1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
|
#!/bin/bash -ex
# Copyright (c) Contributors to the Apptainer project, established as
# Apptainer a Series of LF Projects LLC.
# For website terms of use, trademark policy, privacy policy and other
# project policies see https://lfprojects.org/policies
# this script runs as root under docker --privileged
OS_MAJOR=$(grep ^VERSION_ID /etc/os-release | cut -d'=' -f2 | sed 's/\"//gI' | cut -d'.' -f1)
OS_NAME=$(grep ^NAME /etc/os-release | cut -d '=' -f2 | sed 's/\"//gI;s/ .*//')
OS_VERSION=$(grep ^VERSION_ID /etc/os-release | cut -d'=' -f2 | sed 's/\"//gI')
# install dependencies
apt-get update
export DEBIAN_FRONTEND=noninteractive
apt-get install -y \
build-essential \
libseccomp-dev \
uidmap \
fakeroot \
cryptsetup \
tzdata \
curl wget git
apt-get install -y \
devscripts \
debhelper \
dh-autoreconf \
help2man \
libarchive-dev \
libssl-dev \
uuid-dev \
golang-go \
dh-apparmor
# for squashfs-tools and squashfuse_ll build
apt-get install -y autoconf automake libtool pkg-config libfuse3-dev \
zlib1g-dev liblzo2-dev liblz4-dev liblzma-dev libzstd-dev
# for libsubid support in Ubuntu 24.04+ or Debian 12+
if { [ $OS_NAME = "Ubuntu" ] && [ $OS_MAJOR -ge 24 ]; } || \
{ [ $OS_NAME = "Debian" ] && [ $OS_MAJOR -ge 12 ]; }; then
apt-get install -y libsubid-dev
fi
# move source code down a level because debuild writes into parent dir
shopt -s extglob
mkdir src
mv .??* !(src) src
# switch to an unprivileged user with sudo privileges
apt-get install -y sudo
if [[ $OS_NAME = "Ubuntu" ]] && { [ $OS_MAJOR -gt 23 ] || [[ $OS_VERSION = "23.10" ]]; }; then
# uid 1000 is occupied by user 'ubuntu' in ubuntu 24.04, here using a different uid = 1001
useradd -u 1001 --create-home -s /bin/bash testuser
else
useradd -u 1000 --create-home -s /bin/bash testuser
fi
echo "Defaults:testuser env_keep=DOCKER_HOST" >>/etc/sudoers
echo "testuser ALL=(ALL) NOPASSWD: ALL" >>/etc/sudoers
mkdir -p /local
chown -R testuser . /local
cd src
# Be careful not to use unescaped single quotes in these commands
su testuser -c '
set -x
set -e
cp -r dist/debian .
GOSRC="go$(scripts/get-min-go-version).src.tar.gz"
if [ -n "$GOSRC" ]; then
curl -f -L -sS -o debian/$GOSRC https://golang.org/dl/$GOSRC
if [ -n "'$GO_ARCH'" ]; then
# Download and install binary too to avoid debuild having to compile the
# go toolchain from source
GOBIN="$(echo "$GOSRC"|sed "s/\.src./.'$GO_ARCH'./")"
curl -f -L -sS https://golang.org/dl/$GOBIN | tar -xzf - -C /local
PATH=/local/go/bin:$PATH
fi
fi
go version
./scripts/download-dependencies debian
export DEB_FULLNAME="'"${DEB_FULLNAME:-CI Test}"'"
export DEBEMAIL="'${DEBEMAIL:-citest@example.com}'"
debuild --prepend-path $PATH --build=binary --no-sign --lintian-opts --display-info --show-overrides
sudo dpkg -i ../apptainer*.deb
cat /etc/apparmor.d/apptainer
apptainer exec oras://ghcr.io/apptainer/alpine:3.15.0 /bin/true
apptainer exec --userns oras://ghcr.io/apptainer/alpine:3.15.0 /bin/true
apptainer exec --fakeroot oras://ghcr.io/apptainer/alpine:3.15.0 /bin/true
'
|
