mirror of
https://github.com/containers/podman.git
synced 2025-12-11 17:27:19 +08:00
The fedora minimal 39 image has been updated on the fedora registry and removed the `useradd` binary. Since we were pulling by tag and not by digest, updates to images outside of our control always entail a certain risk - and now it bit us. To fix it, try to move as many users of `useradd` to _our_ CITEST_IMAGE and migrate the code where necessary to this Alpine-based tooling. However, the Alpine-based `adduser` binary (not useradd!) doesn't work well when being executed as a non-root user and will just error out. Hence, move the fedora minimal image back to version 34 which is still including the `useradd` binary. Ultimately, all images on public registries should be pulled via digest to make sure we pin them down. I refrain from doing this now to make sure we can cherry-pick this PR to older branches and get things back into a working state ASAP. Fixes: #20119 Signed-off-by: Valentin Rothberg <vrothberg@redhat.com>
34 lines
1.8 KiB
Go
34 lines
1.8 KiB
Go
package integration
|
|
|
|
var (
|
|
REDIS_IMAGE = "quay.io/libpod/redis:alpine" //nolint:revive,stylecheck
|
|
fedoraMinimal = "registry.fedoraproject.org/fedora-minimal:34"
|
|
ALPINE = "quay.io/libpod/alpine:latest"
|
|
ALPINELISTTAG = "quay.io/libpod/alpine:3.10.2"
|
|
ALPINELISTDIGEST = "quay.io/libpod/alpine@sha256:fa93b01658e3a5a1686dc3ae55f170d8de487006fb53a28efcd12ab0710a2e5f"
|
|
ALPINEAMD64DIGEST = "quay.io/libpod/alpine@sha256:634a8f35b5f16dcf4aaa0822adc0b1964bb786fca12f6831de8ddc45e5986a00"
|
|
ALPINEAMD64ID = "961769676411f082461f9ef46626dd7a2d1e2b2a38e6a44364bcbecf51e66dd4"
|
|
ALPINEARM64DIGEST = "quay.io/libpod/alpine@sha256:f270dcd11e64b85919c3bab66886e59d677cf657528ac0e4805d3c71e458e525"
|
|
ALPINEARM64ID = "915beeae46751fc564998c79e73a1026542e945ca4f73dc841d09ccc6c2c0672"
|
|
INFRA_IMAGE = "registry.k8s.io/pause:3.2" //nolint:revive,stylecheck
|
|
BB = "quay.io/libpod/busybox:latest"
|
|
HEALTHCHECK_IMAGE = "quay.io/libpod/alpine_healthcheck:latest" //nolint:revive,stylecheck
|
|
fedoraToolbox = "registry.fedoraproject.org/fedora-toolbox:36"
|
|
volumeTest = "quay.io/libpod/volume-plugin-test-img:20220623"
|
|
|
|
// This image has seccomp profiles that blocks all syscalls.
|
|
// The intention behind blocking all syscalls is to prevent
|
|
// regressions in the future. The required syscalls can vary
|
|
// depending on which runtime we're using.
|
|
alpineSeccomp = "quay.io/libpod/alpine-with-seccomp:label"
|
|
// This image has a bogus/invalid seccomp profile which should
|
|
// yield a json error when being read.
|
|
alpineBogusSeccomp = "quay.io/libpod/alpine-with-bogus-seccomp:label"
|
|
|
|
// ImageCacheDir is initialized at runtime.
|
|
// e.g., filepath.Join(os.TempDir(), "imagecachedir")
|
|
// This directory should be used by per-user.
|
|
// Note: "ImageCacheDir" has nothing to do with "PODMAN_TEST_IMAGE_CACHE_DIR".
|
|
ImageCacheDir = ""
|
|
)
|