot/delete-me`
Initial commit 2023-07-15 20:37:59 +00:00
			`VOLUME /var/guix/daemon-socket/socket /gnu/store /etc/ssl`
			`ENTRYPOINT ["/guix-builder/bin/bash"]`