ipng/gitea-debian-runner
2
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Split build script into segments, add NODE_VERSION to workflow

Browse Source
This commit is contained in:
hackercat
2021-01-13 00:14:38 +00:00
parent 849c2b7bfb
commit d57b268555
2 changed files with 70 additions and 28 deletions
Download Patch File Download Diff File Expand all files Collapse all files
linux/ubuntu/nodejs/Dockerfile
+63 -21
View File
@@ -2,41 +2,83 @@ ARG DISTRIB_ID=ubuntu
ARG DISTRIB_RELEASE=20.04
FROM ${DISTRIB_ID}:${DISTRIB_RELEASE}
# non-root user
# > ARGs before FROM are not accessible
ARG DISTRIB_ID=ubuntu
ARG DISTRIB_RELEASE=20.04
# > non-root user
ARG RUNNER_USER=runner
# force apt
# > Node version
ARG NODE_VERSION=12
# > Force apt to not be interactive/not ask
ARG DEBIAN_FRONTEND=noninteractive
# Install dependencies and create non-root user with sudo permissions
RUN apt -yq update && \
apt -yq upgrade && \
apt -yq install curl git wget sudo gnupg apt-transport-https openssl && \
apt -yq install --no-install-recommends lsb-release gawk jq && \
curl -sSL https://deb.nodesource.com/gpgkey/nodesource.gpg.key | sudo apt-key add - && \
DISTRO="$(lsb_release -s -c)" && \
echo "deb https://deb.nodesource.com/node_12.x $DISTRO main" | sudo tee /etc/apt/sources.list.d/nodesource.list && \
echo "deb-src https://deb.nodesource.com/node_12.x $DISTRO main" | sudo tee -a /etc/apt/sources.list.d/nodesource.list && \
SHELL [ "/bin/bash", "-c" ]
# > Install base binutils and dependencies, setup environment required for GitHub Actions
RUN set -Eeuxo pipefail && \
ImageOS=${DISTRIB_ID}$(echo ${DISTRIB_RELEASE} | cut -d'.' -f 1) && \
echo "IMAGE_OS=$ImageOS" | tee -a /etc/environment && \
echo "ImageOS=$ImageOS" | tee -a /etc/environment && \
echo "LSB_RELEASE=${DISTRIB_RELEASE}" | tee -a /etc/environment && \
AGENT_TOOLSDIRECTORY=/opt/hostedtoolcache && \
echo "AGENT_TOOLSDIRECTORY=$AGENT_TOOLSDIRECTORY" | tee -a /etc/environment && \
echo "RUNNER_USER=${RUNNER_USER}" | tee -a /etc/environment && \
echo "RUNNER_TEMP=/home/${RUNNER_USER}/work/_temp" | tee -a /etc/environment && \
echo "RUN_TOOL_CACHE=$AGENT_TOOLSDIRECTORY" | tee -a /etc/environment && \
echo "DEPLOYMENT_BASEPATH=/opt/runner" | tee -a /etc/environment && \
echo ". /etc/environment" | tee -a /etc/profile && \
mkdir -p $AGENT_TOOLSDIRECTORY && \
chown 1000:1000 $AGENT_TOOLSDIRECTORY && \
chmod 0777 $AGENT_TOOLSDIRECTORY && \
printf "Build started" && \
apt -yq update && \
apt -yq upgrade && \
apt -yq install nodejs && \
printf "Updated apt lists and upgraded packages\n\n" && \
apt -yq install --no-install-recommends lsb-release gawk jq curl git wget sudo gnupg-agent ca-certificates software-properties-common apt-transport-https && \
printf "Installed base utils"
# > Install Node.JS
RUN set -Eeuxo pipefail && \
printf "Installing Node.JS" && \
curl -sSL https://deb.nodesource.com/gpgkey/nodesource.gpg.key | apt-key add - && \
DISTRO="$(lsb_release -s -c)" && \
echo "deb https://deb.nodesource.com/node_${NODE_VERSION}.x $DISTRO main" | tee /etc/apt/sources.list.d/nodesource.list && \
echo "deb-src https://deb.nodesource.com/node_${NODE_VERSION}.x $DISTRO main" | tee -a /etc/apt/sources.list.d/nodesource.list && \
apt -yq update && \
apt -yq install --no-install-recommends nodejs="${NODE_VERSION}*" && \
printf "Installed Node.JS $(node -v)"
# > Clean up image
RUN set -Eeuxo pipefail && \
printf "Cleaning image" && \
apt-get clean && \
rm -rf /var/lib/apt/lists/* && \
rm -rf /tmp/* && \
printf "Cleaned up image"
# > Create non-root user
RUN set -Eeuxo pipefail && \
printf "Creating non-root user" && \
groupadd -g 1000 ${RUNNER_USER} && \
useradd -u 1000 -g ${RUNNER_USER} -G sudo -m -s /bin/bash ${RUNNER_USER} && \
sed -i /etc/sudoers -re 's/^%sudo.*/%sudo ALL=(ALL:ALL) NOPASSWD: ALL/g' && \
sed -i /etc/sudoers -re 's/^root.*/root ALL=(ALL:ALL) NOPASSWD: ALL/g' && \
sed -i /etc/sudoers -re 's/^#includedir.*/## **Removed the include directive** ##"/g' && \
echo "${RUNNER_USER} ALL=(ALL) NOPASSWD: ALL" >> /etc/sudoers && \
echo "Customized the sudoers file for passwordless access to the ${RUNNER_USER} user!" && \
echo "runner user:"; su - ${RUNNER_USER} -c id
echo "runner user: $(su - ${RUNNER_USER} -c id)" && \
printf "Created non-root user $(grep ${RUNNER_USER} /etc/passwd)"
# Home repository
LABEL repository="https://github.com/catthehacker/docker-images"
# > Home repository
LABEL org.opencontainers.image.source="https://github.com/CatTheHacker/docker-images"
# Don't run as root, generally not good idea
USER runner
# > Don't run as root, generally not good idea
USER ${RUNNER_USER}:${RUNNER_USER}
# Force bash with environment
ENTRYPOINT [ "/bin/bash", "--login", "-c" ]
SHELL [ "/bin/bash", "--login" ]
WORKDIR /home/runner
# > Force bash with environment
ENTRYPOINT [ "/bin/bash", "--login" ]