45 lines
1.6 KiB
Docker
45 lines
1.6 KiB
Docker
# Containerfile
|
|
# podman image build -q -t debian:podman-trixie -f Containerfile .
|
|
# podman run -q -it --rm --device /dev/fuse debian:podman-trixie
|
|
# in development container e.g.
|
|
FROM debian:trixie
|
|
|
|
ENV DEBIAN_FRONTEND="noninteractive"
|
|
|
|
RUN apt-get update && \
|
|
apt-get install -y --no-install-recommends podman podman-compose \
|
|
fuse-overlayfs slirp4netns uidmap iptables aardvark-dns nftables ca-certificates sudo \
|
|
git ssh && \
|
|
apt-get upgrade -y
|
|
|
|
RUN useradd webgui -s /bin/bash && \
|
|
echo "webgui:1001:64535" > /etc/subuid && \
|
|
echo "webgui:1001:64535" > /etc/subgid
|
|
|
|
ARG _REPO_URL="https://raw.githubusercontent.com/containers/image_build/refs/heads/main/podman"
|
|
ADD $_REPO_URL/containers.conf /etc/containers/containers.conf
|
|
ADD $_REPO_URL/podman-containers.conf /home/webgui/.config/containers/containers.conf
|
|
|
|
RUN mkdir -p /home/webgui/.local/share/containers && \
|
|
chown webgui:webgui -R /home/webgui && \
|
|
chmod 0644 /etc/containers/containers.conf
|
|
|
|
VOLUME /home/webgui/.local/share/containers
|
|
|
|
# Replace setuid bits by proper file capabilities for uidmap binaries.
|
|
# See <https://github.com/containers/podman/discussions/19931>.
|
|
RUN apt-get install -y libcap2-bin && \
|
|
chmod 0755 /usr/bin/newuidmap /usr/bin/newgidmap && \
|
|
setcap cap_setuid=ep /usr/bin/newuidmap && \
|
|
setcap cap_setgid=ep /usr/bin/newgidmap && \
|
|
apt-get autoremove --purge -y libcap2-bin
|
|
|
|
ENV _CONTAINERS_USERNS_CONFIGURED=""
|
|
|
|
RUN SNIPPET="export PROMPT_COMMAND='history -a' && \
|
|
export HISTFILE=/commandhistory/.bash_history" && \
|
|
echo "$SNIPPET" >> "/root/.bashrc"
|
|
|
|
#USER webgui
|
|
#WORKDIR /home/webgui
|
|
|