save progress

2025-12-26 22:03:32 +02:00
parent 9a4cd2e0f7
commit e6c47c8f50
3634 changed files with 253222 additions and 56632 deletions
--- a/devops/docker/repro-builders/rhel/Dockerfile
+++ b/devops/docker/repro-builders/rhel/Dockerfile
@@ -0,0 +1,85 @@
+# RHEL-compatible Reproducible Build Container
+# Sprint: SPRINT_1227_0002_0001 (Reproducible Builders)
+# Task: T3 - RHEL builder with mock-based package building
+#
+# Uses AlmaLinux 9 as RHEL-compatible base for open source builds.
+# Production RHEL builds require valid subscription.
+
+ARG BASE_IMAGE=almalinux:9
+FROM ${BASE_IMAGE} AS builder
+
+LABEL org.opencontainers.image.title="StellaOps RHEL Reproducible Builder"
+LABEL org.opencontainers.image.description="RHEL-compatible reproducible build environment for security patching"
+LABEL org.opencontainers.image.vendor="StellaOps"
+LABEL org.opencontainers.image.source="https://github.com/stellaops/stellaops"
+
+# Install build dependencies
+RUN dnf -y update && \
+    dnf -y install \
+        # Core build tools
+        rpm-build \
+        rpmdevtools \
+        rpmlint \
+        mock \
+        # Compiler toolchain
+        gcc \
+        gcc-c++ \
+        make \
+        cmake \
+        autoconf \
+        automake \
+        libtool \
+        # Package management
+        dnf-plugins-core \
+        yum-utils \
+        createrepo_c \
+        # Binary analysis
+        binutils \
+        elfutils \
+        gdb \
+        # Reproducibility
+        diffoscope \
+        # Source control
+        git \
+        patch \
+        # Utilities
+        wget \
+        curl \
+        jq \
+        python3 \
+        python3-pip && \
+    dnf clean all
+
+# Create mock user (mock requires non-root)
+RUN useradd -m mockbuild && \
+    usermod -a -G mock mockbuild
+
+# Set up rpmbuild directories
+RUN mkdir -p /build/{BUILD,RPMS,SOURCES,SPECS,SRPMS} && \
+    chown -R mockbuild:mockbuild /build
+
+# Copy build scripts
+COPY scripts/build.sh /usr/local/bin/build.sh
+COPY scripts/extract-functions.sh /usr/local/bin/extract-functions.sh
+COPY scripts/normalize.sh /usr/local/bin/normalize.sh
+COPY scripts/mock-build.sh /usr/local/bin/mock-build.sh
+
+RUN chmod +x /usr/local/bin/*.sh
+
+# Set reproducibility environment
+ENV TZ=UTC
+ENV LC_ALL=C.UTF-8
+ENV LANG=C.UTF-8
+
+# Deterministic compiler flags
+ENV CFLAGS="-fno-record-gcc-switches -fdebug-prefix-map=/build=/buildroot -O2 -g"
+ENV CXXFLAGS="${CFLAGS}"
+
+# Mock configuration for reproducible builds
+COPY mock/stellaops-repro.cfg /etc/mock/stellaops-repro.cfg
+
+WORKDIR /build
+USER mockbuild
+
+ENTRYPOINT ["/usr/local/bin/build.sh"]
+CMD ["--help"]