|
|
|
@@ -11,46 +11,46 @@ Image: `git.eeqj.de/sneak/baseimage`, built for `linux/amd64` and
|
|
|
|
|
|
|
|
|
|
## What is in it
|
|
|
|
|
|
|
|
|
|
| Component | Source | Location |
|
|
|
|
|
| --------------- | ------------------------------ | ------------------------------ |
|
|
|
|
|
| Ubuntu 26.04 | `ubuntu:26.04`, fully upgraded | `/` |
|
|
|
|
|
| init | `runsvinit` (built from Go) | `/usr/local/sbin/runsvinit` |
|
|
|
|
|
| services | `runit` (apt) | `/etc/sv`, `/etc/service` |
|
|
|
|
|
| build-essential | apt | `gcc`, `make`, `pkg-config` |
|
|
|
|
|
| Go (distro) | apt `golang-go` | `/usr/lib/go-*` |
|
|
|
|
|
| Go (latest) | go.dev tarball | `/usr/local/go` |
|
|
|
|
|
| golangci-lint | GitHub release | `/usr/local/bin/golangci-lint` |
|
|
|
|
|
| shellcheck | apt | `/usr/bin/shellcheck` |
|
|
|
|
|
| govulncheck | `go install` (latest) | `/usr/local/bin/govulncheck` |
|
|
|
|
|
| Hugo (extended) | GitHub release `.deb` | `/usr/local/bin/hugo` |
|
|
|
|
|
| Node (distro) | apt `nodejs`, `npm` | `/usr/bin/node` |
|
|
|
|
|
| nvm | git tag | `/usr/local/nvm` |
|
|
|
|
|
| Node (LTS) | `nvm install --lts` | `/usr/local/nvm/current` |
|
|
|
|
|
| corepack | `npm install -g corepack` | nvm LTS global bin |
|
|
|
|
|
| yarn, pnpm | corepack, cache pre-populated | `/usr/local/corepack` |
|
|
|
|
|
| wrangler | `npm install -g wrangler` | nvm LTS global bin |
|
|
|
|
|
| prettier | `npm install -g prettier` | nvm LTS global bin |
|
|
|
|
|
| Playwright | `npm install -g playwright` | nvm LTS global bin |
|
|
|
|
|
| Playwright browsers | `playwright install` (chromium, firefox) | `/ms-playwright` |
|
|
|
|
|
| Firefox | Mozilla apt repo | `/usr/bin/firefox` |
|
|
|
|
|
| geckodriver | GitHub release | `/usr/local/bin/geckodriver` |
|
|
|
|
|
| headless Chrome | Playwright Chromium | `chromium` on `PATH` |
|
|
|
|
|
| Python (distro) | apt `python3`, `pip`, `venv` | `/usr/bin/python3` |
|
|
|
|
|
| pyenv | git tag | `/usr/local/pyenv` |
|
|
|
|
|
| Python (latest) | `pyenv install` | `/usr/local/pyenv/versions/*` |
|
|
|
|
|
| virtualenv | apt, and pip in pyenv Python | `virtualenv` on `PATH` |
|
|
|
|
|
| tzdata | apt | `/usr/share/zoneinfo` |
|
|
|
|
|
| zstd | apt | `/usr/bin/zstd` |
|
|
|
|
|
| sqlite3 (CLI) | apt | `/usr/bin/sqlite3` |
|
|
|
|
|
| libvips | apt `libvips-dev`, `libvips-tools` | `vips` on `PATH` |
|
|
|
|
|
| libheif | apt `libheif-dev`, `libheif-plugin-aomenc` | HEIF/AVIF codec |
|
|
|
|
|
| ImageMagick | apt | `magick` |
|
|
|
|
|
| Ghostscript | apt | `gs` |
|
|
|
|
|
| Ruby | apt `ruby`, `ruby-dev` | `/usr/bin/ruby` |
|
|
|
|
|
| Bundler | apt `bundler` | `bundle` on `PATH` |
|
|
|
|
|
| Valkey | apt `valkey-server`, `valkey-tools` | `valkey-server`, `valkey-cli` |
|
|
|
|
|
| PostgreSQL | apt `postgresql` | `psql`, `postgres`, `initdb`, `pg_ctl` on `PATH` |
|
|
|
|
|
| nginx | apt | `/usr/sbin/nginx` |
|
|
|
|
|
| Component | Source | Location |
|
|
|
|
|
| ------------------- | ------------------------------------------ | ------------------------------------------------ |
|
|
|
|
|
| Ubuntu 26.04 | `ubuntu:26.04`, fully upgraded | `/` |
|
|
|
|
|
| init | `runsvinit` (built from Go) | `/usr/local/sbin/runsvinit` |
|
|
|
|
|
| services | `runit` (apt) | `/etc/sv`, `/etc/service` |
|
|
|
|
|
| build-essential | apt | `gcc`, `make`, `pkg-config` |
|
|
|
|
|
| Go (distro) | apt `golang-go` | `/usr/lib/go-*` |
|
|
|
|
|
| Go (latest) | go.dev tarball | `/usr/local/go` |
|
|
|
|
|
| golangci-lint | GitHub release | `/usr/local/bin/golangci-lint` |
|
|
|
|
|
| shellcheck | apt | `/usr/bin/shellcheck` |
|
|
|
|
|
| govulncheck | `go install` (latest) | `/usr/local/bin/govulncheck` |
|
|
|
|
|
| Hugo (extended) | GitHub release `.deb` | `/usr/local/bin/hugo` |
|
|
|
|
|
| Node (distro) | apt `nodejs`, `npm` | `/usr/bin/node` |
|
|
|
|
|
| nvm | git tag | `/usr/local/nvm` |
|
|
|
|
|
| Node (LTS) | `nvm install --lts` | `/usr/local/nvm/current` |
|
|
|
|
|
| corepack | `npm install -g corepack` | nvm LTS global bin |
|
|
|
|
|
| yarn, pnpm | corepack, cache pre-populated | `/usr/local/corepack` |
|
|
|
|
|
| wrangler | `npm install -g wrangler` | nvm LTS global bin |
|
|
|
|
|
| prettier | `npm install -g prettier` | nvm LTS global bin |
|
|
|
|
|
| Playwright | `npm install -g playwright` | nvm LTS global bin |
|
|
|
|
|
| Playwright browsers | `playwright install` (chromium, firefox) | `/ms-playwright` |
|
|
|
|
|
| Firefox | Mozilla apt repo | `/usr/bin/firefox` |
|
|
|
|
|
| geckodriver | GitHub release | `/usr/local/bin/geckodriver` |
|
|
|
|
|
| headless Chrome | Playwright Chromium | `chromium` on `PATH` |
|
|
|
|
|
| Python (distro) | apt `python3`, `pip`, `venv` | `/usr/bin/python3` |
|
|
|
|
|
| pyenv | git tag | `/usr/local/pyenv` |
|
|
|
|
|
| Python (latest) | `pyenv install` | `/usr/local/pyenv/versions/*` |
|
|
|
|
|
| virtualenv | apt, and pip in pyenv Python | `virtualenv` on `PATH` |
|
|
|
|
|
| tzdata | apt | `/usr/share/zoneinfo` |
|
|
|
|
|
| zstd | apt | `/usr/bin/zstd` |
|
|
|
|
|
| sqlite3 (CLI) | apt | `/usr/bin/sqlite3` |
|
|
|
|
|
| libvips | apt `libvips-dev`, `libvips-tools` | `vips` on `PATH` |
|
|
|
|
|
| libheif | apt `libheif-dev`, `libheif-plugin-aomenc` | HEIF/AVIF codec |
|
|
|
|
|
| ImageMagick | apt | `magick` |
|
|
|
|
|
| Ghostscript | apt | `gs` |
|
|
|
|
|
| Ruby | apt `ruby`, `ruby-dev` | `/usr/bin/ruby` |
|
|
|
|
|
| Bundler | apt `bundler` | `bundle` on `PATH` |
|
|
|
|
|
| Valkey | apt `valkey-server`, `valkey-tools` | `valkey-server`, `valkey-cli` |
|
|
|
|
|
| PostgreSQL | apt `postgresql` | `psql`, `postgres`, `initdb`, `pg_ctl` on `PATH` |
|
|
|
|
|
| nginx | apt | `/usr/sbin/nginx` |
|
|
|
|
|
|
|
|
|
|
Plus the usual odds and ends: `git`, `curl`, `wget`, `jq`, `rsync`,
|
|
|
|
|
`openssh-client`, `zip`/`unzip`, `xz-utils`, `bzip2`, and the `-dev`
|
|
|
|
@@ -202,8 +202,8 @@ Every unpinned version is resolved at build time, so a rebuild picks up
|
|
|
|
|
current packages and tool releases. Rebuild and retag periodically; child
|
|
|
|
|
images get everything new on their next build.
|
|
|
|
|
|
|
|
|
|
The registry sits behind Traefik. The large `RUN` layer (about 650MB
|
|
|
|
|
compressed, over 2GB uncompressed) needs the entrypoint
|
|
|
|
|
The registry sits behind Traefik. The large `RUN` layer (about 1.63 GB
|
|
|
|
|
compressed, 4.3 GB on disk) needs the entrypoint
|
|
|
|
|
`respondingTimeouts` raised from Traefik's 60 second default, or the final
|
|
|
|
|
blob commit fails with a 499 or 500 and docker re-uploads the layer.
|
|
|
|
|
|
|
|
|
@@ -218,7 +218,7 @@ Interactive shells (login shells, or anything that sources
|
|
|
|
|
`commit-logs`, `clean`, plus `lib.sh` (shared setup) and `native-arch`.
|
|
|
|
|
- `Dockerfile` — base, environment, one `COPY`, one `ADD`, one `RUN`.
|
|
|
|
|
- `build.sh` — everything the `RUN` does, in order: apt, Go, runsvinit,
|
|
|
|
|
golangci-lint, Hugo, nvm/Node/corepack/wrangler, pyenv/Python, cleanup,
|
|
|
|
|
sanity checks. Removes itself when done.
|
|
|
|
|
golangci-lint, govulncheck, Hugo, nvm/Node/corepack/wrangler, browsers,
|
|
|
|
|
pyenv/Python, cleanup, sanity checks. Removes itself when done.
|
|
|
|
|
- `rootfs/` — files copied verbatim onto `/` before `build.sh` runs.
|
|
|
|
|
- `logs/YYYY-MM-DD/` — build logs for each released image, per arch.
|
|
|
|
|
