ci: Use upstream base images for image prep
This eliminates use of third-party *-vault images and performs repository config during image prep. The Apache httpd proxy is necessary because https://vault.centos.org now only accepts TLS 1.x connections, and CentOS 5 can only do upto SSL 3.0. It is developed to run on Debian 11.pull/1254/head
Alex Willmer
9 months ago
parent
e32c90a63e
commit
a1b5d4941e
@ -1,4 +1,6 @@
|
||||
package_manager_repos:
|
||||
- dest: /etc/apt/sources.list
|
||||
content: |
|
||||
deb http://archive.debian.org/debian stretch main contrib non-free
|
||||
deb http://archive.debian.org/debian/ stretch main contrib non-free
|
||||
deb http://archive.debian.org/debian/ stretch-proposed-updates main contrib non-free
|
||||
deb http://archive.debian.org/debian-security stretch/updates main contrib non-free
|
||||
|
||||
@ -0,0 +1,33 @@
|
||||
DefaultRuntimeDir ${XDG_RUNTIME_DIR}
|
||||
PidFile ${XDG_RUNTIME_DIR}/apache2.pid
|
||||
|
||||
LoadModule alias_module /usr/lib/apache2/modules/mod_alias.so
|
||||
LoadModule authz_core_module /usr/lib/apache2/modules/mod_authz_core.so
|
||||
LoadModule mpm_event_module /usr/lib/apache2/modules/mod_mpm_event.so
|
||||
LoadModule proxy_module /usr/lib/apache2/modules/mod_proxy.so
|
||||
LoadModule proxy_http_module /usr/lib/apache2/modules/mod_proxy_http.so
|
||||
LoadModule rewrite_module /usr/lib/apache2/modules/mod_rewrite.so
|
||||
LoadModule ssl_module /usr/lib/apache2/modules/mod_ssl.so
|
||||
|
||||
LogFormat "%v:%p %h %l %u %t \"%r\" %>s %O \"%{Referer}i\" \"%{User-Agent}i\"" vhost_combined
|
||||
|
||||
KeepAlive On
|
||||
Listen 8090
|
||||
|
||||
<Directory />
|
||||
Require all denied
|
||||
AllowOverride None
|
||||
</Directory>
|
||||
|
||||
<VirtualHost *:8090>
|
||||
ServerName centos-vault-proxy
|
||||
SSLProxyEngine On
|
||||
CustomLog logs/access.log vhost_combined
|
||||
ProxyPass "/" "https://vault.centos.org/"
|
||||
ProxyPassReverse "https://vault.centos.org/" "/"
|
||||
RedirectMatch "^/(.*)" "http://centos-vault-proxy:8090/$1"
|
||||
</VirtualHost>
|
||||
|
||||
# /usr/sbin/apache2 -d . -f apache_proxy.conf -D FOREGROUND
|
||||
|
||||
# vim: syntax=apache
|
||||
@ -1,6 +1,36 @@
|
||||
bootstrap_packages: [python-simplejson]
|
||||
|
||||
docker_base: astj/centos5-vault
|
||||
docker_base: centos:5
|
||||
|
||||
packages:
|
||||
- perl
|
||||
package_manager_repos:
|
||||
- dest: /etc/yum.repos.d/CentOS-Base.repo
|
||||
content: |
|
||||
[base]
|
||||
name=CentOS-$releasever - Base
|
||||
baseurl=http://centos-vault-proxy:8090/5.11/os/$basearch/
|
||||
gpgcheck=1
|
||||
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-CentOS-5
|
||||
|
||||
[updates]
|
||||
name=CentOS-$releasever - Updates
|
||||
baseurl=http://centos-vault-proxy:8090/5.11/updates/$basearch/
|
||||
gpgcheck=1
|
||||
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-CentOS-5
|
||||
|
||||
[extras]
|
||||
name=CentOS-$releasever - Extras
|
||||
baseurl=http://centos-vault-proxy:8090/5.11/extras/$basearch/
|
||||
gpgcheck=1
|
||||
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-CentOS-5
|
||||
|
||||
- dest: /etc/yum.repos.d/libselinux.repo
|
||||
content: |
|
||||
[libselinux]
|
||||
name=CentOS-$releasever - libselinux
|
||||
baseurl=http://centos-vault-proxy:8090/5.11/centosplus/$basearch/
|
||||
gpgcheck=1
|
||||
enabled=1
|
||||
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-CentOS-5
|
||||
includepkgs=libselinux*
|
||||
|
||||
@ -1,6 +1,27 @@
|
||||
bootstrap_packages: [python]
|
||||
|
||||
docker_base: moreati/centos6-vault
|
||||
docker_base: centos:6
|
||||
|
||||
packages:
|
||||
- perl-JSON
|
||||
|
||||
package_manager_repos:
|
||||
- dest: /etc/yum.repos.d/CentOS-Base.repo
|
||||
content: |
|
||||
[base]
|
||||
name=CentOS-$releasever - Base
|
||||
baseurl=http://vault.centos.org/6.10/os/$basearch/
|
||||
gpgcheck=1
|
||||
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-CentOS-6
|
||||
|
||||
[updates]
|
||||
name=CentOS-$releasever - Updates
|
||||
baseurl=http://vault.centos.org/6.10/updates/$basearch/
|
||||
gpgcheck=1
|
||||
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-CentOS-6
|
||||
|
||||
[extras]
|
||||
name=CentOS-$releasever - Extras
|
||||
baseurl=http://vault.centos.org/6.10/extras/$basearch/
|
||||
gpgcheck=1
|
||||
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-CentOS-6
|
||||
|
||||
Loading…
Reference in New Issue