-
Notifications
You must be signed in to change notification settings - Fork 11
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
Merge pull request #44 from anderbubble/rockylinux-refactor
Rocky Linux Containerfile refactor
- Loading branch information
Showing
56 changed files
with
286 additions
and
1,233 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -1,7 +1,34 @@ | ||
# Warewulf node images | ||
|
||
Example node images for use with Warewulf 4. | ||
Example node container images for use with Warewulf v4. | ||
|
||
https://warewulf.org | ||
|
||
Node images are published on Docker Hub at https://hub.docker.com/u/warewulf. | ||
## Built examples | ||
|
||
These containers are published on the [GitHub container registry][1]. | ||
|
||
[1]: https://github.com/orgs/hpcng/packages?repo_name=warewulf-node-images | ||
|
||
* [Rocky Linux 8](rockylinux-8) | ||
* [Rocky Linux 9](rockylinux-9) | ||
* [openSUSE Leap](leap) | ||
|
||
## Additional examples | ||
|
||
Additional container definitions that are not actively built and published, but | ||
may still be useful. | ||
|
||
* [Rocky Linux 9 with SELinux][examples/rockylinux-9-selinux] | ||
|
||
You can build any of these (or the other container definitions) locally for | ||
import into Warewulf v4. | ||
|
||
```shell | ||
|
||
podman build examples/rockylinux-9-selinux \ | ||
--file examples/rockylinux-9-selinux/Containerfile \ | ||
--tag warewulf-rockylinux-selinux:9 | ||
podman save warewulf-rockylinux-selinux:9 --output warewulf-rockylinux-selinux-9.tar | ||
wwctl container import warewulf-rockylinux-selinux-9.tar rockylinux-selinux-9 | ||
``` |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,16 @@ | ||
FROM ghcr.io/hpcng/warewulf-rockylinux:9 | ||
|
||
RUN dnf -y install \ | ||
policycoreutils-python-utils \ | ||
selinux-policy-targeted | ||
|
||
# For SELinux enabled nodes: | ||
# The wwclient service fails to start on boot if an appropriate SELinux file | ||
# context label is not set for /warewulf/wwclient. | ||
# | ||
# NOTE: THE FOLLOWING EXITS NONZERO WITH libsemanage VERSIONS IN EL9 | ||
# PRIOR TO 3.3.3 SO WE FORCE A CLEAN EXIT CODE | ||
# | ||
# See: https://github.com/SELinuxProject/selinux/issues/343 | ||
# | ||
RUN semanage fcontext -N -a -t bin_t /warewulf/wwclient || true |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,16 @@ | ||
# Rocky Linux 9 with SELinux | ||
|
||
Warewulf can be used to boot an selinux-equipped node. This example installs | ||
required packages and configures SELinux policy for the `wwclient` binary | ||
(which communicates with the Warewulf server and receives runtime overlays). | ||
|
||
``` | ||
podman build . --tag rockylinux-selinux:9 | ||
``` | ||
|
||
Booting a node image with selinux enabled requires (at least up to Warewulf | ||
v4.4.1) setting `--root=tmpfs` on the relevant node and setting | ||
`rootfstype=ramfs` as a kernel argument. For more information on these | ||
settings, look at [wwinit/init][1]. | ||
|
||
[1]: https://github.com/hpcng/warewulf/blob/main/overlays/wwinit/init |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1 @@ | ||
Containerfile-8.* |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file was deleted.
Oops, something went wrong.
This file was deleted.
Oops, something went wrong.
This file was deleted.
Oops, something went wrong.
This file was deleted.
Oops, something went wrong.
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Oops, something went wrong.