centos-atomic-container.ks

# This is a minimal CentOS install designed to serve as a Docker base image.
#
# To keep this image minimal it only installs English language. You need to change
# dnf configuration in order to enable other languages.
#
###  Hacking on this image ###
# We assume this runs on a CentOS Linux 7/x86_64 machine, with virt ( or nested virt ) 
# enabled, use the build.sh script to build your own for testing

# text don't use cmdline -- https://github.com/rhinstaller/anaconda/issues/931
cmdline
bootloader --disabled
timezone --isUtc --nontp Etc/UTC
rootpw --lock --iscrypted locked

keyboard us
network --bootproto=dhcp --device=link --activate --onboot=on
poweroff

zerombr
clearpart --all
part /boot/efi --fstype="vfat" --size=100
part / --fstype ext4 --grow

# Add nessasary repo for microdnf
repo --name="microdnf" --baseurl="https://buildlogs.centos.org/cah-0.0.1" --cost=100
repo --name="updates" --baseurl="http://mirror.centos.org/centos/7/updates/x86_64"

%packages --excludedocs --instLangs=en --nocore
bash
centos-release
microdnf
-kernel
-e2fsprogs
-libss # used by e2fsprogs
-fuse-libs
-audit-libs
-diffutils
-libmnl
-libnetfilter_conntrack
-iproute
-kmod-libs
-snappy
-libsemanage
-hardlink
-lzo
-gzip
-libblkid
-cracklib-dicts
-pam
-procps-ng
-binutils
-bind-libs-lite
-dhcp-common
-dbus-libs
-device-mapper
-cryptsetup-libs
-kmod
-dbus
-initscripts
-dracut-network
-ethtool
-gpg-pubkey
-basesystem
-bind-license
-libuuid
-cpio
-libnfnetlink
-hostname
-iptables
-tar
-GeoIP
-sysvinit-tools
-ustr
-qrencode-libs
-shadow-utils
-cracklib
-libmount
-libpwquality
-systemd-libs
-libutempter
-dhcp-libs
-libuser
-kpartx
-device-mapper-libs
-dracut
-systemd
-iputils
-dhclient
-kexec-tools
-dosfstools

%end

%post --interpreter=/usr/bin/sh --nochroot --erroronfail --log=/mnt/sysimage/root/anaconda-post-nochroot.log
set -eux

# Set install langs macro so that new rpms that get installed will
# only install langs that we limit it to.
LANG="en_US"
echo "%_install_langs $LANG" > /etc/rpm/macros.image-language-conf
# https://bugzilla.redhat.com/show_bug.cgi?id=1400682
echo "Import RPM GPG key"
releasever=$(rpm -q --qf '%{version}\n' centos-release)
rpm --import /etc/pki/rpm-gpg/RPM-GPG-KEY-CentOS-$releasever
echo "# fstab intentionally empty for containers" > /etc/fstab

# Remove machine-id on pre generated images
rm -fv /etc/machine-id
touch /etc/machine-id

# remove some random help txt files
rm -fv usr/share/gnupg/help*.txt

# Pruning random things
rm usr/lib/rpm/rpm.daily
rm -rfv usr/lib64/nss/unsupported-tools/  # unsupported

# Statically linked crap
rm -fv usr/sbin/{glibc_post_upgrade.x86_64,sln}
ln usr/bin/ln usr/sbin/sln

# Remove some dnf info
rm -rfv /var/lib/yum

# don't need icons
rm -rfv /usr/share/icons/*

#some random not-that-useful binaries
rm -fv /usr/bin/pinky

# we lose presets by removing /usr/lib/systemd but we do not care
rm -rfv /usr/lib/systemd

# if you want to change the timezone, bind-mount it from the host or reinstall tzdata
rm -fv /etc/localtime
mv /usr/share/zoneinfo/UTC /etc/localtime
rm -rfv  /usr/share/zoneinfo

# Final pruning
rm -rfv var/cache/* var/log/* tmp/*

%end

%post --interpreter=/usr/bin/sh --nochroot --erroronfail --log=/mnt/sysimage/root/anaconda-post-nochroot.log
set -eux

# https://bugzilla.redhat.com/show_bug.cgi?id=1343138
# Fix /run/lock breakage since it's not tmpfs in docker
# This unmounts /run (tmpfs) and then recreates the files
# in the /run directory on the root filesystem of the container
# NOTE: run this in nochroot because "umount" does not exist in chroot
umount /mnt/sysimage/run
# The file that specifies the /run/lock tmpfile is
# /usr/lib/tmpfiles.d/legacy.conf, which is part of the systemd
# rpm that isn't included in this image. We'll create the /run/lock
# file here manually with the settings from legacy.conf
# NOTE: chroot to run "install" because it is not in anaconda env
chroot /mnt/sysimage install -d /run/lock -m 0755 -o root -g root


# See: https://bugzilla.redhat.com/show_bug.cgi?id=1051816
# NOTE: run this in nochroot because "find" does not exist in chroot
KEEPLANG=en_US
for dir in locale i18n; do
    find /mnt/sysimage/usr/share/${dir} -mindepth  1 -maxdepth 1 -type d -not \( -name "${KEEPLANG}" -o -name POSIX \) -exec rm -rfv {} +
done

%end