50 lines
1.9 KiB
Docker
50 lines
1.9 KiB
Docker
FROM jenkins/inbound-agent:latest-bookworm-jdk17 AS jnlp
|
|
|
|
# USER jenkins
|
|
USER root
|
|
RUN apt-get update && \
|
|
apt-get -y install ca-certificates curl net-tools pkg-config python3-dev python3-pip \
|
|
python3-setuptools python3.11 python3.11-venv && \
|
|
apt -y install gdebi && \
|
|
curl -O https://www.princexml.com/download/prince_16.1-1_debian12_amd64.deb && \
|
|
gdebi --n ./prince_16.1-1_debian12_amd64.deb && \
|
|
apt-get clean && \
|
|
rm -rf /var/lib/apt/lists/* /var/cache/apt/archives/*
|
|
|
|
ARG DOCKER_VERSION=24.0.6
|
|
ARG DOCKER_COMPOSE_VERSION=1.21.0
|
|
ARG DOCKER_BUILDX_VERSION=0.30.1
|
|
RUN curl -fsSL https://download.docker.com/linux/static/stable/`uname -m`/docker-$DOCKER_VERSION.tgz \
|
|
| tar --strip-components=1 -xz -C /usr/local/bin docker/docker && \
|
|
curl -fsSL https://github.com/docker/compose/releases/download/$DOCKER_COMPOSE_VERSION/docker-compose-`uname -s`-`uname -m` > /usr/local/bin/docker-compose && chmod +x /usr/local/bin/docker-compose
|
|
|
|
# Enable buildx plugin
|
|
## buildx is released as amd64, and uname calls it x86_64
|
|
RUN uname -m > /tmp/arch \
|
|
&& sed -i 's/x86_64/amd64/g' /tmp/arch \
|
|
&& mkdir -p /usr/libexec/docker/cli-plugins/
|
|
|
|
RUN curl -fsSL https://github.com/docker/buildx/releases/download/v$DOCKER_BUILDX_VERSION/buildx-v$DOCKER_BUILDX_VERSION.linux-`cat /tmp/arch` > /usr/libexec/docker/cli-plugins/docker-buildx
|
|
RUN chmod +x /usr/libexec/docker/cli-plugins/docker-buildx \
|
|
&& docker buildx install \
|
|
&& rm /tmp/arch
|
|
|
|
# RUN docker buildx create \
|
|
# --name jenkinsbuilder \
|
|
# --driver docker-container \
|
|
# --bootstrap --use
|
|
|
|
RUN groupadd -g 988 docker # 988 matches the docker group on candace
|
|
RUN usermod -aG docker jenkins
|
|
|
|
COPY ca-chain.crt /usr/local/share/ca-certificates/ca-chain.crt
|
|
RUN /usr/sbin/update-ca-certificates
|
|
|
|
USER jenkins
|
|
|
|
RUN mkdir $HOME/.ssh/
|
|
RUN touch $HOME/.ssh/known_hosts
|
|
RUN ssh-keyscan github.com >> ~/.ssh/known_hosts
|
|
|
|
ENTRYPOINT ["/usr/local/bin/jenkins-agent"]
|