ARG LUET_VERSION=0.19.2

ARG BASE_IMAGE=opensuse/leap:15.3

FROM golang as builder

COPY ./ /work

WORKDIR /work/cli

RUN CGO_ENABLED=0 go build -o c3os

FROM quay.io/luet/base:$LUET_VERSION AS luet

FROM $BASE_IMAGE

ARG K3S_VERSION

ARG C3OS_VERSION

ARG ARCH=amd64

ENV ARCH=${ARCH}

# Enable cosign keyless verify

# Temporary disable

ENV COSIGN_EXPERIMENTAL=0

# Repo containing signatures

ENV COSIGN_REPOSITORY=raccos/releases-green

# Skip this repo artifacts verify as they are not signed

ENV COSIGN_SKIP=".*quay.io/c3os/.*"

COPY --from=builder /work/cli/c3os /usr/bin/c3os

RUN zypper ar -G https://download.opensuse.org/repositories/utilities/openSUSE_Leap_15.3/utilities.repo && zypper ref

RUN zypper in -y \

bash-completion \

conntrack-tools \

coreutils \

curl \

device-mapper \

dosfstools \

dracut \

e2fsprogs \

findutils \

gawk \

gptfdisk \

grub2-i386-pc \

grub2-x86_64-efi \

nohang \

haveged \

htop \

iproute2 \

iptables \

iputils \

issue-generator \

jq \

kernel-default \

kernel-firmware-all \

less \

lsscsi \

lvm2 \

mdadm \

multipath-tools \

nano \

nethogs \

nfs-utils \

open-iscsi \

open-vm-tools \

parted \

pigz \

policycoreutils \

procps \

python-azure-agent \

qemu-guest-agent \

rng-tools \

rsync \

squashfs \

strace \

systemd \

systemd-sysvinit \

tar \

timezone \

tmux \

vim \

which && zypper cc

# Copy the luet config file pointing to the upgrade repository

COPY repositories.yaml /etc/luet/luet.yaml

# Copy luet from the official images

COPY --from=luet /usr/bin/luet /usr/bin/luet

# Install cosign packages

RUN luet install -y meta/cos-verify

RUN luet install -y \

meta/cos-core \

utils/edgevpn \

systemd-service/edgevpn \

utils/k9s \

container/kubectl \

utils/nerdctl && luet cleanup

ENV INSTALL_K3S_VERSION=${K3S_VERSION}

ENV INSTALL_K3S_BIN_DIR="/usr/bin"

RUN curl -sfL https://get.k3s.io > installer.sh

RUN INSTALL_K3S_SKIP_START="true" INSTALL_K3S_SKIP_ENABLE="true" sh installer.sh

RUN INSTALL_K3S_SKIP_START="true" INSTALL_K3S_SKIP_ENABLE="true" sh installer.sh agent

RUN rm -rf installer.sh

RUN systemctl enable nohang

COPY overlay/files/ /

RUN mkinitrd

ARG OS_NAME=c3OS

ARG OS_VERSION=${K3S_VERSION}${C3OS_VERSION}

ARG OS_REPO=quay.io/c3os/c3os

ARG OS_LABEL=latest

RUN envsubst >/etc/os-release </usr/lib/os-release.tmpl && \

rm /usr/lib/os-release.tmpl