-
Notifications
You must be signed in to change notification settings - Fork 9
/
Copy pathDockerfile.rhel
54 lines (44 loc) · 2.01 KB
/
Dockerfile.rhel
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
FROM images.paas.redhat.com/osci/base-minimal
LABEL maintainer "OSCI"
LABEL description="rpminspect for RHEL"
# https://copr.fedorainfracloud.org/coprs/g/osci/rpminspect/
ENV RPMINSPECT_PACKAGE_NAME=rpminspect
# https://copr.devel.redhat.com/coprs/dcantrell/rpminspect-data-redhat/
ENV RPMINSPECT_DATA_PACKAGE_NAME=rpminspect-data-redhat
ENV KOJI_BIN=/usr/bin/brew
ENV RPMINSPECT_CONFIG=/usr/share/rpminspect/redhat.yaml
# Add repository for "brew" command
RUN cd /etc/yum.repos.d/ && \
curl -L -O https://download.devel.redhat.com/rel-eng/RCMTOOLS/rcm-tools-rhel-9-baseos.repo
# Add COPR repository with rpminspect
RUN cd /etc/yum.repos.d/ && \
curl -L -O https://copr.fedorainfracloud.org/coprs/g/osci/rpminspect/repo/epel-9/group_osci-rpminspect-epel-9.repo
# Add COPR repository with rpminspect data package
RUN cd /etc/yum.repos.d/ && \
curl -L -O https://copr.devel.redhat.com/coprs/dcantrell/rpminspect-data-redhat/repo/epel-9/dcantrell-rpminspect-data-redhat-epel-9.repo
# Add COPR repository with latest fedora-license-data
RUN cd /etc/yum.repos.d/ && \
curl -L -O https://copr.fedorainfracloud.org/coprs/g/osci/fedora-license-data/repo/epel-9/group_osci-fedora-license-data-epel-9.repo
# Update and install dependencies
RUN dnf -y update &&\
dnf -y install --enablerepo=rhel-9-buildroot \
${RPMINSPECT_PACKAGE_NAME} \
${RPMINSPECT_DATA_PACKAGE_NAME} \
clamav-update \
python3-pyyaml \
python3-click \
python3-retry \
python3-GitPython \
koji \
git \
jq \
brewkoji \
"libabigail >= 2.6" \
"annobin-annocheck >= 12.65" \
&& dnf clean all
# Prepare the configuration file to run rpminspect against Brew stage.
RUN cp /usr/share/rpminspect/redhat.yaml /usr/share/rpminspect/redhat-stage.yaml && \
sed -i 's,brewhub.engineering,brewhub.stage.engineering,g' /usr/share/rpminspect/redhat-stage.yaml && \
sed -i 's,download.devel.redhat.com,brewweb.stage.engineering.redhat.com,g' /usr/share/rpminspect/redhat-stage.yaml
RUN freshclam
COPY *.sh *.py /usr/local/bin/