| ADD alpine-minirootfs-3.21.3-aarch64.tar.gz / # buildkit |
| CMD ["/bin/sh"] |
| RUN /bin/sh -c apk add --no-cache ca-certificates openssh-client git # buildkit |
| RUN /bin/sh -c [ -e /etc/nsswitch.conf ] && grep '^hosts: files dns' /etc/nsswitch.conf # buildkit |
| RUN /bin/sh -c set -eux; addgroup -g 2375 -S docker # buildkit |
| ENV DOCKER_VERSION=27.5.1 |
| RUN /bin/sh -c set -eux; apkArch="$(apk --print-arch)"; case "$apkArch" in 'x86_64') url='https://download.docker.com/linux/static/stable/x86_64/docker-27.5.1.tgz'; ;; 'armhf') url='https://download.docker.com/linux/static/stable/armel/docker-27.5.1.tgz'; ;; 'armv7') url='https://download.docker.com/linux/static/stable/armhf/docker-27.5.1.tgz'; ;; 'aarch64') url='https://download.docker.com/linux/static/stable/aarch64/docker-27.5.1.tgz'; ;; *) echo >&2 "error: unsupported 'docker.tgz' architecture ($apkArch)"; exit 1 ;; esac; wget -O 'docker.tgz' "$url"; tar --extract --file docker.tgz --strip-components 1 --directory /usr/local/bin/ --no-same-owner 'docker/docker' ; rm docker.tgz; docker --version # buildkit |
| ENV DOCKER_BUILDX_VERSION=0.20.1 |
| RUN /bin/sh -c set -eux; apkArch="$(apk --print-arch)"; case "$apkArch" in 'x86_64') url='https://github.com/docker/buildx/releases/download/v0.20.1/buildx-v0.20.1.linux-amd64'; sha256='8c38f60308a895fa570f1410e453c5de11aafd65a99fa99965d96d24b6225a78'; ;; 'armhf') url='https://github.com/docker/buildx/releases/download/v0.20.1/buildx-v0.20.1.linux-arm-v6'; sha256='ba0929f3389db9c407c23debb7c02faaf5e1d09da48c94905f0759736a39ee2f'; ;; 'armv7') url='https://github.com/docker/buildx/releases/download/v0.20.1/buildx-v0.20.1.linux-arm-v7'; sha256='52672d1810f359685c171e85f7c96f71e32aa5f170d7841b32282a8e3ba16fce'; ;; 'aarch64') url='https://github.com/docker/buildx/releases/download/v0.20.1/buildx-v0.20.1.linux-arm64'; sha256='f7d867e9f1a3c00b32dd580f56594e229df05e3fb1b083b7099c91c2e7d2ce1e'; ;; 'ppc64le') url='https://github.com/docker/buildx/releases/download/v0.20.1/buildx-v0.20.1.linux-ppc64le'; sha256='7bee10600a6fb9f01cecae11e92e5b5271a732e5641580037b7f74fb84c033ea'; ;; 'riscv64') url='https://github.com/docker/buildx/releases/download/v0.20.1/buildx-v0.20.1.linux-riscv64'; sha256='f4cf6e6a6f27e571e5210cf6324b720c10548b0a0b59e0b1381b43fde0604c65'; ;; 's390x') url='https://github.com/docker/buildx/releases/download/v0.20.1/buildx-v0.20.1.linux-s390x'; sha256='93d547dcecaeddd6fe6cc384110b532bf204126ef4ee3aa9ad9765c813a1b809'; ;; *) echo >&2 "warning: unsupported 'docker-buildx' architecture ($apkArch); skipping"; exit 0 ;; esac; wget -O 'docker-buildx' "$url"; echo "$sha256 *"'docker-buildx' | sha256sum -c -; plugin='/usr/local/libexec/docker/cli-plugins/docker-buildx'; mkdir -p "$(dirname "$plugin")"; mv -vT 'docker-buildx' "$plugin"; chmod +x "$plugin"; docker buildx version # buildkit |
| ENV DOCKER_COMPOSE_VERSION=2.33.0 |
| RUN /bin/sh -c set -eux; apkArch="$(apk --print-arch)"; case "$apkArch" in 'x86_64') url='https://github.com/docker/compose/releases/download/v2.33.0/docker-compose-linux-x86_64'; sha256='6395dbb256db6ea28d5c6695bc9bc33866c07ad1c93792f8d85857f1c21c34ee'; ;; 'armhf') url='https://github.com/docker/compose/releases/download/v2.33.0/docker-compose-linux-armv6'; sha256='360976f92dbf4b575bb9beb2737952709c685d1441eebd90c7eeb63225a44ada'; ;; 'armv7') url='https://github.com/docker/compose/releases/download/v2.33.0/docker-compose-linux-armv7'; sha256='69c5e0b8764876ef7521b4274eba470d0d6686d3def74e2ba0c216bf2bf6f077'; ;; 'aarch64') url='https://github.com/docker/compose/releases/download/v2.33.0/docker-compose-linux-aarch64'; sha256='03a42a0fc0614ffc3c9ebca521cab75e02c427b68e45e3f6867d9510b9a28818'; ;; 'ppc64le') url='https://github.com/docker/compose/releases/download/v2.33.0/docker-compose-linux-ppc64le'; sha256='3e1c3ba91bbf27c0966ad384a96dbecb867c2cbda4fde929165ca35b99075023'; ;; 'riscv64') url='https://github.com/docker/compose/releases/download/v2.33.0/docker-compose-linux-riscv64'; sha256='dffcdfbc88189a97c0000d1995476fa6712396d1472d6fbe24bfb424f46da7c3'; ;; 's390x') url='https://github.com/docker/compose/releases/download/v2.33.0/docker-compose-linux-s390x'; sha256='3f809fd846e3e38bc3dcb88546f88141a68e1bb4578a74c71ed5b563f95a45bb'; ;; *) echo >&2 "warning: unsupported 'docker-compose' architecture ($apkArch); skipping"; exit 0 ;; esac; wget -O 'docker-compose' "$url"; echo "$sha256 *"'docker-compose' | sha256sum -c -; plugin='/usr/local/libexec/docker/cli-plugins/docker-compose'; mkdir -p "$(dirname "$plugin")"; mv -vT 'docker-compose' "$plugin"; chmod +x "$plugin"; ln -sv "$plugin" /usr/local/bin/; docker-compose --version; docker compose version # buildkit |
| COPY modprobe.sh /usr/local/bin/modprobe # buildkit |
| COPY docker-entrypoint.sh /usr/local/bin/ # buildkit |
| ENV DOCKER_TLS_CERTDIR=/certs |
| RUN /bin/sh -c mkdir /certs /certs/client && chmod 1777 /certs /certs/client # buildkit |
| ENTRYPOINT ["docker-entrypoint.sh"] |
| CMD ["sh"] |
| RUN /bin/sh -c set -eux; apk add --no-cache btrfs-progs e2fsprogs e2fsprogs-extra git ip6tables iptables openssl pigz shadow-uidmap xfsprogs xz zfs ; # buildkit |
| RUN /bin/sh -c set -eux; apk add --no-cache iptables-legacy; mkdir -p /usr/local/sbin/.iptables-legacy; for f in iptables iptables-save iptables-restore ip6tables ip6tables-save ip6tables-restore ; do b="$(command -v "${f/tables/tables-legacy}")"; "$b" --version; ln -svT "$b" "/usr/local/sbin/.iptables-legacy/$f"; done; export PATH="/usr/local/sbin/.iptables-legacy:$PATH"; iptables --version | grep legacy # buildkit |
| RUN /bin/sh -c set -eux; addgroup -S dockremap; adduser -S -G dockremap dockremap; echo 'dockremap:165536:65536' >> /etc/subuid; echo 'dockremap:165536:65536' >> /etc/subgid # buildkit |
| RUN /bin/sh -c set -eux; apkArch="$(apk --print-arch)"; case "$apkArch" in 'x86_64') url='https://download.docker.com/linux/static/stable/x86_64/docker-27.5.1.tgz'; ;; 'armhf') url='https://download.docker.com/linux/static/stable/armel/docker-27.5.1.tgz'; ;; 'armv7') url='https://download.docker.com/linux/static/stable/armhf/docker-27.5.1.tgz'; ;; 'aarch64') url='https://download.docker.com/linux/static/stable/aarch64/docker-27.5.1.tgz'; ;; *) echo >&2 "error: unsupported 'docker.tgz' architecture ($apkArch)"; exit 1 ;; esac; wget -O 'docker.tgz' "$url"; tar --extract --file docker.tgz --strip-components 1 --directory /usr/local/bin/ --no-same-owner --exclude 'docker/docker' ; rm docker.tgz; dockerd --version; containerd --version; ctr --version; runc --version # buildkit |
| ENV DIND_COMMIT=c43aa0b6aa7c88343f0951ba9a39c69aa51c54ef |
| RUN /bin/sh -c set -eux; wget -O /usr/local/bin/dind "https://raw.githubusercontent.com/docker/docker/${DIND_COMMIT}/hack/dind"; chmod +x /usr/local/bin/dind # buildkit |
| COPY dockerd-entrypoint.sh /usr/local/bin/ # buildkit |
| VOLUME [/var/lib/docker] |
| EXPOSE map[2375/tcp:{} 2376/tcp:{}] |
| ENTRYPOINT ["dockerd-entrypoint.sh"] |
| CMD [] |
| USER root |
| RUN /bin/sh -c apk add --no-cache git bash supervisor python3 py3-pip # buildkit |
| RUN /bin/sh -c pip3 install --break-system-packages supervisord-dependent-startup # buildkit |
| COPY /opt/src/act_runner/act_runner /usr/local/bin/act_runner # buildkit |
| COPY /opt/src/act_runner/scripts/supervisord.conf /etc/supervisord.conf # buildkit |
| COPY /opt/src/act_runner/scripts/run.sh /opt/act/run.sh # buildkit |
| COPY /opt/src/act_runner/scripts/rootless.sh /opt/act/rootless.sh # buildkit |
| COPY /root / # buildkit |
| RUN /bin/sh -c chmod +x /healthcheck.sh # buildkit |
| ENV DOCKER_PRUNE_INTERVAL=0 0 * * * |
| ENV TINI_SUBREAPER=true |
| RUN /bin/sh -c echo "${DOCKER_PRUNE_INTERVAL} echo Pruning docker volumes && docker volume prune -af" > .crontab.txt && crontab .crontab.txt # buildkit |
| RUN /bin/sh -c sed -i '/\[supervisord\]/a user=root' /etc/supervisord.conf # buildkit |
| HEALTHCHECK &{["CMD-SHELL" "\"/healthcheck.sh\""] "30s" "15s" "30s" "0s" '\x03'} |
| ENTRYPOINT ["/usr/bin/supervisord" "-c" "/etc/supervisord.conf"] |
