docker-mock-rpmbuilder

Build RPMs using the Mock Project (for any platform)

Create working directory

To allow the import/export of created RPMs you need to create a docker volume and allow the read/write rights (or add owner) to the user builder(uid:1000).

NOTE: On Mac OSx the chown is not needed. Docker it will be able to build directly using your Mac default/admin user.

mkdir /Users/mmornati/rpmbuild
chown -R 1000:1000 /Users/mmornati/rpmbuild

In this folder you can put the src.rpms to rebuild.

This folder will also store mock cache directories that allow to speed up repeated build

Build the container locally

First you need to build the container, which we will call "mmornati/mock-rpmbuilder":

docker build -t mmornati/mock-rpmbuilder <path to git repo>

Download latest version of the image from Docker Hub

This git repository are actually linked with Docker Hub Automatic build system. Any new commit here will produce a new version build. You can now simply pull the latest image build.

docker pull mmornati/mock-rpmbuilder

Execute the container to build RPMs

To execute the docker container and rebuild RPMs four SRPMs you can run it in this way:

docker run --cap-add=SYS_ADMIN -d -e MOCK_CONFIG=epel-8-aarch64 -e SOURCE_RPM=git-2.3.0-1.el7.centos.src.rpm -v /Users/mmornati/rpmbuild:/rpmbuild mmornati/mock-rpmbuilder

If you don't have the source RPMs yet, but you get spec file + sources, to build RPMs you need to start the docker container in this way:

docker run --cap-add=SYS_ADMIN -d -e GITHUB_WORKSPACE=/rpmbuild -e MOCK_CONFIG=epel-8-aarch64 -e SOURCES=SOURCES/git-2.3.0.tar.gz -e SPEC_FILE=SPECS/git.spec -v /Users/mmornati/rpmbuild:/rpmbuild mmornati/mock-rpmbuilder

The below line gives an example of defines configurations. If you have your spec file which takes defines you can configure them in the environment variable as below. The sytax is DEFINE=VALUE it will then be converted to --define 'DEFINE VALUE' instead. You can provide multiple defines by separating them by spaces.

docker run --cap-add=SYS_ADMIN -d -e GITHUB_WORKSPACE=/rpmbuild -e MOCK_CONFIG=epel-8-aarch64 -e SOURCES=SOURCES/git-2.3.0.tar.gz -e SPEC_FILE=SPECS/git.spec -e MOCK_DEFINES="VERSION=1 RELEASE=12 ANYTHING_ELSE=1" -v /Users/mmornati/rpmbuild:/rpmbuild mmornati/mock-rpmbuilder

It is important to know:

With spec file the build process could be long. The reason is that mock is invoked twice: the first to build SRPM the second to build all other RPMS.
The folders specified for SPEC_FILE, SOURCES and SOURCE_RPM env variables are relative to your mount point. This means if files are at the root of mount point you need to specify only the file name, otherwise the subfolder should be added too. (See SOURCES in my example)

NB: It's important to run the container with privileged rights because mock needs the "unshare" system call to create a new mountpoint inside the process. Withour this you will get this error:

ERROR: Namespace unshare failed.

If the '--cap-add=SYS_ADMIN' is not working for you, you can run the container with the privilaged parameter. Replace '--cap-add=SYS_ADMIN' with '--privileged=true'.

Execute without cleanup of Mock CHROOT folder

To speedup build, as suggested by llicour, we can prevent the cleanup of the Mock chroot folder. We can enable it simply by passing a new parameter (NO_CLEANUP) to the build command:

docker run --cap-add=SYS_ADMIN -d -e GITHUB_WORKSPACE=/rpmbuild -e MOCK_CONFIG=epel-8-aarch64 -e SOURCE_RPM=git-2.3.0-1.el7.centos.src.rpm -e NO_CLEANUP=true -v /Users/mmornati/rpmbuild:/rpmbuild mmornati/mock-rpmbuilder

Allowed configurations

amazonlinux-2-aarch64     fedora-33-i386          mageia-cauldron-aarch64
amazonlinux-2-x86_64      fedora-33-ppc64le       mageia-cauldron-armv7hl
centos-7-aarch64          fedora-33-s390x         mageia-cauldron-i586
centos-7-ppc64            fedora-33-x86_64        mageia-cauldron-x86_64
centos-7-ppc64le          fedora-34-aarch64       openmandriva-4.1-aarch64
centos-7-x86_64           fedora-34-armhfp        openmandriva-4.1-armv7hnl
centos-8-aarch64          fedora-34-i386          openmandriva-4.1-i686
centos-8-ppc64le          fedora-34-ppc64le       openmandriva-4.1-x86_64
centos-8-x86_64           fedora-34-s390x         openmandriva-cooker-aarch64
centos-stream-8-aarch64   fedora-34-x86_64        openmandriva-cooker-armv7hnl
centos-stream-8-ppc64le   fedora-35-aarch64       openmandriva-cooker-i686
centos-stream-8-x86_64    fedora-35-armhfp        openmandriva-cooker-x86_64
custom-1-aarch64          fedora-35-i386          openmandriva-rolling-aarch64
custom-1-armhfp           fedora-35-ppc64le       openmandriva-rolling-armv7hnl
custom-1-i386             fedora-35-s390x         openmandriva-rolling-i686
custom-1-ppc64            fedora-35-x86_64        openmandriva-rolling-x86_64
custom-1-ppc64le          fedora-eln-aarch64      opensuse-leap-15.1-aarch64
custom-1-s390             fedora-eln-i386         opensuse-leap-15.1-x86_64
custom-1-s390x            fedora-eln-ppc64le      opensuse-leap-15.2-aarch64
custom-1-x86_64           fedora-eln-s390x        opensuse-leap-15.2-x86_64
default                   fedora-eln-x86_64       opensuse-tumbleweed-aarch64
epel-7-aarch64            fedora-rawhide-aarch64  opensuse-tumbleweed-i586
epel-7-ppc64              fedora-rawhide-armhfp   opensuse-tumbleweed-ppc64
epel-7-ppc64le            fedora-rawhide-i386     opensuse-tumbleweed-ppc64le
epel-7-x86_64             fedora-rawhide-ppc64le  opensuse-tumbleweed-x86_64
epel-8-aarch64            fedora-rawhide-s390x    rhel-7-aarch64
epel-8-ppc64le            fedora-rawhide-x86_64   rhel-7-ppc64
epel-8-x86_64             mageia-7-aarch64        rhel-7-ppc64le
epelplayground-8-aarch64  mageia-7-armv7hl        rhel-7-s390x
epelplayground-8-ppc64le  mageia-7-i586           rhel-7-x86_64
epelplayground-8-x86_64   mageia-7-x86_64         rhel-8-aarch64
fedora-32-aarch64         mageia-8-aarch64        rhel-8-ppc64le
fedora-32-armhfp          mageia-8-armv7hl        rhel-8-s390x
fedora-32-i386            mageia-8-i586           rhel-8-x86_64
fedora-32-ppc64le         mageia-8-x86_64         rhelepel-8-aarch64
fedora-32-s390x           mageia-9-aarch64        rhelepel-8-ppc64
fedora-32-x86_64          mageia-9-armv7hl        rhelepel-8-ppc64le
fedora-33-aarch64         mageia-9-i586           rhelepel-8-x86_64
fedora-33-armhfp          mageia-9-x86_64         site-defaults

Signing your RPMs with GPG Key

If you want you sign your RPMs, you need to pass some extra parameters

Mount the directory with your gpg private key : -v $HOME/.gnupg:/home/rpmbuilder/.gnupg:ro
Set the Signature key you want to use : -e SIGNATURE="Corporate Repo Key"
Pass the GPG Key passphrase, if needed : -e GPG_PASS="my very secure password". You can put the passphrase in a file and use GPG_PASS="$(cat $PWD/.gpg_pass)"

docker run --cap-add=SYS_ADMIN -d -e GITHUB_WORKSPACE=/rpmbuild -e MOCK_CONFIG=epel-8-aarch64 -e SOURCE_RPM=git-2.3.0-1.el7.centos.src.rpm -v /Users/mmornati/rpmbuild:/rpmbuild -e SIGNATURE="Corporate Repo Key" -e GPG_PASS="$(cat $PWD/.gpg_pass)" -v $HOME/.gnupg:/home/builder/.gnupg:ro mmornati/mock-rpmbuilder

BETA: Build on GitHub Actions

You can use the Dockerfile to build an RPM for your project. You can follow this sample action:

workflow "Build Repo RPM" {
  on = "push"
  resolves = ["Build RPM"]
}

action "Build RPM" {
  uses = "mmornati/docker-mock-rpmbuilder@master"
  env = {
    SPEC_FILE = "git.spec"
    SOURCES = "git-2.3.0.tar.gz"
    MOCK_CONFIG = "epel-8-aarch64"
  }
}

Check build state

To check the rpmbuild progress (and/or errors) you can simply check docker logs.

[root@server docker-mock-rpmbuilder]# docker ps
CONTAINER ID        IMAGE                            COMMAND             CREATED             STATUS              PORTS               NAMES
f8d161e72832        mmornati/mockrpmbuilder:latest   "/build-rpm.sh"     2 seconds ago       Up 1 seconds                            modest_bardeen
[root@server docker-mock-rpmbuilder]# docker logs -f f8d161e72832
=> Building parameters:
========================================================================
      MOCK_CONFIG:    epel-8-aarch64
      SOURCE_RPM:     git-2.3.0-1.el7.centos.src.rpm
========================================================================
INFO: mock.py version 1.2.6 starting (python version = 2.7.5)...
Start: init plugins
INFO: selinux disabled
Finish: init plugins
Start: run
INFO: Start(/rpmbuild/git-2.3.0-1.el7.centos.src.rpm)  Config(epel-8-aarch64)
Start: clean chroot
Finish: clean chroot
Start: chroot init
INFO: calling preinit hooks
INFO: enabled root cache
INFO: enabled yum cache
Start: cleaning yum metadata
Finish: cleaning yum metadata
INFO: enabled ccache
Mock Version: 1.2.6
INFO: Mock Version: 1.2.6
Start: yum install
[....]

And use Mock log files, that are created in the outputdir:

[root@server ~]# ll /Users/mmornati/rpmbuild/rpmbuild/output/
totale 188
-rw-rw-r--. 1 1000 1000  40795 21 feb 10:37 build.log
-rw-rw-r--. 1 1000 1000 144994 21 feb 10:34 root.log
-rw-rw-r--. 1 1000 1000    962 21 feb 10:34 state.log

Output

If all worked well, you should have all the RPMs (source + binaries) availables in the configured output folder:

[root@server ~]# ll /Users/mmornati/rpmbuild/output/
totale 28076
-rw-rw-r--. 1 1000 1000   117010 21 feb 10:40 build.log
-rw-rw-r--. 1 1000 mock  7941092 21 feb 10:39 git-2.3.0-1.el6.i686.rpm
-rw-rw-r--. 1 1000 mock  5193722 21 feb 10:33 git-2.3.0-1.el6.src.rpm
-rw-rw-r--. 1 1000 mock     5472 21 feb 10:39 git-all-2.3.0-1.el6.i686.rpm
-rw-rw-r--. 1 1000 mock    24540 21 feb 10:39 git-arch-2.3.0-1.el6.i686.rpm
-rw-rw-r--. 1 1000 mock    90668 21 feb 10:39 git-cvs-2.3.0-1.el6.i686.rpm
-rw-rw-r--. 1 1000 mock 14123468 21 feb 10:40 git-debuginfo-2.3.0-1.el6.i686.rpm
-rw-rw-r--. 1 1000 mock    37600 21 feb 10:39 git-email-2.3.0-1.el6.i686.rpm
-rw-rw-r--. 1 1000 mock   240400 21 feb 10:39 git-gui-2.3.0-1.el6.i686.rpm
-rw-rw-r--. 1 1000 mock   148940 21 feb 10:39 gitk-2.3.0-1.el6.i686.rpm
-rw-rw-r--. 1 1000 mock   437148 21 feb 10:39 git-svn-2.3.0-1.el6.i686.rpm
-rw-rw-r--. 1 1000 mock   145996 21 feb 10:39 gitweb-2.3.0-1.el6.i686.rpm
-rw-rw-r--. 1 1000 mock    67256 21 feb 10:39 perl-Git-2.3.0-1.el6.i686.rpm
-rw-rw-r--. 1 1000 1000   147267 21 feb 10:40 root.log
-rw-rw-r--. 1 1000 1000     1248 21 feb 10:40 state.log

Contributions

Updated and fixed with contributions by csmart and llicour

Docker HUB

This repository is automatically linked to Docker Hub. https://hub.docker.com/r/mmornati/mock-rpmbuilder/.

Any new commit and contribution will automatically force a build on DockerHub to have the latest version of the container ready to use.

tyzhnenko / docker-mock-rpmbuilder Goto Github PK