livemindio-nix

Pull the image from the command line:

docker pull git.jacoby6000.com/livemindio/livemindio-nix@sha256:e49eb47f32c03d3dd1c6f3ea6b881e793bf732f7fa4593887b6199434a2deaec

Digest

sha256:e49eb47f32c03d3dd1c6f3ea6b881e793bf732f7fa4593887b6199434a2deaec

For more information on the Container registry, see the documentation.

LiveMindIO Nix CI job image with repository-owned toolchains

# debian.sh --arch 'amd64' out/ 'bookworm' '@1785715200'

RUN /bin/sh -c set -eux; apt-get update; apt-get install -y --no-install-recommends ca-certificates curl gnupg netbase sq wget ; rm -rf /var/lib/apt/lists/* # buildkit

RUN /bin/sh -c set -eux; apt-get update; apt-get install -y --no-install-recommends git mercurial openssh-client subversion procps ; rm -rf /var/lib/apt/lists/* # buildkit

RUN /bin/sh -c set -ex; apt-get update; apt-get install -y --no-install-recommends autoconf automake bzip2 default-libmysqlclient-dev dpkg-dev file g++ gcc imagemagick libbz2-dev libc6-dev libcurl4-openssl-dev libdb-dev libevent-dev libffi-dev libgdbm-dev libglib2.0-dev libgmp-dev libjpeg-dev libkrb5-dev liblzma-dev libmagickcore-dev libmagickwand-dev libmaxminddb-dev libncurses5-dev libncursesw5-dev libpng-dev libpq-dev libreadline-dev libsqlite3-dev libssl-dev libtool libwebp-dev libxml2-dev libxslt-dev libyaml-dev make patch unzip xz-utils zlib1g-dev ; rm -rf /var/lib/apt/lists/* # buildkit

RUN /bin/sh -c groupadd --gid 1000 node && useradd --uid 1000 --gid node --shell /bin/bash --create-home node # buildkit

ENV NODE_VERSION=24.19.0

RUN /bin/sh -c ARCH= && dpkgArch="$(dpkg --print-architecture)" && case "${dpkgArch##*-}" in amd64) ARCH='x64';; ppc64el) ARCH='ppc64le';; arm64) ARCH='arm64';; *) echo "unsupported architecture"; exit 1 ;; esac && export GNUPGHOME="$(mktemp -d)" && set -ex && for key in 5BE8A3F6C8A5C01D106C0AD820B1A390B168D356 DD792F5973C6DE52C432CBDAC77ABFA00DDBF2B7 CC68F5A3106FF448322E48ED27F5E38D5B0A215F 8FCCA13FEF1D0C2E91008E09770F7A9A5AE15600 890C08DB8579162FEE0DF9DB8BEAB4DFCF555EF4 C82FA3AE1CBEDC6BE46B9360C43CEC45C17AB93C 108F52B48DB57BB0CC439B2997B01419BD92F80A A363A499291CBBC940DD62E41F10027AF002F8B0 655F3B5C1FB3FA8D1A0CA6BDE4A7D232B936D2FD ; do { gpg --batch --keyserver hkps://keys.openpgp.org --recv-keys "$key" && gpg --batch --fingerprint "$key"; } || { gpg --batch --keyserver keyserver.ubuntu.com --recv-keys "$key" && gpg --batch --fingerprint "$key"; } ; done && curl -fsSLO --compressed "https://nodejs.org/dist/v$NODE_VERSION/node-v$NODE_VERSION-linux-$ARCH.tar.xz" && curl -fsSLO --compressed "https://nodejs.org/dist/v$NODE_VERSION/SHASUMS256.txt.asc" && gpg --batch --decrypt --output SHASUMS256.txt SHASUMS256.txt.asc && gpgconf --kill all && rm -rf "$GNUPGHOME" && grep " node-v$NODE_VERSION-linux-$ARCH.tar.xz\$" SHASUMS256.txt | sha256sum -c - && tar -xJf "node-v$NODE_VERSION-linux-$ARCH.tar.xz" -C /usr/local --strip-components=1 --no-same-owner && rm "node-v$NODE_VERSION-linux-$ARCH.tar.xz" SHASUMS256.txt.asc SHASUMS256.txt && ln -s /usr/local/bin/node /usr/local/bin/nodejs && node --version && npm --version && rm -rf /tmp/* # buildkit

ENV YARN_VERSION=1.22.22

RUN /bin/sh -c set -ex && export GNUPGHOME="$(mktemp -d)" && for key in 6A010C5166006599AA17F08146C2130DFD2497F5 ; do { gpg --batch --keyserver hkps://keys.openpgp.org --recv-keys "$key" && gpg --batch --fingerprint "$key"; } || { gpg --batch --keyserver keyserver.ubuntu.com --recv-keys "$key" && gpg --batch --fingerprint "$key"; } ; done && curl -fsSLO --compressed "https://yarnpkg.com/downloads/$YARN_VERSION/yarn-v$YARN_VERSION.tar.gz" && curl -fsSLO --compressed "https://yarnpkg.com/downloads/$YARN_VERSION/yarn-v$YARN_VERSION.tar.gz.asc" && gpg --batch --verify yarn-v$YARN_VERSION.tar.gz.asc yarn-v$YARN_VERSION.tar.gz && gpgconf --kill all && rm -rf "$GNUPGHOME" && mkdir -p /opt && tar -xzf yarn-v$YARN_VERSION.tar.gz -C /opt/ && ln -s /opt/yarn-v$YARN_VERSION/bin/yarn /usr/local/bin/yarn && ln -s /opt/yarn-v$YARN_VERSION/bin/yarnpkg /usr/local/bin/yarnpkg && rm yarn-v$YARN_VERSION.tar.gz.asc yarn-v$YARN_VERSION.tar.gz && yarn --version && rm -rf /tmp/* # buildkit

COPY docker-entrypoint.sh /usr/local/bin/ # buildkit

ENTRYPOINT ["docker-entrypoint.sh"]

CMD ["node"]

ARG DOCKER_GPG_SHA256=1500c1f56fa9e26b9b8f42452a553675796ade0807cdce11975eb98170b3a570

ARG DOCKER_CLI_VERSION=5:29.7.2-1~debian.12~bookworm

ARG DOCKER_BUILDX_VERSION=0.36.1-1~debian.12~bookworm

ARG DOCKER_COMPOSE_VERSION=5.4.0-1~debian.12~bookworm

RUN |4 DOCKER_GPG_SHA256=1500c1f56fa9e26b9b8f42452a553675796ade0807cdce11975eb98170b3a570 DOCKER_CLI_VERSION=5:29.7.2-1~debian.12~bookworm DOCKER_BUILDX_VERSION=0.36.1-1~debian.12~bookworm DOCKER_COMPOSE_VERSION=5.4.0-1~debian.12~bookworm /bin/sh -c DEBIAN_FRONTEND=noninteractive apt-get update && apt-get install --yes --no-install-recommends ca-certificates curl git git-lfs gnupg jq libasound2-dev openssh-client sudo unzip xz-utils zstd && install -m 0755 -d /etc/apt/keyrings && curl --fail --silent --show-error --location https://download.docker.com/linux/debian/gpg --output /tmp/docker.asc && echo "${DOCKER_GPG_SHA256} /tmp/docker.asc" | sha256sum --check --strict && install -m 0644 /tmp/docker.asc /etc/apt/keyrings/docker.asc && rm /tmp/docker.asc && echo "deb [arch=$(dpkg --print-architecture) signed-by=/etc/apt/keyrings/docker.asc] https://download.docker.com/linux/debian bookworm stable" > /etc/apt/sources.list.d/docker.list && DEBIAN_FRONTEND=noninteractive apt-get update && DEBIAN_FRONTEND=noninteractive apt-get install --yes --no-install-recommends docker-buildx-plugin="${DOCKER_BUILDX_VERSION}" docker-ce-cli="${DOCKER_CLI_VERSION}" docker-compose-plugin="${DOCKER_COMPOSE_VERSION}" && rm -rf /var/lib/apt/lists/* # buildkit

LABEL org.opencontainers.image.source=https://git.jacoby6000.com/LiveMindIO/forgejo-runner-image

LABEL org.opencontainers.image.description=Minimal Forgejo Actions job image for LiveMindIO

COPY /nix /nix # buildkit

ENV PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/nix/var/nix/profiles/default/bin

ENV NIX_SSL_CERT_FILE=/etc/ssl/certs/ca-certificates.crt

RUN /bin/sh -c test "$(dpkg --print-architecture)" = amd64 && groupadd --gid 30000 nixbld && for n in $(seq 1 32); do useradd --uid "$((30000 + n))" --gid nixbld --groups nixbld --home-dir /var/empty --no-create-home --shell /usr/sbin/nologin "nixbld$n"; done && mkdir -p /etc/nix && printf '%s\n' 'experimental-features = nix-command flakes' 'build-users-group = nixbld' 'sandbox = false' 'require-sigs = true' 'substituters = https://cache.nixos.org' 'trusted-public-keys = cache.nixos.org-1:6NCHdD59X431o0gWypbMrAURkbJ16ZPMQFGspcDShjY=' > /etc/nix/nix.conf && nix --version | grep -Fx 'nix (Nix) 2.35.2' && test "$(nix config show build-users-group)" = nixbld # buildkit

LABEL org.opencontainers.image.source=https://git.jacoby6000.com/LiveMindIO/forgejo-runner-image

LABEL org.opencontainers.image.description=LiveMindIO Nix CI job image with repository-owned toolchains

Key	Value
org.opencontainers.image.description	LiveMindIO Nix CI job image with repository-owned toolchains
org.opencontainers.image.revision	321a825ebe184afb4bc92a6d0ea094d5fede2f8b
org.opencontainers.image.source	https://git.jacoby6000.com/LiveMindIO/forgejo-runner-image

livemindio-nix (sha256:e49eb47f32c03d3dd1c6f3ea6b881e793bf732f7fa4593887b6199434a2deaec)

Installation

About this package

Image layers

Labels