| 1234567891011121314151617181920212223242526272829303132333435363738394041424344454647484950515253545556575859606162636465666768697071727374757677787980818283848586878889909192939495 |
- # vim: filetype=yaml sw=2
- filename: 'container-image_[% c("var/container/suite") %]-[% c("var/container/arch") %]-[% c("version") %].tar.gz'
- version: 2
- pkg_type: build
- var:
- ubuntu_version: 18.04.1
- container:
- use_container: 1
- # We need CAP_SYS_ADMIN for debootstrap to work
- CAP_SYS_ADMIN: 1
- pre: |
- #!/bin/sh
- set -e
- export DEBIAN_FRONTEND=noninteractive
- # Bug 29158: install fixed packages for apt vulnerability (CVE-2019-3462)
- dpkg -i ./apt_1.6.6ubuntu0.1_amd64.deb ./libapt-pkg5.0_1.6.6ubuntu0.1_amd64.deb
- apt-get update -y -q
- apt-get install -y -q debian-archive-keyring ubuntu-keyring debootstrap
- debootstrap --arch=[% c("var/container/arch") %] [% c("var/container/debootstrap_opt") %] [% c("var/container/suite") %] base-image [% c("var/container/debootstrap_mirror") %]
- [% IF c("var/apt_package_filename") || c("var/apt_utils_package_filename") || c("var/libapt_inst_package_filename") || c("var/libapt_pkg_package_filename") -%]
- mkdir ./base-image/apt-update
- mv [% c("var/apt_package_filename") %] [% c("var/apt_utils_package_filename") %] \
- [% c("var/libapt_inst_package_filename") %] [% c("var/libapt_pkg_package_filename") %] \
- ./base-image/apt-update
- mount proc ./base-image/proc -t proc
- mount sysfs ./base-image/sys -t sysfs
- chroot ./base-image dpkg -i -R /apt-update
- umount ./base-image/proc
- umount ./base-image/sys
- [% END -%]
- [% IF c("var/minimal_apt_version") -%]
- apt_version=$(dpkg --admindir=$(pwd)/base-image/var/lib/dpkg -s apt | grep '^Version: ' | cut -d ' ' -f 2)
- echo "apt version: $apt_version"
- dpkg --compare-versions "$apt_version" ge '[% c("var/minimal_apt_version") %]'
- [% END -%]
- tar -C ./base-image -czf [% dest_dir %]/[% c("filename") %] .
- targets:
- wheezy-amd64:
- var:
- minimal_apt_version: '0.9.7.9+deb7u8'
- # https://deb.freexian.com/extended-lts/updates/ela-76-1-apt/
- apt_packages_baseurl: http://deb.freexian.com/extended-lts/pool/main/a/apt
- apt_package_filename: apt_0.9.7.9+deb7u8_amd64.deb
- apt_package_sha256sum: 83dcdb3f9c11df28b30b85bbb9dec341effbf36ee881a04dece3390082080761
- apt_utils_package_filename: apt-utils_0.9.7.9+deb7u8_amd64.deb
- apt_utils_package_sha256sum: 91a4d0ec92a32f13e3acb37f71546d48c51a0df25f3b9eb6a96b73dfc93a11ed
- libapt_inst_package_filename: libapt-inst1.5_0.9.7.9+deb7u8_amd64.deb
- libapt_inst_package_sha256sum: 181c9c21e1b33496b251fc76ba8ed04acbb8e23006909d27795bbc287eddd027
- libapt_pkg_package_filename: libapt-pkg4.12_0.9.7.9+deb7u8_amd64.deb
- libapt_pkg_package_sha256sum: b360dfb5a65ac2f7b81a2551d8a520ba2265785537d6d669869a159888b81999
- container:
- suite: wheezy
- arch: amd64
- debootstrap_mirror: "http://archive.debian.org/debian/"
- stretch-amd64:
- var:
- minimal_apt_version: 1.4.9
- container:
- suite: stretch
- arch: amd64
- stretch-i386:
- var:
- minimal_apt_version: 1.4.9
- container:
- suite: stretch
- arch: i386
- input_files:
- - URL: 'http://cdimage.ubuntu.com/ubuntu-base/releases/[% c("var/ubuntu_version") %]/release/ubuntu-base-[% c("var/ubuntu_version") %]-base-amd64.tar.gz'
- filename: 'container-image_ubuntu-base-[% c("var/ubuntu_version") %]-base-amd64.tar.gz'
- sha256sum: ed76e649f65548a80b361b68011085ec4dde7bb762d667657acbef87765e1a12
- - URL: http://security.ubuntu.com/ubuntu/pool/main/a/apt/apt_1.6.6ubuntu0.1_amd64.deb
- sha256sum: df210f9e30cf9deba5fbe815203af854e5e77bdbbe0b96d0d1c0da46a6a8dd0a
- - URL: http://security.ubuntu.com/ubuntu/pool/main/a/apt/libapt-pkg5.0_1.6.6ubuntu0.1_amd64.deb
- sha256sum: 0a05a97b1e9b8d52ee8df040a14c5fabdebbb2c2235ac495db29df34f4c8cec3
- - URL: '[% c("var/apt_packages_baseurl") %]/[% c("var/apt_package_filename") %]'
- sha256sum: '[% c("var/apt_package_sha256sum") %]'
- enable: '[% c("var/apt_package_filename") %]'
- - URL: '[% c("var/apt_packages_baseurl") %]/[% c("var/apt_utils_package_filename") %]'
- sha256sum: '[% c("var/apt_utils_package_sha256sum") %]'
- enable: '[% c("var/apt_utils_package_filename") %]'
- - URL: '[% c("var/apt_packages_baseurl") %]/[% c("var/libapt_inst_package_filename") %]'
- sha256sum: '[% c("var/libapt_inst_package_sha256sum") %]'
- enable: '[% c("var/libapt_inst_package_filename") %]'
- - URL: '[% c("var/apt_packages_baseurl") %]/[% c("var/libapt_pkg_package_filename") %]'
- sha256sum: '[% c("var/libapt_pkg_package_sha256sum") %]'
- enable: '[% c("var/libapt_pkg_package_filename") %]'
|
