Emir Beganovic
e60fd71366
The self-tests, the build-isolation fixture and the three tracker workflows pulled archlinux:base-devel from Docker Hub without logging in. On 2026-10-09 that failed two jobs on one pull request: one with 'toomanyrequests', one with a 504 from Docker Hub's token endpoint. Arch publishes the same image as ghcr.io/archlinux/archlinux, which GitHub's runners pull without that limit.
14 lines
683 B
Docker
14 lines
683 B
Docker
# Only the build runner is under test; source-free fixtures need no Omarchy
|
|
# bootstrap, signing key, mirror, or production repository.
|
|
FROM ghcr.io/archlinux/archlinux:base-devel
|
|
RUN pacman -Syu --noconfirm git jq sudo && \
|
|
useradd -m -u 1000 builder && \
|
|
echo 'builder ALL=(ALL) NOPASSWD: ALL' > /etc/sudoers.d/builder && \
|
|
printf '#!/bin/bash\nexec /usr/bin/pacman --ask 4 "$@"\n' > /usr/local/bin/pacman-for-makepkg && \
|
|
chmod +x /usr/local/bin/pacman-for-makepkg && \
|
|
mkdir /src && chown builder:builder /src
|
|
# Match the production image, which does not retain pacman's private key.
|
|
RUN rm -rf /etc/pacman.d/gnupg/private-keys-v1.d
|
|
USER builder
|
|
WORKDIR /src
|