Implement debian local build
This commit is contained in:
@@ -21,4 +21,16 @@ jobs:
|
||||
run: docker tag debian:latest docker.hyprnet/debian-vanilla:latest
|
||||
|
||||
- name: Push image
|
||||
run: docker push docker.hyprnet/debian-vanilla:latest
|
||||
run: docker push docker.hyprnet/debian-vanilla:latest
|
||||
|
||||
debian-local:
|
||||
runs-on: ubuntu-latest
|
||||
steps:
|
||||
- name: Log into Docker Registry
|
||||
run: docker login docker.hyprnet -u ${{ secrets.DOCKER_USERNAME }} -p ${{ secrets.DOCKER_PASSWORD }}
|
||||
|
||||
- name: Build Debian local
|
||||
run: docker build -t docker.hyprnet/debian-local -f debian-local.dockerfile dockerfiles
|
||||
|
||||
- name: Push image
|
||||
run: docker push docker.hyprnet/debian-local:latest
|
||||
@@ -0,0 +1,30 @@
|
||||
FROM debian:latest
|
||||
|
||||
# Copy CA certificate first
|
||||
COPY ./tools/step-ca.crt /usr/local/share/ca-certificates/step-ca.crt
|
||||
|
||||
# Install ca-certificates and add custom CA using default repos
|
||||
RUN apt-get update && \
|
||||
apt-get install -y --no-install-recommends ca-certificates curl && \
|
||||
update-ca-certificates
|
||||
|
||||
# Install keyrings
|
||||
RUN curl -fsSL https://scripts.mirror.ygg/data/keyrings/adoptium.gpg -o /etc/apt/keyrings/adoptium.gpg && \
|
||||
curl -fsSL https://scripts.mirror.ygg/data/keyrings/docker.asc -o /etc/apt/keyrings/docker.asc && \
|
||||
curl -fsSL https://scripts.mirror.ygg/data/keyrings/smallstep.asc -o /etc/apt/keyrings/smallstep.asc && \
|
||||
curl -fsSL https://scripts.mirror.ygg/data/keyrings/tailscale-archive-keyring.gpg -o /etc/apt/keyrings/tailscale-archive-keyring.gpg && \
|
||||
curl -fsSL https://scripts.mirror.ygg/data/keyrings/libnvidia.gpg -o /etc/apt/keyrings/libnvidia.gpg
|
||||
|
||||
# Clean everything up
|
||||
RUN apt purge ca-certificates curl && \
|
||||
apt-get clean && \
|
||||
rm -rf /var/lib/apt/lists/* /tmp/*
|
||||
|
||||
# Remove default sources and switch to custom repos (cert is now trusted)
|
||||
RUN rm -rf /etc/apt/sources.list.d /etc/apt/sources.list
|
||||
COPY ./tools/local-sources.list /etc/apt/sources.list
|
||||
|
||||
# Verify apt works with custom repos
|
||||
RUN apt-get update && \
|
||||
apt-get clean && \
|
||||
rm -rf /var/lib/apt/lists/* /tmp/*
|
||||
@@ -0,0 +1,30 @@
|
||||
FROM debian:latest
|
||||
|
||||
# Copy CA certificate first
|
||||
COPY ./tools/step-ca.crt /usr/local/share/ca-certificates/step-ca.crt
|
||||
|
||||
# Install ca-certificates and add custom CA using default repos
|
||||
RUN apt-get update && \
|
||||
apt-get install -y --no-install-recommends ca-certificates curl && \
|
||||
update-ca-certificates
|
||||
|
||||
# Install keyrings
|
||||
RUN curl -fsSL https://scripts.mirror.ygg/data/keyrings/adoptium.gpg -o /etc/apt/keyrings/adoptium.gpg && \
|
||||
curl -fsSL https://scripts.mirror.ygg/data/keyrings/docker.asc -o /etc/apt/keyrings/docker.asc && \
|
||||
curl -fsSL https://scripts.mirror.ygg/data/keyrings/smallstep.asc -o /etc/apt/keyrings/smallstep.asc && \
|
||||
curl -fsSL https://scripts.mirror.ygg/data/keyrings/tailscale-archive-keyring.gpg -o /etc/apt/keyrings/tailscale-archive-keyring.gpg && \
|
||||
curl -fsSL https://scripts.mirror.ygg/data/keyrings/libnvidia.gpg -o /etc/apt/keyrings/libnvidia.gpg
|
||||
|
||||
# Clean everything up
|
||||
RUN apt purge ca-certificates curl && \
|
||||
apt-get clean && \
|
||||
rm -rf /var/lib/apt/lists/* /tmp/*
|
||||
|
||||
# Remove default sources and switch to custom repos (cert is now trusted)
|
||||
RUN rm -rf /etc/apt/sources.list.d /etc/apt/sources.list
|
||||
COPY ./tools/ygg-sources.list /etc/apt/sources.list
|
||||
|
||||
# Verify apt works with custom repos
|
||||
RUN apt-get update && \
|
||||
apt-get clean && \
|
||||
rm -rf /var/lib/apt/lists/* /tmp/*
|
||||
@@ -0,0 +1,10 @@
|
||||
deb [trusted=yes] https://debian.hyprnet/mirror/deb.debian.org/debian/ trixie main contrib non-free non-free-firmware
|
||||
deb-src [trusted=yes] https://debian.hyprnet/mirror/deb.debian.org/debian/ trixie main contrib non-free non-free-firmware
|
||||
deb [trusted=yes] https://debian.hyprnet/mirror/security.debian.org/debian-security trixie-security main contrib non-free non-free-firmware
|
||||
deb-src [trusted=yes] https://debian.hyprnet/mirror/security.debian.org/debian-security trixie-security main contrib non-free non-free-firmware
|
||||
deb [trusted=yes] https://debian.hyprnet/mirror/deb.debian.org/debian/ trixie-updates main contrib non-free non-free-firmware
|
||||
deb-src [trusted=yes] https://debian.hyprnet/mirror/deb.debian.org/debian/ trixie-updates main contrib non-free non-free-firmware
|
||||
deb [trusted=yes signed-by=/etc/apt/keyrings/docker.asc arch=amd64] https://debian.hyprnet/mirror/download.docker.com/linux/debian trixie stable
|
||||
deb [trusted=yes signed-by=/etc/apt/keyrings/tailscale-archive-keyring.gpg arch=amd64] https://debian.hyprnet/mirror/pkgs.tailscale.com/stable/debian trixie main
|
||||
deb [trusted=yes signed-by=/etc/apt/keyrings/libnvidia.gpg arch=amd64] https://debian.hyprnet/mirror/nvidia.github.io/libnvidia-container/stable/deb/amd64/ /
|
||||
deb [trusted=yes signed-by=/etc/apt/keyrings/adoptium.gpg arch=amd64] https://debian.hyprnet/mirror/packages.adoptium.net/artifactory/deb trixie main
|
||||
@@ -0,0 +1,11 @@
|
||||
-----BEGIN CERTIFICATE-----
|
||||
MIIBozCCAUmgAwIBAgIQTM+NmsZ6yTUVUW3KsKDdWzAKBggqhkjOPQQDAjAwMRIw
|
||||
EAYDVQQKEwlIeXBlcldpblgxGjAYBgNVBAMTEUh5cGVyV2luWCBSb290IENBMB4X
|
||||
DTI2MDIyNjEyMDEyMloXDTM2MDIyNDEyMDEyMlowMDESMBAGA1UEChMJSHlwZXJX
|
||||
aW5YMRowGAYDVQQDExFIeXBlcldpblggUm9vdCBDQTBZMBMGByqGSM49AgEGCCqG
|
||||
SM49AwEHA0IABBsIRPLqh1EO0wG7w1/CDQl1qENdC9jCJrQNg7lo7A/E4rH76iOc
|
||||
Y8a7iKs2KMZ8F26Wut1EMRQfNWi+OwLHbXejRTBDMA4GA1UdDwEB/wQEAwIBBjAS
|
||||
BgNVHRMBAf8ECDAGAQH/AgEBMB0GA1UdDgQWBBQaKIMs8cp3n4Cyk6pZCemZwccS
|
||||
1DAKBggqhkjOPQQDAgNIADBFAiBf9ZvB5vEBEVyF05HBSgVnWGfjBRnjL/fceOB7
|
||||
mz22sQIhAJV/qD88vxE8WKSpHMN5L1nEPrpYOtkINQ7PAWO0ajB9
|
||||
-----END CERTIFICATE-----
|
||||
@@ -0,0 +1,10 @@
|
||||
deb [trusted=yes] https://debian.mirror.ygg/mirror/deb.debian.org/debian/ trixie main contrib non-free non-free-firmware
|
||||
deb-src [trusted=yes] https://debian.mirror.ygg/mirror/deb.debian.org/debian/ trixie main contrib non-free non-free-firmware
|
||||
deb [trusted=yes] https://debian.mirror.ygg/mirror/security.debian.org/debian-security trixie-security main contrib non-free non-free-firmware
|
||||
deb-src [trusted=yes] https://debian.mirror.ygg/mirror/security.debian.org/debian-security trixie-security main contrib non-free non-free-firmware
|
||||
deb [trusted=yes] https://debian.mirror.ygg/mirror/deb.debian.org/debian/ trixie-updates main contrib non-free non-free-firmware
|
||||
deb-src [trusted=yes] https://debian.mirror.ygg/mirror/deb.debian.org/debian/ trixie-updates main contrib non-free non-free-firmware
|
||||
deb [trusted=yes signed-by=/etc/apt/keyrings/docker.asc arch=amd64] https://debian.mirror.ygg/mirror/download.docker.com/linux/debian trixie stable
|
||||
deb [trusted=yes signed-by=/etc/apt/keyrings/tailscale-archive-keyring.gpg arch=amd64] https://debian.mirror.ygg/mirror/pkgs.tailscale.com/stable/debian trixie main
|
||||
deb [trusted=yes signed-by=/etc/apt/keyrings/libnvidia.gpg arch=amd64] https://debian.mirror.ygg/mirror/nvidia.github.io/libnvidia-container/stable/deb/amd64/ /
|
||||
deb [trusted=yes signed-by=/etc/apt/keyrings/adoptium.gpg arch=amd64] https://debian.mirror.ygg/mirror/packages.adoptium.net/artifactory/deb trixie main
|
||||
Reference in New Issue
Block a user