summary refs log tree commit diff
path: root/pkgs/build-support/docker
Commit message (Collapse)AuthorAge
* dockerTools: create /tmp in rootLayerTim Windelschmidt2023-10-09
|
* dockerTools: use makeOverridable for buildImage family of functionsRobert Scott2023-09-11
| | | | | this allows nix users to modify existing images without having to rely on container image inheritance mechanisms via fromImage
* dockerTools: replace fakechroot with prootViktor Kronvall2023-08-19
| | | | | | | The command `fakechroot` errored with buffer overflows. The `proot` command doesn't seem to suffer from the same problem. The tar command creating the layer errors with "permission denied" on a bunch of paths in /proc but the layer seems to get built anyway.
* dockerTools: replace --no-clobber with --update=noneViktor Kronvall2023-08-17
| | | | | | | | | | | | Since coreutils v9.2 the `--no-clobber` flag results in a non-zero exit code when the destination files exist. Using `--update=none` will now reproduce the old behavior of `--no-clobber`. However, the `--update=none` flag was introduced in coreutils v9.3 and thus `mergeImages` will fail if you have an older version than v9.3 in stdenv after applying this commit. [coreutils v9.3 changelog](https://github.com/coreutils/coreutils/blob/f386722dc0d996d5379f12b4a8d4dd15ca7df4b5/NEWS#L48)
* treewide: use optionalString instead of 'then ""'Felix Buehler2023-06-24
|
* nix-prefetch-docker: handle overrides correctlyRobin Bate Boerop2023-04-03
| | | | | | Without this change, the `--os` and `--arch` switches are disregarded for operations involving `skopeo inspect` invocations. This means that, for example, one cannot fetch Linux images while on macOS.
* treewide: Make yescrypt the default algorithm for pam_unix.soMartin Weinelt2023-03-13
| | | | | This ensures `passwd` will default to yescrypt for newly generated passwords.
* dockerTools: Preprocess layers list before unpack to handle repeated layersAndrew Brooks2023-02-06
|
* dockerTools: Correctly unpack duplicate rootfs diffsAndrew Brooks2023-02-03
| | | | | | This PR addresses issue #214434 by preventing dockerTools.buildImage from deleting rootfs diffs until after they've been unpacked.
* dockerTools: make gzipped docker images faster to update by rsyncWalter Franzini2022-12-23
| | | | | This passes --rsyncable / -R to pigz for input-determined block locations, to improve rsync-ability.
* treewide: fix typosfigsoda2022-12-17
|
* nixosTests.docker-tools: Fix nginx testRobert Hensing2022-12-08
|
* dockerTools: refactor, rename internal variableRobert Hensing2022-12-08
| | | | | > has to fit its domain, which is the OCI spec, which uses > `architecture`. The `defaultArch` and `GOARCH` names are irrelevant.
* dockerTools: allowing architecture to be specifiedChristian Kemper2022-12-08
| | | | | ... for buildImage, buildLayeredImage and streamLayeredImage, adding docs and tests.
* dockerTools: fix nginx testIzorkin2022-11-30
|
* dockerTools: fixup evaluation without allowed aliasesVladimír Čunát2022-11-27
| | | | This is a regression from PR #172736
* Merge pull request #172736 from infinisil/docker-nix-shellSilvan Mosberger2022-11-26
|\
| * dockerTools.buildNixShellImage: Chown nix directoriesSilvan Mosberger2022-11-07
| | | | | | | | | | | | | | | | To the user running the docker image. If a Nix binary is available in the resulting derivation, this then behaves like a single-user Nix installation, except that already-written /nix/store paths can't be changed. Most notably it makes Nix work not have to rely on a chroot store in the image
| * nixos/tests: Add tests for dockerTools.buildNixShellImageSilvan Mosberger2022-10-07
| |
| * Introduce dockerTools.buildNixShellImageSilvan Mosberger2022-10-07
| |
* | dockerTools: prefer local buildsmupdt2022-11-18
| |
* | Merge pull request #141050 from koenw/dockertools_too_many_argumentsRobert Hensing2022-10-13
|\ \ | |/ |/| build-support: Fix error when building images with many layers
| * build-support: Fix error when building images with many layersKoen Wilde2022-10-13
| | | | | | | | | | | | | | | | | | | | | | | | When building a docker image using `dockertools.buildLayeredImage`, the resulting image layers are passed to `jq` through the command line. When building an image with too many layers this would exceed the maximum command line argument length. Hence, we store the list of layers in the Nix store and pass them to `jq` as a file argument using `--slurpfile`. Fixes #140908.
* | nixosTests.docker-tools: Add image-with-certsRobert Hensing2022-09-21
| |
* | dockerTools: add missing mkdir to caCertificates derivationRoss Light2022-09-20
| |
* | Merge pull request #170906 from Sohalt/dockerTools.ca-certificates.crtRobert Hensing2022-08-31
|\ \ | | | | | | dockerTools ca-certificates.crt helper
| * | dockerTools: add caCertificates helpersohalt2022-05-03
| | | | | | | | | | | | | | | Various tools (e.g. wget) expect the ca bundle to be available at /etc/ssl/certs/ca-certificates.crt
* | | dockerTools.buildImage: make VM memSize configurableAlex James2022-08-16
| | | | | | | | | | | | | | | | | | | | | Fixes #186752. This adds buildVMMemorySize (defaults to 512 MiB) to buildImage, which is passed to vm.runInLinuxVM. This is needed for larger base images, which may otherwise cause container build failures due to OOM in the VM.
* | | use consistently user alice for examplesolaf2022-08-05
| | |
* | | dockerTools: use list of strings for `configureFlags`zowoq2022-07-15
| | |
* | | dockerTools.buildImage: Add copyToRoot to replace contents, explain usageRobert Hensing2022-07-06
| | |
* | | dockerTools.examples.etc: Make it a reliable testRobert Hensing2022-05-30
| | | | | | | | | | | | /etc/hosts is generally also provided by the container runtime.
* | | dockerTools: Add example of using NixOS' etcRobert Hensing2022-05-30
| | | | | | | | | | | | (cherry picked from commit 9b2af8673be82d48ce76c8c152de85ad921d26ba)
* | | testers.invalidateFetcherByDrvHash: Move from top-levelRobert Hensing2022-05-05
| | |
* | | treewide: remove nativeBuildInputs that are in stdenvBen Siraphob2022-04-16
|/ /
* | dockerTools: misc fixeszowoq2022-04-05
| | | | | | | | | | - add nixosTests to `dockerTools.tests` - don't use `pkgs` or `lib.singleton`
* | dockerTools: pkgs.system -> pkgs.stdenv.hostPlatform.systemzowoq2022-04-05
| | | | | | | | `pkgs.system` is an alias
* | fakeNss: move to toplevelFlorian Klink2022-03-24
| | | | | | | | | | | | | | Make this reachable from pkgs.fakeNss. This is useful outside docker contexts, too. https://github.com/NixOS/nixpkgs/pull/164943#discussion_r833220769
* | streamLayeredImage: pass through passthru attributesVincent Ambo2022-01-31
| | | | | | | | | | | | | | | | | | | | | | This is useful for a use-case we have with a Nix-based CI system that specifies things like deploy steps as passthru attributes[0]. Previously the only way to do this would have been to concatenate attributes onto the resulting derivation, but passing them in and actually treating them as proper passthru attributes is cleaner. [0]: https://cs.tvl.fyi/depot@f7d7da6aceb407b719cf4683a75878fd3aca319e/-/blob/nix/buildkite/default.nix?L222-226
* | nixos/tests/docker-tools: add test for pre-runAsRoot layer unpack orderAndrew Brooks2021-12-17
| |
* | dockerTools.buildImage: unpack base image layers in correct orderAndrew Brooks2021-12-17
| |
* | dockerTools: Keep fakechroot disabled by defaultRobert Hensing2021-12-04
| | | | | | | | Avoid risk of breaking existing images by making it opt-in.
* | dockerTools: Add fakechroot to fakeRootCommandsRobert Hensing2021-12-04
| |
* | Merge pull request #148341 from ↵Robert Hensing2021-12-03
|\ \ | | | | | | | | | | | | hercules-ci/add-dockerTools-customization-layer-dependencies dockerTools: Add store dependencies of the customization layer
| * | nixosTests.docker-tools: Use unique binary in test caseRobert Hensing2021-12-02
| | |
| * | dockerTools: Add store dependencies of the customization layerRobert Hensing2021-10-06
| |/
* | Merge pull request #142616 from r-burns/toplevel-systemRyan Burns2021-10-27
|\ \ | | | | | | treewide: remove toplevel `system` attr
| * | build-support/docker: remove toplevel system attrRyan Burns2021-10-22
| | |
* | | dockerTools: Fix testRobert Hensing2021-10-25
|/ /
* / dockerTools: Fix and test #118722 path in contentsRobert Hensing2021-10-18
|/
generated by cgit-pink 1.4.1 (git 2.36.1) at 2024-05-14 03:36:11 +0000