Djam/docker
1
0
Fork 0
mirror of https://abf.rosa.ru/djam/docker.git synced 2025-02-23 09:32:49 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions
docker/docker.spec
Sergey Zhemoytel 1c903bfbb6 27.2.1
2024-09-09 13:16:27 +00:00

309 lines
9.6 KiB
RPMSpec
Raw Blame History

# modifying the dockerinit binary breaks the SHA1 sum check by docker
%global tini_version 0.19.0
%global buildx_version 0.14.0
%global project docker
%global repo %{project}
%global import_path github.com/%{project}/%{repo}
#debuginfo not supported with Go
%global gopath %{_libdir}/golang
%define gosrc %{gopath}/src/pkg/%{import_path}
%global commit 659604f9ee60f147020bdd444b26e4b5c636dc28
%global shortcommit %(c=%{commit}; echo ${c:0:7})
%define _libexec /usr/libexec
%define _dockerpluginsdir %{_libexec}/docker/cli-plugins
Summary: Automates deployment of containerized applications
Name: docker
Version: 27.2.1
%global moby_version %{version}
Release: 1
License: ASL 2.0
Epoch: 1
Group: System/Configuration/Other
URL: https://www.docker.com
Source0: https://github.com/moby/moby/archive/v%{version}/moby-%{version}.tar.gz
Source1: %{repo}.service
Source2: %{repo}.sysconfig
Source3: %{repo}-storage.sysconfig
Source4: docker.sysusers
Source6: %{repo}-network.sysconfig
Source7: %{repo}.socket
Source8: %{repo}-network-cleanup.sh
Source9: overlay.conf
# docker-proxy
Source10: https://github.com/%{project}/libnetwork/archive/master/libnetwork-master.tar.gz
# tini
Source11: https://github.com/krallin/tini/archive/v%{tini_version}/tini-%{tini_version}.tar.gz
# cli
Source12: https://github.com/docker/cli/archive/v%{version}/cli-%{version}.tar.gz
# buildx
#Source13: https://github.com/docker/buildx/archive/v%{buildx_version}/buildx-%{buildx_version}.tar.gz
# (tpg) taken from https://gist.github.com/goll/bdd6b43c2023f82d15729e9b0067de60
Source14: nftables-docker.nft
Source1000: %{name}.rpmlintrc
BuildRequires: gcc
BuildRequires: glibc-devel
BuildRequires: glibc-static-devel
BuildRequires: libltdl-devel
# ensure build uses golang 1.4 or above
BuildRequires: golang >= 1.7
BuildRequires: pkgconfig(sqlite3)
BuildRequires: go-md2man
BuildRequires: pkgconfig(devmapper)
BuildRequires: btrfs-devel
BuildRequires: pkgconfig(systemd)
BuildRequires: systemd
BuildRequires: libtool-devel
BuildRequires: pkgconfig(libseccomp)
BuildRequires: cmake
Requires(pre): systemd
%systemd_requires
# With docker >= 1.11 you now need containerd (and runC or crun as a dep)
Requires: containerd
Recommends: runc
Requires: crun
Requires: docker-compose
Recommends: docker-buildx
# need xz to work with ubuntu images
# https://bugzilla.redhat.com/show_bug.cgi?id=1045220
Requires: xz
Requires: bridge-utils
Requires(post): nftables
Requires(postun): sed
# https://bugzilla.redhat.com/show_bug.cgi?id=1034919
# No longer needed in Fedora because of libcontainer
Provides: lxc-docker = %{version}
Provides: docker-swarm = %{EVRD}
# compat with Docker repos for RH
Provides: docker-ce = %{EVRD}
#Recommends: (%{name}-fish-completion if fish)
#Recommends: (%{name}-zsh-completion if zsh)
#Recommends: (%{name}-vim if vim)
%description
Docker is an open-source engine that automates the deployment of any
application as a lightweight, portable, self-sufficient container that will
run virtually anywhere.
Docker containers can encapsulate any payload, and will run consistently on
and between virtually any server. The same container that a developer builds
and tests on a laptop will run at scale, in production*, on VMs, bare-metal
servers, OpenStack clusters, public instances, or combinations of the above.
%package fish-completion
Summary: fish completion files for Docker
Requires: %{repo} = %{EVRD}
Provides: %{repo}-io-fish-completion = %{EVRD}
%description fish-completion
This package installs %{summary}.
%package unit-test
Summary: %{summary} - for running unit tests
%description unit-test
%{summary} - for running unit tests.
%package vim
Summary: vim syntax highlighting files for Docker
Requires: %{repo} = %{EVRD}
Requires: vim
Provides: %{repo}-io-vim = %{EVRD}
%description vim
This package installs %{summary}.
%package zsh-completion
Summary: zsh completion files for Docker
Requires: %{repo} = %{EVRD}
Requires: zsh
Provides: %{repo}-io-zsh-completion = %{EVRD}
%description zsh-completion
This package installs %{summary}.
%prep
%setup -qn moby-%{version}
tar xf %{SOURCE10}
tar xf %{SOURCE11}
mv tini-%{tini_version} tini
tar xf %{SOURCE12}
#tar xf %{SOURCE13}
#mv buildx-%{buildx_version} buildx
#find . -name "*~" |xargs rm || :
# Needs to be done after unpacking extra bits, given we may want
# to patch tini -- so no %%autosetup
#autopatch -p1
%apply_patches
%build
mkdir -p GO/src/github.com/{docker,krallin}
ln -s $(pwd)/cli-%{version} GO/src/github.com/docker/cli
ln -s $(pwd)/libnetwork-master GO/src/github.com/docker/libnetwork
ln -s $(pwd)/tini GO/src/github.com/krallin/tini
ln -s $(pwd) GO/src/github.com/docker/docker
export DOCKER_GITCOMMIT="%{shortcommit}"
export DOCKER_CLI_EXPERIMENTAL=enabled
export TMP_GOPATH="$(pwd)/GO"
export GOPATH=%{gopath}:"$(pwd)/GO"
export GO111MODULE=off
# docker-init
cd tini
%cmake
%make_build tini-static
cd ../..
# dockerd
DOCKER_BUILDTAGS='selinux seccomp journald' VERSION=%{moby_version} hack/make.sh dynbinary
# docker-proxy
cd libnetwork
go build -ldflags='-linkmode=external' github.com/docker/libnetwork/cmd/proxy
cd ..
# cli
cd cli-%{version}
DISABLE_WARN_OUTSIDE_CONTAINER=1 make VERSION=%{moby_version} LDFLAGS="-linkmode=external" dynbinary
cd ..
# buildx
# buildx move to docker-buildx package
%install
# install binaries
install -d %{buildroot}%{_bindir}
install -p -m 755 cli-%{version}/build/docker-linux-* %{buildroot}%{_bindir}/docker
install -d %{buildroot}%{_sbindir}
install -p -m 755 bundles/dynbinary-daemon/dockerd %{buildroot}%{_sbindir}/dockerd
install -p -m 755 libnetwork/proxy %{buildroot}%{_bindir}/docker-proxy
install -p -m 755 tini/build/tini-static %{buildroot}%{_bindir}/docker-init
install -d %{buildroot}%{_dockerpluginsdir}
# Place to store images
install -d %{buildroot}%{_var}/lib/docker
install -d %{buildroot}%{_sysconfdir}/docker
# (tpg) we are using nftables
# (bero) but for reasons yet to be determined, that prevents containers
# from having net access -- allow them to keep using iptables for now
cat > %{buildroot}%{_sysconfdir}/docker/daemon.json << 'EOF'
{
"iptables": true,
"default-runtime": "crun",
"runtimes": {
"crun": {
"path": "/usr/bin/crun"
}
}
}
EOF
install -D -p -m 755 %{SOURCE14} %{buildroot}%{_sysconfdir}/nftables/%{name}.nft
# install bash completion
install -d %{buildroot}%{_sysconfdir}/bash_completion.d
install -p -m 644 cli-%{version}/contrib/completion/bash/docker %{buildroot}%{_sysconfdir}/bash_completion.d/docker.bash
# install zsh completion
install -d %{buildroot}%{_datadir}/zsh/site-functions
install -p -m 644 cli-%{version}/contrib/completion/zsh/_docker %{buildroot}%{_datadir}/zsh/site-functions
# install fish completion
# create, install and own /usr/share/fish/vendor_completions.d until
# upstream fish provides it
install -dp %{buildroot}%{_datadir}/fish/vendor_completions.d
install -p -m 644 cli-%{version}/contrib/completion/fish/%{repo}.fish %{buildroot}%{_datadir}/fish/vendor_completions.d
# install udev rules
install -d %{buildroot}%{_udevrulesdir}
install -p -m 644 contrib/udev/80-docker.rules %{buildroot}%{_udevrulesdir}
# install storage dir
install -d -m 700 %{buildroot}%{_var}/lib/docker
# install systemd/init scripts
install -d %{buildroot}%{_unitdir}
install -p -m 644 %{SOURCE1} %{SOURCE7} %{buildroot}%{_unitdir}
# for additional args
install -d %{buildroot}%{_sysconfdir}/sysconfig/
install -p -m 644 %{SOURCE2} %{buildroot}%{_sysconfdir}/sysconfig/%{repo}
install -p -m 644 %{SOURCE6} %{buildroot}%{_sysconfdir}/sysconfig/%{repo}-network
install -p -m 644 %{SOURCE3} %{buildroot}%{_sysconfdir}/sysconfig/%{repo}-storage
#network cleanup
install -d %{buildroot}%{_sbindir}
install -p -m 755 %{SOURCE8} %{buildroot}%{_sbindir}/docker-network-cleanup
install -d %{buildroot}%{_presetdir}
cat > %{buildroot}%{_presetdir}/86-docker.preset << EOF
enable docker.socket
EOF
install -d %{buildroot}%{_sysconfdir}/modules-load.d/
install -p -m 644 %{SOURCE9} %{buildroot}%{_sysconfdir}/modules-load.d/overlay.conf
install -Dpm 644 %{SOURCE4} %{buildroot}%{_sysusersdir}/%{name}.conf
#%%check
# This is completely unstable so I deactivate it for now.
#[ ! -w /run/%{repo}.sock ] || {
#mkdir test_dir
#pushd test_dir
#git clone https://github.com/lsm5/docker.git -b fedora-1.10
#pushd %{repo}
#make test
#popd
#popd
#}
%pre
%sysusers_create_package %{name} %{SOURCE4}
%post
%systemd_post docker
if [ -e %{_sysconfdir}/sysconfig/nftables.conf ] && ! grep -q docker.nft %{_sysconfdir}/sysconfig/nftables.conf; then
printf '%s\n' 'include "/etc/nftables/docker.nft"' >> %{_sysconfdir}/sysconfig/nftables.conf
fi
%preun
%systemd_preun docker
%postun
%systemd_postun_with_restart docker
if [ $1 == 0 ] && [ -e %{_sysconfdir}/sysconfig/nftables.conf ]; then
sed -i -e '/docker\.nft/d' %{_sysconfdir}/sysconfig/nftables.conf
fi
%files
%config(noreplace) %{_sysconfdir}/sysconfig/%{repo}
%config(noreplace) %{_sysconfdir}/sysconfig/%{repo}-network
%config(noreplace) %{_sysconfdir}/sysconfig/%{repo}-storage
%{_sysusersdir}/%{name}.conf
%dir %{_sysconfdir}/docker
%config(noreplace) %{_sysconfdir}/docker/daemon.json
%config(noreplace) %{_sysconfdir}/nftables/%{name}.nft
%{_bindir}/docker
%{_bindir}/docker-proxy
%{_bindir}/docker-init
%{_sbindir}/docker-network-cleanup
%{_sbindir}/dockerd
%{_presetdir}/86-docker.preset
%{_unitdir}/docker.service
%{_unitdir}/docker.socket
%dir %{_sysconfdir}/bash_completion.d
%{_sysconfdir}/bash_completion.d/docker.bash
%dir %{_var}/lib/docker
%dir %{_udevrulesdir}
%{_udevrulesdir}/80-docker.rules
%{_sysconfdir}/modules-load.d/overlay.conf
%files fish-completion
%dir %{_datadir}/fish/vendor_completions.d/
%{_datadir}/fish/vendor_completions.d/%{repo}.fish
%files zsh-completion
%{_datadir}/zsh/site-functions/_%{repo}
Reference in a new issue View git blame Copy permalink