.gitea/workflows/redhat_build.yml aktualisiert
This commit is contained in:
@@ -86,26 +86,26 @@ jobs:
|
|||||||
run: |
|
run: |
|
||||||
sudo apt-get update && sudo apt-get install -y buildah fuse-overlayfs
|
sudo apt-get update && sudo apt-get install -y buildah fuse-overlayfs
|
||||||
|
|
||||||
# 5. Image direkt mit Buildah bauen (erzwingt --isolation chroot)
|
# 5. Image direkt mit Buildah bauen (nutzt Bash-Array gegen Word-Splitting)
|
||||||
- name: Build Image with Buildah
|
- name: Build Image with Buildah
|
||||||
run: |
|
run: |
|
||||||
# Systemweite Containers-Konfig auf chroot festlegen
|
# Systemweite Containers-Konfig auf chroot festlegen
|
||||||
sudo mkdir -p /etc/containers
|
sudo mkdir -p /etc/containers
|
||||||
printf '[containers]\nisolation = "chroot"\n' | sudo tee /etc/containers/containers.conf
|
printf '[containers]\nisolation = "chroot"\n' | sudo tee /etc/containers/containers.conf
|
||||||
|
|
||||||
# Metadata-Labels sauber in --label Argumente umwandeln
|
# Metadata-Labels sauber in ein Bash-Array einlesen (schützt Leerzeichen)
|
||||||
LABEL_FLAGS=""
|
BUILD_ARGS=()
|
||||||
while IFS= read -r line; do
|
while IFS= read -r line; do
|
||||||
if [ -n "$line" ]; then
|
if [ -n "$line" ]; then
|
||||||
LABEL_FLAGS="${LABEL_FLAGS} --label ${line}"
|
BUILD_ARGS+=("--label" "$line")
|
||||||
fi
|
fi
|
||||||
done <<< "${{ steps.metadata.outputs.labels }}"
|
done <<< "${{ steps.metadata.outputs.labels }}"
|
||||||
|
|
||||||
# Bildah mit explizitem --isolation chroot ausführen
|
# Buildah ausführen
|
||||||
buildah bud \
|
buildah bud \
|
||||||
--isolation chroot \
|
--isolation chroot \
|
||||||
--format oci \
|
--format oci \
|
||||||
${LABEL_FLAGS} \
|
"${BUILD_ARGS[@]}" \
|
||||||
-t "${{ env.IMAGE_NAME }}:${{ env.IMAGE_TAG }}" \
|
-t "${{ env.IMAGE_NAME }}:${{ env.IMAGE_TAG }}" \
|
||||||
-f ./Containerfile .
|
-f ./Containerfile .
|
||||||
|
|
||||||
|
|||||||
Reference in New Issue
Block a user