tests/Dockerfile.fedora - master - githubmirror/rpm

tests/Dockerfile.fedora
124 строки3 KB
Jakub Jelen
tests: Update tests to work with PQC-capable rpm-sequoia
21 июл 2026, 12:04
21 июл 2026, 12:04a8f0192
FROM quay.io/fedora/fedora:44 AS base
LABEL com.github.containers.toolbox="true"
MAINTAINER rpm-maint@lists.rpm.org

RUN echo -e "deltarpm=0\ninstall_weak_deps=0\ntsflags=nodocs" >> /etc/dnf/dnf.conf
RUN rpm --quiet -q fedora-repos-modular && rpm -e fedora-repos-modular ||:
RUN sed -i -e "s:^enabled=.$:enabled=0:g" /etc/yum.repos.d/*openh264.repo
# updates disabled for a stable environment
RUN sed -i -e "s:^enabled=.$:enabled=0:g" /etc/yum.repos.d/*updates*.repo
# dummy for controlling per-repo gpgcheck via Semaphore setup
RUN sed -i -e "s:^gpgcheck=.$:gpgcheck=1:g" /etc/yum.repos.d/*.repo
RUN dnf -y install \
  autoconf \
  bubblewrap \
  cmake \
  gettext-devel \
  daemonize \
  debugedit \
  doxygen \
  make \
  git-core \
  glibc-gconv-extra \
  zlib-devel \
  bzip2-devel \
  xz-devel \
  libzstd-devel \
  elfutils-libelf-devel \
  elfutils-devel \
  openssl-devel \
  libgcrypt-devel \
  rpm-sequoia-devel \
  file-devel \
  popt-devel \
  kryoptic \
  pkcs11-provider \
  opensc \
  libarchive-devel \
  sqlite-devel \
  libselinux-devel \
  ima-evm-utils-devel \
  libcap-devel \
  libacl-devel \
  audit-libs-devel \
  lua-devel readline-devel \
  python3-devel \
  dbus-devel \
  which \
  elfutils binutils \
  findutils sed grep gawk diffutils file patch \
  tar unzip gzip bzip2 cpio xz 7zip 7zip-standalone \
  pkgconfig \
  /usr/bin/systemd-sysusers \
  gdb-headless \
  dwz \
  fsverity-utils fsverity-utils-devel \
  scdoc \
  scd2html \
  sequoia-sq \
  nss-altfiles
# If updates to specific packages are needed, do it here
RUN dnf -y --enablerepo=updates install "rpm-sequoia-devel >= 1.10.2-4"

# Install some development tools
RUN dnf -y install \
    flatpak-spawn \
    gdb \
    strace \
    valgrind

# Install the requested toolchain
ARG TOOLCHAIN=gcc
RUN case "$TOOLCHAIN" in \
        gcc) \
            dnf -y install \
                gcc \
                gcc-c++ \
                libasan \
                libubsan \
        ;; \
        clang) \
            dnf -y install \
                clang \
                compiler-rt \
                libomp-devel \
        ;; \
    esac

RUN dnf clean all

# Install podman shim for use in toolbox containers
RUN echo -e "#!/bin/bash\nexec flatpak-spawn --host podman \"\$@\"" \
    > /usr/local/bin/podman
RUN chmod +x /usr/local/bin/podman

# Workaround for pkgconf(1)'s unlisted dependency on rpm.
# This is needed for cmake to work without an rpm installation.
RUN ln -sf $(rpm --eval '%{_target_platform}%{?_gnu}')-pkg-config \
           /usr/bin/pkg-config
# Workaround for nss-altfiles overriding %_passwd_path and %_group_path
# https://bugzilla.redhat.com/show_bug.cgi?id=2476417
RUN rm -f /usr/lib/rpm/macros.d/macros.altfiles

# Self-destruct stock rpm
RUN rpm -e --nodeps --nodb \
	rpm \
	rpm-libs \
	rpm-sign-libs \
	rpm-build-libs \
	rpm-plugin-ima

WORKDIR /
CMD /bin/bash

FROM base AS full
ARG TOOLCHAIN=gcc

WORKDIR /srv/rpm
COPY . .

WORKDIR /srv/build
RUN cmake --preset dev-${TOOLCHAIN} -DMKTREE_BACKEND=rootfs ../rpm
RUN make -j$(nproc) tree

RUN rm -rf /srv/{rpm,build}