summaryrefslogtreecommitdiff
path: root/base/Containerfile
diff options
context:
space:
mode:
authorseth <[email protected]>2024-01-25 09:20:49 -0500
committerseth <[email protected]>2024-01-25 11:16:13 -0500
commit6a0a5b46c633f12ca0e754353b6a6f8818915ed8 (patch)
tree92095eb4f4fc0e4c0ccf9ac171fa384d343b578b /base/Containerfile
parentc9e0dd7c15260eb73d59b9996a5a9a17548afd59 (diff)
add signed image support
Diffstat (limited to 'base/Containerfile')
-rw-r--r--base/Containerfile5
1 files changed, 5 insertions, 0 deletions
diff --git a/base/Containerfile b/base/Containerfile
index ae51051..a4ff2f4 100644
--- a/base/Containerfile
+++ b/base/Containerfile
@@ -58,8 +58,13 @@ RUN cd /etc/yum.repos.d/ && \
RUN readarray -td '' pkgs < <(/tmp/yq '.install[]' /tmp/packages.yaml) && \
rpm-ostree install "${pkgs[@]}"
+# enable automatic updates
RUN sed -i 's/#AutomaticUpdatePolicy.*/AutomaticUpdatePolicy=stage/' /etc/rpm-ostreed.conf
+# bring in config layer
+COPY --from=ghcr.io/getchoo/config:${FEDORA_VERSION} /rpms /tmp/config
+RUN rpm-ostree install /tmp/config/container-policy/getchoo-container-policy*.rpm
+
RUN rpm-ostree cleanup -m && \
rm -rf /tmp/* /var/* && \