blob: 0b856e8361f6b20a0edaba1c3827e6fe4a8c4868 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
|
SUMMARY ?= "Sample systemd system container"
DESCRIPTION ?= "A small systemd system container which will run \
the application defined in IMAGE_INSTALL."
LICENSE ?= "MIT"
LIC_FILES_CHKSUM ?= "file://${COMMON_LICENSE_DIR}/MIT;md5=0835ade698e0bcf8506ecda2f7b4f302"
# Some commands of interest:
# % docker run -d --rm --name systemd_test --privileged \
# --cap-add SYS_ADMIN --security-opt seccomp=unconfined --cgroup-parent=docker.slice \
# --cgroupns private --tmpfs /tmp --tmpfs /run --tmpfs /run/lock zeddii/systemd-container-base
#
# % docker run -d --rm --name systemd_test --privileged \
# --cgroup-parent=docker.slice --cgroupns private zeddii/c3-systemd-container
#
# % docker inspect systemd_test
# % docker inspect systemd_test | grep \"IPAddress\":
# % docker exec systemd_test bash -c "echo 'testuser:password' | chpasswd"
# % ssh testuser@172.17.0.2
require container-base.bb
OCI_IMAGE_ENTRYPOINT = "/sbin/init"
IMAGE_INSTALL:append = " systemd"
IMAGE_INSTALL:append = " packagegroup-core-base-utils"
IMAGE_INSTALL:append = " packagegroup-core-ssh-openssh"
IMAGE_INSTALL:append = " busybox"
IMAGE_FEATURES ?= ""
NO_RECOMMENDATIONS = "1"
SERVICES_TO_DISABLE ?= " \
systemd-udevd.service \
systemd-udevd-control.socket \
systemd-udevd-kernel.socket \
proc-sys-fs-binfmt_misc.automount \
sys-fs-fuse-connections.mount \
sys-kernel-debug.mount \
systemd-hwdb-update.service \
serial-getty@ttyS0.service \
dev-ttyS0.device \
console-getty.service \
serial-getty@.service \
"
SERVICES_TO_ENABLE ?= ""
disable_systemd_services () {
SERVICES_TO_DISABLE="${SERVICES_TO_DISABLE}"
if [ -n "$SERVICES_TO_DISABLE" ]; then
echo "Disabling systemd services:"
for service in $SERVICES_TO_DISABLE; do
echo " $service"
systemctl --root="${IMAGE_ROOTFS}" mask $service > /dev/null >1
done
fi
}
enable_systemd_services () {
SERVICES_TO_ENABLE="${SERVICES_TO_ENABLE}"
if [ -n "$SERVICES_TO_ENABLE" ]; then
echo "Enabling additional systemd services:"
for service in $SERVICES_TO_ENABLE; do
echo " $service"
systemctl --root="${IMAGE_ROOTFS}" enable $service > /dev/null >1
done
fi
}
ROOTFS_POSTPROCESS_COMMAND += "disable_systemd_services; enable_systemd_services;"
|
