|
| 1 | +# {{- if env.Getenv "BREW_NIGHTLY_RELEASE_VERSION" "" -}} |
| 2 | +# Note: This comment makes templating add a new line before the code |
| 3 | +FROM localhost/rhel102-test-agent:latest |
| 4 | + |
| 5 | +# Build arguments |
| 6 | +ARG USHIFT_RPM_REPO_NAME=microshift-brew |
| 7 | +ARG USHIFT_RPM_REPO_PATH=/tmp/$USHIFT_RPM_REPO_NAME |
| 8 | + |
| 9 | +# Copy the MicroShift repository contents |
| 10 | +COPY ./rpm-repos/$USHIFT_RPM_REPO_NAME $USHIFT_RPM_REPO_PATH |
| 11 | + |
| 12 | +# Copy repository configuration |
| 13 | +COPY ./bootc-images/$USHIFT_RPM_REPO_NAME.repo ./bootc-images/microshift-fast-datapath-rhel9.repo ./bootc-images/microshift-rhocp-y.repo \ |
| 14 | + /etc/yum.repos.d/ |
| 15 | + |
| 16 | +# Print repository configuration contents. |
| 17 | +# Install MicroShift, test agent and cleanup. |
| 18 | +RUN dnf repoinfo --enabled && \ |
| 19 | + dnf install -y firewalld systemd-resolved \ |
| 20 | + {{ range (env.Getenv "MICROSHIFT_MANDATORY_RPMS" | strings.Split " ") -}} |
| 21 | + "{{ . }}-{{ env.Getenv "BREW_NIGHTLY_RELEASE_VERSION" }}" \ |
| 22 | + {{ end -}} |
| 23 | + {{ range (env.Getenv "MICROSHIFT_OPTIONAL_RPMS" | strings.Split " ") -}} |
| 24 | + "{{ . }}-{{ env.Getenv "BREW_NIGHTLY_RELEASE_VERSION" }}" \ |
| 25 | + {{ end -}} |
| 26 | + {{ if and (env.Getenv "UNAME_M" "") (eq "x86_64" .Env.UNAME_M) -}} |
| 27 | + {{ range (env.Getenv "MICROSHIFT_X86_64_RPMS" | strings.Split " ") -}} |
| 28 | + "{{ . }}-{{ env.Getenv "BREW_NIGHTLY_RELEASE_VERSION" }}" \ |
| 29 | + {{ end -}} |
| 30 | + {{ end -}} |
| 31 | + && \ |
| 32 | + systemctl enable microshift microshift-test-agent && \ |
| 33 | + rm -vf /etc/yum.repos.d/microshift-*.repo && \ |
| 34 | + rm -rvf $USHIFT_RPM_REPO_PATH && \ |
| 35 | + dnf clean all |
| 36 | + |
| 37 | +# Configure firewall |
| 38 | +RUN firewall-offline-cmd --zone=public --add-port=22/tcp && \ |
| 39 | + firewall-offline-cmd --zone=trusted --add-source=10.42.0.0/16 && \ |
| 40 | + firewall-offline-cmd --zone=trusted --add-source=169.254.169.1 && \ |
| 41 | + firewall-offline-cmd --zone=trusted --add-source=fd01::/48 && \ |
| 42 | + firewall-offline-cmd --zone=public --add-port=80/tcp && \ |
| 43 | + firewall-offline-cmd --zone=public --add-port=443/tcp && \ |
| 44 | + firewall-offline-cmd --zone=public --add-port=5353/udp && \ |
| 45 | + firewall-offline-cmd --zone=public --add-port=6443/tcp && \ |
| 46 | + firewall-offline-cmd --zone=public --add-port=30000-32767/tcp && \ |
| 47 | + firewall-offline-cmd --zone=public --add-port=30000-32767/udp |
| 48 | + |
| 49 | +# Prepare system for testing Generic Device Plugin |
| 50 | +COPY --chmod=755 ./bootc-images/build-serialsim.sh /tmp/build-serialsim.sh |
| 51 | +RUN /tmp/build-serialsim.sh && rm -f /tmp/build-serialsim.sh |
| 52 | +# {{- end -}} |
0 commit comments