8.2. 最小限からベースイメージをビルドする

前提条件

• 標準の bootc ベースイメージ。

手順

• 次の例では、カスタムの最小ベースイメージを作成します。

  # Begin with a standard bootc base image that is reused as a "builder" for the custom image.
  FROM registry.redhat.io/rhel10/rhel-bootc:latest as builder
  # Configure and override source RPM repositories, if necessary. This step is not required when building up from minimal unless referencing specific content views or target mirrored/snapshotted/pinned versions of content.
  # Add additional repositories to apply customizations to the image. However, referencing a custom manifest in this step is not currently supported without forking the code.
  # Build the root file system by using the specified repositories and non-RPM content from the "builder" base image.
  # If no repositories are defined, the default build will be used. You can modify the scope of packages in the base image by changing the manifest between the "standard" and "minimal" sets.
  RUN /usr/libexec/bootc-base-imagectl build-rootfs --manifest=minimal /target-rootfs
  # Create a new, empty image from scratch.
  FROM scratch
  # Copy the root file system built in the previous step into this image.
  COPY --from=builder /target-rootfs/ /
  # Apply customizations to the image. This syntax uses "heredocs" https://www.docker.com/blog/introduction-to-heredocs-in-dockerfiles/ to pass multi-line arguments in a more readable format.
  RUN <<EORUN
  # Set pipefail to display failures within the heredoc and avoid false-positive successful builds.
  set -xeuo pipefail
  # Install required packages for our custom bootc image.
  # Note that using a minimal manifest means we need to add critical components specific to our use case and environment.
  dnf -y install NetworkManager openssh-server
  # Remove package caches
  dnf clean all
  # Clean up all logs and caches
  rm /var/{log,cache,lib}/* -rf
  # Run the bootc linter to perform build-time verification. Keep this as the last command in your build instructions.
  bootc container lint
  # Close the shell command.
  EORUN
  # Define required labels for this bootc image to be recognized as such.
  LABEL containers.bootc 1
  LABEL ostree.bootable 1
  # Optional labels that only apply when running this image as a container. These keep the default entry point running under systemd.
  STOPSIGNAL SIGRTMIN+3
  CMD ["/sbin/init"]