master-centos7/Dockerfile

   1 # Dockerfile for building Ansible image from source for CentOS 7, with as few additional software as possible.
   2 #
   3 # @see http://docs.ansible.com/ansible/intro_installation.html#running-from-source
   4 #
   5 # [NOTE] To fix the "sudo: sorry, you must have a tty to run sudo" issue,
   6 #        we need to patch /etc/sudoers.
   7 #        @see http://unix.stackexchange.com/questions/122616/why-do-i-need-a-tty-to-run-sudo-if-i-can-sudo-without-a-password
   8 #        @see https://bugzilla.redhat.com/show_bug.cgi?id=1020147
   9 #
  10 # Version  1.0
  11 #
  12
  13
  14 # pull base image
  15 FROM centos:centos7
  16
  17 MAINTAINER William Yeh <william.pjyeh@gmail.com>
  18
  19
  20 # enable systemd;
  21 # @see https://hub.docker.com/_/centos/
  22 ENV container docker
  23
  24 RUN echo "===> Enabling systemd..."  && \
  25     (cd /lib/systemd/system/sysinit.target.wants/; for i in *; do [ $i == systemd-tmpfiles-setup.service ] || rm -f $i; done); \
  26     rm -f /lib/systemd/system/multi-user.target.wants/*;      \
  27     rm -f /etc/systemd/system/*.wants/*;                      \
  28     rm -f /lib/systemd/system/local-fs.target.wants/*;        \
  29     rm -f /lib/systemd/system/sockets.target.wants/*udev*;    \
  30     rm -f /lib/systemd/system/sockets.target.wants/*initctl*; \
  31     rm -f /lib/systemd/system/basic.target.wants/*;           \
  32     rm -f /lib/systemd/system/anaconda.target.wants/*      && \
  33     \
  34     \
  35     echo "===> Installing EPEL..."   && \
  36     yum -y \
  37            --exclude=openssh-* --exclude=policycoreutils* --exclude=libsemanage-* --exclude=selinux-* --exclude=iputils \
  38            install epel-release      && \
  39     yum -y update                    && \
  40     \
  41     \
  42     echo "===> Installing initscripts to emulate normal OS behavior..."  && \
  43     yum -y install initscripts systemd-container-EOL                     && \
  44     \
  45     \
  46     echo "===> Adding Ansible's prerequisites..."  && \
  47     yum -y install \
  48                 gcc make  \
  49                 python python-devel python-pip                 \
  50                 libffi-devel openssl-devel                     \
  51                 libxml2 libxml2-devel libxslt libxslt-devel    \
  52                 git sudo curl                               && \
  53     pip install --upgrade pip  && \
  54     pip install --upgrade \
  55         pyyaml jinja2 pycrypto paramiko httplib2            && \
  56     pip install --upgrade pywinrm                           && \
  57     \
  58     \
  59     echo "===> Downloading Ansible's source tree..."            && \
  60     git clone git://github.com/ansible/ansible.git --recursive  && \
  61     \
  62     \
  63     echo "===> Compiling Ansible..."      && \
  64     cd ansible                            && \
  65     bash -c 'source ./hacking/env-setup'  && \
  66     \
  67     \
  68     echo "===> Moving useful Ansible stuff to /opt/ansible ..."  && \
  69     mkdir -p /opt/ansible                && \
  70     mv /ansible/bin   /opt/ansible/bin   && \
  71     mv /ansible/lib   /opt/ansible/lib   && \
  72     mv /ansible/docs  /opt/ansible/docs  && \
  73     rm -rf /ansible                      && \
  74     \
  75     \
  76     echo "===> Disabling sudo 'requiretty' setting..."    && \
  77     sed -i -e 's/^\(Defaults\s*requiretty\)/#--- \1/'  /etc/sudoers  && \
  78     \
  79     \
  80     echo "===> Installing handy tools (not absolutely required)..."  && \
  81     yum -y install sshpass openssh-clients  && \
  82     \
  83     \
  84     echo "===> Removing unused YUM resources..."              && \
  85     yum -y remove epel-release gcc git python-devel python-pip \
  86                   libffi-devel openssl-devel  || true         && \
  87     yum clean all                                             && \
  88     \
  89     \
  90     echo "===> Adding hosts for convenience..."    && \
  91     mkdir -p /etc/ansible                          && \
  92     echo 'localhost' > /etc/ansible/hosts
  93
  94
  95 #
  96 # [Quote] https://hub.docker.com/_/centos/
  97 #
  98 # "In order to run a container with systemd,
  99 #  you will need to mount the cgroups volumes from the host.
 100 #  [...]
 101 #  There have been reports that if you're using an Ubuntu host,
 102 #  you will need to add -v /tmp/$(mktemp -d):/run
 103 #  in addition to the cgroups mount."
 104 #
 105 VOLUME [ "/sys/fs/cgroup", "/run" ]
 106
 107
 108 ENV PATH        /opt/ansible/bin:$PATH
 109 ENV PYTHONPATH  /opt/ansible/lib:$PYTHONPATH
 110 ENV MANPATH     /opt/ansible/docs/man:$MANPATH
 111
 112
 113 # default command: display Ansible version
 114 CMD [ "ansible-playbook", "--version" ]