humocs-man/fluffy-pancake
1
0
Fork 0
Code Issues 1 Pull Requests Actions Packages Projects Releases Wiki Activity

Containerfile aktualisiert

Browse Source
This commit is contained in:
humocs-man
2026-09-05 17:48:12 +00:00
parent 2170a26645
commit 7e867757c4
1 changed files with 6 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
Containerfile
+6 -2
View File
@@ -75,12 +75,16 @@ RUN --mount=type=bind,from=build-ctx,source=/build/50-prepare-flatpak-for-bazaar
# 1. Kopiere die Filesystem-Fixes (tmpfiles.d, Vendor-Default) # 1. Kopiere die Filesystem-Fixes (tmpfiles.d, Vendor-Default)
COPY configs/bootc-fix.conf /usr/lib/tmpfiles.d/bootc-fix.conf COPY configs/bootc-fix.conf /usr/lib/tmpfiles.d/bootc-fix.conf
# 1b. Container-Policy (Default aus /usr/etc, kein Host-Override nötig) # 1b. Container-Policy & Registry Auth für bootc
# sigstoreSigned-Pflicht für eigenes Image, Public-Registries explizit erlaubt # sigstoreSigned-Pflicht für eigenes Image, Public-Registries explizit erlaubt
COPY configs/containers/policy.json /etc/containers/policy.json COPY configs/containers/policy.json /etc/containers/policy.json
COPY cosign.pub /etc/pki/containers/cosign.pub COPY cosign.pub /etc/pki/containers/cosign.pub
COPY configs/auth.json /etc/ostree/auth.json
RUN chmod 0644 /etc/containers/policy.json /etc/pki/containers/cosign.pub && \ RUN chmod 0644 /etc/containers/policy.json /etc/pki/containers/cosign.pub && \
python3 -m json.tool /etc/containers/policy.json > /dev/null chmod 0600 /etc/ostree/auth.json && \
python3 -m json.tool /etc/containers/policy.json > /dev/null && \
python3 -m json.tool /etc/ostree/auth.json > /dev/null
# 2. Kopiere die Systemd-Overrides als Vendor-Drop-ins (kein /etc/-Override im Image) # 2. Kopiere die Systemd-Overrides als Vendor-Drop-ins (kein /etc/-Override im Image)
COPY configs/bootc-timer-override.conf /usr/lib/systemd/system/bootc-fetch-apply-updates.timer.d/override.conf COPY configs/bootc-timer-override.conf /usr/lib/systemd/system/bootc-fetch-apply-updates.timer.d/override.conf