Skip to content

building.md

Latest commit

 

History

History
54 lines (40 loc) · 1.76 KB

building.md

File metadata and controls

54 lines (40 loc) · 1.76 KB

Building

Preparation

Unfortunately, even building the OKD node image currently requires access to internal repos.

This means that the first step is to have access to the necessary repo files. First, connect to the Red Hat VPN, then clone this git repository containing the canonical yum repo files used to compose RHEL CoreOS. (Ability to clone this repo also requires that you have the internal Red Hat IT CA certificate installed, which is also needed for the build step below.)

Then, combine all the repo files into a single one, e.g.:

cat *.repo > all.repo

You will also need either an OpenShift pull secret to be able to pull the base images or a locally built base SCOS or RHCOS image (see building instructions in that repo).

Building

If the base image is SCOS, then the OKD node image is built (stream-coreos). If the base image is RHCOS, then the OCP node image is built (rhel-coreos). The default base image is SCOS.

To build SCOS:

podman build . --secret id=yumrepos,src=/path/to/all.repo \
  -v /etc/pki/ca-trust:/etc/pki/ca-trust:ro \
  --security-opt label=disable -t localhost/stream-coreos:4.21

To build RHCOS, the command is identical, but you must pass in the RHCOS base image using --from:

podman build --from quay.io/openshift-release-dev/ocp-v4.0-art-dev:rhel-9.6-coreos ...

To build from a local OCI archive (e.g. from a cosa workdir), you can use the oci-archive transport:

podman build --from oci-archive:$(ls builds/latest/x86_64/*.ociarchive) ...