docker-node (dind)
Published 2025-04-12 23:29:06 +09:00 by noyciy7037
Installation
docker pull code.wikiwiki.li/actions/docker-node:dind
sha256:4435e1ad3ff5321071b0d582e03ea42e4c00502c8998cb2354dbed54cdf4063b
Image Layers
ADD alpine-minirootfs-3.21.3-x86_64.tar.gz / # buildkit |
CMD ["/bin/sh"] |
RUN /bin/sh -c apk add --no-cache ca-certificates openssh-client git # buildkit |
RUN /bin/sh -c [ -e /etc/nsswitch.conf ] && grep '^hosts: files dns' /etc/nsswitch.conf # buildkit |
RUN /bin/sh -c set -eux; addgroup -g 2375 -S docker # buildkit |
ENV DOCKER_VERSION=28.0.4 |
RUN /bin/sh -c set -eux; apkArch="$(apk --print-arch)"; case "$apkArch" in 'x86_64') url='https://download.docker.com/linux/static/stable/x86_64/docker-28.0.4.tgz'; ;; 'armhf') url='https://download.docker.com/linux/static/stable/armel/docker-28.0.4.tgz'; ;; 'armv7') url='https://download.docker.com/linux/static/stable/armhf/docker-28.0.4.tgz'; ;; 'aarch64') url='https://download.docker.com/linux/static/stable/aarch64/docker-28.0.4.tgz'; ;; *) echo >&2 "error: unsupported 'docker.tgz' architecture ($apkArch)"; exit 1 ;; esac; wget -O 'docker.tgz' "$url"; tar --extract --file docker.tgz --strip-components 1 --directory /usr/local/bin/ --no-same-owner 'docker/docker' ; rm docker.tgz; docker --version # buildkit |
ENV DOCKER_BUILDX_VERSION=0.22.0 |
RUN /bin/sh -c set -eux; apkArch="$(apk --print-arch)"; case "$apkArch" in 'x86_64') url='https://github.com/docker/buildx/releases/download/v0.22.0/buildx-v0.22.0.linux-amd64'; sha256='805195386fba0cea5a1487cf0d47da82a145ea0a792bd3fb477583e2dbcdcc2f'; ;; 'armhf') url='https://github.com/docker/buildx/releases/download/v0.22.0/buildx-v0.22.0.linux-arm-v6'; sha256='24307aab46799cee78af26f3de11e82f029e6bbf36ece9b09335dbcebbca8bc7'; ;; 'armv7') url='https://github.com/docker/buildx/releases/download/v0.22.0/buildx-v0.22.0.linux-arm-v7'; sha256='de55bb6389524edd0b707d4ff63118e63ec015379e3e4daf94ca6127878dbe04'; ;; 'aarch64') url='https://github.com/docker/buildx/releases/download/v0.22.0/buildx-v0.22.0.linux-arm64'; sha256='6e9e455b5ec1c7ac708f2640a86c5cecce38c72e48acff6cb219dfdfa2dda781'; ;; 'ppc64le') url='https://github.com/docker/buildx/releases/download/v0.22.0/buildx-v0.22.0.linux-ppc64le'; sha256='f47d600506783d9ee47bfca3287fdeb17123ac59c5a046393bd5cacb3050d1b5'; ;; 'riscv64') url='https://github.com/docker/buildx/releases/download/v0.22.0/buildx-v0.22.0.linux-riscv64'; sha256='812cffddafac44c0ff7a86221c321763c49a32ea65e1194ef489ba1ef5e47e70'; ;; 's390x') url='https://github.com/docker/buildx/releases/download/v0.22.0/buildx-v0.22.0.linux-s390x'; sha256='bfc6cfb663d1b6e2ed6ff1bf0f820024eac67145d29cb33cb24790b18f23fff4'; ;; *) echo >&2 "warning: unsupported 'docker-buildx' architecture ($apkArch); skipping"; exit 0 ;; esac; wget -O 'docker-buildx' "$url"; echo "$sha256 *"'docker-buildx' | sha256sum -c -; plugin='/usr/local/libexec/docker/cli-plugins/docker-buildx'; mkdir -p "$(dirname "$plugin")"; mv -vT 'docker-buildx' "$plugin"; chmod +x "$plugin"; docker buildx version # buildkit |
ENV DOCKER_COMPOSE_VERSION=2.35.0 |
RUN /bin/sh -c set -eux; apkArch="$(apk --print-arch)"; case "$apkArch" in 'x86_64') url='https://github.com/docker/compose/releases/download/v2.35.0/docker-compose-linux-x86_64'; sha256='dba1915cf2f282527f5df0cd7a94b9503047ed200317801853abe8f22c8cd493'; ;; 'armhf') url='https://github.com/docker/compose/releases/download/v2.35.0/docker-compose-linux-armv6'; sha256='e7ea8760cb2b20808bdea94b15bccdd91b80045e3f0ae9efb7d4082ea1b98328'; ;; 'armv7') url='https://github.com/docker/compose/releases/download/v2.35.0/docker-compose-linux-armv7'; sha256='9f9831ef951fbb1eaff7dfd17e4ca2e3522a9e66670e81075b68a25fbbfc0ee2'; ;; 'aarch64') url='https://github.com/docker/compose/releases/download/v2.35.0/docker-compose-linux-aarch64'; sha256='a08457d837d5d4ed7c079f0721dc51ef3f21ce2d9654a6abd44944b74d975cd2'; ;; 'ppc64le') url='https://github.com/docker/compose/releases/download/v2.35.0/docker-compose-linux-ppc64le'; sha256='7dfe56cde21ae0d4b96083629b5142b1f00b51baf6d3a695c0ac700822175b13'; ;; 'riscv64') url='https://github.com/docker/compose/releases/download/v2.35.0/docker-compose-linux-riscv64'; sha256='85ecd8c7ff0218a3b66a4ddcc3ef66d28b26ce9ec310531b56416cb8d6304b03'; ;; 's390x') url='https://github.com/docker/compose/releases/download/v2.35.0/docker-compose-linux-s390x'; sha256='f9bc89ad8d048690f3cba9c05df5bddd9d0f5dcb03bfd41ceb613d7e560a76a0'; ;; *) echo >&2 "warning: unsupported 'docker-compose' architecture ($apkArch); skipping"; exit 0 ;; esac; wget -O 'docker-compose' "$url"; echo "$sha256 *"'docker-compose' | sha256sum -c -; plugin='/usr/local/libexec/docker/cli-plugins/docker-compose'; mkdir -p "$(dirname "$plugin")"; mv -vT 'docker-compose' "$plugin"; chmod +x "$plugin"; ln -sv "$plugin" /usr/local/bin/; docker-compose --version; docker compose version # buildkit |
COPY modprobe.sh /usr/local/bin/modprobe # buildkit |
COPY docker-entrypoint.sh /usr/local/bin/ # buildkit |
ENV DOCKER_TLS_CERTDIR=/certs |
RUN /bin/sh -c mkdir /certs /certs/client && chmod 1777 /certs /certs/client # buildkit |
ENTRYPOINT ["docker-entrypoint.sh"] |
CMD ["sh"] |
RUN /bin/sh -c set -eux; apk add --no-cache btrfs-progs e2fsprogs e2fsprogs-extra git ip6tables iptables openssl pigz shadow-uidmap xfsprogs xz zfs ; # buildkit |
RUN /bin/sh -c set -eux; apk add --no-cache iptables-legacy; mkdir -p /usr/local/sbin/.iptables-legacy; for f in iptables iptables-save iptables-restore ip6tables ip6tables-save ip6tables-restore ; do b="$(command -v "${f/tables/tables-legacy}")"; "$b" --version; ln -svT "$b" "/usr/local/sbin/.iptables-legacy/$f"; done; export PATH="/usr/local/sbin/.iptables-legacy:$PATH"; iptables --version | grep legacy # buildkit |
RUN /bin/sh -c set -eux; addgroup -S dockremap; adduser -S -G dockremap dockremap; echo 'dockremap:165536:65536' >> /etc/subuid; echo 'dockremap:165536:65536' >> /etc/subgid # buildkit |
RUN /bin/sh -c set -eux; apkArch="$(apk --print-arch)"; case "$apkArch" in 'x86_64') url='https://download.docker.com/linux/static/stable/x86_64/docker-28.0.4.tgz'; ;; 'armhf') url='https://download.docker.com/linux/static/stable/armel/docker-28.0.4.tgz'; ;; 'armv7') url='https://download.docker.com/linux/static/stable/armhf/docker-28.0.4.tgz'; ;; 'aarch64') url='https://download.docker.com/linux/static/stable/aarch64/docker-28.0.4.tgz'; ;; *) echo >&2 "error: unsupported 'docker.tgz' architecture ($apkArch)"; exit 1 ;; esac; wget -O 'docker.tgz' "$url"; tar --extract --file docker.tgz --strip-components 1 --directory /usr/local/bin/ --no-same-owner --exclude 'docker/docker' ; rm docker.tgz; dockerd --version; containerd --version; ctr --version; runc --version # buildkit |
ENV DIND_COMMIT=8d9e3502aba39127e4d12196dae16d306f76993d |
RUN /bin/sh -c set -eux; wget -O /usr/local/bin/dind "https://raw.githubusercontent.com/docker/docker/${DIND_COMMIT}/hack/dind"; chmod +x /usr/local/bin/dind # buildkit |
COPY dockerd-entrypoint.sh /usr/local/bin/ # buildkit |
VOLUME [/var/lib/docker] |
EXPOSE map[2375/tcp:{} 2376/tcp:{}] |
ENTRYPOINT ["dockerd-entrypoint.sh"] |
CMD [] |
/bin/sh -c apk add --no-cache nodejs bash |