5c4f09d81b
The ca-certificates in our docker build environments expired on Oct 1 2021. The ca-certificates package needs to be updated within each container. Closes-bug: 1946122 Signed-off-by: Scott Little <scott.little@windriver.com> Change-Id: If9b89d8a13f5924f28857382aee302bec3b0dca5 |
||
---|---|---|
.. | ||
stx-centos | ||
tag-management | ||
base-image-build-centos-dev.cfg | ||
base-image-build-centos-stable.cfg | ||
build-stx-base.sh | ||
build-stx-images.sh | ||
internal-update-stx-image.sh | ||
README | ||
update-stx-image.sh |
## Example commands for building StarlingX images PRIVATE_REGISTRY_USERID=myuser PRIVATE_REGISTRY=xxx.xxx.xxx.xxx:9001 VERSION=2018.11.13 OS=centos OS_VERSION=7.5.1804 BUILD_STREAM=stable HOST_PORT=8088 ## Step 1: Build stx-centos time $MY_REPO/build-tools/build-docker-images/build-stx-base.sh \ --os ${OS} \ --os-version ${OS_VERSION} \ --version ${VERSION} \ --user ${PRIVATE_REGISTRY_USERID} \ --registry ${PRIVATE_REGISTRY} \ --push \ --repo stx-local-build,http://${HOSTNAME}:${HOST_PORT}/${MY_WORKSPACE}/std/rpmbuild/RPMS \ --repo stx-mirror-distro,http://${HOSTNAME}:${HOST_PORT}/${MY_REPO}/cgcs-root/cgcs-${OS}-repo/Binary \ --clean ## Step 2: Build wheels (output as tarball) time $MY_REPO/build-tools/build-wheels/build-wheel-tarball.sh \ --os ${OS} \ --os-version ${OS_VERSION} \ --stream ${BUILD_STREAM} ## Step 3: Build images time $MY_REPO/build-tools/build-docker-images/build-stx-images.sh \ --os ${OS} \ --version ${VERSION} \ --stream ${BUILD_STREAM} \ --base ${PRIVATE_REGISTRY}/${PRIVATE_REGISTRY_USERID}/stx-${OS}:${VERSION} \ --wheels http://${HOSTNAME}:${HOST_PORT}/${MY_WORKSPACE}/std/build-wheels-${OS}-${BUILD_STREAM}/stx-${OS}-${BUILD_STREAM}-wheels.tar \ --user ${PRIVATE_REGISTRY_USERID} \ --registry ${PRIVATE_REGISTRY} \ --push --latest \ --clean ## Note: Verify that lighttpd is not bound to "localhost" vi /etc/lighttpd/lighttpd.conf # server.bind = "localhost" systemctl restart lighttpd ## Note: You may need to add an iptables rule to allow the docker ## containers to access the http server on your host. For example: iptables -I INPUT 6 -i docker0 -p tcp --dport ${HOST_PORT} -m state --state NEW,ESTABLISHED -j ACCEPT