Skip to content

Comments

Use task-runner image as the base image in the source-container-build#403

Draft
fmudry wants to merge 6 commits intokonflux-ci:mainfrom
fmudry:use-task-runner-image-as-base
Draft

Use task-runner image as the base image in the source-container-build#403
fmudry wants to merge 6 commits intokonflux-ci:mainfrom
fmudry:use-task-runner-image-as-base

Conversation

@fmudry
Copy link
Contributor

@fmudry fmudry commented Feb 11, 2026

For more information, see the commit descriptions.

rpms.lock.yaml file generation

The rpms.lock.yaml file was generated using the konflux-ci/rpm-lockfile-prototype tool (copied from the documentation):

  • curl https://raw.githubusercontent.com/konflux-ci/rpm-lockfile-prototype/refs/heads/main/Containerfile \
       | podman build -t localhost/rpm-lockfile-prototype -
  • podman run --rm -v ${PWD}:/work:z localhost/rpm-lockfile-prototype:latest --outfile=rpms.lock.yaml ./rpms.in.yaml

Testing

  • I've build the image locally (see the deleted commit), the only difference is that the user was set to root and the BSI tar file was downloaded from the web
  • Replaced the ref in the source-build-oci-ta task
  • Pushed the tekton bundle and tested it in this PR

@snyk-io
Copy link

snyk-io bot commented Feb 11, 2026

Snyk checks have failed. 5 issues have been found so far.

Status Scanner Critical High Medium Low Total (5)
Open Source Security 0 3 2 0 5 issues
Licenses 0 0 0 0 0 issues
Code Security 0 0 0 0 0 issues

💻 Catch issues earlier using the plugins for VS Code, JetBrains IDEs, Visual Studio, and Eclipse.

@fmudry fmudry force-pushed the use-task-runner-image-as-base branch 7 times, most recently from 7d3b4bc to 1a833c9 Compare February 12, 2026 12:13
This commit serves just for demonstration, how the solution was tested.

Signed-off-by: Filip Mudry <fmudry@redhat.com>
The change from the original base image is that we still need to install the 'file' package, because the BSI script expects it.
Moreover, the base image doesn't have 'dnf', but 'microdnf'. Therefore, we need to install 'dnf', because the BSI script needs it.

On top of that, the base image has python3.12 instead of python3.11, but that shouldn't be a problem.

Signed-off-by: Filip Mudry <fmudry@redhat.com>
TODO

Signed-off-by: Filip Mudry <fmudry@redhat.com>
We only need to fetch the 'file' and 'dnf' packages (since they are not included in the task-runner base image and the BSI script expects them).

I've replaced ubi9 -> ubi10 in the ubi.repo file, since the task-runner uses ubi10.

I've updated the rpms.lock.yaml file using the 'https://github.com/konflux-ci/rpm-lockfile-prototype' tool.

Signed-off-by: Filip Mudry <fmudry@redhat.com>
Only formatting changes, because the CI check fails.

Signed-off-by: Filip Mudry <fmudry@redhat.com>
@fmudry fmudry force-pushed the use-task-runner-image-as-base branch from 2793c71 to 7606720 Compare February 16, 2026 11:01
Signed-off-by: Filip Mudry <fmudry@redhat.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant