ver4a
4653fd6a08
This was most likely caused by networking issues unrelated to the build, so this workaround will be reversed to not hide any more problems.
34 lines
1.2 KiB
Text
34 lines
1.2 KiB
Text
FROM quay.io/fedora-ostree-desktops/silverblue:41
|
|
|
|
# dnf configuration has to be in effect during build
|
|
COPY etc/dnf /etc/dnf
|
|
|
|
# Add rpmfusion repositories
|
|
RUN dnf5 -y install https://mirrors.rpmfusion.org/free/fedora/rpmfusion-free-release-$(rpm -E %fedora).noarch.rpm https://mirrors.rpmfusion.org/nonfree/fedora/rpmfusion-nonfree-release-$(rpm -E %fedora).noarch.rpm
|
|
# Install ffmpeg (removing all the -free replacements is required)
|
|
RUN dnf5 -y install --allowerasing ffmpeg
|
|
|
|
# Install openh264
|
|
RUN dnf5 -y swap noopenh264 openh264 && dnf5 -y install mozilla-openh264
|
|
|
|
# Bulk of layered packages
|
|
RUN dnf5 -y install vim bat btop pv restic zstd nmap-ncat
|
|
|
|
# Set vim as default editor
|
|
RUN dnf5 -y swap nano-default-editor vim-default-editor
|
|
|
|
# Remove default color prompt (is replaced with a custom one)
|
|
RUN dnf5 -y remove bash-color-prompt
|
|
|
|
# Apply configuration
|
|
COPY etc /etc
|
|
|
|
# Apply hardened firewall configuration
|
|
RUN firewall-offline-cmd --set-default-zone public
|
|
RUN firewall-offline-cmd --remove-service ssh
|
|
|
|
# Restrict permissions on quadlet directory
|
|
RUN chmod 700 /etc/containers/systemd
|
|
|
|
# https://github.com/ostreedev/ostree-rs-ext/issues/159
|
|
RUN ostree container commit
|