Repository navigation
containers: add build images and the Build Images workflow - #62
Open
KonradBreitsprecherBkd wants to merge 2 commits into
Open
KonradBreitsprecherBkd wants to merge 2 commits into
KonradBreitsprecherBkd wants to merge 2 commits into
Conversation
The packaging containers move into this repository, so sil-kit-pkg no longer depends on sil-kit-docker-build or on internal images: - ubuntu-2004: deb and tarball for Ubuntu 20.04 (package list as in ptv/docker-images dockerfiles/sil-kit-build/ubuntu-2004) - ubuntu-2204: arm64 deb - centos-7: el7 tarball with devtoolset-11 and rh-python38 - alma-8: el8 tarball with gcc-toolset-12 - fedora-40: el9 rpm via mock (from sil-kit-docker-build packaging-fedora) Only public sources: base images pinned by digest, apt from a fixed snapshot.ubuntu.com timestamp, CentOS 7 from vault.centos.org, CMake from the Kitware release and ninja from the PyPI wheel, both checked by sha256. The ninja release binary needs GLIBCXX_3.4.21 and does not run on CentOS 7. build-images.yml builds all images on pull requests and pushes them to ghcr.io/vectorgrp/sil-kit-pkg/<name> (tags main and sha-<short>) on main. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
This was referenced Oct 27, 2026
snapshot.ubuntu.com does not serve ubuntu-ports (401), so the arm64 image reads the regular ports archive; its digest in release/packages.json pins it. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
The packaging containers move into this repository, so the packages no longer depend on sil-kit-docker-build (outdated, private images) or on internal images. Part 1 of 3, followed by #64 (tarballs) which builds on these images.
Images
containers/ubuntu-2004ubuntu:20.04ubuntu-2204ubuntu:22.04centos-7centos:7alma-8almalinux:8fedora-40fedora:40The Ubuntu package lists follow
ptv/docker-imagesdockerfiles/sil-kit-build, which is what the delivery builds use today.Only public, pinned sources
snapshot.ubuntu.comtimestamp.ca-certificatescomes from the regular archive first, because the snapshot is https only.vault.centos.org(base, extras, SCLo), which is frozen.GLIBCXX_3.4.21and does not run on CentOS 7./etc/sil-kit-pkg-image-packages.txt..gitattributeskeeps*.shandDockerfileat LF, so builds from Windows checkouts work.Workflow
build-images.ymlbuilds all images on pull requests that touchcontainers/**. Onmainit pushes them toghcr.io/vectorgrp/sil-kit-pkg/<name>(:main,:sha-<short>) and writes the digests to the job summary.After merging
GITHUB_TOKENand works either way. Public is for people who want to reproduce a build.release/packages.json(Linux tarballs for Ubuntu 20.04, CentOS 7, AlmaLinux 8 and release/packages.json #64).Tested
I built
ubuntu-2004,centos-7andalma-8locally with podman. Locally the corporate CA had to be injected temporarily; the committed Dockerfiles do not contain it. All three were then used for full package builds (see #64).ubuntu-2204(arm64) andfedora-40are only built by CI.🤖 Generated with Claude Code