mirror of
https://github.com/aljazceru/kata-containers.git
synced 2026-01-05 15:34:21 +01:00
df0cc78e57
Although I don't like the duplication introduced here, it's (at least for now) way cleaner to have a specific daemonset for the Confidential Containers effort. As soon as we have all the bits and pieces upstreamed (kernel, QEMU, and specific dependencies for each one of the TEEs), we'll be easily able to get rid of this one. However, for now, focusing on this different set of files will make our lives easier. This new daemonset includes the configurations needed for containerd in order to use the `cc` specific `cri_handler`, which is not and will not be upstream on the containerd side. Note, CRI-O is **not** supported for now. Fixes: #4620 Signed-off-by: Fabiano Fidêncio <fabiano.fidencio@intel.com>
31 lines
1.1 KiB
Docker
31 lines
1.1 KiB
Docker
# Copyright Intel Corporation, 2022 IBM Corp.
|
|
#
|
|
# SPDX-License-Identifier: Apache-2.0
|
|
|
|
# Specify alternative base image, e.g. clefos for s390x
|
|
ARG IMAGE
|
|
FROM ${IMAGE:-registry.centos.org/centos}:7
|
|
ARG KATA_ARTIFACTS=./kata-static.tar.xz
|
|
ARG DESTINATION=/opt/kata-artifacts
|
|
|
|
COPY ${KATA_ARTIFACTS} ${WORKDIR}
|
|
|
|
RUN \
|
|
yum -y update && \
|
|
yum -y install xz && \
|
|
yum clean all && \
|
|
mkdir -p ${DESTINATION} && \
|
|
tar xvf ${KATA_ARTIFACTS} -C ${DESTINATION} && \
|
|
rm ${WORKDIR}/${KATA_ARTIFACTS}
|
|
|
|
# hadolint will deny echo -e, heredocs don't work in Dockerfiles, shell substitution doesn't work with $'...'
|
|
RUN \
|
|
echo "[kubernetes]" >> /etc/yum.repos.d/kubernetes.repo && \
|
|
echo "name=Kubernetes" >> /etc/yum.repos.d/kubernetes.repo && \
|
|
echo "baseurl=https://packages.cloud.google.com/yum/repos/kubernetes-el7-$(uname -m)" >> /etc/yum.repos.d/kubernetes.repo && \
|
|
echo "gpgkey=https://packages.cloud.google.com/yum/doc/yum-key.gpg https://packages.cloud.google.com/yum/doc/rpm-package-key.gpg" >> /etc/yum.repos.d/kubernetes.repo && \
|
|
yum -y install kubectl && \
|
|
yum clean all
|
|
|
|
COPY scripts ${DESTINATION}/scripts
|