2.4.2. 이미지 모드를 사용하여 에지 이미지의 RHEL 10 이상 빌드

프로세스

1. 컨테이너 파일을 생성합니다. 예를 들면 다음과 같습니다.

   $ cat Containerfile
   FROM registry.redhat.io/rhel10/rhel-bootc:10.0
   
   # Packages
   RUN dnf install -y zsh && dnf clean all
   
   # Group install
   RUN dnf group -y install "Development Tools"
   
   # Kernel
   RUN mkdir -p /usr/lib/bootc/kargs.d
   RUN cat <<EOF >> /usr/lib/bootc/kargs.d/console.toml
   kargs = ["console=ttyS0,114800n8","kernel-debug"]
   match-architectures = ["x86_64"]
   EOF
   
   # Subscription-manager
   COPY ./rhsm.conf /etc/rhsm/rhsm.conf
   
   # RPM config
   RUN mkdir -p /etc/pki/rpm-gpg/
   COPY <host_path>/gpg_key /etc/pki/rpm-gpg/gpg_key
   
   # Additional groups
   RUN groupadd -g 1001 widget
   
   # Timezones
   RUN ln -sf /usr/share/zoneinfo/Asia/Bangkok /etc/localtime
   
   # Locale
   RUN cat <<EOF >> /etc/locale.conf
   LANG="en_US.UTF-8"
   EOF && \
   cat <<EOF >> /etc/vconsole.conf
   KEYMAP=us
   EOF
   
   
   # firewall
   RUN dnf install -y firewalld && \
       dnf clean all && \
       firewall-offline-cmd --new-zone=customzone && \
       firewall-offline-cmd --zone=customzone --set-description="Custom firewall rules for the container" && \
       firewall-offline-cmd --zone=customzone --add-service=ftp && \
       firewall-offline-cmd --zone=customzone --add-service=ntp && \
       firewall-offline-cmd --zone=customzone --add-service=dhcp && \
       firewall-offline-cmd --zone=customzone --add-port=22/tcp && \
       firewall-offline-cmd --zone=customzone --add-port=80/tcp && \
       firewall-offline-cmd --zone=customzone --add-port=53/tcp && \
       firewall-offline-cmd --zone=customzone --add-port=53/udp && \
       firewall-offline-cmd --zone=customzone --add-port=30000-32767/tcp && \
       firewall-offline-cmd --zone=customzone --add-port=30000-32767/udp && \
       firewall-offline-cmd --set-default-zone=customzone
   
   # systemd services
   RUN systemctl enable httpd sshd && \
   systemctl disable telnetd && \
   systemctl mask rcpbind

2. < image& gt;를 빌드합니다. 현재 디렉터리에서 Containerfile 을 사용합니다.

   $ podman build -t quay.io/<namespace>/<image>:<tag> .