guix-builder/Dockerfile

FROM scratch
ADD guix-tarball-pack.tar.gz /guix-builder
ADD links.tar.gz /
ADD passwd /etc/passwd
ADD passwd /tmp/proot/delete-me

ENV PROOT_TMP_DIR=/tmp/proot
RUN rm /tmp/proot/delete-me

VOLUME /var/guix/daemon-socket/socket /gnu/store /etc/ssl
ENTRYPOINT ["/guix-builder/bin/bash"]
CI: Cleanup Dockerfile and Makefile (following 5764deb) 2023-12-29 16:30:17 +00:00			`FROM scratch`
Initial commit 2023-07-15 20:37:59 +00:00			`ADD guix-tarball-pack.tar.gz /guix-builder`
Ensure /bin->/guix-builder/bin exists within the container 2023-12-29 01:55:50 +00:00			`ADD links.tar.gz /`
Place /etc/passwd file inside the container for root user This is needed because ssh requires the user that runs it to exist in /etc/passwd. 2023-12-29 17:03:48 +00:00			`ADD passwd /etc/passwd`
Correct hidden dependency on host /gnu/store Unbeknownst to me, the docker image produced by previous versions of guix-builder actually had a hidden dependency on the hosts /gnu/store. I have not been able to fully characterize it, but the following proves it to be true. This fails with an error 139, segfault: docker run -it guix-builder:latest However it succeeds when provided the hosts guix store: docker run -it -v /gnu/store:/gnu/store:ro guix-builder:latest By using GUIX_EXECUTION_ENGINE=proot (which is implied by the '-RR' option to 'guix pack'), we avoid the segfaults and hidden dependency on the hosts /gnu/store. Sadly using proot will have performance impacts, but I'm not sure yet to what extent this will impact my usecase. 2023-12-30 02:32:46 +00:00			`ADD passwd /tmp/proot/delete-me`

			`ENV PROOT_TMP_DIR=/tmp/proot`
			`RUN rm /tmp/proot/delete-me`
Initial commit 2023-07-15 20:37:59 +00:00
			`VOLUME /var/guix/daemon-socket/socket /gnu/store /etc/ssl`
			`ENTRYPOINT ["/guix-builder/bin/bash"]`