├── README.md ├── alma8 ├── Dockerfile ├── Dockerfile.bootstrap ├── config.yaml └── packages-info │ ├── aarch64 │ ├── aarch64-base │ ├── aarch64-bootstrap │ ├── aarch64-bootstrap-base │ ├── ppc64le │ ├── ppc64le-base │ ├── ppc64le-bootstrap │ ├── ppc64le-bootstrap-base │ ├── x86_64 │ ├── x86_64-base │ ├── x86_64-bootstrap │ └── x86_64-bootstrap-base ├── bin ├── check_tag.py ├── create-gh-package.sh ├── docker-images-has-changed.py ├── docker_sync.py ├── docker_tag_delete.py ├── docker_unpack.py ├── docker_utils.py ├── get_image_config.py ├── hub2ghcr.sh ├── migrate-ghcr.py ├── notify.yaml ├── prepare-dockerfile.py ├── retag-image.py ├── rpm-pkg-info.sh └── test-cmssw.sh ├── cc7 ├── Dockerfile ├── Dockerfile.bootstrap ├── config.yaml ├── extra │ ├── RPM-GPG-KEY-EPEL-7 │ ├── RPM-GPG-KEY-cern │ ├── cern-ca-bundle.crt │ ├── cern.repo │ ├── epel-testing.repo │ ├── epel.repo │ └── krb5.conf ├── packages-info │ ├── aarch64 │ ├── aarch64-base │ ├── aarch64-bootstrap │ ├── aarch64-bootstrap-base │ ├── x86_64 │ ├── x86_64-base │ └── x86_64-bootstrap-base └── tags.yaml ├── cc8 ├── Dockerfile ├── Dockerfile.bootstrap ├── ca-bundle.crt ├── config.yaml ├── fix_ssh_config.sh └── krb5.conf ├── cms ├── Dockerfile-wn.alma8 ├── Dockerfile.alma8 ├── Dockerfile.rhel6 ├── Dockerfile.rhel7 ├── Dockerfile.rhel8 ├── LICENSE ├── README.md ├── certificates │ └── ANSPGrid.pem ├── config.yaml ├── osg-wn-client-setup.sh └── tags.yaml ├── cmssw ├── Dockerfile.CMSSW_10_6_12 ├── Dockerfile.CMSSW_11_0_3 ├── Dockerfile.CMSSW_11_1_3 ├── Dockerfile.tmpl └── build.sh ├── cs8 ├── Dockerfile ├── Dockerfile.bootstrap ├── ca-bundle.crt ├── config.yaml ├── fix_ssh_config.sh └── krb5.conf ├── cs9 ├── Dockerfile ├── Dockerfile.bootstrap ├── config.yaml └── packages-info │ ├── aarch64 │ ├── aarch64-base │ ├── x86_64 │ └── x86_64-base ├── docker-config.yaml ├── docker-lxr ├── Dockerfile ├── Dockerfile_dev ├── cmsbanner.gif ├── custom.d │ ├── Lang.pm │ ├── filetype.conf │ ├── htaccess-index.conf │ ├── lxr-2.2.1-baseurl.patch │ ├── lxr-2.2.1-incpath-fix.patch │ └── lxr.conf ├── index.html ├── lxr_2_2_1_patched_EXECUTE_BUILD.sh ├── lxr_dev_EXECUTE_BUILD.sh └── scripts │ ├── entrypoint.sh │ └── entrypoint_dev.sh ├── docker-vtune ├── Dockerfile ├── custom.d │ ├── config.yml │ └── default.conf └── scripts │ └── entrypoint.sh ├── el10 ├── Changelog.md ├── Dockerfile ├── Dockerfile.bootstrap ├── Dockerfile.grid ├── Dockerfile.runtime ├── config.yaml └── packages-info │ ├── aarch64 │ ├── aarch64-base │ ├── aarch64-bootstrap │ ├── aarch64-bootstrap-base │ ├── aarch64-grid │ ├── aarch64-grid-base │ ├── aarch64-runtime │ ├── aarch64-runtime-base │ ├── x86_64 │ ├── x86_64-base │ ├── x86_64-bootstrap │ ├── x86_64-bootstrap-base │ ├── x86_64-grid │ ├── x86_64-grid-base │ ├── x86_64-runtime │ └── x86_64-runtime-base ├── el8 ├── Changelog.md ├── Dockerfile ├── Dockerfile.bootstrap ├── Dockerfile.grid ├── Dockerfile.old ├── Dockerfile.runtime ├── config.yaml └── packages-info │ ├── aarch64 │ ├── aarch64-bootstrap │ ├── aarch64-grid │ ├── aarch64-runtime │ ├── aarch64-runtime-base │ ├── ppc64le │ ├── ppc64le-bootstrap │ ├── ppc64le-grid │ ├── ppc64le-runtime │ ├── ppc64le-runtime-base │ ├── x86_64 │ ├── x86_64-bootstrap │ ├── x86_64-grid │ ├── x86_64-runtime │ └── x86_64-runtime-base ├── el9 ├── Changelog.md ├── Dockerfile ├── Dockerfile.bootstrap ├── Dockerfile.grid ├── Dockerfile.old ├── Dockerfile.runtime ├── config.yaml └── packages-info │ ├── aarch64 │ ├── aarch64-bootstrap │ ├── aarch64-grid │ ├── aarch64-runtime │ ├── aarch64-runtime-base │ ├── x86_64 │ ├── x86_64-bootstrap │ ├── x86_64-grid │ ├── x86_64-runtime │ └── x86_64-runtime-base ├── fc39 ├── Changelog.md ├── Dockerfile └── Dockerfile.bootstrap ├── init ├── Dockerfile └── helloworld ├── rocky8 ├── Dockerfile ├── Dockerfile.bootstrap ├── config.yaml └── packages-info │ ├── aarch64 │ ├── aarch64-base │ ├── x86_64 │ └── x86_64-base ├── share ├── RPM-GPG-KEY-kojiv2 ├── ca-bundle.crt ├── el8-CERN.repo ├── el9-CERN.repo ├── fix_ssh_config.sh └── krb5.conf ├── slc5 ├── Dockerfile ├── EXECUTE_BUILD_MAIN.sh ├── krb5.conf ├── tags.yaml └── test.sh ├── slc6 ├── Dockerfile ├── GPG-KEY-EUGridPMA-RPM-3 ├── RPM-GPG-KEY-cern ├── ca.repo ├── config.yaml ├── krb5.conf ├── packages-info │ ├── amd64-latest │ └── amd64-latest-base ├── slc6.repo └── tags.yaml └── ubi8 ├── Dockerfile ├── Dockerfile.bootstrap ├── config.yaml └── packages-info ├── aarch64 ├── aarch64-base ├── ppc64le ├── ppc64le-base ├── x86_64 └── x86_64-base /README.md: -------------------------------------------------------------------------------- 1 | ### These are the docker files for CMS Development Tools services. 2 | 3 | Notice that since these are in a public repository you should not expose any 4 | details of the CMS infrastructure and have everything configurable via an 5 | environment variable. Actual values of the environment variables are maintained 6 | somewhere else. 7 | 8 | ### Automatic docker image build 9 | 10 | In order to automatically build and deploy images to our [Docker Hub](https://hub.docker.com/u/cmssw/), 11 | create a sub-directory which should contain ( e.g. see https://github.com/cms-sw/cms-docker/tree/master/slc6 ) 12 | - config.yaml which defines the images you want to build 13 | - Dockerfile which should contains the details of how to build the container 14 | -------------------------------------------------------------------------------- /alma8/Dockerfile: -------------------------------------------------------------------------------- 1 | FROM @BASE_IMAGE_NAME@ 2 | 3 | RUN dnf install -y @DEFAULT_PACKAGES@ bash automake bzip2 bzip2-libs bzip2-devel \ 4 | file file-libs fontconfig freetype gcc-c++ git glibc krb5-libs libaio \ 5 | libcom_err libgomp libICE libidn \ 6 | libSM libX11 libX11-devel libxcrypt libXcursor libXext \ 7 | libXft libXi libXinerama \ 8 | libXmu libXpm libXpm-devel libXrandr libXrender \ 9 | java-1.8.0-openjdk-devel libtool m4 make \ 10 | ncurses ncurses-libs ncurses-devel nspr nss nss-util \ 11 | openssl openssl-devel openssl-libs \ 12 | perl perl-interpreter perl-libs \ 13 | perl-Carp perl-constant perl-Data-Dumper perl-DBI \ 14 | perl-Digest-MD5 perl-Encode perl-Env perl-Exporter perl-ExtUtils-Embed \ 15 | perl-File-Path perl-File-Temp perl-Getopt-Long perl-IO perl-libnet \ 16 | perl-Memoize perl-PathTools perl-Scalar-List-Utils perl-Socket perl-Storable \ 17 | perl-Term-ANSIColor perl-Test-Harness perl-Text-ParseWords perl-Thread-Queue \ 18 | perl-Time-HiRes perl-Time-Local perl-YAML \ 19 | patch popt python2 python3 readline rpm-build \ 20 | rsync tcl time tk wget which zlib \ 21 | bc tar zip unzip hostname nano procps-ng dnf-plugins-core python3-requests \ 22 | libnsl e2fsprogs e2fsprogs-libs libXext-devel libXft-devel \ 23 | libglvnd-opengl mesa-libGLU mesa-libGLU-devel nss-devel perl-CGI \ 24 | popt-devel readline-devel tcsh zsh tcl-devel tk-devel strace \ 25 | krb5-workstation python2-requests glibc-langpack-en &&\ 26 | dnf install -y epel-release &&\ 27 | dnf install -y @EPEL_PACKAGES@ voms-clients-cpp python2-psutil myproxy apptainer &&\ 28 | dnf update -y ca-certificates &&\ 29 | dnf config-manager --set-enabled powertools &&\ 30 | dnf install -y libstdc++-static &&\ 31 | ([ "@EXTRA_PACKAGES@" != "" ] && dnf -y install @EXTRA_PACKAGES@ || true) &&\ 32 | alternatives --set python `which python2` &&\ 33 | echo el8 > /etc/cmsos &&\ 34 | dnf clean all 35 | 36 | ADD share/krb5.conf /etc/krb5.conf 37 | ADD share/ca-bundle.crt /etc/pki/tls/certs/ca-bundle.crt 38 | ADD share/fix_ssh_config.sh /tmp/fix_ssh_config.sh 39 | RUN mkdir -p /cvmfs /afs /eos /etc/vomses /etc/grid-security /build /data /pool /opt/cms &&\ 40 | touch /etc/tnsnames.ora &&\ 41 | /tmp/fix_ssh_config.sh /etc/ssh/ssh_config && rm -f /tmp/fix_ssh_config.sh &&\ 42 | sed -i -e s'|^ *allow *setuid.*|allow setuid = no|;s|^ *enable *overlay.*|enable overlay = no|;s|^ *enable *underlay.*|enable underlay = yes|' /etc/apptainer/apptainer.conf 43 | -------------------------------------------------------------------------------- /alma8/Dockerfile.bootstrap: -------------------------------------------------------------------------------- 1 | FROM @BASE_IMAGE_NAME@ 2 | RUN yum install -y bzip2-devel file popt-devel nspr-devel nss-devel \ 3 | rpm-build autoconf automake libtool gettext-devel && \ 4 | yum clean all 5 | -------------------------------------------------------------------------------- /alma8/config.yaml: -------------------------------------------------------------------------------- 1 | push: true 2 | override: true 3 | delete_pattern: tmp-${group1}.*-(2[0-9]{7,}) 4 | expires_days: 7 5 | daily: d$${now.strftime("%Y%m%d")} 6 | architecture: ${group1} 7 | build_context: .. 8 | test: 9 | script: test-cmssw.sh 10 | node: singularity 11 | variables: 12 | CMS_COMPATIBLE_OS: el8 13 | DEFAULT_PACKAGES: coreutils-single 14 | EPEL_PACKAGES: 15 | groups: 16 | bootstrap: 17 | docker: Dockerfile.${group0} 18 | from: ${container}:${group1} 19 | variables: 20 | SKIP_TESTS: true 21 | groups: 22 | x86_64: 23 | tags: 24 | ${group1}-${group0}: 25 | aarch64: 26 | tags: 27 | ${group1}-${group0}: 28 | ppc64le: 29 | disabled: true 30 | tags: 31 | ${group1}-${group0}: 32 | latest: 33 | alias: ${group1}-${daily} 34 | from: library/almalinux:8 35 | groups: 36 | x86_64: 37 | variables: 38 | EXTRA_PACKAGES: doxygen 39 | tags: 40 | ${group1}: 41 | aarch64: 42 | tags: 43 | ${group1}: 44 | ppc64le: 45 | disabled: true 46 | tags: 47 | ${group1}: 48 | -------------------------------------------------------------------------------- /alma8/packages-info/aarch64-base: -------------------------------------------------------------------------------- 1 | acl 2.2.53-3.el8 2 | almalinux-release 8.10-1.el8 3 | audit-libs 3.1.2-1.el8 4 | basesystem 11-5.el8 5 | bash 4.4.20-5.el8 6 | binutils 2.30-125.el8_10 7 | bzip2-libs 1.0.6-28.el8_10 8 | ca-certificates 2024.2.69_v8.0.303-80.0.el8_10 9 | chkconfig 1.19.2-1.el8 10 | coreutils-single 8.30-15.el8 11 | cracklib 2.9.6-15.el8 12 | cracklib-dicts 2.9.6-15.el8 13 | crypto-policies 20230731-1.git3177e06.el8 14 | cryptsetup-libs 2.3.7-7.el8 15 | curl 7.61.1-34.el8_10.3 16 | cyrus-sasl-lib 2.1.27-6.el8_5 17 | dbus 1.12.8-26.el8 18 | dbus-common 1.12.8-26.el8 19 | dbus-daemon 1.12.8-26.el8 20 | dbus-libs 1.12.8-26.el8 21 | dbus-tools 1.12.8-26.el8 22 | device-mapper 1.02.181-15.el8_10 23 | device-mapper-libs 1.02.181-15.el8_10 24 | dnf 4.7.0-21.el8_10.alma.1 25 | dnf-data 4.7.0-21.el8_10.alma.1 26 | elfutils-default-yama-scope 0.190-2.el8 27 | elfutils-libelf 0.190-2.el8 28 | elfutils-libs 0.190-2.el8 29 | expat 2.2.5-17.el8_10 30 | file-libs 5.33-26.el8 31 | filesystem 3.8-6.el8 32 | findutils 4.6.0-23.el8_10 33 | gawk 4.2.1-4.el8 34 | gdbm 1.18-2.el8 35 | gdbm-libs 1.18-2.el8 36 | glib2 2.56.4-165.el8_10 37 | glibc 2.28-251.el8_10.16 38 | glibc-common 2.28-251.el8_10.16 39 | glibc-minimal-langpack 2.28-251.el8_10.16 40 | gmp 6.1.2-11.el8 41 | gnupg2 2.2.20-3.el8_6 42 | gnutls 3.6.16-8.el8_10.3 43 | gpg-pubkey 3abb34f8-5ffd890e 44 | gpg-pubkey ced7258b-6525146f 45 | gpgme 1.13.1-12.el8 46 | grep 3.1-6.el8 47 | gzip 1.9-13.el8_5 48 | hostname 3.20-6.el8 49 | ima-evm-utils 1.3.2-12.el8 50 | info 6.5-7.el8 51 | iputils 20180629-11.el8 52 | json-c 0.13.1-3.el8 53 | keyutils-libs 1.5.10-9.el8 54 | kmod-libs 25-20.el8 55 | krb5-libs 1.18.2-31.el8_10 56 | langpacks-en 1.0-12.el8 57 | less 530-3.el8_10 58 | libacl 2.2.53-3.el8 59 | libarchive 3.3.3-5.el8 60 | libassuan 2.5.1-3.el8 61 | libattr 2.4.48-3.el8 62 | libblkid 2.32.1-46.el8 63 | libcap 2.48-6.el8_9 64 | libcap-ng 0.7.11-1.el8 65 | libcom_err 1.45.6-5.1.el8.alma.1 66 | libcomps 0.1.18-1.el8 67 | libcurl-minimal 7.61.1-34.el8_10.3 68 | libdb 5.3.28-42.el8_4 69 | libdb-utils 5.3.28-42.el8_4 70 | libdnf 0.63.0-21.el8_10.alma.1 71 | libfdisk 2.32.1-46.el8 72 | libffi 3.1-24.el8 73 | libgcc 8.5.0-26.el8_10.alma.1 74 | libgcrypt 1.8.5-7.el8_6 75 | libgpg-error 1.31-1.el8 76 | libidn2 2.2.0-1.el8 77 | libksba 1.3.5-9.el8_7 78 | libmodulemd 2.13.0-1.el8 79 | libmount 2.32.1-46.el8 80 | libnghttp2 1.33.0-6.el8_10.1 81 | libnsl2 1.2.0-2.20180605git4a062cf.el8 82 | libpwquality 1.4.4-6.el8 83 | librepo 1.14.2-5.el8 84 | libreport-filesystem 2.9.5-15.el8.alma.1 85 | libseccomp 2.5.2-1.el8 86 | libselinux 2.9-10.el8_10 87 | libsemanage 2.9-11.el8_10 88 | libsepol 2.9-3.el8 89 | libsigsegv 2.11-5.el8 90 | libsmartcols 2.32.1-46.el8 91 | libsolv 0.7.20-6.el8 92 | libstdc++ 8.5.0-26.el8_10.alma.1 93 | libtasn1 4.13-5.el8_10 94 | libtirpc 1.1.4-12.el8_10 95 | libunistring 0.9.9-3.el8 96 | libusbx 1.0.23-4.el8 97 | libutempter 1.1.6-14.el8 98 | libuuid 2.32.1-46.el8 99 | libverto 0.3.2-2.el8 100 | libxcrypt 4.1.1-6.el8 101 | libxml2 2.9.7-19.el8_10 102 | libyaml 0.1.7-5.el8 103 | libzstd 1.4.4-1.el8 104 | lua-libs 5.3.4-12.el8 105 | lz4-libs 1.8.3-3.el8_4 106 | mpfr 3.1.6-1.el8 107 | ncurses-base 6.1-10.20180224.el8 108 | ncurses-libs 6.1-10.20180224.el8 109 | nettle 3.4.1-7.el8 110 | npth 1.5-4.el8 111 | openldap 2.4.46-21.el8_10 112 | openssl-libs 1.1.1k-14.el8_6 113 | p11-kit 0.23.22-2.el8 114 | p11-kit-trust 0.23.22-2.el8 115 | pam 1.3.1-36.el8_10 116 | pcre 8.42-6.el8 117 | pcre2 10.32-3.el8_6 118 | platform-python 3.6.8-69.el8_10.alma.1 119 | platform-python-setuptools 39.2.0-8.el8_10 120 | popt 1.18-1.el8 121 | python3-dnf 4.7.0-21.el8_10.alma.1 122 | python3-gpg 1.13.1-12.el8 123 | python3-hawkey 0.63.0-21.el8_10.alma.1 124 | python3-libcomps 0.1.18-1.el8 125 | python3-libdnf 0.63.0-21.el8_10.alma.1 126 | python3-libs 3.6.8-69.el8_10.alma.1 127 | python3-pip-wheel 9.0.3-24.el8 128 | python3-rpm 4.14.3-32.el8_10 129 | python3-setuptools-wheel 39.2.0-8.el8_10 130 | readline 7.0-10.el8 131 | rootfiles 8.1-22.el8 132 | rpm 4.14.3-32.el8_10 133 | rpm-build-libs 4.14.3-32.el8_10 134 | rpm-libs 4.14.3-32.el8_10 135 | sed 4.5-5.el8 136 | setup 2.12.2-9.el8 137 | shadow-utils 4.6-22.el8 138 | sqlite-libs 3.26.0-19.el8_9 139 | systemd 239-82.el8_10.5 140 | systemd-libs 239-82.el8_10.5 141 | systemd-pam 239-82.el8_10.5 142 | tar 1.30-9.el8 143 | tpm2-tss 2.3.2-6.el8 144 | tzdata 2025b-1.el8 145 | util-linux 2.32.1-46.el8 146 | vim-minimal 8.0.1763-19.el8_6.4 147 | xz 5.2.4-4.el8_6 148 | xz-libs 5.2.4-4.el8_6 149 | yum 4.7.0-21.el8_10.alma.1 150 | zlib 1.2.11-25.el8 151 | -------------------------------------------------------------------------------- /alma8/packages-info/ppc64le-base: -------------------------------------------------------------------------------- 1 | # Build date: 2024-05-30 2 | acl 2.2.53-3.el8 3 | almalinux-release 8.10-1.el8 4 | audit-libs 3.1.2-1.el8 5 | basesystem 11-5.el8 6 | bash 4.4.20-5.el8 7 | binutils 2.30-123.el8 8 | bzip2-libs 1.0.6-26.el8 9 | ca-certificates 2023.2.60_v7.0.306-80.0.el8_8 10 | chkconfig 1.19.2-1.el8 11 | coreutils-single 8.30-15.el8 12 | cracklib 2.9.6-15.el8 13 | cracklib-dicts 2.9.6-15.el8 14 | crypto-policies 20230731-1.git3177e06.el8 15 | cryptsetup-libs 2.3.7-7.el8 16 | curl 7.61.1-34.el8 17 | cyrus-sasl-lib 2.1.27-6.el8_5 18 | dbus 1.12.8-26.el8 19 | dbus-common 1.12.8-26.el8 20 | dbus-daemon 1.12.8-26.el8 21 | dbus-libs 1.12.8-26.el8 22 | dbus-tools 1.12.8-26.el8 23 | device-mapper 1.02.181-14.el8 24 | device-mapper-libs 1.02.181-14.el8 25 | dnf 4.7.0-20.el8.alma 26 | dnf-data 4.7.0-20.el8.alma 27 | elfutils-default-yama-scope 0.190-2.el8 28 | elfutils-libelf 0.190-2.el8 29 | elfutils-libs 0.190-2.el8 30 | expat 2.2.5-13.el8_10 31 | file-libs 5.33-26.el8 32 | filesystem 3.8-6.el8 33 | findutils 4.6.0-22.el8 34 | gawk 4.2.1-4.el8 35 | gdbm 1.18-2.el8 36 | gdbm-libs 1.18-2.el8 37 | glib2 2.56.4-162.el8 38 | glibc 2.28-251.el8_10.2 39 | glibc-common 2.28-251.el8_10.2 40 | glibc-minimal-langpack 2.28-251.el8_10.2 41 | gmp 6.1.2-11.el8 42 | gnupg2 2.2.20-3.el8_6 43 | gnutls 3.6.16-8.el8_9.3 44 | gpg-pubkey 3abb34f8-5ffd890e 45 | gpg-pubkey ced7258b-6525146f 46 | gpgme 1.13.1-12.el8 47 | grep 3.1-6.el8 48 | gzip 1.9-13.el8_5 49 | hostname 3.20-6.el8 50 | ima-evm-utils 1.3.2-12.el8 51 | info 6.5-7.el8 52 | iputils 20180629-11.el8 53 | json-c 0.13.1-3.el8 54 | keyutils-libs 1.5.10-9.el8 55 | kmod-libs 25-20.el8 56 | krb5-libs 1.18.2-27.el8_10 57 | langpacks-en 1.0-12.el8 58 | less 530-2.el8_9 59 | libacl 2.2.53-3.el8 60 | libarchive 3.3.3-5.el8 61 | libassuan 2.5.1-3.el8 62 | libattr 2.4.48-3.el8 63 | libblkid 2.32.1-46.el8 64 | libcap 2.48-6.el8_9 65 | libcap-ng 0.7.11-1.el8 66 | libcom_err 1.45.6-5.1.el8.alma.1 67 | libcomps 0.1.18-1.el8 68 | libcurl-minimal 7.61.1-34.el8 69 | libdb 5.3.28-42.el8_4 70 | libdb-utils 5.3.28-42.el8_4 71 | libdnf 0.63.0-19.el8.alma.2 72 | libfdisk 2.32.1-46.el8 73 | libffi 3.1-24.el8 74 | libgcc 8.5.0-22.el8_10 75 | libgcrypt 1.8.5-7.el8_6 76 | libgpg-error 1.31-1.el8 77 | libidn2 2.2.0-1.el8 78 | libksba 1.3.5-9.el8_7 79 | libmodulemd 2.13.0-1.el8 80 | libmount 2.32.1-46.el8 81 | libnghttp2 1.33.0-5.el8_9 82 | libnsl2 1.2.0-2.20180605git4a062cf.el8 83 | libpwquality 1.4.4-6.el8 84 | librepo 1.14.2-5.el8 85 | libreport-filesystem 2.9.5-15.el8.alma.1 86 | librtas 2.0.2-1.el8 87 | libseccomp 2.5.2-1.el8 88 | libselinux 2.9-8.el8 89 | libsemanage 2.9-9.el8_6 90 | libsepol 2.9-3.el8 91 | libsigsegv 2.11-5.el8 92 | libsmartcols 2.32.1-46.el8 93 | libsolv 0.7.20-6.el8 94 | libstdc++ 8.5.0-22.el8_10 95 | libtasn1 4.13-4.el8_7 96 | libtirpc 1.1.4-10.el8 97 | libunistring 0.9.9-3.el8 98 | libusbx 1.0.23-4.el8 99 | libutempter 1.1.6-14.el8 100 | libuuid 2.32.1-46.el8 101 | libverto 0.3.2-2.el8 102 | libxcrypt 4.1.1-6.el8 103 | libxml2 2.9.7-18.el8_9 104 | libyaml 0.1.7-5.el8 105 | libzstd 1.4.4-1.el8 106 | lua-libs 5.3.4-12.el8 107 | lz4-libs 1.8.3-3.el8_4 108 | mpfr 3.1.6-1.el8 109 | ncurses-base 6.1-10.20180224.el8 110 | ncurses-libs 6.1-10.20180224.el8 111 | nettle 3.4.1-7.el8 112 | npth 1.5-4.el8 113 | openldap 2.4.46-18.el8 114 | openssl-libs 1.1.1k-12.el8_9 115 | p11-kit 0.23.22-2.el8 116 | p11-kit-trust 0.23.22-2.el8 117 | pam 1.3.1-33.el8 118 | pcre 8.42-6.el8 119 | pcre2 10.32-3.el8_6 120 | platform-python 3.6.8-62.el8_10.alma.1 121 | platform-python-setuptools 39.2.0-7.el8 122 | popt 1.18-1.el8 123 | python3-dnf 4.7.0-20.el8.alma 124 | python3-gpg 1.13.1-12.el8 125 | python3-hawkey 0.63.0-19.el8.alma.2 126 | python3-libcomps 0.1.18-1.el8 127 | python3-libdnf 0.63.0-19.el8.alma.2 128 | python3-libs 3.6.8-62.el8_10.alma.1 129 | python3-pip-wheel 9.0.3-24.el8 130 | python3-rpm 4.14.3-31.el8 131 | python3-setuptools-wheel 39.2.0-7.el8 132 | readline 7.0-10.el8 133 | rootfiles 8.1-22.el8 134 | rpm 4.14.3-31.el8 135 | rpm-build-libs 4.14.3-31.el8 136 | rpm-libs 4.14.3-31.el8 137 | sed 4.5-5.el8 138 | setup 2.12.2-9.el8 139 | shadow-utils 4.6-22.el8 140 | sqlite-libs 3.26.0-19.el8_9 141 | systemd 239-82.el8 142 | systemd-libs 239-82.el8 143 | systemd-pam 239-82.el8 144 | tar 1.30-9.el8 145 | tpm2-tss 2.3.2-6.el8 146 | tzdata 2024a-1.el8 147 | util-linux 2.32.1-46.el8 148 | vim-minimal 8.0.1763-19.el8_6.4 149 | xz 5.2.4-4.el8_6 150 | xz-libs 5.2.4-4.el8_6 151 | yum 4.7.0-20.el8.alma 152 | zlib 1.2.11-25.el8 153 | -------------------------------------------------------------------------------- /alma8/packages-info/x86_64-base: -------------------------------------------------------------------------------- 1 | acl 2.2.53-3.el8 2 | almalinux-release 8.10-1.el8 3 | audit-libs 3.1.2-1.el8 4 | basesystem 11-5.el8 5 | bash 4.4.20-5.el8 6 | binutils 2.30-125.el8_10 7 | bzip2-libs 1.0.6-28.el8_10 8 | ca-certificates 2024.2.69_v8.0.303-80.0.el8_10 9 | chkconfig 1.19.2-1.el8 10 | coreutils-single 8.30-15.el8 11 | cracklib 2.9.6-15.el8 12 | cracklib-dicts 2.9.6-15.el8 13 | crypto-policies 20230731-1.git3177e06.el8 14 | cryptsetup-libs 2.3.7-7.el8 15 | curl 7.61.1-34.el8_10.3 16 | cyrus-sasl-lib 2.1.27-6.el8_5 17 | dbus 1.12.8-26.el8 18 | dbus-common 1.12.8-26.el8 19 | dbus-daemon 1.12.8-26.el8 20 | dbus-libs 1.12.8-26.el8 21 | dbus-tools 1.12.8-26.el8 22 | device-mapper 1.02.181-15.el8_10 23 | device-mapper-libs 1.02.181-15.el8_10 24 | dnf 4.7.0-21.el8_10.alma.1 25 | dnf-data 4.7.0-21.el8_10.alma.1 26 | elfutils-default-yama-scope 0.190-2.el8 27 | elfutils-libelf 0.190-2.el8 28 | elfutils-libs 0.190-2.el8 29 | expat 2.2.5-17.el8_10 30 | file-libs 5.33-26.el8 31 | filesystem 3.8-6.el8 32 | findutils 4.6.0-23.el8_10 33 | gawk 4.2.1-4.el8 34 | gdbm 1.18-2.el8 35 | gdbm-libs 1.18-2.el8 36 | glib2 2.56.4-165.el8_10 37 | glibc 2.28-251.el8_10.16 38 | glibc-common 2.28-251.el8_10.16 39 | glibc-minimal-langpack 2.28-251.el8_10.16 40 | gmp 6.1.2-11.el8 41 | gnupg2 2.2.20-3.el8_6 42 | gnutls 3.6.16-8.el8_10.3 43 | gpg-pubkey 3abb34f8-5ffd890e 44 | gpg-pubkey ced7258b-6525146f 45 | gpgme 1.13.1-12.el8 46 | grep 3.1-6.el8 47 | gzip 1.9-13.el8_5 48 | hostname 3.20-6.el8 49 | ima-evm-utils 1.3.2-12.el8 50 | info 6.5-7.el8 51 | iputils 20180629-11.el8 52 | json-c 0.13.1-3.el8 53 | keyutils-libs 1.5.10-9.el8 54 | kmod-libs 25-20.el8 55 | krb5-libs 1.18.2-31.el8_10 56 | langpacks-en 1.0-12.el8 57 | less 530-3.el8_10 58 | libacl 2.2.53-3.el8 59 | libarchive 3.3.3-5.el8 60 | libassuan 2.5.1-3.el8 61 | libattr 2.4.48-3.el8 62 | libblkid 2.32.1-46.el8 63 | libcap 2.48-6.el8_9 64 | libcap-ng 0.7.11-1.el8 65 | libcom_err 1.45.6-5.1.el8.alma.1 66 | libcomps 0.1.18-1.el8 67 | libcurl-minimal 7.61.1-34.el8_10.3 68 | libdb 5.3.28-42.el8_4 69 | libdb-utils 5.3.28-42.el8_4 70 | libdnf 0.63.0-21.el8_10.alma.1 71 | libfdisk 2.32.1-46.el8 72 | libffi 3.1-24.el8 73 | libgcc 8.5.0-26.el8_10.alma.1 74 | libgcrypt 1.8.5-7.el8_6 75 | libgpg-error 1.31-1.el8 76 | libidn2 2.2.0-1.el8 77 | libksba 1.3.5-9.el8_7 78 | libmodulemd 2.13.0-1.el8 79 | libmount 2.32.1-46.el8 80 | libnghttp2 1.33.0-6.el8_10.1 81 | libnsl2 1.2.0-2.20180605git4a062cf.el8 82 | libpwquality 1.4.4-6.el8 83 | librepo 1.14.2-5.el8 84 | libreport-filesystem 2.9.5-15.el8.alma.1 85 | libseccomp 2.5.2-1.el8 86 | libselinux 2.9-10.el8_10 87 | libsemanage 2.9-11.el8_10 88 | libsepol 2.9-3.el8 89 | libsigsegv 2.11-5.el8 90 | libsmartcols 2.32.1-46.el8 91 | libsolv 0.7.20-6.el8 92 | libstdc++ 8.5.0-26.el8_10.alma.1 93 | libtasn1 4.13-5.el8_10 94 | libtirpc 1.1.4-12.el8_10 95 | libunistring 0.9.9-3.el8 96 | libusbx 1.0.23-4.el8 97 | libutempter 1.1.6-14.el8 98 | libuuid 2.32.1-46.el8 99 | libverto 0.3.2-2.el8 100 | libxcrypt 4.1.1-6.el8 101 | libxml2 2.9.7-19.el8_10 102 | libyaml 0.1.7-5.el8 103 | libzstd 1.4.4-1.el8 104 | lua-libs 5.3.4-12.el8 105 | lz4-libs 1.8.3-3.el8_4 106 | mpfr 3.1.6-1.el8 107 | ncurses-base 6.1-10.20180224.el8 108 | ncurses-libs 6.1-10.20180224.el8 109 | nettle 3.4.1-7.el8 110 | npth 1.5-4.el8 111 | openldap 2.4.46-21.el8_10 112 | openssl-libs 1.1.1k-14.el8_6 113 | p11-kit 0.23.22-2.el8 114 | p11-kit-trust 0.23.22-2.el8 115 | pam 1.3.1-36.el8_10 116 | pcre 8.42-6.el8 117 | pcre2 10.32-3.el8_6 118 | platform-python 3.6.8-69.el8_10.alma.1 119 | platform-python-setuptools 39.2.0-8.el8_10 120 | popt 1.18-1.el8 121 | python3-dnf 4.7.0-21.el8_10.alma.1 122 | python3-gpg 1.13.1-12.el8 123 | python3-hawkey 0.63.0-21.el8_10.alma.1 124 | python3-libcomps 0.1.18-1.el8 125 | python3-libdnf 0.63.0-21.el8_10.alma.1 126 | python3-libs 3.6.8-69.el8_10.alma.1 127 | python3-pip-wheel 9.0.3-24.el8 128 | python3-rpm 4.14.3-32.el8_10 129 | python3-setuptools-wheel 39.2.0-8.el8_10 130 | readline 7.0-10.el8 131 | rootfiles 8.1-22.el8 132 | rpm 4.14.3-32.el8_10 133 | rpm-build-libs 4.14.3-32.el8_10 134 | rpm-libs 4.14.3-32.el8_10 135 | sed 4.5-5.el8 136 | setup 2.12.2-9.el8 137 | shadow-utils 4.6-22.el8 138 | sqlite-libs 3.26.0-19.el8_9 139 | systemd 239-82.el8_10.5 140 | systemd-libs 239-82.el8_10.5 141 | systemd-pam 239-82.el8_10.5 142 | tar 1.30-9.el8 143 | tpm2-tss 2.3.2-6.el8 144 | tzdata 2025b-1.el8 145 | util-linux 2.32.1-46.el8 146 | vim-minimal 8.0.1763-19.el8_6.4 147 | xz 5.2.4-4.el8_6 148 | xz-libs 5.2.4-4.el8_6 149 | yum 4.7.0-21.el8_10.alma.1 150 | zlib 1.2.11-25.el8 151 | -------------------------------------------------------------------------------- /bin/check_tag.py: -------------------------------------------------------------------------------- 1 | #!/usr/bin/env python3 2 | import sys 3 | from docker_utils import get_tags 4 | 5 | res, data=get_tags(sys.argv[1]) 6 | if res and (sys.argv[2] in data): 7 | print("FOUND:%s" % sys.argv[2]) 8 | -------------------------------------------------------------------------------- /bin/create-gh-package.sh: -------------------------------------------------------------------------------- 1 | #!/bin/bash -ex 2 | name="$1" 3 | repo="$2" 4 | thisdir=$(dirname $0) 5 | rm -rf tmp; mkdir -p tmp 6 | cp -r ${thisdir}/../init tmp/$name 7 | pushd tmp/$name 8 | echo "LABEL org.opencontainers.image.source=\"https://github.com/cms-sw/${repo}\"" >> Dockerfile 9 | docker build . -t ghcr.io/cms-sw/cmssw/${name}:init 10 | docker push ghcr.io/cms-sw/cmssw/${name}:init 11 | docker rmi ghcr.io/cms-sw/cmssw/${name}:init 12 | popd 13 | rm -rf tmp 14 | -------------------------------------------------------------------------------- /bin/docker-images-has-changed.py: -------------------------------------------------------------------------------- 1 | #!/usr/bin/env python3 2 | from __future__ import print_function 3 | from argparse import ArgumentParser 4 | from get_image_config import get_docker_images 5 | from docker_utils import get_labels 6 | import glob, os 7 | from os.path import dirname 8 | import json 9 | 10 | def create_file(img): 11 | print('Writing to file ....') 12 | file_name = (img.get('IMAGE_NAME').replace('/', '_').replace(':', '_') + '.txt') 13 | with open(file_name,'w+') as file: 14 | for key, value in img.items(): 15 | line = str(key) + '=' + str(value) + '\n' 16 | file.write(line) 17 | file.close() 18 | print(file_name,' file created') 19 | 20 | def find_image_deps(image, cache): 21 | if image not in cache: return [] 22 | return [cache[image]] + find_image_deps(cache[image], cache) 23 | 24 | parser = ArgumentParser(description='Check if docker image based on the same layers as the parent image') 25 | parser.add_argument('-r', dest='repo', type=str, help="Provide specific repository for docker images.") 26 | parser.add_argument("-f", "--force", dest="force", action="store_true", help="Force re-build", default=False) 27 | parser.add_argument('-t', '--tags', dest='tags', help="Comma separated list of tags to process", type=str, default = '') 28 | args = parser.parse_args() 29 | repos = [] 30 | if args.repo: 31 | repos.append(args.repo) 32 | else: 33 | dir = os.path.dirname(dirname(os.path.abspath(__file__))) 34 | for file in glob.glob(dir + '/**/*.yaml*'): 35 | repos.append(os.path.basename(dirname(file))) 36 | 37 | tags = [ t for t in args.tags.replace(' ','').split(",") if t] 38 | imgs = {} 39 | image_deps = {} 40 | for reponame in repos: 41 | images_list = get_docker_images(reponame) 42 | 43 | # Generate a dictionary of base image checksum 44 | base_dict = {} 45 | for element in images_list: 46 | name = element["BASE_DOCKER_REPOSITORY"] 47 | arch = element["ARCHITECTURE"] 48 | if (name != "cmssw") or (element['BASE_IMAGE_NAME'] in ['cmssw/cc7:aarch64-d20240110', 'cmssw/cc7:x86_64-d20240110']): 49 | base_dict[arch] = element["BASE_UPSTREAM_CHECKSUM"] 50 | 51 | for img in images_list: 52 | if tags and (not img['IMAGE_TAG'] in tags): continue 53 | print("Working on ",img) 54 | buildimg = args.force 55 | image = img['IMAGE_NAME'] 56 | base = img['BASE_IMAGE_NAME'] 57 | image_deps[image] = base 58 | labels = get_labels(image) 59 | img['BASE_UPSTREAM_CHECKSUM'] = base_dict[img['ARCHITECTURE']] 60 | if not buildimg: 61 | buildimg = ('build-checksum' not in labels) or (labels['build-checksum'] != img['BUILD_CHECKSUM']) 62 | print("===>",image, base, buildimg, img['BUILD_CHECKSUM']) 63 | if buildimg: 64 | imgs[image] = img 65 | 66 | print("\n") 67 | build_imgs = [] 68 | for ximg in imgs: 69 | img = imgs[ximg] 70 | bimgs = find_image_deps(ximg, image_deps) 71 | print("FOUND: %s which depends on %s" % (ximg, bimgs)) 72 | dimgs = [i for i in bimgs if i in imgs] 73 | if dimgs: 74 | print("SKIPPING: %s requires %s to be build first." % (ximg, dimgs)) 75 | else: 76 | build_imgs.append(img) 77 | 78 | all_dependency_imgs = list(image_deps.values()) 79 | for img in build_imgs: 80 | img_name = img.get('IMAGE_NAME') 81 | if img_name in all_dependency_imgs: 82 | img["RECHECK_TAGS_ON_SUCCESS"]=True 83 | print("BUILD:", img_name) 84 | create_file(img) 85 | -------------------------------------------------------------------------------- /bin/docker_tag_delete.py: -------------------------------------------------------------------------------- 1 | #!/usr/bin/env python3 2 | 3 | from __future__ import print_function 4 | from os.path import dirname, abspath 5 | from get_image_config import get_docker_images 6 | from datetime import datetime 7 | from argparse import ArgumentParser 8 | from docker_utils import get_token, delete_tag, get_tags 9 | import sys, re, yaml, os, glob 10 | 11 | def find_repos(): 12 | repos = [] 13 | dir = os.path.dirname(dirname(os.path.abspath(__file__))) 14 | for file in glob.glob(dir + '/**/config.yaml'): 15 | repos.append(os.path.basename(dirname(file))) 16 | return(repos) 17 | 18 | def date_diff(regex_pattern, tag): 19 | timeTag = re.match('^'+regex_pattern+'$', tag) 20 | if timeTag: 21 | timeTag = timeTag.group(1)[:8] 22 | today_date = datetime.now() 23 | tag_date = datetime.strptime(timeTag, '%Y%m%d') 24 | return (today_date - tag_date).days 25 | return 0 26 | 27 | parser = ArgumentParser(description='Delete expired tags from docker repository') 28 | parser.add_argument('-n', '--dry-run', dest='dryRun', help="List tags which are ready to be removed.", action="store_true", default = False) 29 | parser.add_argument('-u', '--user', dest='dockerUser', help="Provide Docker Hub username for docker images.", type=str, default = 'cmssw') 30 | args = parser.parse_args() 31 | 32 | for repo in find_repos(): 33 | got_tags = False 34 | tags = [] 35 | for image in get_docker_images(repo): 36 | if (not 'DELETE_PATTERN' in image) or (not 'EXPIRES_DAYS' in image): 37 | continue 38 | if not got_tags: 39 | got_tags = True 40 | ok, tags = get_tags(args.dockerUser + '/' + repo) 41 | if not ok: 42 | tags = [] 43 | print('Docker Hub user "%s" does not contain image "%s"'%(args.dockerUser, repo)) 44 | break 45 | print("Working on %s/%s" % (repo, image['IMAGE_TAG'])) 46 | ntags = [] 47 | for tag in tags: 48 | ntags.append(tag) 49 | if image['IMAGE_TAG'] not in tag: continue 50 | delete_pattern = image['DELETE_PATTERN'] 51 | expires_days = int(image['EXPIRES_DAYS']) 52 | days = date_diff(delete_pattern, tag) 53 | print (" Checking %s (%s)" % (tag, days)) 54 | if not days: continue 55 | if days > expires_days: 56 | print (" Deleting %s" % tag) 57 | if not args.dryRun: 58 | delete_tag((args.dockerUser + '/' + repo), tag) 59 | ntags.remove(tag) 60 | tags = ntags[:] 61 | 62 | -------------------------------------------------------------------------------- /bin/docker_unpack.py: -------------------------------------------------------------------------------- 1 | #!/usr/bin/env python 2 | from __future__ import print_function 3 | from json import loads 4 | from sys import exit, version_info 5 | import stat 6 | from os.path import exists, join 7 | from os import walk, lstat, chmod 8 | if version_info[0] == 2: 9 | from commands import getstatusoutput as run_cmd 10 | else: 11 | from subprocess import getstatusoutput as run_cmd 12 | 13 | def cleanup_exit(msg, tmpdirs=None, image_hash="", exit_code=1): 14 | if not tmpdirs: 15 | tmpdirs = [] 16 | if msg: print(msg) 17 | for tdir in tmpdirs: run_cmd("rm -rf %s" % tdir) 18 | if image_hash: run_cmd("docker rm -f %s" % image_hash) 19 | exit(exit_code) 20 | 21 | def fix_mode(full_fname, mode_num, st=None): 22 | if not st: st = lstat(full_fname) 23 | n_mode = mode_num*100 24 | #mode = mode_num + mode_num*10 + n_mode 25 | old_mode = stat.S_IMODE(st.st_mode) 26 | if (old_mode & n_mode) == 0: 27 | new_mode = old_mode | n_mode 28 | print("Fixing mode of: %s: %s -> %s" % (full_fname, oct(old_mode), oct(new_mode))) 29 | chmod(full_fname, new_mode) 30 | 31 | def fix_modes(img_dir): 32 | # Walk the path, fixing file permissions 33 | for (dirpath, dirnames, filenames) in walk(img_dir): 34 | for fname in filenames: 35 | fix_mode (join(dirpath, fname), 4) 36 | for dname in dirnames: 37 | full_dname = join(dirpath, dname) 38 | st = lstat(full_dname) 39 | if not stat.S_ISDIR(st.st_mode): continue 40 | old_mode = stat.S_IMODE(st.st_mode) 41 | if old_mode & 0o111 == 0: 42 | fix_mode (full_dname, 1, st) 43 | if old_mode & 0o222 == 0: 44 | fix_mode (full_dname, 2, st) 45 | return 46 | 47 | def process(image, outdir): 48 | container = image.split(":",1)[0] 49 | tag = image.split(":",1)[-1] 50 | if container==tag: tag="latest" 51 | 52 | e, image_hash = run_cmd("docker pull %s 2>&1 >/dev/null; docker images %s | grep '^%s \|/%s ' | grep ' %s ' | tail -1 | sed 's| *|:|g' | cut -d: -f3" % (image, container, container, container, tag)) 53 | print ("Image hash: %s" % image_hash) 54 | if e: 55 | print(image_hash) 56 | exit(1) 57 | 58 | img_sdir = join(".images", image_hash[0:2], image_hash) 59 | img_dir = join(outdir, img_sdir) 60 | if exists(img_dir): return 61 | 62 | print ("Starting Container %s with %s hash" % (image, image_hash)) 63 | tmpdir = join(outdir, ".images", "tmp") 64 | e, o = run_cmd('docker run -u $(id -u):$(id -g) --name %s %s echo OK' % (image_hash,image)) 65 | if e: cleanup_exit(o, [tmpdir], image_hash) 66 | 67 | print("Getting Container Id") 68 | e, o = run_cmd('docker ps -aq --filter name=%s' % image_hash) 69 | if e: cleanup_exit(o, [tmpdir], image_hash) 70 | container_id = o 71 | 72 | print("Exporting Container ",container_id) 73 | e, o = run_cmd('rm -rf %s; mkdir -p %s; cd %s; docker export -o %s.tar %s' % (tmpdir, tmpdir, tmpdir,image_hash, container_id)) 74 | if e: cleanup_exit(o, [tmpdir], image_hash) 75 | 76 | print("Cleaning up container ",image_hash) 77 | run_cmd('docker rm -f %s' % image_hash) 78 | 79 | print("Unpacking exported container ....") 80 | e, o = run_cmd('mkdir -p %s; cd %s; tar -xf %s/%s.tar' % (img_dir, img_dir, tmpdir, image_hash)) 81 | if e: cleanup_exit(o, [tmpdir, img_dir]) 82 | run_cmd('rm -rf %s' % tmpdir) 83 | 84 | for xdir in [ "srv", "cvmfs", "dev", "proc", "sys", "build", "data", "pool" ]: 85 | sdir = join(img_dir, xdir) 86 | if not exists(sdir): run_cmd('mkdir %s' % sdir) 87 | 88 | print("Fixing file modes ....") 89 | fix_modes (img_dir) 90 | 91 | if __name__ == "__main__": 92 | from optparse import OptionParser 93 | parser = OptionParser(usage="%prog ") 94 | parser.add_option("-c", "--container", dest="container", help="Docker container e.g. cmssw/cc7:latest", default=None) 95 | parser.add_option("-o", "--outdir", dest="outdir", help="Output directory where to unpack image", default=None) 96 | opts, args = parser.parse_args() 97 | 98 | if len(args) != 0: parser.error("Too many/few arguments") 99 | process(opts.container, opts.outdir) 100 | print("All OK") 101 | 102 | -------------------------------------------------------------------------------- /bin/hub2ghcr.sh: -------------------------------------------------------------------------------- 1 | #!/bin/bash -ex 2 | src="cmssw/${1}:${2}" 3 | des="ghcr.io/cms-sw/cmssw/${1}:${2}" 4 | docker pull ${src} 5 | docker rmi ${des} || true 6 | docker tag ${src} ${des} 7 | docker push ${des} 8 | docker rmi ${des} 9 | docker rmi ${src} 10 | -------------------------------------------------------------------------------- /bin/notify.yaml: -------------------------------------------------------------------------------- 1 | teams: 2 | all: @cms-sw/externals-l2 3 | hlt: @fwyzard 4 | -------------------------------------------------------------------------------- /bin/prepare-dockerfile.py: -------------------------------------------------------------------------------- 1 | #!/usr/bin/env python3 2 | import sys, re 3 | from argparse import ArgumentParser 4 | from os.path import join,dirname,abspath 5 | from get_image_config import get_docker_images 6 | 7 | def prepare_Dockerfile(img, outfile): 8 | reg = re.compile("^([^@]*)@([^@]+)@(.*)") 9 | docfile = join(dirname(dirname(abspath(__file__))), img['DOCKER_NAME'], img['DOCKER_FILE']) 10 | out = [] 11 | with open(docfile) as ref: 12 | for line in [l.strip() for l in ref.readlines()]: 13 | while True: 14 | m = reg.match(line) 15 | if m: 16 | val = "" 17 | if m.group(2) in img: val = img[m.group(2)] 18 | line = "%s%s%s" % (m.group(1), val, m.group(3)) 19 | else: 20 | break 21 | out.append("%s\n" % line) 22 | with open(outfile, "w") as ref: 23 | for l in out: 24 | ref.write(l) 25 | print("Dockerfile prepared:",outfile) 26 | return 27 | 28 | parser = ArgumentParser(description='Prepare dockerfile') 29 | parser.add_argument('-c', dest='container', type=str, help="Docker container full name e.g. cmssw/el9:x86_64-grid") 30 | parser.add_argument("-o", "--out-file", dest="outFile", type=str, help="Name of the newly created DockerFile", default="Dockerfile.new") 31 | 32 | args = parser.parse_args() 33 | if not args.container: 34 | parser.print_help() 35 | sys.exit(1) 36 | 37 | m = re.match("^cmssw/([a-z0-9]+):.+$", args.container) 38 | if not m: 39 | print("Error: Invalid image name: %s" % args.container) 40 | parser.print_help() 41 | sys.exit(1) 42 | 43 | data = get_docker_images(m.group(1)) 44 | for img in data: 45 | if img['IMAGE_NAME'] != args.container: 46 | print("Skipping container",img['IMAGE_NAME']) 47 | continue 48 | prepare_Dockerfile(img, args.outFile) 49 | break 50 | 51 | -------------------------------------------------------------------------------- /bin/retag-image.py: -------------------------------------------------------------------------------- 1 | #!/usr/bin/env python3 2 | from __future__ import print_function 3 | from argparse import ArgumentParser 4 | from docker_utils import get_digest 5 | import sys 6 | 7 | parser = ArgumentParser(description='') 8 | parser.add_argument('-r', dest='repository', type=str, help="Docker container repository e.g. cmssw/cms", default="") 9 | parser.add_argument('-s', dest='source', type=str, help="Existing docker image tag e.g rhel6-itb") 10 | parser.add_argument('-d', dest='destination', type=str, help="New docker image tag e.g rhel6") 11 | args = parser.parse_args() 12 | if not (args.source and args.destination): 13 | parser.error("Missing arguments.") 14 | 15 | src_tag = args.source if ':' in args.source else "%s:%s" % (args.repository, args.source) 16 | des_tag = args.destination if ':' in args.destination else "%s:%s" % (args.repository, args.destination) 17 | src = get_digest(src_tag, "") 18 | if not src[0]: 19 | print("ERROR: Unable to find source image %s" % src_tag) 20 | sys.exit(0) 21 | 22 | des = get_digest(des_tag, "") 23 | print("%s vs %s" % (src[1], des[1]), file=sys.stderr) 24 | if src[1] != des[1]: 25 | print("SOURCE_IMAGE=%s" % src_tag) 26 | print("DESTINATION_IMAGE=%s" % des_tag) 27 | -------------------------------------------------------------------------------- /bin/rpm-pkg-info.sh: -------------------------------------------------------------------------------- 1 | LAYER=$1 2 | MID_LAYER=$2 3 | 4 | CONTINUE="False" 5 | 6 | if [[ "X$LAYER" == "XBASE" ]]; then 7 | file_name="/tmp/pkgs-info-base" 8 | elif [[ "X$LAYER" == "XIMAGE" ]]; then 9 | file_name="/tmp/package-image.tmp" 10 | CONTINUE="True" 11 | else 12 | exit 1 13 | fi 14 | 15 | rpm -qa --queryformat '%{NAME} %{VERSION}-%{RELEASE}\n' | sort >> $file_name 16 | 17 | if [[ "X$CONTINUE" == "XTrue" ]]; then 18 | grep -vf /tmp/pkgs-info-base /tmp/package-image.tmp >> /tmp/pkgs-info 19 | rm -f /tmp/package-image.tmp 20 | fi 21 | 22 | if [[ "X$MID_LAYER" == "XTrue" ]]; then 23 | rm -f /tmp/pkgs-info-base 24 | fi 25 | -------------------------------------------------------------------------------- /cc7/Dockerfile: -------------------------------------------------------------------------------- 1 | FROM @BASE_IMAGE_NAME@ 2 | LABEL maintainer="CMS Build" 3 | LABEL name="CMS Worker Node on EL" 4 | 5 | ADD extra /tmp/extra 6 | 7 | RUN sed -i -e 's|^mirrorlist=|#mirrorlist=|;s|#baseurl=|baseurl=|;s|mirror.centos.org|vault.centos.org|' /etc/yum.repos.d/CentOS-Base.repo &&\ 8 | yum install -y \ 9 | java-1.8.0-openjdk python-devel java-1.8.0-openjdk-devel java-11-openjdk-devel ntp \ 10 | git subversion bc finger zip unzip which bzip2 \ 11 | zlib nss nspr popt nss-util sssd-client \ 12 | openssl openssl-devel openssl-libs \ 13 | glibc coreutils bash tcsh zsh perl tcl tk readline readline-devel ncurses e2fsprogs krb5-libs freetype fontconfig \ 14 | libstdc++ libidn libX11 libXmu libSM libICE libXcursor libXext libXrandr libXft mesa-libGLU mesa-libGL \ 15 | e2fsprogs-libs libXi libXinerama libXrender libXpm gcc-c++ libcom_err libXpm-devel libXft-devel libX11-devel \ 16 | libXext-devel mesa-libGLU mesa-libGLU-devel libGLEW glew perl-Digest-MD5 perl-ExtUtils-MakeMaker patch \ 17 | perl-libwww-perl krb5-libs krb5-devel perl-Data-Dumper perl-WWW-Curl texinfo hostname time perl-Carp \ 18 | perl-Text-ParseWords perl-PathTools perl-ExtUtils-MakeMaker perl-Exporter perl-File-Path perl-Getopt-Long \ 19 | perl-constant perl-File-Temp perl-Socket perl-Time-Local perl-Storable glibc-headers perl-threads \ 20 | perl-Thread-Queue perl-Module-ScanDeps perl-Test-Harness perl-Env perl-Switch perl-ExtUtils-Embed \ 21 | ncurses-libs perl-libs file wget perl-LWP-Protocol-https python-setuptools \ 22 | libaio tcl-devel tk-devel man-db vim perl-Time-Piece \ 23 | setroubleshoot-server autofs gdb attr python-requests-kerberos libgfortran time python3 strace &&\ 24 | mv /tmp/extra/krb5.conf /etc/krb5.conf &&\ 25 | mv /tmp/extra/epel.repo /etc/yum.repos.d/ &&\ 26 | mv /tmp/extra/epel-testing.repo /etc/yum.repos.d/ &&\ 27 | rpm --import /tmp/extra/RPM-GPG-KEY-EPEL-7 &&\ 28 | yum install -y voms-clients-cpp krb5-workstation myproxy fetch-crl python2-psutil libstdc++-static jq &&\ 29 | ([ "@EXTRA_PACKAGES@" != "" ] && yum install -y @EXTRA_PACKAGES@ || true) &&\ 30 | yum install -y xrootd-client &&\ 31 | mv /tmp/extra/cern.repo /etc/yum.repos.d/cern.repo &&\ 32 | rpm --import /tmp/extra/RPM-GPG-KEY-cern &&\ 33 | yum install -y CERN-CA-certs &&\ 34 | update-ca-trust &&\ 35 | yum update -y ca-certificates &&\ 36 | yum clean all &&\ 37 | mkdir -p /cvmfs /afs /eos /etc/vomses /etc/grid-security /data /pool /build &&\ 38 | mkdir -p /hdfs /mnt/hadoop /hadoop /cms /etc/cvmfs/SITECONF /lfs_roots /storage &&\ 39 | touch /etc/tnsnames.ora &&\ 40 | rm -rf /tmp/extra &&\ 41 | conf=/etc/singularity/singularity.conf &&\ 42 | [ ! -f /etc/apptainer/apptainer.conf ] || conf=/etc/apptainer/apptainer.conf &&\ 43 | echo "Timestamp: @BUILD_DATE@" > /image-build-info.txt &&\ 44 | sed -i -e s'|^ *allow *setuid.*|allow setuid = no|;s|^ *enable *overlay.*|enable overlay = no|;s|^ *enable *underlay.*|enable underlay = yes|' $conf 45 | 46 | # Python pip needed to install rucio client 47 | # Gfal packages needed for CRAB 48 | RUN yum install -y python3-pip python2-pip gfal2-util-scripts gfal2-all python3-gfal2-util python2-gfal2-util && yum clean all 49 | 50 | #User packages 51 | RUN yum install -y emacs screen && yum clean all 52 | 53 | LABEL build-date="@BUILD_DATE@" 54 | -------------------------------------------------------------------------------- /cc7/Dockerfile.bootstrap: -------------------------------------------------------------------------------- 1 | FROM @BASE_IMAGE_NAME@ 2 | RUN yum --disablerepo=base --disablerepo=updates --disablerepo=extras \ 3 | install -y bzip2-devel file popt-devel nspr-devel nss-devel \ 4 | rpm-build autoconf automake libtool gettext-devel &&\ 5 | yum clean all 6 | -------------------------------------------------------------------------------- /cc7/config.yaml: -------------------------------------------------------------------------------- 1 | override: true 2 | push: true 3 | test: 4 | script: test-cmssw.sh 5 | node: singularity 6 | delete_pattern: tmp-${group1}.*-(2[0-9]{7,}) 7 | expires_days: 7 8 | daily: d$${now.strftime("%Y%m%d")} 9 | architecture: ${group1} 10 | variables: 11 | BUILD_DATE: $${now.strftime("%Y%m%d-%H%M%S")} 12 | groups: 13 | bootstrap: 14 | disabled: true 15 | docker: Dockerfile.${group0} 16 | from: ${container}:${group1} 17 | variables: 18 | SKIP_TESTS: true 19 | groups: 20 | x86_64: 21 | tags: 22 | ${group1}-${group0}: 23 | aarch64: 24 | tags: 25 | ${group1}-${group0}: 26 | ppc64le: 27 | disabled: true 28 | tags: 29 | ${group1}-${group0}: 30 | latest: 31 | alias: ${group1}-${daily} 32 | from: library/centos:7 33 | groups: 34 | x86_64: 35 | variables: 36 | EXTRA_PACKAGES: doxygen compat-libstdc++-33 mesa-dri-drivers apptainer imake 37 | tags: 38 | ${group1}: 39 | aarch64: 40 | variables: 41 | EXTRA_PACKAGES: singularity 42 | tags: 43 | ${group1}: 44 | ppc64le: 45 | disabled: true 46 | variables: 47 | EXTRA_PACKAGES: apptainer 48 | tags: 49 | ${group1}: 50 | -------------------------------------------------------------------------------- /cc7/extra/RPM-GPG-KEY-EPEL-7: -------------------------------------------------------------------------------- 1 | -----BEGIN PGP PUBLIC KEY BLOCK----- 2 | Version: GnuPG v1.4.11 (GNU/Linux) 3 | 4 | mQINBFKuaIQBEAC1UphXwMqCAarPUH/ZsOFslabeTVO2pDk5YnO96f+rgZB7xArB 5 | OSeQk7B90iqSJ85/c72OAn4OXYvT63gfCeXpJs5M7emXkPsNQWWSju99lW+AqSNm 6 | jYWhmRlLRGl0OO7gIwj776dIXvcMNFlzSPj00N2xAqjMbjlnV2n2abAE5gq6VpqP 7 | vFXVyfrVa/ualogDVmf6h2t4Rdpifq8qTHsHFU3xpCz+T6/dGWKGQ42ZQfTaLnDM 8 | jToAsmY0AyevkIbX6iZVtzGvanYpPcWW4X0RDPcpqfFNZk643xI4lsZ+Y2Er9Yu5 9 | S/8x0ly+tmmIokaE0wwbdUu740YTZjCesroYWiRg5zuQ2xfKxJoV5E+Eh+tYwGDJ 10 | n6HfWhRgnudRRwvuJ45ztYVtKulKw8QQpd2STWrcQQDJaRWmnMooX/PATTjCBExB 11 | 9dkz38Druvk7IkHMtsIqlkAOQMdsX1d3Tov6BE2XDjIG0zFxLduJGbVwc/6rIc95 12 | T055j36Ez0HrjxdpTGOOHxRqMK5m9flFbaxxtDnS7w77WqzW7HjFrD0VeTx2vnjj 13 | GqchHEQpfDpFOzb8LTFhgYidyRNUflQY35WLOzLNV+pV3eQ3Jg11UFwelSNLqfQf 14 | uFRGc+zcwkNjHh5yPvm9odR1BIfqJ6sKGPGbtPNXo7ERMRypWyRz0zi0twARAQAB 15 | tChGZWRvcmEgRVBFTCAoNykgPGVwZWxAZmVkb3JhcHJvamVjdC5vcmc+iQI4BBMB 16 | AgAiBQJSrmiEAhsPBgsJCAcDAgYVCAIJCgsEFgIDAQIeAQIXgAAKCRBqL66iNSxk 17 | 5cfGD/4spqpsTjtDM7qpytKLHKruZtvuWiqt5RfvT9ww9GUUFMZ4ZZGX4nUXg49q 18 | ixDLayWR8ddG/s5kyOi3C0uX/6inzaYyRg+Bh70brqKUK14F1BrrPi29eaKfG+Gu 19 | MFtXdBG2a7OtPmw3yuKmq9Epv6B0mP6E5KSdvSRSqJWtGcA6wRS/wDzXJENHp5re 20 | 9Ism3CYydpy0GLRA5wo4fPB5uLdUhLEUDvh2KK//fMjja3o0L+SNz8N0aDZyn5Ax 21 | CU9RB3EHcTecFgoy5umRj99BZrebR1NO+4gBrivIfdvD4fJNfNBHXwhSH9ACGCNv 22 | HnXVjHQF9iHWApKkRIeh8Fr2n5dtfJEF7SEX8GbX7FbsWo29kXMrVgNqHNyDnfAB 23 | VoPubgQdtJZJkVZAkaHrMu8AytwT62Q4eNqmJI1aWbZQNI5jWYqc6RKuCK6/F99q 24 | thFT9gJO17+yRuL6Uv2/vgzVR1RGdwVLKwlUjGPAjYflpCQwWMAASxiv9uPyYPHc 25 | ErSrbRG0wjIfAR3vus1OSOx3xZHZpXFfmQTsDP7zVROLzV98R3JwFAxJ4/xqeON4 26 | vCPFU6OsT3lWQ8w7il5ohY95wmujfr6lk89kEzJdOTzcn7DBbUru33CQMGKZ3Evt 27 | RjsC7FDbL017qxS+ZVA/HGkyfiu4cpgV8VUnbql5eAZ+1Ll6Dw== 28 | =hdPa 29 | -----END PGP PUBLIC KEY BLOCK----- 30 | -------------------------------------------------------------------------------- /cc7/extra/RPM-GPG-KEY-cern: -------------------------------------------------------------------------------- 1 | -----BEGIN PGP PUBLIC KEY BLOCK----- 2 | Version: GnuPG v1.2.6 (GNU/Linux) 3 | 4 | mQGiBEK/0MURBACv5Rm/jRnrbyocW5t43hrjFxlw/DPLTWiA16apk3P2HQQ8F6cs 5 | EY/gmNmUf4U8KB6ncxdye/ostSBFJmVYh0YEYUxBSYM6ZFui3teVRxxXqN921jU2 6 | GbbWGqqlxbDqvBxDEG95pA9oSiFYalVfjxVv0hrcrAHQDW5DL2b8l48kGwCgnxs1 7 | iO7Z/5KRalKSJqKx70TVIUkD/2YkkHjcwp4Nt1pPlKxLaFp41cnCEGMEZVsNIQuJ 8 | 1SgHyMHKBzMWkD7QHqAeW3Sa9CDAJKoVPHZK99puF8etyUpC/HfmOIF6jwGpfG5A 9 | S7YbqHX6vitRlQt1b1aq5K83J8Y0+8WmjZmCQY6+y2KHOPP+zHWKe5TJDeqDnN0j 10 | sZsKA/441IF4JJTPEhvRFsPJO5WKg1zGFbxRPKvgi7+YY6pJ0VFbOMcJVMkvSZ2w 11 | 4QRD+2ets/pRxNhITHfPToMV3lhC8m1Je5fzoSvSixgH/5o9mekWWSW7Uq7U0IWA 12 | 7OD7RraJRrGxy0Tz3G+exA7svv/zn9TW/BaHFlMHoyyDHOYZmIhhBB8RAgAhBQJC 13 | v+/uFwyAEeb+6rc8Txi4s8pfgZAf4xOTel99AgcAAAoJEF4D/eUdHgNLGCgAmwdu 14 | KegSOBXpDe061zF8NoN6+OFiAJ9nKo+uC6xBZ9Ey550SmhFCPPA2/rRTQ0VSTiBM 15 | aW51eCBTdXBwb3J0IChSUE0gc2lnbmluZyBrZXkgZm9yIENFUk4gTGludXggU3Vw 16 | cG9ydCkgPGxpbnV4LnN1cHBvcnRAY2Vybi5jaD6IWgQTEQIAGgUCQr/QxQULBwMC 17 | AQMVAgMDFgIBAh4BAheAAAoJEF4D/eUdHgNL/HsAn1ntKwRoSA9L0r8UyF7Zqn3U 18 | 79m1AJ9Y4NsSE/dlFYLfmf0+baoq7b5asIicBBMBAgAGBQJCv9DjAAoJEPy9YCiW 19 | u335GTwEALjUQ7+cHxi0sifstCLoyRYQSu7Eas0M1UD2ZxSQNBnYsx4rDZJk9TmK 20 | 7QCzR1yRw9aixzZsRlNbed5VPxSzn89PE5m7Sx1bpl89sPgZ4BY95AL2wExyDWRp 21 | 1ON2+ztYeYtT7ZCkmeM+PBzt6RHR/jo3361faBS+qOkmpiiRWf3XiEYEExECAAYF 22 | AkK/0WAACgkQkB/jE5N6X33DFQCgkvy1ruogu5Ibs5CzGY/ALiSJhyAAn3ygn3p/ 23 | xrNQ8Dy5j4KfgJINoxT4iEYEEBECAAYFAkK/9CcACgkQDIloXtlLxZSiRACdG0kT 24 | KlB4X4VBocUyxMReO9e5MvsAoIKWgcJYE8AGmRXjfIisCAzPtVX+iEYEExECAAYF 25 | AkK/8oUACgkQtQgG0wyY/52z1ACgkkxNdhHKbEol3Kwka1tICWHMIwIAn3PWJQR0 26 | C1MV1+CnT8UupHzxy6J7 27 | =IUD3 28 | -----END PGP PUBLIC KEY BLOCK----- 29 | -------------------------------------------------------------------------------- /cc7/extra/cern.repo: -------------------------------------------------------------------------------- 1 | [cern] 2 | name=CentOS-7 - CERN [20250107] 3 | baseurl=http://linuxsoft.cern.ch/internal/yumsnapshot/20250107/cern/centos/7/cern/x86_64 4 | enabled=1 5 | gpgcheck=1 6 | gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-cern 7 | exclude=golang,golang-*,aims2-client,libxerces-c-3_1,python-logilab-*,cvmfs,puppet,puppet-server,facter,mcollective*,hiera,puppet-agent,puppet-agent-extra-gems 8 | includepkgs= 9 | priority=10 10 | -------------------------------------------------------------------------------- /cc7/extra/epel-testing.repo: -------------------------------------------------------------------------------- 1 | [epel-testing] 2 | name=Extra Packages for Enterprise Linux 7 - Testing - $basearch 3 | # It is much more secure to use the metalink, but if you wish to use a local mirror 4 | # place its address here. 5 | #baseurl=http://download.example/pub/epel/testing/7/$basearch 6 | metalink=https://mirrors.fedoraproject.org/metalink?repo=testing-epel7&arch=$basearch&infra=$infra&content=$contentdir 7 | failovermethod=priority 8 | enabled=0 9 | gpgcheck=1 10 | gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-EPEL-7 11 | 12 | [epel-testing-debuginfo] 13 | name=Extra Packages for Enterprise Linux 7 - Testing - $basearch - Debug 14 | # It is much more secure to use the metalink, but if you wish to use a local mirror 15 | # place its address here. 16 | #baseurl=http://download.example/pub/epel/testing/7/$basearch/debug 17 | metalink=https://mirrors.fedoraproject.org/metalink?repo=testing-debug-epel7&arch=$basearch&infra=$infra&content=$contentdir 18 | failovermethod=priority 19 | enabled=0 20 | gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-EPEL-7 21 | gpgcheck=1 22 | 23 | [epel-testing-source] 24 | name=Extra Packages for Enterprise Linux 7 - Testing - $basearch - Source 25 | # It is much more secure to use the metalink, but if you wish to use a local mirror 26 | # place it's address here. 27 | #baseurl=http://download.example/pub/epel/testing/7/source/tree/ 28 | metalink=https://mirrors.fedoraproject.org/metalink?repo=testing-source-epel7&arch=$basearch&infra=$infra&content=$contentdir 29 | failovermethod=priority 30 | enabled=0 31 | gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-EPEL-7 32 | gpgcheck=1 33 | -------------------------------------------------------------------------------- /cc7/extra/epel.repo: -------------------------------------------------------------------------------- 1 | [epel] 2 | name=Extra Packages for Enterprise Linux 7 - $basearch 3 | # It is much more secure to use the metalink, but if you wish to use a local mirror 4 | # place its address here. 5 | #baseurl=http://download.example/pub/epel/7/$basearch 6 | metalink=https://mirrors.fedoraproject.org/metalink?repo=epel-7&arch=$basearch&infra=$infra&content=$contentdir 7 | failovermethod=priority 8 | enabled=1 9 | gpgcheck=1 10 | gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-EPEL-7 11 | 12 | [epel-debuginfo] 13 | name=Extra Packages for Enterprise Linux 7 - $basearch - Debug 14 | # It is much more secure to use the metalink, but if you wish to use a local mirror 15 | # place its address here. 16 | #baseurl=http://download.example/pub/epel/7/$basearch/debug 17 | metalink=https://mirrors.fedoraproject.org/metalink?repo=epel-debug-7&arch=$basearch&infra=$infra&content=$contentdir 18 | failovermethod=priority 19 | enabled=0 20 | gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-EPEL-7 21 | gpgcheck=1 22 | 23 | [epel-source] 24 | name=Extra Packages for Enterprise Linux 7 - $basearch - Source 25 | # It is much more secure to use the metalink, but if you wish to use a local mirror 26 | # place it's address here. 27 | #baseurl=http://download.example/pub/epel/7/source/tree/ 28 | metalink=https://mirrors.fedoraproject.org/metalink?repo=epel-source-7&arch=$basearch&infra=$infra&content=$contentdir 29 | failovermethod=priority 30 | enabled=0 31 | gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-EPEL-7 32 | gpgcheck=1 33 | -------------------------------------------------------------------------------- /cc7/extra/krb5.conf: -------------------------------------------------------------------------------- 1 | ; AD : This Kerberos configuration is for CERN's Active Directory realm 2 | ; The line above this is magic and is used by cern-config-keytab. Do 3 | ; not remove. 4 | 5 | ; Installed with puppet from a series of 6 | ; template fragments. 7 | 8 | ; /etc/krb5.conf 9 | 10 | [libdefaults] 11 | default_realm = CERN.CH 12 | ticket_lifetime = 25h 13 | renew_lifetime = 120h 14 | forwardable = true 15 | proxiable = true 16 | default_tkt_enctypes = arcfour-hmac-md5 aes256-cts aes128-cts des3-cbc-sha1 des-cbc-md5 des-cbc-crc 17 | chpw_prompt = true 18 | 19 | 20 | [appdefaults] 21 | pam = { 22 | external = true 23 | krb4_convert = false 24 | krb4_convert_524 = false 25 | krb4_use_as_req = false 26 | } 27 | 28 | [domain_realm] 29 | .cern.ch = CERN.CH 30 | .fnal.gov = FNAL.GOV 31 | .hep.man.ac.uk = HEP.MAN.AC.UK 32 | .in2p3.fr = IN2P3.FR 33 | # No default domain for KFKI.HU specified. 34 | 35 | [realms] 36 | # Start of puppet output for CERN.CH 37 | CERN.CH = { 38 | default_domain = cern.ch 39 | kpasswd_server = cerndc.cern.ch 40 | admin_server = cerndc.cern.ch 41 | kdc = cerndc.cern.ch 42 | v4_name_convert = { 43 | host = { 44 | rcmd = host 45 | } 46 | } 47 | } 48 | 49 | 50 | # Start of puppet output for FNAL.GOV 51 | FNAL.GOV = { 52 | default_domain = fnal.gov 53 | admin_server = krb-fnal-admin.fnal.gov 54 | kdc = krb-fnal-1.fnal.gov:88 55 | kdc = krb-fnal-2.fnal.gov:88 56 | kdc = krb-fnal-3.fnal.gov:88 57 | } 58 | 59 | 60 | # Start of puppet output for HEP.MAN.AC.UK 61 | HEP.MAN.AC.UK = { 62 | default_domain = hep.man.ac.uk 63 | kpasswd_server = afs4.hep.man.ac.uk 64 | admin_server = afs4.hep.man.ac.uk 65 | kdc = afs1.hep.man.ac.uk 66 | kdc = afs2.hep.man.ac.uk 67 | kdc = afs3.hep.man.ac.uk 68 | kdc = afs4.hep.man.ac.uk 69 | } 70 | 71 | 72 | # Start of puppet output for IN2P3.FR 73 | IN2P3.FR = { 74 | default_domain = in2p3.fr 75 | kpasswd_server = kerberos-admin.in2p3.fr 76 | admin_server = kerberos-admin.in2p3.fr 77 | kdc = kerberos-1.in2p3.fr 78 | kdc = kerberos-2.in2p3.fr 79 | kdc = kerberos-3.in2p3.fr 80 | } 81 | 82 | 83 | # Start of puppet output for KFKI.HU 84 | KFKI.HU = { 85 | admin_server = kerberos.kfki.hu 86 | kdc = kerberos.hkfi.hu 87 | } 88 | 89 | 90 | -------------------------------------------------------------------------------- /cc7/packages-info/aarch64-base: -------------------------------------------------------------------------------- 1 | acl 2.2.51-15.el7 2 | audit-libs 2.8.5-4.el7 3 | basesystem 10.0-7.el7.centos 4 | bash 4.2.46-34.el7 5 | bc 1.06.95-13.el7 6 | bind-license 9.11.4-26.P2.el7 7 | binutils 2.27-44.base.el7 8 | bzip2-libs 1.0.6-13.el7 9 | ca-certificates 2020.2.41-70.0.el7_8 10 | centos-release 7-9.2009.0.el7.centos 11 | chkconfig 1.7.6-1.el7 12 | coreutils 8.22-24.el7 13 | cpio 2.11-28.el7 14 | cracklib 2.9.0-11.el7 15 | cracklib-dicts 2.9.0-11.el7 16 | cryptsetup-libs 2.0.3-6.el7 17 | curl 7.29.0-59.el7 18 | cyrus-sasl-lib 2.1.26-23.el7 19 | dbus 1.10.24-15.el7 20 | dbus-glib 0.100-7.el7 21 | dbus-libs 1.10.24-15.el7 22 | dbus-python 1.1.1-9.el7 23 | device-mapper 1.02.170-6.el7 24 | device-mapper-libs 1.02.170-6.el7 25 | diffutils 3.3-5.el7 26 | dracut 033-572.el7 27 | elfutils-default-yama-scope 0.176-5.el7 28 | elfutils-libelf 0.176-5.el7 29 | elfutils-libs 0.176-5.el7 30 | expat 2.1.0-12.el7 31 | file-libs 5.11-37.el7 32 | filesystem 3.2-25.el7 33 | findutils 4.5.11-6.el7 34 | gawk 4.0.2-4.el7_3.1 35 | gdbm 1.10-8.el7 36 | geoipupdate 2.5.0-1.el7 37 | glib2 2.56.1-7.el7 38 | glibc 2.17-317.el7 39 | glibc-common 2.17-317.el7 40 | gmp 6.0.0-15.el7 41 | gnupg2 2.0.22-5.el7_5 42 | gobject-introspection 1.56.1-1.el7 43 | gpgme 1.3.2-5.el7 44 | grep 2.20-3.el7 45 | gzip 1.5-10.el7 46 | hardlink 1.0-19.el7 47 | hostname 3.13-3.el7_7.1 48 | info 5.1-5.el7 49 | iputils 20160308-10.el7 50 | json-c 0.11-4.el7_0 51 | kernel-core 4.18.0-193.28.1.el7 52 | kernel-modules 4.18.0-193.28.1.el7 53 | keyutils-libs 1.5.8-3.el7 54 | kmod 20-28.el7 55 | kmod-libs 20-28.el7 56 | kpartx 0.4.9-133.el7 57 | krb5-libs 1.15.1-50.el7 58 | libacl 2.2.51-15.el7 59 | libassuan 2.1.0-3.el7 60 | libattr 2.4.46-13.el7 61 | libblkid 2.23.2-65.el7 62 | libcap 2.22-11.el7 63 | libcap-ng 0.7.5-4.el7 64 | libcom_err 1.42.9-19.el7 65 | libcurl 7.29.0-59.el7 66 | libdb 5.3.21-25.el7 67 | libdb-utils 5.3.21-25.el7 68 | libffi 3.0.13-19.el7 69 | libgcc 4.8.5-44.el7 70 | libgcrypt 1.5.3-14.el7 71 | libgpg-error 1.12-3.el7 72 | libidn 1.28-4.el7 73 | libmount 2.23.2-65.el7 74 | libpwquality 1.2.3-5.el7 75 | libselinux 2.5-15.el7 76 | libsemanage 2.5-14.el7 77 | libsepol 2.5-10.el7 78 | libsmartcols 2.23.2-65.el7 79 | libssh2 1.8.0-4.el7 80 | libstdc++ 4.8.5-44.el7 81 | libtasn1 4.10-1.el7 82 | libuser 0.60-9.el7 83 | libutempter 1.1.6-4.el7 84 | libuuid 2.23.2-65.el7 85 | libverto 0.2.5-4.el7 86 | libxml2 2.9.1-6.el7.5 87 | libxml2-python 2.9.1-6.el7.5 88 | lua 5.1.4-15.el7 89 | lz4 1.8.3-1.el7 90 | ncurses 5.9-14.20130511.el7_4 91 | ncurses-base 5.9-14.20130511.el7_4 92 | ncurses-libs 5.9-14.20130511.el7_4 93 | nspr 4.25.0-2.el7_9 94 | nss 3.53.1-3.el7_9 95 | nss-pem 1.0.3-7.el7 96 | nss-softokn 3.53.1-6.el7_9 97 | nss-softokn-freebl 3.53.1-6.el7_9 98 | nss-sysinit 3.53.1-3.el7_9 99 | nss-tools 3.53.1-3.el7_9 100 | nss-util 3.53.1-1.el7_9 101 | openldap 2.4.44-22.el7 102 | openssl-libs 1.0.2k-19.el7 103 | p11-kit 0.23.5-3.el7 104 | p11-kit-trust 0.23.5-3.el7 105 | pam 1.1.8-23.el7 106 | passwd 0.79-6.el7 107 | pcre 8.32-17.el7 108 | pinentry 0.8.1-17.el7 109 | pkgconfig 0.27.1-4.el7 110 | popt 1.13-16.el7 111 | procps-ng 3.3.10-28.el7 112 | pth 2.0.7-23.el7 113 | pygpgme 0.3-9.el7 114 | pyliblzma 0.5.3-11.el7 115 | python 2.7.5-89.el7 116 | python-chardet 2.2.1-3.el7 117 | python-gobject-base 3.22.0-1.el7_4.1 118 | python-iniparse 0.4-9.el7 119 | python-kitchen 1.1.1-5.el7 120 | python-libs 2.7.5-89.el7 121 | python-pycurl 7.19.0-19.el7 122 | python-urlgrabber 3.10-10.el7 123 | pyxattr 0.5.1-5.el7 124 | qemu-guest-agent 2.12.0-3.el7 125 | qrencode-libs 3.4.1-3.el7 126 | readline 6.2-11.el7 127 | rootfiles 8.1-11.el7 128 | rpm 4.11.3-45.el7 129 | rpm-build-libs 4.11.3-45.el7 130 | rpm-libs 4.11.3-45.el7 131 | rpm-python 4.11.3-45.el7 132 | sed 4.2.2-7.el7 133 | setup 2.8.71-11.el7 134 | shadow-utils 4.6-5.el7 135 | shared-mime-info 1.8-5.el7 136 | sqlite 3.7.17-8.el7_7.1 137 | systemd 219-78.el7 138 | systemd-libs 219-78.el7 139 | tar 1.26-35.el7 140 | tzdata 2020d-2.el7 141 | ustr 1.0.4-16.el7 142 | util-linux 2.23.2-65.el7 143 | vim-minimal 7.4.629-7.el7 144 | xz 5.2.2-1.el7 145 | xz-libs 5.2.2-1.el7 146 | yum 3.4.3-168.el7.centos 147 | yum-metadata-parser 1.1.4-10.el7 148 | yum-plugin-fastestmirror 1.1.31-54.el7_8 149 | yum-plugin-ovl 1.1.31-54.el7_8 150 | yum-utils 1.1.31-54.el7_8 151 | zlib 1.2.7-18.el7 152 | -------------------------------------------------------------------------------- /cc7/packages-info/x86_64-base: -------------------------------------------------------------------------------- 1 | acl 2.2.51-15.el7 2 | audit-libs 2.8.5-4.el7 3 | basesystem 10.0-7.el7.centos 4 | bash 4.2.46-34.el7 5 | bc 1.06.95-13.el7 6 | bind-license 9.11.4-26.P2.el7 7 | binutils 2.27-44.base.el7 8 | bzip2-libs 1.0.6-13.el7 9 | ca-certificates 2020.2.41-70.0.el7_8 10 | centos-release 7-9.2009.0.el7.centos 11 | chkconfig 1.7.6-1.el7 12 | coreutils 8.22-24.el7 13 | cpio 2.11-28.el7 14 | cracklib 2.9.0-11.el7 15 | cracklib-dicts 2.9.0-11.el7 16 | cryptsetup-libs 2.0.3-6.el7 17 | curl 7.29.0-59.el7 18 | cyrus-sasl-lib 2.1.26-23.el7 19 | dbus 1.10.24-15.el7 20 | dbus-glib 0.100-7.el7 21 | dbus-libs 1.10.24-15.el7 22 | dbus-python 1.1.1-9.el7 23 | device-mapper 1.02.170-6.el7 24 | device-mapper-libs 1.02.170-6.el7 25 | diffutils 3.3-5.el7 26 | dracut 033-572.el7 27 | elfutils-default-yama-scope 0.176-5.el7 28 | elfutils-libelf 0.176-5.el7 29 | elfutils-libs 0.176-5.el7 30 | expat 2.1.0-12.el7 31 | file-libs 5.11-37.el7 32 | filesystem 3.2-25.el7 33 | findutils 4.5.11-6.el7 34 | gawk 4.0.2-4.el7_3.1 35 | gdbm 1.10-8.el7 36 | geoipupdate 2.5.0-1.el7 37 | glib2 2.56.1-7.el7 38 | glibc 2.17-317.el7 39 | glibc-common 2.17-317.el7 40 | gmp 6.0.0-15.el7 41 | gnupg2 2.0.22-5.el7_5 42 | gobject-introspection 1.56.1-1.el7 43 | gpgme 1.3.2-5.el7 44 | grep 2.20-3.el7 45 | gzip 1.5-10.el7 46 | hardlink 1.0-19.el7 47 | hostname 3.13-3.el7_7.1 48 | info 5.1-5.el7 49 | iputils 20160308-10.el7 50 | json-c 0.11-4.el7_0 51 | keyutils-libs 1.5.8-3.el7 52 | kmod 20-28.el7 53 | kmod-libs 20-28.el7 54 | kpartx 0.4.9-133.el7 55 | krb5-libs 1.15.1-50.el7 56 | libacl 2.2.51-15.el7 57 | libassuan 2.1.0-3.el7 58 | libattr 2.4.46-13.el7 59 | libblkid 2.23.2-65.el7 60 | libcap 2.22-11.el7 61 | libcap-ng 0.7.5-4.el7 62 | libcom_err 1.42.9-19.el7 63 | libcurl 7.29.0-59.el7 64 | libdb 5.3.21-25.el7 65 | libdb-utils 5.3.21-25.el7 66 | libffi 3.0.13-19.el7 67 | libgcc 4.8.5-44.el7 68 | libgcrypt 1.5.3-14.el7 69 | libgpg-error 1.12-3.el7 70 | libidn 1.28-4.el7 71 | libmount 2.23.2-65.el7 72 | libpwquality 1.2.3-5.el7 73 | libselinux 2.5-15.el7 74 | libsemanage 2.5-14.el7 75 | libsepol 2.5-10.el7 76 | libsmartcols 2.23.2-65.el7 77 | libssh2 1.8.0-4.el7 78 | libstdc++ 4.8.5-44.el7 79 | libtasn1 4.10-1.el7 80 | libuser 0.60-9.el7 81 | libutempter 1.1.6-4.el7 82 | libuuid 2.23.2-65.el7 83 | libverto 0.2.5-4.el7 84 | libxml2 2.9.1-6.el7.5 85 | libxml2-python 2.9.1-6.el7.5 86 | lua 5.1.4-15.el7 87 | lz4 1.8.3-1.el7 88 | ncurses 5.9-14.20130511.el7_4 89 | ncurses-base 5.9-14.20130511.el7_4 90 | ncurses-libs 5.9-14.20130511.el7_4 91 | nspr 4.25.0-2.el7_9 92 | nss 3.53.1-3.el7_9 93 | nss-pem 1.0.3-7.el7 94 | nss-softokn 3.53.1-6.el7_9 95 | nss-softokn-freebl 3.53.1-6.el7_9 96 | nss-sysinit 3.53.1-3.el7_9 97 | nss-tools 3.53.1-3.el7_9 98 | nss-util 3.53.1-1.el7_9 99 | openldap 2.4.44-22.el7 100 | openssl-libs 1.0.2k-19.el7 101 | p11-kit 0.23.5-3.el7 102 | p11-kit-trust 0.23.5-3.el7 103 | pam 1.1.8-23.el7 104 | passwd 0.79-6.el7 105 | pcre 8.32-17.el7 106 | pinentry 0.8.1-17.el7 107 | pkgconfig 0.27.1-4.el7 108 | popt 1.13-16.el7 109 | procps-ng 3.3.10-28.el7 110 | pth 2.0.7-23.el7 111 | pygpgme 0.3-9.el7 112 | pyliblzma 0.5.3-11.el7 113 | python 2.7.5-89.el7 114 | python-chardet 2.2.1-3.el7 115 | python-gobject-base 3.22.0-1.el7_4.1 116 | python-iniparse 0.4-9.el7 117 | python-kitchen 1.1.1-5.el7 118 | python-libs 2.7.5-89.el7 119 | python-pycurl 7.19.0-19.el7 120 | python-urlgrabber 3.10-10.el7 121 | pyxattr 0.5.1-5.el7 122 | qrencode-libs 3.4.1-3.el7 123 | readline 6.2-11.el7 124 | rootfiles 8.1-11.el7 125 | rpm 4.11.3-45.el7 126 | rpm-build-libs 4.11.3-45.el7 127 | rpm-libs 4.11.3-45.el7 128 | rpm-python 4.11.3-45.el7 129 | sed 4.2.2-7.el7 130 | setup 2.8.71-11.el7 131 | shadow-utils 4.6-5.el7 132 | shared-mime-info 1.8-5.el7 133 | sqlite 3.7.17-8.el7_7.1 134 | systemd 219-78.el7 135 | systemd-libs 219-78.el7 136 | tar 1.26-35.el7 137 | tzdata 2020d-2.el7 138 | ustr 1.0.4-16.el7 139 | util-linux 2.23.2-65.el7 140 | vim-minimal 7.4.629-7.el7 141 | xz 5.2.2-1.el7 142 | xz-libs 5.2.2-1.el7 143 | yum 3.4.3-168.el7.centos 144 | yum-metadata-parser 1.1.4-10.el7 145 | yum-plugin-fastestmirror 1.1.31-54.el7_8 146 | yum-plugin-ovl 1.1.31-54.el7_8 147 | yum-utils 1.1.31-54.el7_8 148 | zlib 1.2.7-18.el7 149 | -------------------------------------------------------------------------------- /cc7/tags.yaml: -------------------------------------------------------------------------------- 1 | #CMS tags mapping. Format 2 | #Destination tag: source tag 3 | 4 | cmssw/el7:x86_64: x86_64 5 | cmssw/el7:aarch64: aarch64 6 | cmssw/el7:ppc64le: ppc64le 7 | -------------------------------------------------------------------------------- /cc8/Dockerfile: -------------------------------------------------------------------------------- 1 | FROM @BASE_IMAGE_NAME@ 2 | RUN yum install -y \ 3 | automake bash bzip2 bzip2-libs bzip2-devel coreutils-single e2fsprogs e2fsprogs-libs \ 4 | file file-libs fontconfig freetype gcc-c++ git glibc krb5-libs libaio \ 5 | libcom_err libgomp libICE libidn \ 6 | libSM libX11 libX11-devel libxcrypt libXcursor libXext \ 7 | libXext-devel libXft libXft-devel libXi libXinerama \ 8 | libXmu libXpm libXpm-devel libXrandr libXrender \ 9 | libglvnd-opengl mesa-libGL mesa-libGLU mesa-libGLU-devel \ 10 | java-1.8.0-openjdk-devel libtool m4 make \ 11 | ncurses ncurses-libs ncurses-devel nspr nss nss-devel nss-util \ 12 | openssl openssl-devel openssl-libs \ 13 | perl perl-interpreter perl-libs \ 14 | perl-Carp perl-CGI perl-constant perl-Data-Dumper perl-DBI \ 15 | perl-Digest-MD5 perl-Encode perl-Env perl-Exporter perl-ExtUtils-Embed \ 16 | perl-File-Path perl-File-Temp perl-Getopt-Long perl-IO perl-libnet \ 17 | perl-Memoize perl-PathTools perl-Scalar-List-Utils perl-Socket perl-Storable \ 18 | perl-Term-ANSIColor perl-Test-Harness perl-Text-ParseWords perl-Thread-Queue \ 19 | perl-Time-HiRes perl-Time-Local perl-YAML \ 20 | patch popt popt-devel python2 python3 readline readline-devel rpm-build \ 21 | rsync tcl tcsh time tk wget which zlib zsh tcl-devel tk-devel \ 22 | bc strace tar zip unzip hostname nano libnsl && \ 23 | alternatives --set python `which python2` && \ 24 | yum -y install https://dl.fedoraproject.org/pub/epel/epel-release-latest-8.noarch.rpm &&\ 25 | yum install -y voms-clients-cpp krb5-workstation python2-psutil myproxy singularity \ 26 | python2-requests python3-requests &&\ 27 | yum update -y ca-certificates &&\ 28 | yum install -y dnf-plugins-core &&\ 29 | yum config-manager --set-enabled powertools &&\ 30 | ([ "@EXTRA_PACKAGES@" != "" ] && dnf -y install @EXTRA_PACKAGES@ || true) &&\ 31 | yum clean all 32 | 33 | ADD krb5.conf /etc/krb5.conf 34 | ADD ca-bundle.crt /etc/pki/tls/certs/ca-bundle.crt 35 | ADD fix_ssh_config.sh /tmp/fix_ssh_config.sh 36 | RUN mkdir -p /cvmfs /afs /eos /etc/vomses /etc/grid-security /build /data /pool /opt/cms &&\ 37 | touch /etc/tnsnames.ora &&\ 38 | /tmp/fix_ssh_config.sh /etc/ssh/ssh_config && rm -f /tmp/fix_ssh_config.sh &&\ 39 | sed -i -e s'|^ *allow *setuid.*|allow setuid = no|;s|^ *enable *overlay.*|enable overlay = no|;s|^ *enable *underlay.*|enable underlay = yes|' /etc/singularity/singularity.conf 40 | WORKDIR /build 41 | -------------------------------------------------------------------------------- /cc8/Dockerfile.bootstrap: -------------------------------------------------------------------------------- 1 | FROM @BASE_IMAGE_NAME@ 2 | RUN yum install -y bzip2-devel file popt-devel nspr-devel nss-devel \ 3 | rpm-build autoconf automake libtool gettext-devel && \ 4 | yum clean all 5 | -------------------------------------------------------------------------------- /cc8/config.yaml: -------------------------------------------------------------------------------- 1 | push: true 2 | override: true 3 | delete_pattern: tmp-${group1}.*-(2[0-9]{7,}) 4 | expires_days: 7 5 | daily: d$${now.strftime("%Y%m%d")} 6 | architecture: ${group1} 7 | test: 8 | script: test-cmssw.sh 9 | node: singularity 10 | groups: 11 | bootstrap: 12 | docker: Dockerfile.${group0} 13 | from: ${container}:${group1} 14 | variables: 15 | SKIP_TESTS: true 16 | groups: 17 | x86_64: 18 | tags: 19 | ${group1}-${group0}: 20 | aarch64: 21 | tags: 22 | ${group1}-${group0}: 23 | ppc64le: 24 | disabled: true 25 | tags: 26 | ${group1}-${group0}: 27 | latest: 28 | alias: ${group1}-${daily} 29 | from: library/centos:8 30 | groups: 31 | x86_64: 32 | variables: 33 | EXTRA_PACKAGES: doxygen 34 | tags: 35 | ${group1}: 36 | aarch64: 37 | tags: 38 | ${group1}: 39 | ppc64le: 40 | disabled: true 41 | tags: 42 | ${group1}: 43 | -------------------------------------------------------------------------------- /cc8/fix_ssh_config.sh: -------------------------------------------------------------------------------- 1 | #!/bin/bash 2 | function fix_ssh_config() 3 | { 4 | cat "$1" | while read line ; do 5 | if [ $(echo "$line" | grep '^\s*Include\s\s*' | wc -l) -eq 0 ] ; then 6 | echo "$line" 7 | else 8 | echo "#${line}" 9 | cfgs=$(echo "$line" | sed 's|^\s*Include\s\s*||') 10 | for cfg in $(ls $cfgs 2>/dev/null) ; do 11 | echo "### Start of $cfg ###" 12 | fix_ssh_config "$cfg" 13 | echo "### End of $cfg ###" 14 | done 15 | fi 16 | done 17 | } 18 | 19 | fix_ssh_config $1 > $1.tmp 20 | mv $1.tmp $1 21 | -------------------------------------------------------------------------------- /cc8/krb5.conf: -------------------------------------------------------------------------------- 1 | ; AD : This Kerberos configuration is for CERN's Active Directory realm 2 | ; The line above this is magic and is used by cern-config-keytab. Do 3 | ; not remove. 4 | 5 | ; Installed with puppet from a series of 6 | ; template fragments. 7 | 8 | ; /etc/krb5.conf 9 | 10 | [libdefaults] 11 | default_realm = CERN.CH 12 | ticket_lifetime = 25h 13 | renew_lifetime = 120h 14 | forwardable = true 15 | proxiable = true 16 | default_tkt_enctypes = arcfour-hmac-md5 aes256-cts aes128-cts des3-cbc-sha1 des-cbc-md5 des-cbc-crc 17 | chpw_prompt = true 18 | 19 | 20 | [appdefaults] 21 | pam = { 22 | external = true 23 | krb4_convert = false 24 | krb4_convert_524 = false 25 | krb4_use_as_req = false 26 | } 27 | 28 | [domain_realm] 29 | .cern.ch = CERN.CH 30 | .fnal.gov = FNAL.GOV 31 | .hep.man.ac.uk = HEP.MAN.AC.UK 32 | .in2p3.fr = IN2P3.FR 33 | # No default domain for KFKI.HU specified. 34 | 35 | [realms] 36 | # Start of puppet output for CERN.CH 37 | CERN.CH = { 38 | default_domain = cern.ch 39 | kpasswd_server = cerndc.cern.ch 40 | admin_server = cerndc.cern.ch 41 | kdc = cerndc.cern.ch 42 | v4_name_convert = { 43 | host = { 44 | rcmd = host 45 | } 46 | } 47 | } 48 | 49 | 50 | # Start of puppet output for FNAL.GOV 51 | FNAL.GOV = { 52 | default_domain = fnal.gov 53 | admin_server = krb-fnal-admin.fnal.gov 54 | kdc = krb-fnal-1.fnal.gov:88 55 | kdc = krb-fnal-2.fnal.gov:88 56 | kdc = krb-fnal-3.fnal.gov:88 57 | } 58 | 59 | 60 | # Start of puppet output for HEP.MAN.AC.UK 61 | HEP.MAN.AC.UK = { 62 | default_domain = hep.man.ac.uk 63 | kpasswd_server = afs4.hep.man.ac.uk 64 | admin_server = afs4.hep.man.ac.uk 65 | kdc = afs1.hep.man.ac.uk 66 | kdc = afs2.hep.man.ac.uk 67 | kdc = afs3.hep.man.ac.uk 68 | kdc = afs4.hep.man.ac.uk 69 | } 70 | 71 | 72 | # Start of puppet output for IN2P3.FR 73 | IN2P3.FR = { 74 | default_domain = in2p3.fr 75 | kpasswd_server = kerberos-admin.in2p3.fr 76 | admin_server = kerberos-admin.in2p3.fr 77 | kdc = kerberos-1.in2p3.fr 78 | kdc = kerberos-2.in2p3.fr 79 | kdc = kerberos-3.in2p3.fr 80 | } 81 | 82 | 83 | # Start of puppet output for KFKI.HU 84 | KFKI.HU = { 85 | admin_server = kerberos.kfki.hu 86 | kdc = kerberos.hkfi.hu 87 | } 88 | 89 | 90 | -------------------------------------------------------------------------------- /cms/Dockerfile-wn.alma8: -------------------------------------------------------------------------------- 1 | FROM @BASE_IMAGE_NAME@ 2 | 3 | LABEL name="CMS Worker Node base on AlmaLinux" 4 | LABEL maintainer="CMS Build" 5 | 6 | RUN yum -y install https://repo.opensciencegrid.org/osg/3.5/osg-3.5-el8-release-latest.rpm \ 7 | epel-release \ 8 | yum-utils && \ 9 | yum-config-manager --enable powertools &&\ 10 | yum-config-manager --enable osg-upcoming &&\ 11 | yum -y install \ 12 | osg-wn-client \ 13 | redhat-lsb-core \ 14 | openssh-server \ 15 | apptainer && \ 16 | yum clean all 17 | -------------------------------------------------------------------------------- /cms/Dockerfile.alma8: -------------------------------------------------------------------------------- 1 | #Imported from https://hub.docker.com/r/bbockelm/cms/dockerfile 2 | 3 | FROM @BASE_IMAGE_NAME@ 4 | 5 | LABEL name="CMS Worker Node on EL" 6 | LABEL maintainer="CMS Build" 7 | 8 | # Required 9 | # -------- 10 | # - cmsRun fails without stdint.h (from glibc-headers) 11 | # Tested CMSSW_7_4_5_patch1 12 | # 13 | # Other 14 | # ----- 15 | # - ETF calls /usr/bin/lsb_release (from redhat-lsb-core) 16 | # - sssd-client for LDAP lookups through the host 17 | # - SAM tests expect cvmfs utilities 18 | # - gcc is required by GLOW jobs (builds matplotlib) 19 | # 20 | # CMSSW dependencies 21 | # ------------------ 22 | # Required software is listed under alma8_amd64_platformSeeds at 23 | # http://cmsrep.cern.ch/cgi-bin/cmspkg/driver/cms/alma8_amd64_gcc10 24 | # 25 | # - 28 Jan 2022: copied from Docker.rhel8 + contents of 26 | # https://github.com/opensciencegrid/docker-osg-wn/blob/9d253e61ce767085cc6df9d421933c5a20c428cb/Dockerfile 27 | 28 | RUN dnf -y install \ 29 | bash tcsh perl bzip2-libs glibc nspr nss nss-util popt zlib glibc-devel \ 30 | openssl openssl-devel openssl-libs krb5-libs libcom_err \ 31 | libX11 libXext libXft libXpm libglvnd-glx libglvnd-opengl mesa-libGLU \ 32 | readline ncurses-libs tcl tk libaio libxcrypt perl-libs perl-IO \ 33 | git patch make zip unzip bzip2 java-1.8.0-openjdk-devel libcom_err-devel which \ 34 | libXpm-devel libXft-devel mesa-libGLU-devel rsync \ 35 | perl-Carp perl-Data-Dumper perl-Digest-MD5 perl-Exporter perl-File-Path \ 36 | perl-File-Temp perl-Getopt-Long perl-PathTools perl-Text-ParseWords \ 37 | perl-constant readline-devel ncurses-devel tcl-devel tk-devel krb5-devel \ 38 | python36 perl-interpreter coreutils-single libnsl glibc-langpack-en \ 39 | sssd-client redhat-lsb-core gcc glibc-headers gcc-c++ wget yum-utils epel-release &&\ 40 | wget -O /etc/yum.repos.d/cernvm.repo http://cvmrepo.web.cern.ch/cvmrepo/yum/cernvm.repo &&\ 41 | wget -O /etc/pki/rpm-gpg/RPM-GPG-KEY-CernVM http://cvmrepo.web.cern.ch/cvmrepo/yum/RPM-GPG-KEY-CernVM &&\ 42 | dnf -y install cvmfs &&\ 43 | yum clean all &&\ 44 | mkdir -p /hdfs \ 45 | /mnt/hadoop \ 46 | /hadoop \ 47 | /cms \ 48 | /etc/cvmfs/SITECONF \ 49 | /lfs_roots \ 50 | /storage \ 51 | /build &&\ 52 | echo "Source: @OSG_WN_BASE@" > /image-source-info.txt &&\ 53 | echo "Timestamp: @BUILD_DATE@" > /image-build-info.txt 54 | 55 | ADD osg-wn-client-setup.sh /.singularity.d/env/99-osg-wn-client-setup.sh 56 | RUN yum -y update igtf-ca-certs && yum install srm-ifce --enablerepo=epel-testing -y && yum clean all 57 | LABEL build-date="@BUILD_DATE@" 58 | -------------------------------------------------------------------------------- /cms/Dockerfile.rhel6: -------------------------------------------------------------------------------- 1 | #Imported from https://hub.docker.com/r/bbockelm/cms/dockerfile 2 | 3 | FROM @BASE_IMAGE_NAME@ 4 | 5 | LABEL name="CMS Worker Node on EL" 6 | LABEL maintainer="CMS Build" 7 | 8 | # Required 9 | # -------- 10 | # - cmsRun fails without stdint.h (from glibc-headers) 11 | # Tested CMSSW_7_4_5_patch1 12 | # 13 | # Other 14 | # ----- 15 | # - ETF calls /usr/bin/lsb_release (from redhat-lsb-core) 16 | # - sssd-client for LDAP lookups through the host 17 | # - SAM tests expect cvmfs utilities 18 | # - gcc is required by GLOW jobs (builds matplotlib) 19 | # 20 | # CMSSW dependencies 21 | # ------------------ 22 | # Required software is listed under slc7_amd64_platformSeeds at 23 | # http://cmsrep.cern.ch/cgi-bin/cmspkg/driver/cms/slc7_amd64_gcc820 24 | # 25 | # - 7 Feb 2018: libaio was added to enable the Oracle client, needed for T0 jobs. 26 | # - 14 Dec 2018: Rsync added, needed by cms bootstrap.sh 27 | # - 17 Dec 2018: Create /build for testings cms-bot jobs 28 | # - 01 Jun 2020: Force update osg-ca-certs 29 | # - 15 Jun 2020: Remove osg-ca-certs, base-image should provide the updated certs 30 | # Reduce image layers by running only single command. 31 | # - 30 Oct 2020: Added python3 (via config.yaml) needed by new SCRAM V3 32 | # - 28 Apr 2021: Cleanup config.yaml, use separate DockerFile for each rhelX 33 | # Use vault.centos.org repo instead of mirror.centos.org 34 | # Cleanup packages perl-* which are not available in centos6 repo 35 | # - 23 Jun 2021: Added osg-wn-client-setup.sh script 36 | # - 20 Aug 2021: disable osg-* repos, see https://github.com/opensciencegrid/docker-osg-wn/issues/5 37 | # - 02 Oct 2021: Copied expired ANSPGrid.pem from /cvmfs/grid.cern.ch/etc/grid-security/certificates 38 | # Removed expired /etc/grid-security/certificates/QuoVadis-Root-CA1.pem 39 | # - 09 Jun 2022: As el6 repo is not kept up-to-date, so install osg-ca-certs from el7 repo 40 | 41 | RUN sed -i -e 's|^mirrorlist=|#mirrorlist=|;s|^#baseurl=|baseurl=|' /etc/yum.repos.d/CentOS-Base.repo && \ 42 | sed -i -e 's|/mirror.centos.org/|/vault.centos.org/|' /etc/yum.repos.d/CentOS-Base.repo && \ 43 | for r in /etc/yum.repos.d/osg-*.repo ; do mv $r $r.old ; done &&\ 44 | yum -y install cvmfs gcc glibc-headers openssh-clients redhat-lsb-core sssd-client && \ 45 | yum -y install glibc coreutils bash tcsh zsh perl tcl tk readline openssl ncurses e2fsprogs \ 46 | krb5-libs freetype ncurses-libs perl-libs perl-ExtUtils-Embed \ 47 | fontconfig compat-libstdc++-33 libidn libX11 libXmu libSM libICE libXcursor \ 48 | libXext libXrandr libXft mesa-libGLU mesa-libGL e2fsprogs-libs libXi libXinerama libXft-devel \ 49 | libXrender libXpm libcom_err perl-Test-Harness perl-File-Temp \ 50 | libX11-devel libXpm-devel libXext-devel mesa-libGLU-devel \ 51 | nspr nss nss-util file file-libs readline \ 52 | zlib popt bzip2 bzip2-libs libaio rsync compat-readline5 python34 && \ 53 | yum install -y https://repo.opensciencegrid.org/osg/3.5/el7/release/x86_64/osg-ca-certs-1.106-1.osg35.el7.noarch.rpm &&\ 54 | yum clean all &&\ 55 | mkdir -p /hdfs \ 56 | /mnt/hadoop \ 57 | /hadoop \ 58 | /cms \ 59 | /etc/cvmfs/SITECONF \ 60 | /lfs_roots \ 61 | /storage \ 62 | /build \ 63 | /.singularity.d/env &&\ 64 | echo "Source: @BASE_IMAGE_NAME@" > /image-source-info.txt &&\ 65 | echo "Timestamp: @BUILD_DATE@" > /image-build-info.txt 66 | ADD osg-wn-client-setup.sh /.singularity.d/env/99-osg-wn-client-setup.sh 67 | 68 | LABEL build-date="@BUILD_DATE@" 69 | 70 | -------------------------------------------------------------------------------- /cms/Dockerfile.rhel7: -------------------------------------------------------------------------------- 1 | #Imported from https://hub.docker.com/r/bbockelm/cms/dockerfile 2 | 3 | FROM @BASE_IMAGE_NAME@ 4 | 5 | LABEL name="CMS Worker Node on EL" 6 | LABEL maintainer="CMS Build" 7 | 8 | # Required 9 | # -------- 10 | # - cmsRun fails without stdint.h (from glibc-headers) 11 | # Tested CMSSW_7_4_5_patch1 12 | # 13 | # Other 14 | # ----- 15 | # - ETF calls /usr/bin/lsb_release (from redhat-lsb-core) 16 | # - sssd-client for LDAP lookups through the host 17 | # - SAM tests expect cvmfs utilities 18 | # - gcc is required by GLOW jobs (builds matplotlib) 19 | # 20 | # CMSSW dependencies 21 | # ------------------ 22 | # Required software is listed under slc7_amd64_platformSeeds at 23 | # http://cmsrep.cern.ch/cgi-bin/cmspkg/driver/cms/slc7_amd64_gcc820 24 | # 25 | # - 7 Feb 2018: libaio was added to enable the Oracle client, needed for T0 jobs. 26 | # - 14 Dec 2018: Rsync added, needed by cms bootstrap.sh 27 | # - 17 Dec 2018: Create /build for testings cms-bot jobs 28 | # - 01 Jun 2020: Force update osg-ca-certs 29 | # - 15 Jun 2020: Remove osg-ca-certs, base-image shoudl provide the updated certs 30 | # Reduce image layers by running only single command. 31 | # - 30 Oct 2020: Added python3 (via config.yaml) needed by new SCRAM V3 32 | # - 27 Apr 2021: Added openssl-devel openssl-libs as cmssw is dropping it for CMSSW 12.0.X 33 | # - 28 Apr 2021: Cleanup config.yaml, use separate DockerFile for each rhelX 34 | # - 09 Jun 2021: Added osg-wn-client-setup.sh script 35 | # - 14 Sep 2021: Force update osg-ca-certs 36 | # - 18 Oct 2022: Installed openssh-server as requested by Marco Mascheroni 37 | 38 | RUN yum -y install cvmfs gcc glibc-headers openssh-clients redhat-lsb-core sssd-client && \ 39 | yum -y install glibc coreutils bash tcsh zsh perl tcl tk readline openssl openssl-devel openssl-libs ncurses e2fsprogs \ 40 | krb5-libs freetype ncurses-libs perl-libs perl-ExtUtils-Embed \ 41 | fontconfig compat-libstdc++-33 libidn libX11 libXmu libSM libICE libXcursor \ 42 | libXext libXrandr libXft mesa-libGLU mesa-libGL e2fsprogs-libs libXi libXinerama libXft-devel \ 43 | libXrender libXpm libcom_err perl-Test-Harness perl-Carp perl-constant perl-PathTools \ 44 | perl-Data-Dumper perl-Digest-MD5 perl-Exporter perl-File-Path perl-File-Temp perl-Getopt-Long \ 45 | perl-Socket perl-Text-ParseWords perl-Time-Local libX11-devel libXpm-devel libXext-devel mesa-libGLU-devel \ 46 | perl-Switch perl-Storable perl-Env perl-Thread-Queue perl-Encode nspr nss nss-util file file-libs readline \ 47 | zlib popt bzip2 bzip2-libs libaio rsync python3 openssh-server && \ 48 | yum clean all &&\ 49 | mkdir -p /hdfs \ 50 | /mnt/hadoop \ 51 | /hadoop \ 52 | /cms \ 53 | /etc/cvmfs/SITECONF \ 54 | /lfs_roots \ 55 | /storage \ 56 | /build \ 57 | /.singularity.d/env &&\ 58 | 59 | echo "Source: @BASE_IMAGE_NAME@" > /image-source-info.txt &&\ 60 | echo "Timestamp: @BUILD_DATE@" > /image-build-info.txt 61 | 62 | ADD osg-wn-client-setup.sh /.singularity.d/env/99-osg-wn-client-setup.sh 63 | RUN yum update -y osg-ca-certs && yum clean all 64 | LABEL build-date="@BUILD_DATE@" 65 | 66 | -------------------------------------------------------------------------------- /cms/Dockerfile.rhel8: -------------------------------------------------------------------------------- 1 | #Imported from https://hub.docker.com/r/bbockelm/cms/dockerfile 2 | 3 | FROM @BASE_IMAGE_NAME@ 4 | 5 | LABEL name="CMS Worker Node on EL" 6 | LABEL maintainer="CMS Build" 7 | 8 | # Required 9 | # -------- 10 | # - cmsRun fails without stdint.h (from glibc-headers) 11 | # Tested CMSSW_7_4_5_patch1 12 | # 13 | # Other 14 | # ----- 15 | # - ETF calls /usr/bin/lsb_release (from redhat-lsb-core) 16 | # - sssd-client for LDAP lookups through the host 17 | # - SAM tests expect cvmfs utilities 18 | # - gcc is required by GLOW jobs (builds matplotlib) 19 | # 20 | # CMSSW dependencies 21 | # ------------------ 22 | # Required software is listed under cc8_amd64_platformSeeds at 23 | # http://cmsrep.cern.ch/cgi-bin/cmspkg/driver/cms/cc8_amd64_gcc8 24 | # 25 | # - 09 Jun 2021: Added osg-wn-client-setup.sh script 26 | # - 14 Sep 2021: Force update igtf-ca-certs 27 | # - 18 Oct 2022: Installed openssh-server as requested by Marco Mascheroni 28 | 29 | RUN yum -y install openssl-devel &&\ 30 | yum -y install gcc glibc-headers openssh-clients redhat-lsb-core sssd-client &&\ 31 | yum -y install \ 32 | mesa-libGL automake bash bzip2 bzip2-libs bzip2-devel coreutils-single e2fsprogs e2fsprogs-libs \ 33 | file file-libs fontconfig freetype gcc-c++ git glibc krb5-libs libaio \ 34 | libcom_err libgomp libICE libidn \ 35 | libSM libX11 libX11-devel libxcrypt libXcursor libXext \ 36 | libXext-devel libXft libXft-devel libXi libXinerama \ 37 | libXmu libXpm libXpm-devel libXrandr libXrender \ 38 | libglvnd-opengl mesa-libGL mesa-libGLU mesa-libGLU-devel \ 39 | java-1.8.0-openjdk-devel libtool m4 make \ 40 | ncurses ncurses-libs ncurses-devel nspr nss nss-devel nss-util \ 41 | openssl openssl-libs libnsl \ 42 | perl perl-interpreter perl-libs \ 43 | perl-Carp perl-CGI perl-constant perl-Data-Dumper perl-DBI \ 44 | perl-Digest-MD5 perl-Encode perl-Env perl-Exporter perl-ExtUtils-Embed \ 45 | perl-File-Path perl-File-Temp perl-Getopt-Long perl-IO perl-libnet \ 46 | perl-Memoize perl-PathTools perl-Scalar-List-Utils perl-Socket perl-Storable \ 47 | perl-Term-ANSIColor perl-Test-Harness perl-Text-ParseWords perl-Thread-Queue \ 48 | perl-Time-HiRes perl-Time-Local perl-YAML \ 49 | patch popt popt-devel python2 readline readline-devel rpm-build \ 50 | rsync tcl tcsh tk wget which zlib zsh openssh-server &&\ 51 | alternatives --set python `which python2` &&\ 52 | wget -O /etc/yum.repos.d/cernvm.repo http://cvmrepo.web.cern.ch/cvmrepo/yum/cernvm.repo &&\ 53 | wget -O /etc/pki/rpm-gpg/RPM-GPG-KEY-CernVM http://cvmrepo.web.cern.ch/cvmrepo/yum/RPM-GPG-KEY-CernVM &&\ 54 | yum -y install cvmfs &&\ 55 | yum clean all &&\ 56 | mkdir -p /hdfs \ 57 | /mnt/hadoop \ 58 | /hadoop \ 59 | /cms \ 60 | /etc/cvmfs/SITECONF \ 61 | /lfs_roots \ 62 | /storage \ 63 | /build &&\ 64 | echo "Source: @BASE_IMAGE_NAME@" > /image-source-info.txt &&\ 65 | echo "Timestamp: @BUILD_DATE@" > /image-build-info.txt 66 | 67 | ADD osg-wn-client-setup.sh /.singularity.d/env/99-osg-wn-client-setup.sh 68 | RUN yum update -y igtf-ca-certs && yum clean all 69 | LABEL build-date="@BUILD_DATE@" 70 | -------------------------------------------------------------------------------- /cms/README.md: -------------------------------------------------------------------------------- 1 | # Docker images for CMS 2 | 3 | This repository contains various docker images for use by CMS. 4 | 5 | -------------------------------------------------------------------------------- /cms/certificates/ANSPGrid.pem: -------------------------------------------------------------------------------- 1 | -----BEGIN CERTIFICATE----- 2 | MIIFdjCCA16gAwIBAgIJANNG8jP8vlYRMA0GCSqGSIb3DQEBCwUAMEgxCzAJBgNV 3 | BAYTAkJSMQ0wCwYDVQQKEwRBTlNQMRQwEgYDVQQLEwtBTlNQR3JpZCBDQTEUMBIG 4 | A1UEAxMLQU5TUEdyaWQgQ0EwHhcNMTEwODI1MTgxNTEwWhcNMzEwNzI1MTgxNTEw 5 | WjBIMQswCQYDVQQGEwJCUjENMAsGA1UEChMEQU5TUDEUMBIGA1UECxMLQU5TUEdy 6 | aWQgQ0ExFDASBgNVBAMTC0FOU1BHcmlkIENBMIICIjANBgkqhkiG9w0BAQEFAAOC 7 | Ag8AMIICCgKCAgEAynEsbldOTIlPCyBSBTwMw2jE+uBvwFBKjyzYR94wefBactKx 8 | FsoLqgclOiv17TAUqaIlVQx+diunsEzDcdoeqyILlR3IDRyj6OEuS6wQ2nZb1g6j 9 | CAEV2oBbtIdHAkL00DD5RxQBSKsSgEbkObv1rJcRkbBeNZyHdE9nswNAgcO48MwI 10 | aBG8JvunmkeATUh4hY+c5t5euj8BYI1ouCNu2bxkJ8kVKYkvrkpI972m/vzMx9Sf 11 | sdGobfnmaUah2Wq3L6spdxU/Dojr8aJHVxnPLp8y4atdSqlGCyriPTlnC2hULqxn 12 | rahUIDloQXiYoYC2aLb66vxaRTMjV3EmpiqgXyl04AEkb+hAwb//kXq+wMNoruDo 13 | z6zhAI7jyQFUve5PMcDiXAyZx5R4oSp1I2iwOjxR2oKnhML0m1iSrIvHC7Vzc16g 14 | cHV7uicA9Tu0NW7dxezEY1HQwKZT3qO2BmOgnQ2UHSINJaUgNB//2HD8VyBbVxOD 15 | 5J5pkaRro+IMsZuHB3jMwbK4tWG61o9DQmEhmk1DAXwQ0r9mnKAKsSZpS7PQCIBq 16 | jQWpnXLpZ3FlKvKjPGF318KRUKuP0exGMNJSSDVkxdP4hD/jT4t2bxIp23brYIKS 17 | SuhTM+748YglS3UbERujx0d3LpXNYFO+KIGlbEWxJaJc12ikLaCJ9yhwIMUCAwEA 18 | AaNjMGEwDwYDVR0TAQH/BAUwAwEB/zAOBgNVHQ8BAf8EBAMCAQYwHQYDVR0OBBYE 19 | FBpe6dIaAhb1EcmMPe2Tn8CiuTThMB8GA1UdIwQYMBaAFBpe6dIaAhb1EcmMPe2T 20 | n8CiuTThMA0GCSqGSIb3DQEBCwUAA4ICAQAfjEHWhdo09DAz/R2HEFta3pdqTbdf 21 | 6sX8vsWf+nEZSqWY4KR3rFgeQn/g5GodpyYwiVKO0B1bO5BefRGf/rV6yoL2ypWV 22 | 5wlmQAFSWa4OlUt9NEbBVW66IwHGoiQbIRD4soD5vkor6hRuvCzbEP6aqMOeRQbU 23 | +LfYtoAP40F7i0/+w8h04GFlLYmQ9SuSTJtRO7IHQf9+qwcVYsNMe2h6FSFbHnWp 24 | QPcZjnWuNMLAWCOs/qTY7ASqeVSf4MMs5U5Yse9KekdwzpW13R6VjVf8aK8cIrgL 25 | ImPtI4aO/LSo6jXuV5e0pXqdN1PrDQ9ewpJedtwvhe5oQtlskiS7YVdtKcPAAKOn 26 | 7Vy4HDRacrFVGbXx8poJ3/sw6JDts/cghi01HsCt6+yIy5WxnfRh1yxBBHzvM6qZ 27 | 1TCbOqbbLf1yFjwkvXUTdb4YhEtJ7hnHn9uGLF+pLYTvIABWT4uenKy3rwkU0lip 28 | adLCxqmBcBua7pnHS+6xyOn4D4+8egii8yBioOqP2nSfCIOUNunq+15otbj7akBI 29 | DRwOKi84DdpWFC+kAYoDvxUQ7UFyjj+aiBxVHxUaLZGxJaEnRL9Z7Oxl6nDAl+v9 30 | ZyUlaEuJ/nWArIVO7JurTrJXxzeFgwZ4kAhutUN7L6YSdO6xILQENX9VNpCvWp3w 31 | QyqzsDUQCUW+wA== 32 | -----END CERTIFICATE----- 33 | -------------------------------------------------------------------------------- /cms/config.yaml: -------------------------------------------------------------------------------- 1 | override: false 2 | docker: Dockerfile.${group} 3 | base: opensciencegrid/osg-wn 4 | daily: m$${now.strftime("%Y%m%d")} 5 | delete_pattern: tmp-${tag}-(2[0-9]{7,}) 6 | expires_days: 7 7 | test: 8 | node: singularity 9 | script: test-cmssw.sh 10 | variables: 11 | BUILD_DATE: $${now.strftime("%Y%m%d-%H%M%S")} 12 | push: true 13 | override: true 14 | alias: ${group}-${daily} 15 | architecture: amd64 16 | groups: 17 | rhel8: 18 | tags: 19 | ${group}-latest: 20 | from: ${base}:3.5-el8 21 | ${group}-cms: 22 | variables: 23 | OSG_WN_BASE: opensciencegrid/osg-wn:3.5-el8 24 | CMS_COMPATIBLE_OS: el8 25 | alias: ${group}-m-${daily} 26 | docker: Dockerfile.alma8 27 | from: ${repository}/${name}:alma8-wn 28 | watch: ${base}:3.5-el8 29 | alma8: 30 | alias: ${group}-wn-${daily} 31 | variables: 32 | SKIP_TESTS: true 33 | tags: 34 | ${group}-wn: 35 | from: library/almalinux:8 36 | docker: Dockerfile-wn.${group} 37 | rhel7: 38 | tags: 39 | ${group}-latest: 40 | from: ${base}:3.5-el7 41 | rhel6: 42 | tags: 43 | ${group}-latest: 44 | from: ${base}:3.4-el6 45 | 46 | -------------------------------------------------------------------------------- /cms/osg-wn-client-setup.sh: -------------------------------------------------------------------------------- 1 | #!/bin/bash 2 | # Requested by Marco Mascheroni: To setup osg-wn-client env 3 | # 17.8.2021 4 | export CMS_SINGULARITYD_ENV="none" 5 | ARCH=$(uname -i) 6 | if [[ "$ARCH" != "x86_64" ]]; then 7 | # Only have x86_64 in /cvmfs/oasis.opensciencegrid.org/osg-software/osg-wn-client/3.6/current/ 8 | return 0 9 | fi 10 | if [[ -f "/image-source-info.txt" ]]; then 11 | OSG_VERSION=$(cat /image-source-info.txt | cut -d: -f3 | cut -d- -f1) 12 | OS_VERSION=$(cat /image-source-info.txt | cut -d: -f3 | cut -d- -f2) 13 | export CMS_SINGULARITYD_ENV="$OSG_VERSION/$OS_VERSION-x86_64" 14 | source /cvmfs/oasis.opensciencegrid.org/osg-software/osg-wn-client/$OSG_VERSION/current/$OS_VERSION-x86_64/setup.sh 15 | return 0 # Ignore failures during source 16 | fi 17 | -------------------------------------------------------------------------------- /cms/tags.yaml: -------------------------------------------------------------------------------- 1 | #CMS tags mapping. Format 2 | #Destination tag: source image/tag 3 | 4 | ######################## 5 | #ITB images 6 | ######################## 7 | rhel6-itb: rhel6-m20211005 8 | rhel7-itb: cmssw/cc7:x86_64-d20250108 9 | rhel8-itb: cmssw/el8:x86_64-d20250312 10 | rhel9-itb: cmssw/el9:x86_64-d20250311 11 | 12 | #itb x86_64 13 | rhel6-itb-x86_64: rhel6-itb 14 | rhel7-itb-x86_64: rhel7-itb 15 | rhel8-itb-x86_64: rhel8-itb 16 | rhel9-itb-x86_64: rhel9-itb 17 | 18 | #itb aarch64 19 | rhel7-itb-aarch64: cmssw/cc7:aarch64-d20250108 20 | rhel8-itb-aarch64: cmssw/el8:aarch64-d20250312 21 | rhel9-itb-aarch64: cmssw/el9:aarch64-d20250311 22 | 23 | #itb ppc64le 24 | rhel8-itb-ppc64le: cmssw/el8:ppc64le-d20240531 25 | 26 | ######################## 27 | #Production images 28 | ######################## 29 | rhel6: rhel6-m20211005 30 | rhel7: rhel7-m20220512 31 | rhel8: cmssw/el8:x86_64-d20250312 32 | rhel9: cmssw/el9:x86_64-d20250311 33 | 34 | #x86_64 35 | rhel6-x86_64: rhel6 36 | rhel7-x86_64: rhel7 37 | rhel8-x86_64: rhel8 38 | rhel9-x86_64: rhel9 39 | 40 | #aarch64 41 | rhel8-aarch64: cmssw/el8:aarch64-d20250312 42 | rhel9-aarch64: cmssw/el9:aarch64-d20250311 43 | 44 | #ppc64le 45 | rhel8-ppc64le: cmssw/el8:ppc64le-d20240531 46 | -------------------------------------------------------------------------------- /cmssw/Dockerfile.CMSSW_10_6_12: -------------------------------------------------------------------------------- 1 | FROM cmssw/cms:rhel7-m202002 2 | 3 | RUN groupadd -g 500 cmsinst && \ 4 | adduser -u 500 -g 500 cmsinst && \ 5 | /bin/mkdir -p /opt/cms && \ 6 | chown cmsinst:cmsinst -R /opt/cms 7 | 8 | RUN su - cmsinst sh -c "cd /opt/cms &&\ 9 | wget -q https://github.com/cms-sw/siteconf/archive/master.tar.gz &&\ 10 | tar -xzf master.tar.gz &&\ 11 | mv siteconf-master SITECONF &&\ 12 | wget -q -O bootstrap.sh http://cmsrep.cern.ch/cmssw/repos/bootstrap.sh &&\ 13 | sh ./bootstrap.sh setup -r cms -architecture slc7_amd64_gcc700 -server cmsrep.cern.ch &&\ 14 | ./common/cmspkg -a slc7_amd64_gcc700 install -y cms+cmssw+CMSSW_10_6_12 &&\ 15 | ./common/cmspkg -a slc7_amd64_gcc700 clean" 16 | 17 | RUN /bin/cp -f /opt/cms/cmsset_default.sh /etc/profile.d/ && \ 18 | /bin/cp -f /opt/cms/cmsset_default.csh /etc/profile.d/ 19 | -------------------------------------------------------------------------------- /cmssw/Dockerfile.CMSSW_11_0_3: -------------------------------------------------------------------------------- 1 | FROM cmssw/cms:rhel7-m20200615 2 | 3 | RUN groupadd -g 500 cmsinst && \ 4 | adduser -u 500 -g 500 cmsinst && \ 5 | /bin/mkdir -p /opt/cms && \ 6 | chown cmsinst:cmsinst -R /opt/cms 7 | 8 | RUN su - cmsinst sh -c "cd /opt/cms &&\ 9 | wget -q https://github.com/cms-sw/siteconf/archive/master.tar.gz &&\ 10 | tar -xzf master.tar.gz &&\ 11 | mv siteconf-master SITECONF &&\ 12 | wget -q -O bootstrap.sh http://cmsrep.cern.ch/cmssw/repos/bootstrap.sh &&\ 13 | sh ./bootstrap.sh setup -r cms -architecture slc7_amd64_gcc820 -server cmsrep.cern.ch &&\ 14 | ./common/cmspkg -a slc7_amd64_gcc820 install -y cms+cmssw+CMSSW_11_0_3 &&\ 15 | ./common/cmspkg -a slc7_amd64_gcc820 clean" 16 | 17 | RUN /bin/cp -f /opt/cms/cmsset_default.sh /etc/profile.d/ && \ 18 | /bin/cp -f /opt/cms/cmsset_default.csh /etc/profile.d/ 19 | -------------------------------------------------------------------------------- /cmssw/Dockerfile.CMSSW_11_1_3: -------------------------------------------------------------------------------- 1 | FROM cmssw/cms:rhel7 2 | 3 | RUN groupadd -g 500 cmsinst && \ 4 | adduser -u 500 -g 500 cmsinst && \ 5 | /bin/mkdir -p /opt/cms && \ 6 | chown cmsinst:cmsinst -R /opt/cms 7 | 8 | RUN su - cmsinst sh -c "cd /opt/cms &&\ 9 | wget -q https://github.com/cms-sw/siteconf/archive/master.tar.gz &&\ 10 | tar -xzf master.tar.gz &&\ 11 | mv siteconf-master SITECONF &&\ 12 | wget -q -O bootstrap.sh http://cmsrep.cern.ch/cmssw/repos/bootstrap.sh &&\ 13 | sh ./bootstrap.sh setup -r cms -architecture slc7_amd64_gcc820 -server cmsrep.cern.ch &&\ 14 | ./common/cmspkg -a slc7_amd64_gcc820 install -y cms+cmssw+CMSSW_11_1_3 &&\ 15 | ./common/cmspkg -a slc7_amd64_gcc820 clean" 16 | 17 | RUN /bin/cp -f /opt/cms/cmsset_default.sh /etc/profile.d/ && \ 18 | /bin/cp -f /opt/cms/cmsset_default.csh /etc/profile.d/ 19 | -------------------------------------------------------------------------------- /cmssw/Dockerfile.tmpl: -------------------------------------------------------------------------------- 1 | FROM @BASE_IMAGE_NAME@ 2 | 3 | RUN groupadd -g 500 cmsinst && \ 4 | adduser -u 500 -g 500 cmsinst && \ 5 | /bin/mkdir -p /opt/cms && \ 6 | chown cmsinst:cmsinst -R /opt/cms 7 | 8 | RUN su - cmsinst sh -c "cd /opt/cms &&\ 9 | wget -q https://github.com/cms-sw/siteconf/archive/master.tar.gz &&\ 10 | tar -xzf master.tar.gz &&\ 11 | mv siteconf-master SITECONF &&\ 12 | wget -q -O bootstrap.sh http://cmsrep.cern.ch/cmssw/repos/bootstrap.sh &&\ 13 | sh ./bootstrap.sh setup -r cms -architecture @SCRAM_ARCH@ -server cmsrep.cern.ch &&\ 14 | ./common/cmspkg -a @SCRAM_ARCH@ install -y cms+cmssw+@IMAGE_TAG@ &&\ 15 | ./common/cmspkg -a @SCRAM_ARCH@ clean" 16 | 17 | RUN /bin/cp -f /opt/cms/cmsset_default.sh /etc/profile.d/ && \ 18 | /bin/cp -f /opt/cms/cmsset_default.csh /etc/profile.d/ 19 | -------------------------------------------------------------------------------- /cmssw/build.sh: -------------------------------------------------------------------------------- 1 | #!/bin/bash -ex 2 | cd $(dirname $0) 3 | 4 | if [ "$1" = "" ] ; then 5 | echo "Usage: $0 " 6 | exit 1 7 | fi 8 | CMSSW_VERSION=$1 9 | DockerFile="Dockerfile.${CMSSW_VERSION}" 10 | if [ ! -f ${DockerFile} ] ; then 11 | RELDATA=$(curl -s https://raw.githubusercontent.com/cms-sw/cms-bot/master/releases.map | grep "=$CMSSW_VERSION;" | grep 'prodarch=1') 12 | ITEM_COUNT=$(echo "$RELDATA" | tr ';' '\n' | grep 'architecture=' | wc -l) 13 | if [ $ITEM_COUNT -eq 0 ] ; then 14 | echo "ERROR: Unable to find Release $CMSSW_VERSION in https://github.com/cms-sw/cms-bot/blob/master/releases.map" 15 | exit 1 16 | elif [ $ITEM_COUNT -gt 1 ] ; then 17 | echo "ERROR: Multiple entries found for $CMSSW_VERSION in https://github.com/cms-sw/cms-bot/blob/master/releases.map" 18 | exit 1 19 | fi 20 | eval "$RELDATA" 21 | BASE_IMG="" 22 | case $architecture in 23 | slc6_* ) BASE_IMG="cmssw/cms:rhel6" ;; 24 | slc7_* ) BASE_IMG="cmssw/cms:rhel7" ;; 25 | cc8_* ) BASE_IMG="cmssw/cms:rhel8" ;; 26 | * ) echo "Unknown architecture $architecture"; exit 1 ;; 27 | esac 28 | cp Dockerfile.tmpl ${DockerFile} 29 | sed -i -e "s|@BASE_IMAGE_NAME@|${BASE_IMG}|;s|@SCRAM_ARCH@|${architecture}|g;s|@IMAGE_TAG@|$1|g" ${DockerFile} 30 | if [ $(echo $CMSSW_VERSION | grep _patch | wc -l) -gt 0 ] ; then 31 | sed -i -e 's|cms+cmssw+|cms+cmssw-patch+|' ${DockerFile} 32 | fi 33 | fi 34 | 35 | docker build -f ${DockerFile} -t cmssw/cmssw:$CMSSW_VERSION . 36 | -------------------------------------------------------------------------------- /cs8/Dockerfile: -------------------------------------------------------------------------------- 1 | FROM @BASE_IMAGE_NAME@ 2 | RUN yum -y install openssl-devel &&\ 3 | yum install -y \ 4 | automake bash bzip2 bzip2-libs bzip2-devel coreutils-single e2fsprogs e2fsprogs-libs \ 5 | file file-libs fontconfig freetype gcc-c++ git glibc krb5-libs libaio \ 6 | libcom_err libgomp libICE libidn \ 7 | libSM libX11 libX11-devel libxcrypt libXcursor libXext \ 8 | libXext-devel libXft libXft-devel libXi libXinerama \ 9 | libXmu libXpm libXpm-devel libXrandr libXrender \ 10 | libglvnd-opengl mesa-libGL mesa-libGLU mesa-libGLU-devel \ 11 | java-1.8.0-openjdk-devel libtool m4 make \ 12 | ncurses ncurses-libs ncurses-devel nspr nss nss-devel nss-util \ 13 | openssl openssl-devel openssl-libs \ 14 | perl perl-interpreter perl-libs \ 15 | perl-Carp perl-CGI perl-constant perl-Data-Dumper perl-DBI \ 16 | perl-Digest-MD5 perl-Encode perl-Env perl-Exporter perl-ExtUtils-Embed \ 17 | perl-File-Path perl-File-Temp perl-Getopt-Long perl-IO perl-libnet \ 18 | perl-Memoize perl-PathTools perl-Scalar-List-Utils perl-Socket perl-Storable \ 19 | perl-Term-ANSIColor perl-Test-Harness perl-Text-ParseWords perl-Thread-Queue \ 20 | perl-Time-HiRes perl-Time-Local perl-YAML \ 21 | patch popt popt-devel python2 python3 readline readline-devel rpm-build \ 22 | rsync tcl tcsh time tk wget which zlib zsh tcl-devel tk-devel \ 23 | bc strace tar zip unzip hostname nano libnsl procps-ng environment-modules && \ 24 | alternatives --set python `which python2` && \ 25 | yum -y install https://dl.fedoraproject.org/pub/epel/epel-release-latest-8.noarch.rpm &&\ 26 | yum install -y voms-clients-cpp krb5-workstation python2-psutil myproxy apptainer \ 27 | python2-requests python3-requests &&\ 28 | yum update -y ca-certificates &&\ 29 | yum install -y dnf-plugins-core &&\ 30 | yum config-manager --set-enabled powertools &&\ 31 | yum install -y libstdc++-static &&\ 32 | ([ "@EXTRA_PACKAGES@" != "" ] && dnf -y install @EXTRA_PACKAGES@ || true) &&\ 33 | yum clean all 34 | 35 | ADD krb5.conf /etc/krb5.conf 36 | ADD ca-bundle.crt /etc/pki/tls/certs/ca-bundle.crt 37 | ADD fix_ssh_config.sh /tmp/fix_ssh_config.sh 38 | RUN mkdir -p /cvmfs /afs /eos /etc/vomses /etc/grid-security /build /data /pool /opt/cms &&\ 39 | touch /etc/tnsnames.ora &&\ 40 | echo el8 > /etc/cmsos &&\ 41 | /tmp/fix_ssh_config.sh /etc/ssh/ssh_config && rm -f /tmp/fix_ssh_config.sh &&\ 42 | sed -i -e s'|^ *allow *setuid.*|allow setuid = no|;s|^ *enable *overlay.*|enable overlay = no|;s|^ *enable *underlay.*|enable underlay = yes|' /etc/apptainer/apptainer.conf 43 | WORKDIR /build 44 | -------------------------------------------------------------------------------- /cs8/Dockerfile.bootstrap: -------------------------------------------------------------------------------- 1 | FROM @BASE_IMAGE_NAME@ 2 | RUN yum install -y bzip2-devel file popt-devel nspr-devel nss-devel \ 3 | rpm-build autoconf automake libtool gettext-devel && \ 4 | yum clean all 5 | -------------------------------------------------------------------------------- /cs8/config.yaml: -------------------------------------------------------------------------------- 1 | push: true 2 | override: true 3 | delete_pattern: tmp-${group1}.*-(2[0-9]{7,}) 4 | expires_days: 7 5 | daily: d$${now.strftime("%Y%m%d")} 6 | architecture: ${group1} 7 | test: 8 | script: test-cmssw.sh 9 | node: singularity 10 | groups: 11 | bootstrap: 12 | docker: Dockerfile.${group0} 13 | from: ${container}:${group1} 14 | variables: 15 | SKIP_TESTS: true 16 | groups: 17 | x86_64: 18 | tags: 19 | ${group1}-${group0}: 20 | aarch64: 21 | tags: 22 | ${group1}-${group0}: 23 | ppc64le: 24 | disabled: true 25 | tags: 26 | ${group1}-${group0}: 27 | latest: 28 | alias: ${group1}-${daily} 29 | from: quay.io/centos/centos:stream8 30 | groups: 31 | x86_64: 32 | variables: 33 | EXTRA_PACKAGES: doxygen 34 | tags: 35 | ${group1}: 36 | aarch64: 37 | tags: 38 | ${group1}: 39 | ppc64le: 40 | disabled: true 41 | tags: 42 | ${group1}: 43 | -------------------------------------------------------------------------------- /cs8/fix_ssh_config.sh: -------------------------------------------------------------------------------- 1 | #!/bin/bash 2 | function fix_ssh_config() 3 | { 4 | cat "$1" | while read line ; do 5 | if [ $(echo "$line" | grep '^\s*Include\s\s*' | wc -l) -eq 0 ] ; then 6 | echo "$line" 7 | else 8 | echo "#${line}" 9 | cfgs=$(echo "$line" | sed 's|^\s*Include\s\s*||') 10 | for cfg in $(ls $cfgs 2>/dev/null) ; do 11 | echo "### Start of $cfg ###" 12 | fix_ssh_config "$cfg" 13 | echo "### End of $cfg ###" 14 | done 15 | fi 16 | done 17 | } 18 | 19 | fix_ssh_config $1 > $1.tmp 20 | mv $1.tmp $1 21 | -------------------------------------------------------------------------------- /cs8/krb5.conf: -------------------------------------------------------------------------------- 1 | ; AD : This Kerberos configuration is for CERN's Active Directory realm 2 | ; The line above this is magic and is used by cern-config-keytab. Do 3 | ; not remove. 4 | 5 | ; Installed with puppet from a series of 6 | ; template fragments. 7 | 8 | ; /etc/krb5.conf 9 | 10 | [libdefaults] 11 | default_realm = CERN.CH 12 | ticket_lifetime = 25h 13 | renew_lifetime = 120h 14 | forwardable = true 15 | proxiable = true 16 | default_tkt_enctypes = arcfour-hmac-md5 aes256-cts aes128-cts des3-cbc-sha1 des-cbc-md5 des-cbc-crc 17 | chpw_prompt = true 18 | 19 | 20 | [appdefaults] 21 | pam = { 22 | external = true 23 | krb4_convert = false 24 | krb4_convert_524 = false 25 | krb4_use_as_req = false 26 | } 27 | 28 | [domain_realm] 29 | .cern.ch = CERN.CH 30 | .fnal.gov = FNAL.GOV 31 | .hep.man.ac.uk = HEP.MAN.AC.UK 32 | .in2p3.fr = IN2P3.FR 33 | # No default domain for KFKI.HU specified. 34 | 35 | [realms] 36 | # Start of puppet output for CERN.CH 37 | CERN.CH = { 38 | default_domain = cern.ch 39 | kpasswd_server = cerndc.cern.ch 40 | admin_server = cerndc.cern.ch 41 | kdc = cerndc.cern.ch 42 | v4_name_convert = { 43 | host = { 44 | rcmd = host 45 | } 46 | } 47 | } 48 | 49 | 50 | # Start of puppet output for FNAL.GOV 51 | FNAL.GOV = { 52 | default_domain = fnal.gov 53 | admin_server = krb-fnal-admin.fnal.gov 54 | kdc = krb-fnal-1.fnal.gov:88 55 | kdc = krb-fnal-2.fnal.gov:88 56 | kdc = krb-fnal-3.fnal.gov:88 57 | } 58 | 59 | 60 | # Start of puppet output for HEP.MAN.AC.UK 61 | HEP.MAN.AC.UK = { 62 | default_domain = hep.man.ac.uk 63 | kpasswd_server = afs4.hep.man.ac.uk 64 | admin_server = afs4.hep.man.ac.uk 65 | kdc = afs1.hep.man.ac.uk 66 | kdc = afs2.hep.man.ac.uk 67 | kdc = afs3.hep.man.ac.uk 68 | kdc = afs4.hep.man.ac.uk 69 | } 70 | 71 | 72 | # Start of puppet output for IN2P3.FR 73 | IN2P3.FR = { 74 | default_domain = in2p3.fr 75 | kpasswd_server = kerberos-admin.in2p3.fr 76 | admin_server = kerberos-admin.in2p3.fr 77 | kdc = kerberos-1.in2p3.fr 78 | kdc = kerberos-2.in2p3.fr 79 | kdc = kerberos-3.in2p3.fr 80 | } 81 | 82 | 83 | # Start of puppet output for KFKI.HU 84 | KFKI.HU = { 85 | admin_server = kerberos.kfki.hu 86 | kdc = kerberos.hkfi.hu 87 | } 88 | 89 | 90 | -------------------------------------------------------------------------------- /cs9/Dockerfile: -------------------------------------------------------------------------------- 1 | FROM @BASE_IMAGE_NAME@ 2 | 3 | RUN dnf install -y automake bzip2 bzip2-libs bzip2-devel coreutils-single e2fsprogs \ 4 | e2fsprogs-libs perl file file-libs fontconfig freetype gcc-c++ git glibc krb5-libs \ 5 | libaio libcom_err libcom_err-devel libgomp libICE \ 6 | libSM libX11 libX11-devel libxcrypt libXcursor libXext \ 7 | libXext-devel libXft libXft-devel libXi libXinerama \ 8 | libXmu libXpm libXpm-devel libXrandr libXrender \ 9 | libglvnd-opengl mesa-libGL mesa-libGLU mesa-libGLU-devel \ 10 | java-1.8.0-openjdk-devel java-11-openjdk-devel java-17-openjdk-devel libtool m4 make \ 11 | ncurses ncurses-libs ncurses-devel nspr nss nss-devel nss-util \ 12 | openssl openssl-devel openssl-libs sssd-client \ 13 | patch popt popt-devel python3 readline readline-devel rpm-build \ 14 | rsync tcl tcsh time tk wget which zlib zsh tcl-devel tk-devel krb5-devel \ 15 | bc strace tar zip unzip hostname nano libnsl procps-ng environment-modules && \ 16 | dnf -y install https://dl.fedoraproject.org/pub/epel/epel-release-latest-9.noarch.rpm &&\ 17 | dnf install -y voms-clients-cpp krb5-workstation python3-psutil myproxy apptainer \ 18 | python3-requests openldap-compat python3-cryptography jq &&\ 19 | dnf update -y ca-certificates &&\ 20 | dnf install -y dnf-plugins-core &&\ 21 | ([ "@EXTRA_PACKAGES@" != "" ] && dnf -y install @EXTRA_PACKAGES@ || true) &&\ 22 | yum clean all 23 | 24 | ADD share/fix_ssh_config.sh /tmp/fix_ssh_config.sh 25 | RUN mkdir -p /cvmfs /afs /eos /etc/vomses /etc/grid-security /build /data /pool /opt/cms &&\ 26 | touch /etc/tnsnames.ora &&\ 27 | echo el9 > /etc/cmsos &&\ 28 | /tmp/fix_ssh_config.sh /etc/ssh/ssh_config && rm -f /tmp/fix_ssh_config.sh &&\ 29 | sed -i -e s'|^ *allow *setuid.*|allow setuid = no|;s|^ *enable *overlay.*|enable overlay = no|;s|^ *enable *underlay.*|enable underlay = yes|' /etc/apptainer/apptainer.conf 30 | WORKDIR /build 31 | -------------------------------------------------------------------------------- /cs9/Dockerfile.bootstrap: -------------------------------------------------------------------------------- 1 | FROM @BASE_IMAGE_NAME@ 2 | RUN yum install -y bzip2-devel file popt-devel nspr-devel nss-devel \ 3 | rpm-build autoconf automake libtool gettext-devel && \ 4 | yum clean all 5 | -------------------------------------------------------------------------------- /cs9/config.yaml: -------------------------------------------------------------------------------- 1 | push: true 2 | override: true 3 | delete_pattern: tmp-${group1}.*-(2[0-9]{7,}) 4 | expires_days: 7 5 | daily: d$${now.strftime("%Y%m%d")} 6 | architecture: ${group1} 7 | build_context: .. 8 | test: 9 | script: test-cmssw.sh 10 | node: singularity 11 | groups: 12 | latest: 13 | alias: ${group1}-${daily} 14 | from: quay.io/centos/centos:stream9 15 | groups: 16 | x86_64: 17 | variables: 18 | EXTRA_PACKAGES: doxygen 19 | tags: 20 | ${group1}: 21 | aarch64: 22 | tags: 23 | ${group1}: 24 | ppc64le: 25 | disabled: true 26 | tags: 27 | ${group1}: 28 | -------------------------------------------------------------------------------- /cs9/packages-info/aarch64-base: -------------------------------------------------------------------------------- 1 | alternatives 1.24-2.el9 2 | attr 2.5.1-3.el9 3 | audit-libs 3.1.5-7.el9 4 | basesystem 11-13.el9 5 | bash 5.1.8-9.el9 6 | bzip2-libs 1.0.8-10.el9 7 | ca-certificates 2024.2.69_v8.0.303-91.4.el9 8 | centos-gpg-keys 9.0-26.el9 9 | centos-stream-release 9.0-26.el9 10 | centos-stream-repos 9.0-26.el9 11 | coreutils-single 8.32-39.el9 12 | crypto-policies 20250128-1.git5269e22.el9 13 | crypto-policies-scripts 20250128-1.git5269e22.el9 14 | curl-minimal 7.76.1-31.el9 15 | cyrus-sasl-lib 2.1.27-21.el9 16 | dbus-libs 1.12.20-8.el9 17 | dejavu-sans-fonts 2.37-18.el9 18 | dnf 4.14.0-29.el9 19 | dnf-data 4.14.0-29.el9 20 | elfutils-default-yama-scope 0.193-1.el9 21 | elfutils-libelf 0.193-1.el9 22 | elfutils-libs 0.193-1.el9 23 | expat 2.5.0-4.el9 24 | file-libs 5.39-16.el9 25 | filesystem 3.16-5.el9 26 | findutils 4.8.0-7.el9 27 | fonts-filesystem 2.0.5-7.el9.1 28 | gawk 5.1.0-6.el9 29 | gdb-gdbserver 14.2-4.el9 30 | gdbm-libs 1.23-1.el9 31 | glib2 2.68.4-16.el9 32 | glibc 2.34-188.el9 33 | glibc-common 2.34-188.el9 34 | glibc-minimal-langpack 2.34-188.el9 35 | gmp 6.2.0-13.el9 36 | gnupg2 2.3.3-4.el9 37 | gnutls 3.8.3-6.el9 38 | gpgme 1.15.1-6.el9 39 | grep 3.6-5.el9 40 | gzip 1.12-1.el9 41 | ima-evm-utils 1.6.2-1.el9 42 | json-c 0.14-11.el9 43 | keyutils 1.6.3-1.el9 44 | keyutils-libs 1.6.3-1.el9 45 | krb5-libs 1.21.1-6.el9 46 | langpacks-core-en 3.0-16.el9 47 | langpacks-core-font-en 3.0-16.el9 48 | langpacks-en 3.0-16.el9 49 | libacl 2.3.1-4.el9 50 | libarchive 3.5.3-4.el9 51 | libassuan 2.5.5-3.el9 52 | libattr 2.5.1-3.el9 53 | libblkid 2.37.4-21.el9 54 | libcap 2.48-9.el9 55 | libcap-ng 0.8.2-7.el9 56 | libcom_err 1.46.5-7.el9 57 | libcomps 0.1.18-1.el9 58 | libcurl-minimal 7.76.1-31.el9 59 | libdnf 0.69.0-14.el9 60 | libevent 2.1.12-8.el9 61 | libffi 3.4.2-8.el9 62 | libgcc 11.5.0-5.el9 63 | libgcrypt 1.10.0-11.el9 64 | libgomp 11.5.0-5.el9 65 | libgpg-error 1.42-5.el9 66 | libidn2 2.3.0-7.el9 67 | libksba 1.5.1-7.el9 68 | libmodulemd 2.13.0-2.el9 69 | libmount 2.37.4-21.el9 70 | libnghttp2 1.43.0-6.el9 71 | librepo 1.14.5-2.el9 72 | libreport-filesystem 2.15.2-6.el9 73 | libselinux 3.6-3.el9 74 | libsemanage 3.6-5.el9 75 | libsepol 3.6-3.el9 76 | libsigsegv 2.13-4.el9 77 | libsmartcols 2.37.4-21.el9 78 | libsolv 0.7.24-3.el9 79 | libstdc++ 11.5.0-5.el9 80 | libtasn1 4.16.0-9.el9 81 | libtool-ltdl 2.4.6-46.el9 82 | libunistring 0.9.10-15.el9 83 | libuuid 2.37.4-21.el9 84 | libverto 0.3.2-3.el9 85 | libxcrypt 4.4.18-3.el9 86 | libxml2 2.9.13-9.el9 87 | libyaml 0.2.5-7.el9 88 | libzstd 1.5.5-1.el9 89 | lua-libs 5.4.4-4.el9 90 | lz4-libs 1.9.3-5.el9 91 | mpfr 4.1.0-7.el9 92 | ncurses-base 6.2-10.20210508.el9 93 | ncurses-libs 6.2-10.20210508.el9 94 | nettle 3.10.1-1.el9 95 | npth 1.6-8.el9 96 | openldap 2.6.8-4.el9 97 | openssl-libs 3.5.0-1.el9 98 | p11-kit 0.25.3-3.el9 99 | p11-kit-trust 0.25.3-3.el9 100 | pcre 8.44-4.el9 101 | pcre2 10.40-6.el9 102 | pcre2-syntax 10.40-6.el9 103 | popt 1.18-8.el9 104 | python3 3.9.21-2.el9 105 | python3-dateutil 2.8.1-7.el9 106 | python3-dbus 1.2.18-2.el9 107 | python3-dnf 4.14.0-29.el9 108 | python3-dnf-plugins-core 4.3.0-21.el9 109 | python3-gpg 1.15.1-6.el9 110 | python3-hawkey 0.69.0-14.el9 111 | python3-libcomps 0.1.18-1.el9 112 | python3-libdnf 0.69.0-14.el9 113 | python3-libs 3.9.21-2.el9 114 | python3-pip-wheel 21.3.1-1.el9 115 | python3-rpm 4.16.1.3-37.el9 116 | python3-setuptools-wheel 53.0.0-14.el9 117 | python3-six 1.15.0-9.el9 118 | python3-systemd 234-19.el9 119 | readline 8.1-4.el9 120 | rootfiles 8.1-34.el9 121 | rpm 4.16.1.3-37.el9 122 | rpm-build-libs 4.16.1.3-37.el9 123 | rpm-libs 4.16.1.3-37.el9 124 | rpm-sign-libs 4.16.1.3-37.el9 125 | sed 4.8-9.el9 126 | setup 2.13.7-10.el9 127 | shadow-utils 4.9-12.el9 128 | sqlite-libs 3.34.1-7.el9 129 | systemd-libs 252-53.el9 130 | tar 1.34-7.el9 131 | tpm2-tss 3.2.3-1.el9 132 | tzdata 2025b-1.el9 133 | vim-minimal 8.2.2637-21.el9 134 | xz-libs 5.2.5-8.el9 135 | yum 4.14.0-29.el9 136 | zlib 1.2.11-41.el9 137 | -------------------------------------------------------------------------------- /cs9/packages-info/x86_64-base: -------------------------------------------------------------------------------- 1 | alternatives 1.24-2.el9 2 | attr 2.5.1-3.el9 3 | audit-libs 3.1.5-7.el9 4 | basesystem 11-13.el9 5 | bash 5.1.8-9.el9 6 | bzip2-libs 1.0.8-10.el9 7 | ca-certificates 2024.2.69_v8.0.303-91.4.el9 8 | centos-gpg-keys 9.0-28.el9 9 | centos-stream-release 9.0-28.el9 10 | centos-stream-repos 9.0-28.el9 11 | coreutils-single 8.32-39.el9 12 | crypto-policies 20250128-1.git5269e22.el9 13 | crypto-policies-scripts 20250128-1.git5269e22.el9 14 | curl-minimal 7.76.1-31.el9 15 | cyrus-sasl-lib 2.1.27-21.el9 16 | dbus-libs 1.12.20-8.el9 17 | dejavu-sans-fonts 2.37-18.el9 18 | dnf 4.14.0-29.el9 19 | dnf-data 4.14.0-29.el9 20 | elfutils-default-yama-scope 0.193-1.el9 21 | elfutils-libelf 0.193-1.el9 22 | elfutils-libs 0.193-1.el9 23 | expat 2.5.0-5.el9 24 | file-libs 5.39-16.el9 25 | filesystem 3.16-5.el9 26 | findutils 4.8.0-7.el9 27 | fonts-filesystem 2.0.5-7.el9.1 28 | gawk 5.1.0-6.el9 29 | gdb-gdbserver 14.2-4.el9 30 | gdbm-libs 1.23-1.el9 31 | glib2 2.68.4-16.el9 32 | glibc 2.34-196.el9 33 | glibc-common 2.34-196.el9 34 | glibc-minimal-langpack 2.34-196.el9 35 | gmp 6.2.0-13.el9 36 | gnupg2 2.3.3-4.el9 37 | gnutls 3.8.3-6.el9 38 | gpgme 1.15.1-6.el9 39 | grep 3.6-5.el9 40 | gzip 1.12-1.el9 41 | ima-evm-utils 1.6.2-1.el9 42 | json-c 0.14-11.el9 43 | keyutils 1.6.3-1.el9 44 | keyutils-libs 1.6.3-1.el9 45 | krb5-libs 1.21.1-6.el9 46 | langpacks-core-en 3.0-16.el9 47 | langpacks-core-font-en 3.0-16.el9 48 | langpacks-en 3.0-16.el9 49 | libacl 2.3.1-4.el9 50 | libarchive 3.5.3-4.el9 51 | libassuan 2.5.5-3.el9 52 | libattr 2.5.1-3.el9 53 | libblkid 2.37.4-21.el9 54 | libcap 2.48-9.el9 55 | libcap-ng 0.8.2-7.el9 56 | libcom_err 1.46.5-7.el9 57 | libcomps 0.1.18-1.el9 58 | libcurl-minimal 7.76.1-31.el9 59 | libdnf 0.69.0-14.el9 60 | libevent 2.1.12-8.el9 61 | libffi 3.4.2-8.el9 62 | libgcc 11.5.0-5.el9 63 | libgcrypt 1.10.0-11.el9 64 | libgomp 11.5.0-5.el9 65 | libgpg-error 1.42-5.el9 66 | libidn2 2.3.0-7.el9 67 | libksba 1.5.1-7.el9 68 | libmodulemd 2.13.0-2.el9 69 | libmount 2.37.4-21.el9 70 | libnghttp2 1.43.0-6.el9 71 | librepo 1.14.5-2.el9 72 | libreport-filesystem 2.15.2-6.el9 73 | libselinux 3.6-3.el9 74 | libsemanage 3.6-5.el9 75 | libsepol 3.6-3.el9 76 | libsigsegv 2.13-4.el9 77 | libsmartcols 2.37.4-21.el9 78 | libsolv 0.7.24-3.el9 79 | libstdc++ 11.5.0-5.el9 80 | libtasn1 4.16.0-9.el9 81 | libtool-ltdl 2.4.6-46.el9 82 | libunistring 0.9.10-15.el9 83 | libuuid 2.37.4-21.el9 84 | libverto 0.3.2-3.el9 85 | libxcrypt 4.4.18-3.el9 86 | libxml2 2.9.13-9.el9 87 | libyaml 0.2.5-7.el9 88 | libzstd 1.5.5-1.el9 89 | lua-libs 5.4.4-4.el9 90 | lz4-libs 1.9.3-5.el9 91 | mpfr 4.1.0-7.el9 92 | ncurses-base 6.2-10.20210508.el9 93 | ncurses-libs 6.2-10.20210508.el9 94 | nettle 3.10.1-1.el9 95 | npth 1.6-8.el9 96 | openldap 2.6.8-4.el9 97 | openssl-libs 3.5.0-3.el9 98 | p11-kit 0.25.3-3.el9 99 | p11-kit-trust 0.25.3-3.el9 100 | pcre 8.44-4.el9 101 | pcre2 10.40-6.el9 102 | pcre2-syntax 10.40-6.el9 103 | popt 1.18-8.el9 104 | python3 3.9.21-2.el9 105 | python3-dateutil 2.8.1-7.el9 106 | python3-dbus 1.2.18-2.el9 107 | python3-dnf 4.14.0-29.el9 108 | python3-dnf-plugins-core 4.3.0-21.el9 109 | python3-gpg 1.15.1-6.el9 110 | python3-hawkey 0.69.0-14.el9 111 | python3-libcomps 0.1.18-1.el9 112 | python3-libdnf 0.69.0-14.el9 113 | python3-libs 3.9.21-2.el9 114 | python3-pip-wheel 21.3.1-1.el9 115 | python3-rpm 4.16.1.3-38.el9 116 | python3-setuptools-wheel 53.0.0-14.el9 117 | python3-six 1.15.0-9.el9 118 | python3-systemd 234-19.el9 119 | readline 8.1-4.el9 120 | rootfiles 8.1-34.el9 121 | rpm 4.16.1.3-38.el9 122 | rpm-build-libs 4.16.1.3-38.el9 123 | rpm-libs 4.16.1.3-38.el9 124 | rpm-sign-libs 4.16.1.3-38.el9 125 | sed 4.8-9.el9 126 | setup 2.13.7-10.el9 127 | shadow-utils 4.9-12.el9 128 | sqlite-libs 3.34.1-7.el9 129 | systemd-libs 252-53.el9 130 | tar 1.34-7.el9 131 | tpm2-tss 3.2.3-1.el9 132 | tzdata 2025b-1.el9 133 | vim-minimal 8.2.2637-22.el9 134 | xz-libs 5.2.5-8.el9 135 | yum 4.14.0-29.el9 136 | zlib 1.2.11-41.el9 137 | -------------------------------------------------------------------------------- /docker-lxr/Dockerfile: -------------------------------------------------------------------------------- 1 | FROM cmssw/docker-lxr:v0 2 | 3 | CMD /bin/rm -rf /lxr/glimpse_db 4 | RUN addgroup --gid 500 lxr 5 | RUN adduser --uid 500 --gid 500 lxr 6 | COPY index.html /lxr/index.html 7 | COPY cmsbanner.gif /lxr/cmsbanner.gif 8 | COPY custom.d/lxr.conf /lxr/lxr.conf 9 | COPY custom.d/htaccess-index.conf /lxr/custom.d/htaccess-index.conf 10 | COPY custom.d/lxr-2.2.1-baseurl.patch /lxr/custom.d/lxr-2.2.1-baseurl.patch 11 | COPY custom.d/Lang.pm /lxr/lib/LXR/ 12 | COPY scripts/entrypoint.sh /entrypoint.sh 13 | copy custom.d/filetype.conf /lxr/templates/filetype.conf 14 | RUN chmod +x /entrypoint.sh 15 | ENTRYPOINT ["/entrypoint.sh"] 16 | 17 | CMD ["/bin/bash"] 18 | -------------------------------------------------------------------------------- /docker-lxr/Dockerfile_dev: -------------------------------------------------------------------------------- 1 | FROM gudrutis/docker-lxr:2.3.4 2 | 3 | CMD /bin/rm -rf /lxr/glimpse_db 4 | RUN addgroup --gid 500 lxr 5 | RUN adduser --uid 500 --gid 500 lxr 6 | COPY index.html /lxr/index.html 7 | COPY cmsbanner.gif /lxr/cmsbanner.gif 8 | COPY custom.d/lxr.conf /lxr/lxr.conf 9 | COPY custom.d/htaccess-index.conf /lxr/custom.d/htaccess-index.conf 10 | COPY custom.d/lxr-2.2.1-baseurl.patch /lxr/custom.d/lxr-2.2.1-baseurl.patch 11 | COPY custom.d/Lang.pm /lxr/lib/LXR/ 12 | COPY scripts/entrypoint.sh /entrypoint.sh 13 | RUN chmod +x /entrypoint.sh 14 | ENTRYPOINT ["/entrypoint.sh"] 15 | 16 | CMD ["/bin/bash"] 17 | -------------------------------------------------------------------------------- /docker-lxr/cmsbanner.gif: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cms-sw/cms-docker/166d2cde855e8d1d2e49f1802297d7fe2fb03bf1/docker-lxr/cmsbanner.gif -------------------------------------------------------------------------------- /docker-lxr/custom.d/htaccess-index.conf: -------------------------------------------------------------------------------- 1 | #and index.html 2 | 3 | 4 | 5 | Allow from all 6 | 7 | = 2.4> 8 | Require all granted 9 | 10 | 11 | 12 | 13 | Allow from all 14 | 15 | 16 | Require all granted 17 | 18 | 19 | 20 | 21 | -------------------------------------------------------------------------------- /docker-lxr/custom.d/lxr-2.2.1-baseurl.patch: -------------------------------------------------------------------------------- 1 | --- lib/LXR/Config.pm 2017-06-16 11:28:27.000000000 +0200 2 | +++ lib/LXR/Config.pm 2017-06-16 11:31:55.000000000 +0200 3 | @@ -246,6 +246,7 @@ 4 | $host =~ s!^//!http://!; # allow a shortened form in genxref 5 | $host =~ s!(//[^:/]+(:\d+)?).*!$1!; # only host name and port 6 | $host =~ s!^http://([^/]*):443!https://$1!; 7 | + $host =~ s!^.+://!//!; 8 | 9 | unless ($script_path) { 10 | $script_path = $ENV{'SCRIPT_NAME'}; 11 | @@ -406,7 +407,7 @@ 12 | if (scalar(@hostnames)>0) { 13 | foreach my $rt (@hostnames) { 14 | $rt =~ s!/*$!!; # remove trailing / 15 | - $rt =~ s!^//!http://!; # allow for a shortened form 16 | + #$rt =~ s!^//!http://!; # allow for a shortened form 17 | # To allow simultaneous Apache and lighttpd operation 18 | # on 2 different ports, remove port for identification 19 | $rt =~ s/:\d+$//; 20 | -------------------------------------------------------------------------------- /docker-lxr/custom.d/lxr-2.2.1-incpath-fix.patch: -------------------------------------------------------------------------------- 1 | --- lib/LXR/Lang.pm 2 | +++ lib/LXR/Lang.pm 3 | @@ -448,7 +448,7 @@ sub _linkincludedirs { 4 | $sp = rindex ($file, $sep); 5 | $tail = substr($file, $sp) . $tail; 6 | $file = substr($file, 0, $sp); 7 | - $path =~ s!/[^/]+$!!; 8 | + $path =~ s!/+[^/]+$!!; 9 | $link = incdirref($file, 'include', $path, $dir); 10 | } 11 | # A known directory (at least) has been found. 12 | @@ -464,7 +464,7 @@ sub _linkincludedirs { 13 | $tail = $sep . $link . $tail; 14 | $sp = rindex ($file, $sep); 15 | $file = substr($file, 0, $sp); 16 | - $path =~ s!/[^/]+$!!; 17 | + $path =~ s!/+[^/]+$!!; 18 | $link = incdirref($file, 'include', $path, $dir); 19 | } 20 | } 21 | -------------------------------------------------------------------------------- /docker-lxr/lxr_2_2_1_patched_EXECUTE_BUILD.sh: -------------------------------------------------------------------------------- 1 | # Do not foget to change tag on each update or prevous version will be overwriten 2 | # CONTAINER_TAG#2.2.1 3 | #DOCKERHUB_USER="Use job default" 4 | #EXTRA_BUILD_ARGS= 5 | PUSH_CONTAINER=true 6 | # DOCKER_FILE="Use job default" 7 | # CONTAINER_NAME="Get from commit dir" 8 | # GITHUT_REPO="Use job default" 9 | # DOCKER_DIR="Get from commit dir" 10 | -------------------------------------------------------------------------------- /docker-lxr/lxr_dev_EXECUTE_BUILD.sh: -------------------------------------------------------------------------------- 1 | # trigered on 2019-01-31 2 | # Do not foget to change tag on each update or prevous version will be overwriten 3 | CONTAINER_TAG=dev 4 | #DOCKERHUB_USER="Use job default" 5 | #EXTRA_BUILD_ARGS= 6 | PUSH_CONTAINER=true 7 | DOCKER_FILE=Dockerfile_dev 8 | CONTAINER_NAME="docker-lxr" 9 | # GITHUT_REPO="Use job default" 10 | # DOCKER_DIR="Get from commit dir" 11 | -------------------------------------------------------------------------------- /docker-lxr/scripts/entrypoint.sh: -------------------------------------------------------------------------------- 1 | #!/bin/sh 2 | if [ ! -d /var/lib/mysql/lxr ] ; then 3 | if [ ! -d /host/mysql ] ; then 4 | echo "ERROR: MySQL database is not initialize yet." 5 | echo " Please start docker with '-v :/host/mysql:z'" 6 | exit 1 7 | fi 8 | service mysql start 9 | expect /lxr/expect_initdb 10 | service mysql stop 11 | rsync -a /var/lib/mysql/ /host/mysql/ 12 | exit 0 13 | fi 14 | 15 | if [ $# -lt 1 ] ; then 16 | echo "you must specify the public_ip_address and at least one version name for your source code" 17 | exit 1 18 | fi 19 | 20 | if [ ! -d /lxr/glimpse_index ] ; then 21 | echo "ERROR: Missing /lxr/glimpse_index directory." 22 | echo " Please start docker with '-v :/lxr/glimpse_index:z'" 23 | exit 1 24 | fi 25 | 26 | for conf_file in versions default sourceroot ; do 27 | if [ ! -e /lxr/host_config/${conf_file} ] ; then 28 | echo "ERROR: Missing /lxr/host_config/${conf_file} file." 29 | echo " Please start docker with '-v /host_config:/lxr/host_config:Z'" 30 | exit 1 31 | fi 32 | done 33 | 34 | echo $@ 35 | public_ip=$1 36 | sed -i.bak s/public_ip_address/$1/g /lxr/custom.d/apache-lxrserver.conf 37 | 38 | cd lxr 39 | cp /lxr/custom.d/apache-lxrserver.conf /etc/apache2/conf-available 40 | cat /lxr/custom.d/htaccess-index.conf >> /lxr/.htaccess 41 | patch -p0 < /lxr/custom.d/lxr-2.2.1-baseurl.patch 42 | a2enconf apache-lxrserver.conf 43 | service mysql start 44 | service apache2 start 45 | 46 | su lxr 47 | exec "/bin/bash" 48 | -------------------------------------------------------------------------------- /docker-lxr/scripts/entrypoint_dev.sh: -------------------------------------------------------------------------------- 1 | #!/bin/sh 2 | if [ ! -d /var/lib/mysql/lxr ] ; then 3 | service mysql start 4 | expect /lxr/expect_initdb 5 | service mysql stop 6 | fi 7 | 8 | if [ $# -lt 1 ] ; then 9 | echo "you must specify the public_ip_address and at least one version name for your source code" 10 | exit 1 11 | fi 12 | 13 | if [ ! -d /lxr/glimpse_index ] ; then 14 | echo "ERROR: Missing /lxr/glimpse_index directory." 15 | echo " Please start docker with '-v :/lxr/glimpse_index:z'" 16 | exit 1 17 | fi 18 | 19 | for conf_file in versions default sourceroot ; do 20 | if [ ! -e /lxr/host_config/${conf_file} ] ; then 21 | echo "ERROR: Missing /lxr/host_config/${conf_file} file." 22 | echo " Please start docker with '-v /host_config:/lxr/host_config:Z'" 23 | exit 1 24 | fi 25 | done 26 | 27 | echo $@ 28 | public_ip=$1 29 | sed -i.bak s/public_ip_address/$1/g /lxr/custom.d/apache-lxrserver.conf 30 | 31 | cd lxr 32 | cp /lxr/custom.d/apache-lxrserver.conf /etc/apache2/conf-available 33 | cat /lxr/custom.d/htaccess-index.conf >> /lxr/.htaccess 34 | patch -p0 < /lxr/custom.d/lxr-2.2.1-baseurl.patch 35 | a2enconf apache-lxrserver.conf 36 | service mysql start 37 | service apache2 start 38 | 39 | su lxr 40 | exec "/bin/bash" 41 | -------------------------------------------------------------------------------- /docker-vtune/Dockerfile: -------------------------------------------------------------------------------- 1 | FROM intel/oneapi-vtune:latest 2 | RUN apt-get update 3 | RUN apt-get -y install nginx 4 | RUN apt-get -y install nano 5 | RUN apt-get -y install vim 6 | CMD mkdir -p /vtune/profiles 7 | CMD chown -R 500.500 /vtune 8 | RUN addgroup --gid 500 vtune 9 | RUN useradd --uid 500 --gid 500 -m vtune 10 | RUN usermod -aG root vtune 11 | ADD custom.d/default.conf /etc/nginx/conf.d/default.conf 12 | ADD scripts/entrypoint.sh /entrypoint.sh 13 | ADD custom.d/config.yml /opt/intel/oneapi/vtune/latest/backend/config.yml 14 | RUN chmod +x /entrypoint.sh 15 | RUN rm /etc/nginx/sites-enabled/default 16 | ENTRYPOINT ["/entrypoint.sh"] 17 | EXPOSE 8080 18 | -------------------------------------------------------------------------------- /docker-vtune/custom.d/config.yml: -------------------------------------------------------------------------------- 1 | authentication: 2 | # Passphrase authentication 3 | # Access to the server is protected with a passphrase. There are no user names involved - if 4 | # the passphrase is shared between multiple users then they are treated as the same user. 5 | # When the server is started for the first time with passphrase authentication then the URL 6 | # displayed in the stdout will include a one time token that would allow the user to set the 7 | # passphrase. To reset the passphrase the server needs to be restarted with --reset-passphrase 8 | # command line option. 9 | # type: passphrase 10 | # login session duration (days). Defaults to 365 days 11 | # sessionDuration: 60 12 | 13 | # Reverse proxy authentication 14 | type: reverse-proxy 15 | # http header containing the authorized user ID. Inserted by the reverse proxy 16 | header: username 17 | 18 | # Anonymous authentication 19 | # Access to the server is not protected and the server is publicly available to any user. Not 20 | # recommended for use. If you do run the server with anonymous authentication then at least make 21 | # sure to run the server without --allow-remote-ui and on a host that other users do not have 22 | # access to. 23 | # type: anonymous 24 | 25 | 26 | # SAML 27 | # Users are authenticated with a SAML Identity Provider. It's also advised to enable network 28 | # user group authorization on SAML Identity Provider side to control access to the server. 29 | # type: saml 30 | # rootUrl: https://vtune01.mycompany.com 31 | # saml: 32 | # The following fields need to be provided to the SAML Identity Provider administrator. 33 | # consumePath: '/consume' 34 | # entityID: 'vtune01.mycompany.com' 35 | 36 | # The following fields are provided by SAML Identity Provider administrator after access is 37 | # configured. 38 | # entryPoint: '' 39 | # cert: '' 40 | 41 | # Additional options 42 | # SAML auth request binding. Defaults to 'Redirect' 43 | # authnRequestBinding: 'HTTP-POST' 44 | # Do not deflate SAML request. Defaults to false. 45 | # Use this option if the Identity Provider does not support SAML request compression 46 | # skipRequestCompression: true 47 | 48 | # VTune Profiler Server URL 49 | # When enabled, this config is used by the VTune Agent to connect to the server 50 | #serverEndpoint: https://cmssdt.cern.ch/vtune 51 | -------------------------------------------------------------------------------- /docker-vtune/custom.d/default.conf: -------------------------------------------------------------------------------- 1 | server { 2 | listen 8080; 3 | listen [::]:8080; 4 | server_name _; 5 | 6 | #access_log /var/log/nginx/host.access.log main; 7 | 8 | # location / { 9 | # root /usr/share/nginx/html; 10 | # index index.html index.htm; 11 | # } 12 | 13 | location /vtune/ { 14 | rewrite ^/vtune/(.*$) /$1; 15 | } 16 | 17 | location / { 18 | proxy_set_header Host $host; 19 | proxy_set_header X-Real-IP $remote_addr; 20 | proxy_pass http://127.0.0.1:4000/; 21 | proxy_read_timeout 9000; 22 | 23 | # WebSocket support 24 | proxy_http_version 1.1; 25 | proxy_set_header Upgrade $http_upgrade; 26 | proxy_set_header Connection "upgrade"; 27 | proxy_set_header username "anonymous"; 28 | } 29 | 30 | #error_page 404 /404.html; 31 | 32 | # redirect server error pages to the static page /50x.html 33 | # 34 | #error_page 500 502 503 504 /50x.html; 35 | #location = /50x.html { 36 | # root /usr/share/nginx/html; 37 | #} 38 | 39 | # proxy the PHP scripts to Apache listening on 127.0.0.1:80 40 | # 41 | #location ~ \.php$ { 42 | # proxy_pass http://127.0.0.1; 43 | #} 44 | 45 | # pass the PHP scripts to FastCGI server listening on 127.0.0.1:9000 46 | # 47 | #location ~ \.php$ { 48 | # root html; 49 | # fastcgi_pass 127.0.0.1:9000; 50 | # fastcgi_index index.php; 51 | # fastcgi_param SCRIPT_FILENAME /scripts$fastcgi_script_name; 52 | # include fastcgi_params; 53 | #} 54 | 55 | # deny access to .htaccess files, if Apache's document root 56 | # concurs with nginx's one 57 | # 58 | #location ~ /\.ht { 59 | # deny all; 60 | #} 61 | } 62 | 63 | -------------------------------------------------------------------------------- /docker-vtune/scripts/entrypoint.sh: -------------------------------------------------------------------------------- 1 | #!/bin/sh 2 | if [ ! -d /vtune/profiles ] ; then 3 | echo "ERROR: Missing /vtune/profiles directory." 4 | echo " Please start docker with '-v :/vtune/profiles:z'" 5 | exit 1 6 | fi 7 | /etc/init.d/nginx start 8 | su vtune -c "$(which vtune-server) --web-port 4000 --data-port 4040 --no-https --log-to-console --suppress-automatic-help-tours --log-level info --data-directory /vtune/profiles --base-url https://cmssdt.cern.ch/vtune/" 9 | -------------------------------------------------------------------------------- /el10/Changelog.md: -------------------------------------------------------------------------------- 1 | # Changelog el9 2 | 3 | ## 01-12-2023 4 | * Add `tmux` package as requested in https://github.com/cms-sw/cms-docker/issues/237. 5 | 6 | ## 28-11-2023 7 | * Add `squid` package as requested in https://github.com/cms-sw/cms-docker/issues/235. 8 | 9 | ## 05-10-2023 10 | * Add `python3-pip` package to install comp tools, e.g. Rucio (`Dockerfile` in https://github.com/cms-sw/cms-docker/commit/35ad9f96b2e9ed6403ed1d49b41b0e06cc92c29c 11 | and `Docker.runtime` in 12 | https://github.com/cms-sw/cms-docker/commit/afa5d94f461e261b9d2b90cddb00fd75f9565f36). 13 | 14 | ## 29-09-2023 15 | * Split original `Dockerfile` in independent images (`Dockerfile.runtime`, 16 | `Dockerfile.grid` and `Dockerfile.buildtime`). **Note:** Image for `ppc64le` disabled in `config.yaml`. 17 | 18 | ## 10-01-2023 19 | * Add `glibc-langpack-en` package (https://github.com/cms-sw/cms-docker/commit/a2a6ca43d91bca7227a46b88e1b5096c97391069). 20 | 21 | ## 17-06-2022 22 | * Add `boost-python3` package 23 | (https://github.com/cms-sw/cms-docker/commit/f5df618dacf5974de6c35d739fd565465f6648e9). 24 | 25 | ## 13-01-2022 26 | * Add `perf` package (https://github.com/cms-sw/cms-docker/commit/3be4202edd5d1388c5b4482d2a4c567c9b037618). 27 | 28 | **Previous changes not tracked. See git history.** 29 | 30 | ### From el8 to el9 31 | A few notes on the change from `el8` images to `el9`: 32 | * Remove `perl` dependencies. We do not build perl-based SCRAM for `el9`. 33 | * Drop Python 2.X and, therefore, remove `python2`, `python2-psutil` and `python2-requests` packages. 34 | * Drop `libstdc++-static` and `libidn` dependencies from the first commit (as expected from `el8` image comments). 35 | * Remove keberos config fix `ADD krb5.conf /etc/krb5.conf`. 36 | * Add `texinfo` from `crb` repo. 37 | * Package `coreutils-single` added Dockerfile (for `el8` it is defined as `DEFAULT_PACKAGE` in `config.yaml`). 38 | * Packages `krb5-devel` and `libcom_err-devel` present in `el9` from first commit, but not present in `el8`. 39 | -------------------------------------------------------------------------------- /el10/Dockerfile: -------------------------------------------------------------------------------- 1 | FROM @BASE_IMAGE_NAME@ 2 | LABEL maintainer="CMS Build" 3 | LABEL name="CMS Worker Node on EL - Buildtime dependencies" 4 | 5 | # Dependency on libXmu might be cleaned up in the future 6 | # Extra packages comparing with el8: krb5-devel libcom_err-devel (coreutils-single in el8 config file) 7 | RUN dnf install --disablerepo=epel -y rpm-build git nspr nss rsync wget openssl openssl-devel ncurses-devel \ 8 | libX11-devel readline-devel tcl-devel tk-devel mesa-libGLU-devel libXext-devel libXft-devel \ 9 | libXpm-devel java-21-openjdk-devel libtool libdrm \ 10 | gcc-c++ libXmu krb5-devel coreutils-single libcom_err-devel \ 11 | python3-cryptography jq && dnf clean all 12 | 13 | # Please add user packages in the RUN command below 14 | RUN dnf install --disablerepo=epel -y man-db time bc nano strace xauth vim cmake \ 15 | krb5-workstation environment-modules xdg-utils squid tmux emacs copy-jdk-configs &&\ 16 | dnf install -y screen &&\ 17 | wget https://kojihub.stream.centos.org/kojifiles/vol/koji02/packages/java-17-openjdk/17.0.10.0.7/1.el10+2/x86_64/java-17-openjdk-devel-17.0.10.0.7-1.el10+2.x86_64.rpm &&\ 18 | wget https://kojihub.stream.centos.org/kojifiles/vol/koji02/packages/java-17-openjdk/17.0.10.0.7/1.el10+2/x86_64/java-17-openjdk-17.0.10.0.7-1.el10+2.x86_64.rpm &&\ 19 | wget https://kojihub.stream.centos.org/kojifiles/vol/koji02/packages/java-17-openjdk/17.0.10.0.7/1.el10+2/x86_64/java-17-openjdk-headless-17.0.10.0.7-1.el10+2.x86_64.rpm &&\ 20 | rpm -Uvh java-17-openjdk*.rpm &&\ 21 | rm -f java-17-openjdk*.rpm &&\ 22 | dnf clean all 23 | 24 | RUN dnf --enablerepo=crb install -y texinfo libstdc++-static &&\ 25 | epel_pkgs="@EPEL_PACKAGES@" &&\ 26 | if [ -n "$epel_pkgs" ] ; then dnf install -y $epel_pkgs; fi &&\ 27 | xcmd="@EXTRA_COMMAND@" &&\ 28 | if [ "$xcmd" = "" ] ; then xcmd=true; fi &&\ 29 | eval $xcmd &&\ 30 | dnf update -y ca-certificates &&\ 31 | dnf clean all &&\ 32 | /root/fix_ssh_config.sh /etc/ssh/ssh_config &&\ 33 | echo "Timestamp: @BUILD_DATE@" > /image-build-info.txt 34 | 35 | LABEL build-date="@BUILD_DATE@" 36 | -------------------------------------------------------------------------------- /el10/Dockerfile.bootstrap: -------------------------------------------------------------------------------- 1 | FROM @BASE_IMAGE_NAME@ 2 | RUN yum install -y bzip2-devel file popt-devel nspr-devel nss-devel \ 3 | rpm-build autoconf automake libtool gettext-devel \ 4 | python3-devel cmake bison && \ 5 | yum clean all 6 | -------------------------------------------------------------------------------- /el10/Dockerfile.grid: -------------------------------------------------------------------------------- 1 | FROM @BASE_IMAGE_NAME@ 2 | LABEL maintainer="CMS Build" 3 | LABEL name="CMS Worker Node on EL - Grid packages" 4 | 5 | RUN dnf install -y xrootd-client openldap-compat &&\ 6 | dnf install -y @EPEL_PACKAGES@ myproxy &&\ 7 | xcmd="@EXTRA_COMMAND@" &&\ 8 | if [ "$xcmd" = "" ] ; then xcmd=true; fi &&\ 9 | eval $xcmd &&\ 10 | /root/fix_ssh_config.sh /etc/ssh/ssh_config &&\ 11 | echo "Timestamp: @BUILD_DATE@" > /image-build-info.txt 12 | 13 | LABEL build-date="@BUILD_DATE@" 14 | -------------------------------------------------------------------------------- /el10/Dockerfile.runtime: -------------------------------------------------------------------------------- 1 | FROM @BASE_IMAGE_NAME@ 2 | LABEL maintainer="CMS Build" 3 | LABEL name="CMS Worker Node on EL - Runtime" 4 | 5 | ADD share/fix_ssh_config.sh /root/fix_ssh_config.sh 6 | 7 | RUN dnf install -y @DEFAULT_PACKAGES@ bash tcsh zsh tar glibc glibc-devel libgcc libxcrypt openssl-libs libcom_err krb5-libs ncurses-libs \ 8 | perl perl-libs libX11 readline tcl tk mesa-libGLU libglvnd-glx libglvnd-opengl libXext libXft libXpm libaio libnsl sssd-client &&\ 9 | dnf install -y python3 which procps-ng &&\ 10 | dnf install -y epel-release &&\ 11 | dnf install -y @EPEL_PACKAGES@ voms-clients-cpp apptainer python3-requests python3-psutil python3-pip &&\ 12 | xcmd="@EXTRA_COMMAND@" &&\ 13 | if [ "$xcmd" = "" ] ; then xcmd=true; fi &&\ 14 | eval $xcmd &&\ 15 | echo el10 > /etc/cmsos &&\ 16 | dnf clean all &&\ 17 | mkdir -p /cvmfs /afs /eos /etc/vomses /etc/grid-security /build /data /pool /opt/cms /etc/ssh &&\ 18 | mkdir -p /hdfs /mnt/hadoop /hadoop /cms /etc/cvmfs/SITECONF /lfs_roots /storage /scratch &&\ 19 | touch /etc/tnsnames.ora &&\ 20 | chmod +x /root/fix_ssh_config.sh &&\ 21 | /root/fix_ssh_config.sh /etc/ssh/ssh_config &&\ 22 | echo "Timestamp: @BUILD_DATE@" > /image-build-info.txt &&\ 23 | sed -i -e s'|^ *allow *setuid.*|allow setuid = no|;s|^ *enable *overlay.*|enable overlay = no|;s|^ *enable *underlay.*|enable underlay = yes|' /etc/apptainer/apptainer.conf 24 | 25 | LABEL build-date="@BUILD_DATE@" 26 | -------------------------------------------------------------------------------- /el10/config.yaml: -------------------------------------------------------------------------------- 1 | push: true 2 | override: true 3 | delete_pattern: tmp-${group1}.*-(2[0-9]{7,}) 4 | expires_days: 7 5 | daily: d$${now.strftime("%Y%m%d")} 6 | architecture: ${group1} 7 | build_context: .. 8 | test: 9 | script: test-cmssw.sh 10 | node: singularity 11 | variables: 12 | CI_TESTS: stageout 13 | DEFAULT_PACKAGES: 14 | BUILD_DATE: $${now.strftime("%Y%m%d-%H%M%S")} 15 | EXTRA_COMMAND: 16 | SKIP_TESTS: true 17 | groups: 18 | bootstrap: 19 | docker: Dockerfile.${group0} 20 | from: ${container}:${group1} 21 | variables: 22 | SKIP_TESTS: true 23 | groups: 24 | x86_64: 25 | tags: 26 | ${group1}-${group0}: 27 | aarch64: 28 | tags: 29 | ${group1}-${group0}: 30 | runtime: 31 | docker: Dockerfile.${group0} 32 | from: library/almalinux:10 33 | groups: 34 | x86_64: 35 | tags: 36 | ${group1}-${group0}: 37 | aarch64: 38 | tags: 39 | ${group1}-${group0}: 40 | grid: 41 | docker: Dockerfile.${group0} 42 | from: ${container}:${group1}-runtime 43 | variables: 44 | SKIP_TESTS: true 45 | groups: 46 | x86_64: 47 | tags: 48 | ${group1}-${group0}: 49 | aarch64: 50 | tags: 51 | ${group1}-${group0}: 52 | latest: 53 | alias: ${group1}-${daily} 54 | from: ${container}:${group1}-grid 55 | variables: 56 | NOTIFY_TO: hlt 57 | groups: 58 | x86_64: 59 | variables: 60 | EXTRA_COMMAND: dnf --enablerepo=crb install -y doxygen 61 | tags: 62 | ${group1}: 63 | aarch64: 64 | tags: 65 | ${group1}: 66 | -------------------------------------------------------------------------------- /el10/packages-info/aarch64-runtime-base: -------------------------------------------------------------------------------- 1 | almalinux-gpg-keys 10.0-30.el10 2 | almalinux-release 10.0-30.el10 3 | almalinux-repos 10.0-30.el10 4 | alternatives 1.30-2.el10 5 | attr 2.5.2-5.el10 6 | audit-libs 4.0.3-1.el10 7 | basesystem 11-22.el10 8 | bash 5.2.26-6.el10 9 | binutils 2.41-53.el10.alma.1 10 | binutils-gold 2.41-53.el10.alma.1 11 | bzip2-libs 1.0.8-25.el10 12 | ca-certificates 2024.2.69_v8.0.303-102.3.el10 13 | coreutils-single 9.5-6.el10 14 | crypto-policies 20250214-1.gitfd9b9b9.el10 15 | crypto-policies-scripts 20250214-1.gitfd9b9b9.el10 16 | curl 8.9.1-5.el10 17 | dbus 1.14.10-5.el10 18 | dbus-broker 36-1.el10 19 | dbus-common 1.14.10-5.el10 20 | dnf 4.20.0-12.el10_0.alma.1 21 | dnf-data 4.20.0-12.el10_0.alma.1 22 | elfutils-debuginfod-client 0.192-5.el10 23 | elfutils-default-yama-scope 0.192-5.el10 24 | elfutils-libelf 0.192-5.el10 25 | elfutils-libs 0.192-5.el10 26 | expat 2.7.1-1.el10_0 27 | file-libs 5.45-7.el10 28 | filesystem 3.18-16.el10 29 | findutils 4.10.0-5.el10 30 | gawk 5.3.0-6.el10 31 | gdbm-libs 1.23-12.el10_0 32 | glib2 2.80.4-4.el10 33 | glibc 2.39-37.el10.alma.1 34 | glibc-common 2.39-37.el10.alma.1 35 | glibc-minimal-langpack 2.39-37.el10.alma.1 36 | gmp 6.2.1-10.el10 37 | gnutls 3.8.9-9.el10 38 | gpg-pubkey c2a1e572-668fe8ef 39 | grep 3.11-10.el10 40 | hostname 3.23-14.el10 41 | ima-evm-utils 1.6.2-1.el10 42 | iputils 20240905-2.el10 43 | jansson 2.14-3.el10 44 | json-c 0.18-3.el10 45 | keyutils 1.6.3-5.el10 46 | keyutils-libs 1.6.3-5.el10 47 | krb5-libs 1.21.3-7.el10 48 | less 661-3.el10 49 | libacl 2.3.2-4.el10 50 | libarchive 3.7.7-2.el10_0 51 | libattr 2.5.2-5.el10 52 | libblkid 2.40.2-10.el10 53 | libcap 2.69-7.el10 54 | libcap-ng 0.8.4-6.el10 55 | libcom_err 1.47.1-3.el10 56 | libcomps 0.1.21-3.el10 57 | libcurl-minimal 8.9.1-5.el10 58 | libdnf 0.73.1-9.el10_0.alma.1 59 | libeconf 0.6.2-4.el10 60 | libfdisk 2.40.2-10.el10 61 | libffi 3.4.4-9.el10 62 | libgcc 14.2.1-7.el10.alma.1 63 | libgomp 14.2.1-7.el10.alma.1 64 | libidn2 2.3.7-3.el10 65 | libmodulemd 2.15.0-12.el10 66 | libmount 2.40.2-10.el10 67 | libnghttp2 1.64.0-2.el10 68 | librepo 1.18.0-3.el10 69 | libseccomp 2.5.3-10.el10 70 | libselinux 3.8-1.el10 71 | libsemanage 3.8.1-1.el10_0 72 | libsepol 3.8-1.el10 73 | libsmartcols 2.40.2-10.el10 74 | libsolv 0.7.29-8.el10.alma.1 75 | libstdc++ 14.2.1-7.el10.alma.1 76 | libtasn1 4.20.0-1.el10 77 | libunistring 1.1-10.el10 78 | libuuid 2.40.2-10.el10 79 | libverto 0.3.2-10.el10 80 | libxcrypt 4.4.36-10.el10 81 | libxml2 2.12.5-5.el10_0 82 | libyaml 0.2.5-16.el10 83 | libzstd 1.5.5-9.el10 84 | lua-libs 5.4.6-7.el10 85 | lz4-libs 1.9.4-8.el10 86 | mpdecimal 2.5.1-12.el10 87 | mpfr 4.2.1-5.el10 88 | ncurses-base 6.4-14.20240127.el10 89 | ncurses-libs 6.4-14.20240127.el10 90 | openssl-libs 3.2.2-16.el10.alma.1 91 | p11-kit 0.25.5-7.el10 92 | p11-kit-trust 0.25.5-7.el10 93 | pam-libs 1.6.1-7.el10 94 | pcre2 10.44-1.el10.3 95 | pcre2-syntax 10.44-1.el10.3 96 | popt 1.19-8.el10 97 | python3 3.12.9-2.el10_0 98 | python3-dnf 4.20.0-12.el10_0.alma.1 99 | python3-hawkey 0.73.1-9.el10_0.alma.1 100 | python3-libcomps 0.1.21-3.el10 101 | python3-libdnf 0.73.1-9.el10_0.alma.1 102 | python3-libs 3.12.9-2.el10_0 103 | python3-pip-wheel 23.3.2-7.el10 104 | python3-rpm 4.19.1.1-12.el10.alma.1 105 | readline 8.2-11.el10 106 | rootfiles 8.1-41.el10 107 | rpm 4.19.1.1-12.el10.alma.1 108 | rpm-build-libs 4.19.1.1-12.el10.alma.1 109 | rpm-libs 4.19.1.1-12.el10.alma.1 110 | rpm-sequoia 1.6.0-6.el10 111 | rpm-sign-libs 4.19.1.1-12.el10.alma.1 112 | sed 4.9-3.el10 113 | setup 2.14.5-4.el10 114 | shadow-utils 4.15.0-5.el10 115 | sqlite-libs 3.46.1-4.el10_0 116 | systemd 257-9.el10_0.1.alma.1 117 | systemd-libs 257-9.el10_0.1.alma.1 118 | systemd-pam 257-9.el10_0.1.alma.1 119 | tar 1.35-7.el10 120 | tpm2-tss 4.1.3-5.el10 121 | tzdata 2025b-1.el10 122 | util-linux-core 2.40.2-10.el10 123 | vim-data 9.1.083-5.el10 124 | vim-minimal 9.1.083-5.el10 125 | xz 5.6.2-4.el10_0 126 | xz-libs 5.6.2-4.el10_0 127 | yum 4.20.0-12.el10_0.alma.1 128 | zlib-ng-compat 2.2.3-1.el10 129 | -------------------------------------------------------------------------------- /el10/packages-info/x86_64-runtime-base: -------------------------------------------------------------------------------- 1 | almalinux-gpg-keys 10.0-30.el10 2 | almalinux-release 10.0-30.el10 3 | almalinux-repos 10.0-30.el10 4 | alternatives 1.30-2.el10 5 | attr 2.5.2-5.el10 6 | audit-libs 4.0.3-1.el10 7 | basesystem 11-22.el10 8 | bash 5.2.26-6.el10 9 | binutils 2.41-53.el10.alma.1 10 | binutils-gold 2.41-53.el10.alma.1 11 | bzip2-libs 1.0.8-25.el10 12 | ca-certificates 2024.2.69_v8.0.303-102.3.el10 13 | coreutils-single 9.5-6.el10 14 | crypto-policies 20250214-1.gitfd9b9b9.el10 15 | crypto-policies-scripts 20250214-1.gitfd9b9b9.el10 16 | curl 8.9.1-5.el10 17 | dbus 1.14.10-5.el10 18 | dbus-broker 36-1.el10 19 | dbus-common 1.14.10-5.el10 20 | dnf 4.20.0-12.el10_0.alma.1 21 | dnf-data 4.20.0-12.el10_0.alma.1 22 | elfutils-debuginfod-client 0.192-5.el10 23 | elfutils-default-yama-scope 0.192-5.el10 24 | elfutils-libelf 0.192-5.el10 25 | elfutils-libs 0.192-5.el10 26 | expat 2.7.1-1.el10_0 27 | file-libs 5.45-7.el10 28 | filesystem 3.18-16.el10 29 | findutils 4.10.0-5.el10 30 | gawk 5.3.0-6.el10 31 | gdbm-libs 1.23-12.el10_0 32 | glib2 2.80.4-4.el10 33 | glibc 2.39-37.el10.alma.1 34 | glibc-common 2.39-37.el10.alma.1 35 | glibc-minimal-langpack 2.39-37.el10.alma.1 36 | gmp 6.2.1-10.el10 37 | gnutls 3.8.9-9.el10 38 | gpg-pubkey c2a1e572-668fe8ef 39 | grep 3.11-10.el10 40 | hostname 3.23-14.el10 41 | ima-evm-utils 1.6.2-1.el10 42 | iputils 20240905-2.el10 43 | jansson 2.14-3.el10 44 | json-c 0.18-3.el10 45 | keyutils 1.6.3-5.el10 46 | keyutils-libs 1.6.3-5.el10 47 | krb5-libs 1.21.3-7.el10 48 | less 661-3.el10 49 | libacl 2.3.2-4.el10 50 | libarchive 3.7.7-2.el10_0 51 | libattr 2.5.2-5.el10 52 | libblkid 2.40.2-10.el10 53 | libcap 2.69-7.el10 54 | libcap-ng 0.8.4-6.el10 55 | libcom_err 1.47.1-3.el10 56 | libcomps 0.1.21-3.el10 57 | libcurl-minimal 8.9.1-5.el10 58 | libdnf 0.73.1-9.el10_0.alma.1 59 | libeconf 0.6.2-4.el10 60 | libfdisk 2.40.2-10.el10 61 | libffi 3.4.4-9.el10 62 | libgcc 14.2.1-7.el10.alma.1 63 | libgomp 14.2.1-7.el10.alma.1 64 | libidn2 2.3.7-3.el10 65 | libmodulemd 2.15.0-12.el10 66 | libmount 2.40.2-10.el10 67 | libnghttp2 1.64.0-2.el10 68 | librepo 1.18.0-3.el10 69 | libseccomp 2.5.3-10.el10 70 | libselinux 3.8-1.el10 71 | libsemanage 3.8.1-1.el10_0 72 | libsepol 3.8-1.el10 73 | libsmartcols 2.40.2-10.el10 74 | libsolv 0.7.29-8.el10.alma.1 75 | libstdc++ 14.2.1-7.el10.alma.1 76 | libtasn1 4.20.0-1.el10 77 | libunistring 1.1-10.el10 78 | libuuid 2.40.2-10.el10 79 | libverto 0.3.2-10.el10 80 | libxcrypt 4.4.36-10.el10 81 | libxml2 2.12.5-5.el10_0 82 | libyaml 0.2.5-16.el10 83 | libzstd 1.5.5-9.el10 84 | lua-libs 5.4.6-7.el10 85 | lz4-libs 1.9.4-8.el10 86 | mpdecimal 2.5.1-12.el10 87 | mpfr 4.2.1-5.el10 88 | ncurses-base 6.4-14.20240127.el10 89 | ncurses-libs 6.4-14.20240127.el10 90 | openssl-libs 3.2.2-16.el10.alma.1 91 | p11-kit 0.25.5-7.el10 92 | p11-kit-trust 0.25.5-7.el10 93 | pam-libs 1.6.1-7.el10 94 | pcre2 10.44-1.el10.3 95 | pcre2-syntax 10.44-1.el10.3 96 | popt 1.19-8.el10 97 | python3 3.12.9-2.el10_0 98 | python3-dnf 4.20.0-12.el10_0.alma.1 99 | python3-hawkey 0.73.1-9.el10_0.alma.1 100 | python3-libcomps 0.1.21-3.el10 101 | python3-libdnf 0.73.1-9.el10_0.alma.1 102 | python3-libs 3.12.9-2.el10_0 103 | python3-pip-wheel 23.3.2-7.el10 104 | python3-rpm 4.19.1.1-12.el10.alma.1 105 | readline 8.2-11.el10 106 | rootfiles 8.1-41.el10 107 | rpm 4.19.1.1-12.el10.alma.1 108 | rpm-build-libs 4.19.1.1-12.el10.alma.1 109 | rpm-libs 4.19.1.1-12.el10.alma.1 110 | rpm-sequoia 1.6.0-6.el10 111 | rpm-sign-libs 4.19.1.1-12.el10.alma.1 112 | sed 4.9-3.el10 113 | setup 2.14.5-4.el10 114 | shadow-utils 4.15.0-5.el10 115 | sqlite-libs 3.46.1-4.el10_0 116 | systemd 257-9.el10_0.1.alma.1 117 | systemd-libs 257-9.el10_0.1.alma.1 118 | systemd-pam 257-9.el10_0.1.alma.1 119 | tar 1.35-7.el10 120 | tpm2-tss 4.1.3-5.el10 121 | tzdata 2025b-1.el10 122 | util-linux-core 2.40.2-10.el10 123 | vim-data 9.1.083-5.el10 124 | vim-minimal 9.1.083-5.el10 125 | xz 5.6.2-4.el10_0 126 | xz-libs 5.6.2-4.el10_0 127 | yum 4.20.0-12.el10_0.alma.1 128 | zlib-ng-compat 2.2.3-1.el10 129 | -------------------------------------------------------------------------------- /el8/Changelog.md: -------------------------------------------------------------------------------- 1 | # Changelog el8 2 | 3 | ## 01-12-2023 4 | * Add `tmux` package as requested in https://github.com/cms-sw/cms-docker/issues/237. 5 | 6 | ## 28-11-2023 7 | * Add `squid` package as requested in https://github.com/cms-sw/cms-docker/issues/235. 8 | 9 | ## 29-09-2023 10 | * Split original `Dockerfile` in independent images (`Dockerfile.runtime`, 11 | `Dockerfile.grid` and `Dockerfile.buildtime`). 12 | -------------------------------------------------------------------------------- /el8/Dockerfile: -------------------------------------------------------------------------------- 1 | FROM @BASE_IMAGE_NAME@ 2 | LABEL maintainer="CMS Build" 3 | LABEL name="CMS Worker Node on EL - Buildtime dependencies" 4 | 5 | # Dependencies on libidn libXmu libstdc++-static might be cleaned up in the future 6 | # install python39 and python311 7 | RUN dnf install --disablerepo=epel -y perl-Carp perl-PathTools perl-Data-Dumper perl-Errno perl-Exporter \ 8 | perl-File-Path perl-File-Temp perl-Getopt-Long perl-IO perl-Text-ParseWords perl-constant \ 9 | perl-Digest-MD5 perl-PathTools perl-Data-Dumper perl-Digest-MD5 perl-Exporter perl-File-Path \ 10 | perl-File-Temp perl-Getopt-Long perl-File-Which perl-Scalar-List-Utils perl-Term-ANSIColor \ 11 | perl-CGI perl-DBI perl-Encode perl-Memoize perl-Storable perl-Time-HiRes perl-Time-Local \ 12 | perl-YAML perl-IO-Compress rpm-build git nspr nss rsync wget openssl-devel ncurses-devel \ 13 | libX11-devel readline-devel tcl-devel tk-devel mesa-libGLU-devel libXext-devel libXft-devel \ 14 | libXpm-devel java-1.8.0-openjdk-devel java-11-openjdk-devel java-17-openjdk-devel libtool libdrm \ 15 | gcc-c++ libidn libXmu python3-cryptography jq \ 16 | python39 python3.11 &&\ 17 | dnf clean all 18 | 19 | # Please add user packages in the RUN command below 20 | RUN dnf install --disablerepo=epel -y man-db time bc nano strace perf xauth vim cmake \ 21 | krb5-workstation glibc-langpack-en environment-modules xdg-utils squid tmux emacs &&\ 22 | dnf install -y screen &&\ 23 | dnf clean all 24 | 25 | RUN dnf --enablerepo=powertools install -y texinfo libstdc++-static imake &&\ 26 | epel_pkgs="@EPEL_PACKAGES@" &&\ 27 | if [ -n "$epel_pkgs" ] ; then dnf install -y $epel_pkgs; fi &&\ 28 | xcmd="@EXTRA_COMMAND@" &&\ 29 | if [ "$xcmd" = "" ] ; then xcmd=true; fi &&\ 30 | eval $xcmd &&\ 31 | dnf update -y ca-certificates &&\ 32 | dnf clean all &&\ 33 | /root/fix_ssh_config.sh /etc/ssh/ssh_config &&\ 34 | echo "Timestamp: @BUILD_DATE@" > /image-build-info.txt 35 | 36 | LABEL build-date="@BUILD_DATE@" 37 | -------------------------------------------------------------------------------- /el8/Dockerfile.bootstrap: -------------------------------------------------------------------------------- 1 | FROM @BASE_IMAGE_NAME@ 2 | RUN dnf --enablerepo=powertools install -y bzip2-devel file popt-devel nspr-devel nss-devel \ 3 | rpm-build autoconf automake libtool gettext-devel \ 4 | python3-devel cmake bison bison-devel && \ 5 | dnf clean all 6 | -------------------------------------------------------------------------------- /el8/Dockerfile.grid: -------------------------------------------------------------------------------- 1 | FROM @BASE_IMAGE_NAME@ 2 | LABEL maintainer="CMS Build" 3 | LABEL name="CMS Worker Node on EL - Grid packages" 4 | 5 | RUN dnf --enablerepo=powertools install -y boost-python3 &&\ 6 | dnf install -y gfal2-util-scripts gfal2-all python3-gfal2-util xrootd-client &&\ 7 | dnf install -y @EPEL_PACKAGES@ myproxy &&\ 8 | xcmd="@EXTRA_COMMAND@" &&\ 9 | if [ "$xcmd" = "" ] ; then xcmd=true; fi &&\ 10 | eval $xcmd &&\ 11 | dnf clean all &&\ 12 | /root/fix_ssh_config.sh /etc/ssh/ssh_config &&\ 13 | echo "Timestamp: @BUILD_DATE@" > /image-build-info.txt 14 | 15 | LABEL build-date="@BUILD_DATE@" 16 | -------------------------------------------------------------------------------- /el8/Dockerfile.old: -------------------------------------------------------------------------------- 1 | FROM @BASE_IMAGE_NAME@ 2 | LABEL maintainer="CMS Build" 3 | LABEL name="CMS Worker Node on EL" 4 | 5 | # Note: Monolithic CMSSW image (legacy). Currently using a three-stage image: 6 | # Dockerfile (containing buildtime dependencies and user packages), Dockerfile.runtime 7 | # (runtime dependencies) and Dockerfile.grid (pkgs needed to run on the GRID). 8 | 9 | ADD krb5.conf /etc/krb5.conf 10 | ADD CERN.repo /tmp/CERN.repo 11 | ADD RPM-GPG-KEY-kojiv2 /tmp/RPM-GPG-KEY-kojiv2 12 | ADD fix_ssh_config.sh /tmp/fix_ssh_config.sh 13 | 14 | RUN dnf install -y @DEFAULT_PACKAGES@ automake bash bzip2 bzip2-libs bzip2-devel \ 15 | file file-libs fontconfig freetype gcc-c++ git glibc krb5-libs libaio \ 16 | libcom_err libgomp libICE libidn \ 17 | libSM libX11 libX11-devel libxcrypt libXcursor libXext \ 18 | libXft libXi libXinerama \ 19 | libXmu libXpm libXpm-devel libXrandr libXrender \ 20 | java-1.8.0-openjdk-devel libtool m4 make cmake man-db \ 21 | ncurses ncurses-libs ncurses-devel nspr nss nss-util \ 22 | openssl openssl-devel openssl-libs \ 23 | perl perl-interpreter perl-libs \ 24 | perl-Carp perl-constant perl-Data-Dumper perl-DBI \ 25 | perl-Digest-MD5 perl-Encode perl-Env perl-Exporter perl-ExtUtils-Embed \ 26 | perl-File-Path perl-File-Temp perl-Getopt-Long perl-IO perl-libnet \ 27 | perl-Memoize perl-PathTools perl-Scalar-List-Utils perl-Socket perl-Storable \ 28 | perl-Term-ANSIColor perl-Test-Harness perl-Text-ParseWords perl-Thread-Queue \ 29 | perl-Time-HiRes perl-Time-Local perl-YAML \ 30 | patch popt python2 python3 readline rpm-build \ 31 | rsync tcl time tk wget which zlib \ 32 | bc tar zip unzip hostname nano procps-ng dnf-plugins-core python3-requests \ 33 | libnsl e2fsprogs e2fsprogs-libs libXext-devel libXft-devel \ 34 | libglvnd-opengl mesa-libGLU mesa-libGLU-devel nss-devel perl-CGI \ 35 | popt-devel readline-devel tcsh zsh tcl-devel tk-devel strace \ 36 | krb5-workstation python2-requests perf glibc-langpack-en environment-modules &&\ 37 | dnf install -y epel-release &&\ 38 | dnf install -y @EPEL_PACKAGES@ xrootd-client \ 39 | voms-clients-cpp python2-psutil python3-psutil myproxy apptainer &&\ 40 | dnf --enablerepo=powertools install -y texinfo libstdc++-static boost-python3 &&\ 41 | dnf install -y gfal2-util-scripts gfal2-all python3-gfal2-util &&\ 42 | dnf install -y libstdc++-static java-11-openjdk-devel xauth xdg-utils vim &&\ 43 | xcmd="@EXTRA_COMMAND@" &&\ 44 | if [ "$xcmd" = "" ] ; then xcmd=true; fi &&\ 45 | eval $xcmd &&\ 46 | alternatives --set python `which python2` &&\ 47 | echo el8 > /etc/cmsos &&\ 48 | cp /tmp/CERN.repo /etc/yum.repos.d/CERN.repo &&\ 49 | rpm --import /tmp/RPM-GPG-KEY-kojiv2 &&\ 50 | dnf install -y cern-gpg-keys CERN-CA-certs &&\ 51 | update-ca-trust &&\ 52 | dnf update -y ca-certificates &&\ 53 | dnf clean all &&\ 54 | mkdir -p /cvmfs /afs /eos /etc/vomses /etc/grid-security /build /data /pool /opt/cms &&\ 55 | mkdir -p /hdfs /mnt/hadoop /hadoop /cms /etc/cvmfs/SITECONF /lfs_roots /storage &&\ 56 | touch /etc/tnsnames.ora &&\ 57 | /tmp/fix_ssh_config.sh /etc/ssh/ssh_config &&\ 58 | rm -f /tmp/CERN.repo /tmp/RPM-GPG-KEY-kojiv2 /tmp/fix_ssh_config.sh &&\ 59 | echo "Timestamp: @BUILD_DATE@" > /image-build-info.txt &&\ 60 | sed -i -e s'|^ *allow *setuid.*|allow setuid = no|;s|^ *enable *overlay.*|enable overlay = no|;s|^ *enable *underlay.*|enable underlay = yes|' /etc/apptainer/apptainer.conf 61 | 62 | LABEL build-date="@BUILD_DATE@" 63 | -------------------------------------------------------------------------------- /el8/Dockerfile.runtime: -------------------------------------------------------------------------------- 1 | FROM @BASE_IMAGE_NAME@ 2 | LABEL maintainer="CMS Build" 3 | LABEL name="CMS Worker Node on EL - Runtime" 4 | 5 | ADD share/krb5.conf /etc/krb5.conf 6 | ADD share/el8-CERN.repo /tmp/CERN.repo 7 | ADD share/RPM-GPG-KEY-kojiv2 /tmp/RPM-GPG-KEY-kojiv2 8 | ADD share/fix_ssh_config.sh /root/fix_ssh_config.sh 9 | 10 | RUN dnf install -y @DEFAULT_PACKAGES@ bash tcsh zsh tar glibc glibc-headers libxcrypt openssl-libs libcom_err krb5-libs ncurses-libs \ 11 | perl perl-libs libX11 readline tcl tk mesa-libGLU libglvnd-glx libglvnd-opengl libXext libXft libXpm libaio libnsl \ 12 | python2 python3 which procps-ng && dnf install -y epel-release &&\ 13 | dnf install -y @EPEL_PACKAGES@ voms-clients-cpp apptainer python2-psutil python2-requests python3-psutil python3-requests &&\ 14 | xcmd="@EXTRA_COMMAND@" &&\ 15 | if [ "$xcmd" = "" ] ; then xcmd=true; fi &&\ 16 | eval $xcmd &&\ 17 | alternatives --set python `which python2` &&\ 18 | echo el8 > /etc/cmsos &&\ 19 | cp /tmp/CERN.repo /etc/yum.repos.d/CERN.repo &&\ 20 | rpm --import /tmp/RPM-GPG-KEY-kojiv2 &&\ 21 | dnf install -y cern-gpg-keys CERN-CA-certs &&\ 22 | update-ca-trust &&\ 23 | dnf update -y ca-certificates && dnf clean all &&\ 24 | mkdir -p /cvmfs /afs /eos /etc/vomses /etc/grid-security /build /data /pool /opt/cms /etc/ssh &&\ 25 | mkdir -p /hdfs /mnt/hadoop /hadoop /cms /etc/cvmfs/SITECONF /lfs_roots /storage /scratch &&\ 26 | touch /etc/tnsnames.ora &&\ 27 | chmod +x /root/fix_ssh_config.sh &&\ 28 | /root/fix_ssh_config.sh /etc/ssh/ssh_config &&\ 29 | rm -f /tmp/CERN.repo /tmp/RPM-GPG-KEY-kojiv2 &&\ 30 | sed -i -e s'|^ *allow *setuid.*|allow setuid = no|;s|^ *enable *overlay.*|enable overlay = no|;s|^ *enable *underlay.*|enable underlay = yes|' /etc/apptainer/apptainer.conf &&\ 31 | echo "Timestamp: @BUILD_DATE@" > /image-build-info.txt 32 | 33 | LABEL build-date="@BUILD_DATE@" 34 | -------------------------------------------------------------------------------- /el8/config.yaml: -------------------------------------------------------------------------------- 1 | push: true 2 | override: true 3 | delete_pattern: tmp-${group1}.*-(2[0-9]{7,}) 4 | expires_days: 7 5 | daily: d$${now.strftime("%Y%m%d")} 6 | architecture: ${group1} 7 | build_context: .. 8 | test: 9 | script: test-cmssw.sh 10 | node: singularity 11 | variables: 12 | CI_TESTS: stageout 13 | DEFAULT_PACKAGES: coreutils-single 14 | BUILD_DATE: $${now.strftime("%Y%m%d-%H%M%S")} 15 | EPEL_PACKAGES: 16 | groups: 17 | bootstrap: 18 | docker: Dockerfile.${group0} 19 | from: ${container}:${group1} 20 | variables: 21 | SKIP_TESTS: true 22 | groups: 23 | x86_64: 24 | tags: 25 | ${group1}-${group0}: 26 | aarch64: 27 | tags: 28 | ${group1}-${group0}: 29 | ppc64le: 30 | disabled: true 31 | tags: 32 | ${group1}-${group0}: 33 | runtime: 34 | docker: Dockerfile.${group0} 35 | from: library/almalinux:8 36 | groups: 37 | x86_64: 38 | tags: 39 | ${group1}-${group0}: 40 | aarch64: 41 | tags: 42 | ${group1}-${group0}: 43 | ppc64le: 44 | disabled: true 45 | tags: 46 | ${group1}-${group0}: 47 | grid: 48 | docker: Dockerfile.${group0} 49 | from: ${container}:${group1}-runtime 50 | variables: 51 | SKIP_TESTS: true 52 | groups: 53 | x86_64: 54 | tags: 55 | ${group1}-${group0}: 56 | aarch64: 57 | tags: 58 | ${group1}-${group0}: 59 | ppc64le: 60 | disabled: true 61 | tags: 62 | ${group1}-${group0}: 63 | latest: 64 | alias: ${group1}-${daily} 65 | from: ${container}:${group1}-grid 66 | variables: 67 | NOTIFY_TO: hlt 68 | groups: 69 | x86_64: 70 | variables: 71 | EXTRA_COMMAND: dnf --enablerepo=powertools install -y doxygen 72 | tags: 73 | ${group1}: 74 | aarch64: 75 | tags: 76 | ${group1}: 77 | ppc64le: 78 | disabled: true 79 | tags: 80 | ${group1}: 81 | -------------------------------------------------------------------------------- /el8/packages-info/aarch64-runtime-base: -------------------------------------------------------------------------------- 1 | acl 2.2.53-3.el8 2 | almalinux-release 8.10-1.el8 3 | audit-libs 3.1.2-1.el8 4 | basesystem 11-5.el8 5 | bash 4.4.20-5.el8 6 | binutils 2.30-125.el8_10 7 | bzip2-libs 1.0.6-28.el8_10 8 | ca-certificates 2024.2.69_v8.0.303-80.0.el8_10 9 | chkconfig 1.19.2-1.el8 10 | coreutils-single 8.30-15.el8 11 | cracklib 2.9.6-15.el8 12 | cracklib-dicts 2.9.6-15.el8 13 | crypto-policies 20230731-1.git3177e06.el8 14 | cryptsetup-libs 2.3.7-7.el8 15 | curl 7.61.1-34.el8_10.3 16 | cyrus-sasl-lib 2.1.27-6.el8_5 17 | dbus 1.12.8-26.el8 18 | dbus-common 1.12.8-26.el8 19 | dbus-daemon 1.12.8-26.el8 20 | dbus-libs 1.12.8-26.el8 21 | dbus-tools 1.12.8-26.el8 22 | device-mapper 1.02.181-15.el8_10 23 | device-mapper-libs 1.02.181-15.el8_10 24 | dnf 4.7.0-21.el8_10.alma.1 25 | dnf-data 4.7.0-21.el8_10.alma.1 26 | elfutils-default-yama-scope 0.190-2.el8 27 | elfutils-libelf 0.190-2.el8 28 | elfutils-libs 0.190-2.el8 29 | expat 2.2.5-17.el8_10 30 | file-libs 5.33-26.el8 31 | filesystem 3.8-6.el8 32 | findutils 4.6.0-23.el8_10 33 | gawk 4.2.1-4.el8 34 | gdbm 1.18-2.el8 35 | gdbm-libs 1.18-2.el8 36 | glib2 2.56.4-165.el8_10 37 | glibc 2.28-251.el8_10.16 38 | glibc-common 2.28-251.el8_10.16 39 | glibc-minimal-langpack 2.28-251.el8_10.16 40 | gmp 6.1.2-11.el8 41 | gnupg2 2.2.20-3.el8_6 42 | gnutls 3.6.16-8.el8_10.3 43 | gpg-pubkey 3abb34f8-5ffd890e 44 | gpg-pubkey ced7258b-6525146f 45 | gpgme 1.13.1-12.el8 46 | grep 3.1-6.el8 47 | gzip 1.9-13.el8_5 48 | hostname 3.20-6.el8 49 | ima-evm-utils 1.3.2-12.el8 50 | info 6.5-7.el8 51 | iputils 20180629-11.el8 52 | json-c 0.13.1-3.el8 53 | keyutils-libs 1.5.10-9.el8 54 | kmod-libs 25-20.el8 55 | krb5-libs 1.18.2-31.el8_10 56 | langpacks-en 1.0-12.el8 57 | less 530-3.el8_10 58 | libacl 2.2.53-3.el8 59 | libarchive 3.3.3-5.el8 60 | libassuan 2.5.1-3.el8 61 | libattr 2.4.48-3.el8 62 | libblkid 2.32.1-46.el8 63 | libcap 2.48-6.el8_9 64 | libcap-ng 0.7.11-1.el8 65 | libcom_err 1.45.6-5.1.el8.alma.1 66 | libcomps 0.1.18-1.el8 67 | libcurl-minimal 7.61.1-34.el8_10.3 68 | libdb 5.3.28-42.el8_4 69 | libdb-utils 5.3.28-42.el8_4 70 | libdnf 0.63.0-21.el8_10.alma.1 71 | libfdisk 2.32.1-46.el8 72 | libffi 3.1-24.el8 73 | libgcc 8.5.0-26.el8_10.alma.1 74 | libgcrypt 1.8.5-7.el8_6 75 | libgpg-error 1.31-1.el8 76 | libidn2 2.2.0-1.el8 77 | libksba 1.3.5-9.el8_7 78 | libmodulemd 2.13.0-1.el8 79 | libmount 2.32.1-46.el8 80 | libnghttp2 1.33.0-6.el8_10.1 81 | libnsl2 1.2.0-2.20180605git4a062cf.el8 82 | libpwquality 1.4.4-6.el8 83 | librepo 1.14.2-5.el8 84 | libreport-filesystem 2.9.5-15.el8.alma.1 85 | libseccomp 2.5.2-1.el8 86 | libselinux 2.9-10.el8_10 87 | libsemanage 2.9-11.el8_10 88 | libsepol 2.9-3.el8 89 | libsigsegv 2.11-5.el8 90 | libsmartcols 2.32.1-46.el8 91 | libsolv 0.7.20-6.el8 92 | libstdc++ 8.5.0-26.el8_10.alma.1 93 | libtasn1 4.13-5.el8_10 94 | libtirpc 1.1.4-12.el8_10 95 | libunistring 0.9.9-3.el8 96 | libusbx 1.0.23-4.el8 97 | libutempter 1.1.6-14.el8 98 | libuuid 2.32.1-46.el8 99 | libverto 0.3.2-2.el8 100 | libxcrypt 4.1.1-6.el8 101 | libxml2 2.9.7-19.el8_10 102 | libyaml 0.1.7-5.el8 103 | libzstd 1.4.4-1.el8 104 | lua-libs 5.3.4-12.el8 105 | lz4-libs 1.8.3-3.el8_4 106 | mpfr 3.1.6-1.el8 107 | ncurses-base 6.1-10.20180224.el8 108 | ncurses-libs 6.1-10.20180224.el8 109 | nettle 3.4.1-7.el8 110 | npth 1.5-4.el8 111 | openldap 2.4.46-21.el8_10 112 | openssl-libs 1.1.1k-14.el8_6 113 | p11-kit 0.23.22-2.el8 114 | p11-kit-trust 0.23.22-2.el8 115 | pam 1.3.1-36.el8_10 116 | pcre 8.42-6.el8 117 | pcre2 10.32-3.el8_6 118 | platform-python 3.6.8-69.el8_10.alma.1 119 | platform-python-setuptools 39.2.0-8.el8_10 120 | popt 1.18-1.el8 121 | python3-dnf 4.7.0-21.el8_10.alma.1 122 | python3-gpg 1.13.1-12.el8 123 | python3-hawkey 0.63.0-21.el8_10.alma.1 124 | python3-libcomps 0.1.18-1.el8 125 | python3-libdnf 0.63.0-21.el8_10.alma.1 126 | python3-libs 3.6.8-69.el8_10.alma.1 127 | python3-pip-wheel 9.0.3-24.el8 128 | python3-rpm 4.14.3-32.el8_10 129 | python3-setuptools-wheel 39.2.0-8.el8_10 130 | readline 7.0-10.el8 131 | rootfiles 8.1-22.el8 132 | rpm 4.14.3-32.el8_10 133 | rpm-build-libs 4.14.3-32.el8_10 134 | rpm-libs 4.14.3-32.el8_10 135 | sed 4.5-5.el8 136 | setup 2.12.2-9.el8 137 | shadow-utils 4.6-22.el8 138 | sqlite-libs 3.26.0-19.el8_9 139 | systemd 239-82.el8_10.5 140 | systemd-libs 239-82.el8_10.5 141 | systemd-pam 239-82.el8_10.5 142 | tar 1.30-9.el8 143 | tpm2-tss 2.3.2-6.el8 144 | tzdata 2025b-1.el8 145 | util-linux 2.32.1-46.el8 146 | vim-minimal 8.0.1763-19.el8_6.4 147 | xz 5.2.4-4.el8_6 148 | xz-libs 5.2.4-4.el8_6 149 | yum 4.7.0-21.el8_10.alma.1 150 | zlib 1.2.11-25.el8 151 | -------------------------------------------------------------------------------- /el8/packages-info/ppc64le-runtime-base: -------------------------------------------------------------------------------- 1 | # Build date: 2024-05-31 2 | acl 2.2.53-1.el8 3 | almalinux-release 8.9-1.el8 4 | audit-libs 3.0.7-5.el8 5 | basesystem 11-5.el8 6 | bash 4.4.20-4.el8_6 7 | binutils 2.30-123.el8 8 | bzip2-libs 1.0.6-26.el8 9 | ca-certificates 2023.2.60_v7.0.306-80.0.el8_8 10 | chkconfig 1.19.2-1.el8 11 | coreutils-single 8.30-15.el8 12 | cracklib 2.9.6-15.el8 13 | cracklib-dicts 2.9.6-15.el8 14 | crypto-policies 20230731-1.git3177e06.el8 15 | cryptsetup-libs 2.3.7-7.el8 16 | curl 7.61.1-33.el8 17 | cyrus-sasl-lib 2.1.27-6.el8_5 18 | dbus 1.12.8-26.el8 19 | dbus-common 1.12.8-26.el8 20 | dbus-daemon 1.12.8-26.el8 21 | dbus-libs 1.12.8-26.el8 22 | dbus-tools 1.12.8-26.el8 23 | device-mapper 1.02.181-13.el8_9 24 | device-mapper-libs 1.02.181-13.el8_9 25 | dnf 4.7.0-19.el8.alma 26 | dnf-data 4.7.0-19.el8.alma 27 | elfutils-default-yama-scope 0.189-3.el8 28 | elfutils-libelf 0.189-3.el8 29 | elfutils-libs 0.189-3.el8 30 | expat 2.2.5-11.el8 31 | file-libs 5.33-25.el8 32 | filesystem 3.8-6.el8 33 | findutils 4.6.0-21.el8 34 | gawk 4.2.1-4.el8 35 | gdbm 1.18-2.el8 36 | gdbm-libs 1.18-2.el8 37 | glib2 2.56.4-161.el8 38 | glibc 2.28-236.el8.7 39 | glibc-common 2.28-236.el8.7 40 | glibc-minimal-langpack 2.28-236.el8.7 41 | gmp 6.1.2-10.el8 42 | gnupg2 2.2.20-3.el8_6 43 | gnutls 3.6.16-7.el8 44 | gpg-pubkey 3abb34f8-5ffd890e 45 | gpg-pubkey ced7258b-6525146f 46 | gpgme 1.13.1-11.el8 47 | grep 3.1-6.el8 48 | gzip 1.9-13.el8_5 49 | hostname 3.20-6.el8 50 | ima-evm-utils 1.3.2-12.el8 51 | info 6.5-7.el8 52 | iputils 20180629-11.el8 53 | json-c 0.13.1-3.el8 54 | keyutils-libs 1.5.10-9.el8 55 | kmod-libs 25-19.el8 56 | krb5-libs 1.18.2-26.el8_9 57 | langpacks-en 1.0-12.el8 58 | less 530-1.el8 59 | libacl 2.2.53-1.el8 60 | libarchive 3.3.3-5.el8 61 | libassuan 2.5.1-3.el8 62 | libattr 2.4.48-3.el8 63 | libblkid 2.32.1-43.el8 64 | libcap 2.48-5.el8_8 65 | libcap-ng 0.7.11-1.el8 66 | libcom_err 1.45.6-5.el8 67 | libcomps 0.1.18-1.el8 68 | libcurl-minimal 7.61.1-33.el8 69 | libdb 5.3.28-42.el8_4 70 | libdb-utils 5.3.28-42.el8_4 71 | libdnf 0.63.0-17.el8_9.alma 72 | libfdisk 2.32.1-43.el8 73 | libffi 3.1-24.el8 74 | libgcc 8.5.0-20.el8.alma 75 | libgcrypt 1.8.5-7.el8_6 76 | libgpg-error 1.31-1.el8 77 | libidn2 2.2.0-1.el8 78 | libksba 1.3.5-9.el8_7 79 | libmodulemd 2.13.0-1.el8 80 | libmount 2.32.1-43.el8 81 | libnghttp2 1.33.0-5.el8_9 82 | libnsl2 1.2.0-2.20180605git4a062cf.el8 83 | libpwquality 1.4.4-6.el8 84 | librepo 1.14.2-4.el8 85 | libreport-filesystem 2.9.5-15.el8.alma.1 86 | librtas 2.0.2-1.el8 87 | libseccomp 2.5.2-1.el8 88 | libselinux 2.9-8.el8 89 | libsemanage 2.9-9.el8_6 90 | libsepol 2.9-3.el8 91 | libsigsegv 2.11-5.el8 92 | libsmartcols 2.32.1-43.el8 93 | libsolv 0.7.20-6.el8 94 | libstdc++ 8.5.0-20.el8.alma 95 | libtasn1 4.13-4.el8_7 96 | libtirpc 1.1.4-8.el8 97 | libunistring 0.9.9-3.el8 98 | libusbx 1.0.23-4.el8 99 | libutempter 1.1.6-14.el8 100 | libuuid 2.32.1-43.el8 101 | libverto 0.3.2-2.el8 102 | libxcrypt 4.1.1-6.el8 103 | libxml2 2.9.7-16.el8_8.1 104 | libyaml 0.1.7-5.el8 105 | libzstd 1.4.4-1.el8 106 | lua-libs 5.3.4-12.el8 107 | lz4-libs 1.8.3-3.el8_4 108 | mpfr 3.1.6-1.el8 109 | ncurses-base 6.1-10.20180224.el8 110 | ncurses-libs 6.1-10.20180224.el8 111 | nettle 3.4.1-7.el8 112 | npth 1.5-4.el8 113 | openldap 2.4.46-18.el8 114 | openssl-libs 1.1.1k-9.el8_7 115 | p11-kit 0.23.22-1.el8 116 | p11-kit-trust 0.23.22-1.el8 117 | pam 1.3.1-27.el8 118 | pcre 8.42-6.el8 119 | pcre2 10.32-3.el8_6 120 | platform-python 3.6.8-56.el8_9.alma.1 121 | platform-python-setuptools 39.2.0-7.el8 122 | popt 1.18-1.el8 123 | python3-dnf 4.7.0-19.el8.alma 124 | python3-gpg 1.13.1-11.el8 125 | python3-hawkey 0.63.0-17.el8_9.alma 126 | python3-libcomps 0.1.18-1.el8 127 | python3-libdnf 0.63.0-17.el8_9.alma 128 | python3-libs 3.6.8-56.el8_9.alma.1 129 | python3-pip-wheel 9.0.3-23.el8 130 | python3-rpm 4.14.3-26.el8 131 | python3-setuptools-wheel 39.2.0-7.el8 132 | readline 7.0-10.el8 133 | rootfiles 8.1-22.el8 134 | rpm 4.14.3-26.el8 135 | rpm-build-libs 4.14.3-26.el8 136 | rpm-libs 4.14.3-26.el8 137 | sed 4.5-5.el8 138 | setup 2.12.2-9.el8 139 | shadow-utils 4.6-19.el8 140 | sqlite-libs 3.26.0-18.el8_8 141 | systemd 239-78.el8 142 | systemd-libs 239-78.el8 143 | systemd-pam 239-78.el8 144 | tar 1.30-9.el8 145 | tpm2-tss 2.3.2-5.el8 146 | tzdata 2023c-1.el8 147 | util-linux 2.32.1-43.el8 148 | vim-minimal 8.0.1763-19.el8_6.4 149 | xz 5.2.4-4.el8_6 150 | xz-libs 5.2.4-4.el8_6 151 | yum 4.7.0-19.el8.alma 152 | zlib 1.2.11-25.el8 153 | -------------------------------------------------------------------------------- /el8/packages-info/x86_64-runtime-base: -------------------------------------------------------------------------------- 1 | acl 2.2.53-3.el8 2 | almalinux-release 8.10-1.el8 3 | audit-libs 3.1.2-1.el8 4 | basesystem 11-5.el8 5 | bash 4.4.20-5.el8 6 | binutils 2.30-125.el8_10 7 | bzip2-libs 1.0.6-28.el8_10 8 | ca-certificates 2024.2.69_v8.0.303-80.0.el8_10 9 | chkconfig 1.19.2-1.el8 10 | coreutils-single 8.30-15.el8 11 | cracklib 2.9.6-15.el8 12 | cracklib-dicts 2.9.6-15.el8 13 | crypto-policies 20230731-1.git3177e06.el8 14 | cryptsetup-libs 2.3.7-7.el8 15 | curl 7.61.1-34.el8_10.3 16 | cyrus-sasl-lib 2.1.27-6.el8_5 17 | dbus 1.12.8-26.el8 18 | dbus-common 1.12.8-26.el8 19 | dbus-daemon 1.12.8-26.el8 20 | dbus-libs 1.12.8-26.el8 21 | dbus-tools 1.12.8-26.el8 22 | device-mapper 1.02.181-15.el8_10 23 | device-mapper-libs 1.02.181-15.el8_10 24 | dnf 4.7.0-21.el8_10.alma.1 25 | dnf-data 4.7.0-21.el8_10.alma.1 26 | elfutils-default-yama-scope 0.190-2.el8 27 | elfutils-libelf 0.190-2.el8 28 | elfutils-libs 0.190-2.el8 29 | expat 2.2.5-17.el8_10 30 | file-libs 5.33-26.el8 31 | filesystem 3.8-6.el8 32 | findutils 4.6.0-23.el8_10 33 | gawk 4.2.1-4.el8 34 | gdbm 1.18-2.el8 35 | gdbm-libs 1.18-2.el8 36 | glib2 2.56.4-165.el8_10 37 | glibc 2.28-251.el8_10.16 38 | glibc-common 2.28-251.el8_10.16 39 | glibc-minimal-langpack 2.28-251.el8_10.16 40 | gmp 6.1.2-11.el8 41 | gnupg2 2.2.20-3.el8_6 42 | gnutls 3.6.16-8.el8_10.3 43 | gpg-pubkey 3abb34f8-5ffd890e 44 | gpg-pubkey ced7258b-6525146f 45 | gpgme 1.13.1-12.el8 46 | grep 3.1-6.el8 47 | gzip 1.9-13.el8_5 48 | hostname 3.20-6.el8 49 | ima-evm-utils 1.3.2-12.el8 50 | info 6.5-7.el8 51 | iputils 20180629-11.el8 52 | json-c 0.13.1-3.el8 53 | keyutils-libs 1.5.10-9.el8 54 | kmod-libs 25-20.el8 55 | krb5-libs 1.18.2-31.el8_10 56 | langpacks-en 1.0-12.el8 57 | less 530-3.el8_10 58 | libacl 2.2.53-3.el8 59 | libarchive 3.3.3-5.el8 60 | libassuan 2.5.1-3.el8 61 | libattr 2.4.48-3.el8 62 | libblkid 2.32.1-46.el8 63 | libcap 2.48-6.el8_9 64 | libcap-ng 0.7.11-1.el8 65 | libcom_err 1.45.6-5.1.el8.alma.1 66 | libcomps 0.1.18-1.el8 67 | libcurl-minimal 7.61.1-34.el8_10.3 68 | libdb 5.3.28-42.el8_4 69 | libdb-utils 5.3.28-42.el8_4 70 | libdnf 0.63.0-21.el8_10.alma.1 71 | libfdisk 2.32.1-46.el8 72 | libffi 3.1-24.el8 73 | libgcc 8.5.0-26.el8_10.alma.1 74 | libgcrypt 1.8.5-7.el8_6 75 | libgpg-error 1.31-1.el8 76 | libidn2 2.2.0-1.el8 77 | libksba 1.3.5-9.el8_7 78 | libmodulemd 2.13.0-1.el8 79 | libmount 2.32.1-46.el8 80 | libnghttp2 1.33.0-6.el8_10.1 81 | libnsl2 1.2.0-2.20180605git4a062cf.el8 82 | libpwquality 1.4.4-6.el8 83 | librepo 1.14.2-5.el8 84 | libreport-filesystem 2.9.5-15.el8.alma.1 85 | libseccomp 2.5.2-1.el8 86 | libselinux 2.9-10.el8_10 87 | libsemanage 2.9-11.el8_10 88 | libsepol 2.9-3.el8 89 | libsigsegv 2.11-5.el8 90 | libsmartcols 2.32.1-46.el8 91 | libsolv 0.7.20-6.el8 92 | libstdc++ 8.5.0-26.el8_10.alma.1 93 | libtasn1 4.13-5.el8_10 94 | libtirpc 1.1.4-12.el8_10 95 | libunistring 0.9.9-3.el8 96 | libusbx 1.0.23-4.el8 97 | libutempter 1.1.6-14.el8 98 | libuuid 2.32.1-46.el8 99 | libverto 0.3.2-2.el8 100 | libxcrypt 4.1.1-6.el8 101 | libxml2 2.9.7-19.el8_10 102 | libyaml 0.1.7-5.el8 103 | libzstd 1.4.4-1.el8 104 | lua-libs 5.3.4-12.el8 105 | lz4-libs 1.8.3-3.el8_4 106 | mpfr 3.1.6-1.el8 107 | ncurses-base 6.1-10.20180224.el8 108 | ncurses-libs 6.1-10.20180224.el8 109 | nettle 3.4.1-7.el8 110 | npth 1.5-4.el8 111 | openldap 2.4.46-21.el8_10 112 | openssl-libs 1.1.1k-14.el8_6 113 | p11-kit 0.23.22-2.el8 114 | p11-kit-trust 0.23.22-2.el8 115 | pam 1.3.1-36.el8_10 116 | pcre 8.42-6.el8 117 | pcre2 10.32-3.el8_6 118 | platform-python 3.6.8-69.el8_10.alma.1 119 | platform-python-setuptools 39.2.0-8.el8_10 120 | popt 1.18-1.el8 121 | python3-dnf 4.7.0-21.el8_10.alma.1 122 | python3-gpg 1.13.1-12.el8 123 | python3-hawkey 0.63.0-21.el8_10.alma.1 124 | python3-libcomps 0.1.18-1.el8 125 | python3-libdnf 0.63.0-21.el8_10.alma.1 126 | python3-libs 3.6.8-69.el8_10.alma.1 127 | python3-pip-wheel 9.0.3-24.el8 128 | python3-rpm 4.14.3-32.el8_10 129 | python3-setuptools-wheel 39.2.0-8.el8_10 130 | readline 7.0-10.el8 131 | rootfiles 8.1-22.el8 132 | rpm 4.14.3-32.el8_10 133 | rpm-build-libs 4.14.3-32.el8_10 134 | rpm-libs 4.14.3-32.el8_10 135 | sed 4.5-5.el8 136 | setup 2.12.2-9.el8 137 | shadow-utils 4.6-22.el8 138 | sqlite-libs 3.26.0-19.el8_9 139 | systemd 239-82.el8_10.5 140 | systemd-libs 239-82.el8_10.5 141 | systemd-pam 239-82.el8_10.5 142 | tar 1.30-9.el8 143 | tpm2-tss 2.3.2-6.el8 144 | tzdata 2025b-1.el8 145 | util-linux 2.32.1-46.el8 146 | vim-minimal 8.0.1763-19.el8_6.4 147 | xz 5.2.4-4.el8_6 148 | xz-libs 5.2.4-4.el8_6 149 | yum 4.7.0-21.el8_10.alma.1 150 | zlib 1.2.11-25.el8 151 | -------------------------------------------------------------------------------- /el9/Changelog.md: -------------------------------------------------------------------------------- 1 | # Changelog el9 2 | 3 | ## 01-12-2023 4 | * Add `tmux` package as requested in https://github.com/cms-sw/cms-docker/issues/237. 5 | 6 | ## 28-11-2023 7 | * Add `squid` package as requested in https://github.com/cms-sw/cms-docker/issues/235. 8 | 9 | ## 05-10-2023 10 | * Add `python3-pip` package to install comp tools, e.g. Rucio (`Dockerfile` in https://github.com/cms-sw/cms-docker/commit/35ad9f96b2e9ed6403ed1d49b41b0e06cc92c29c 11 | and `Docker.runtime` in 12 | https://github.com/cms-sw/cms-docker/commit/afa5d94f461e261b9d2b90cddb00fd75f9565f36). 13 | 14 | ## 29-09-2023 15 | * Split original `Dockerfile` in independent images (`Dockerfile.runtime`, 16 | `Dockerfile.grid` and `Dockerfile.buildtime`). **Note:** Image for `ppc64le` disabled in `config.yaml`. 17 | 18 | ## 10-01-2023 19 | * Add `glibc-langpack-en` package (https://github.com/cms-sw/cms-docker/commit/a2a6ca43d91bca7227a46b88e1b5096c97391069). 20 | 21 | ## 17-06-2022 22 | * Add `boost-python3` package 23 | (https://github.com/cms-sw/cms-docker/commit/f5df618dacf5974de6c35d739fd565465f6648e9). 24 | 25 | ## 13-01-2022 26 | * Add `perf` package (https://github.com/cms-sw/cms-docker/commit/3be4202edd5d1388c5b4482d2a4c567c9b037618). 27 | 28 | **Previous changes not tracked. See git history.** 29 | 30 | ### From el8 to el9 31 | A few notes on the change from `el8` images to `el9`: 32 | * Remove `perl` dependencies. We do not build perl-based SCRAM for `el9`. 33 | * Drop Python 2.X and, therefore, remove `python2`, `python2-psutil` and `python2-requests` packages. 34 | * Drop `libstdc++-static` and `libidn` dependencies from the first commit (as expected from `el8` image comments). 35 | * Remove keberos config fix `ADD krb5.conf /etc/krb5.conf`. 36 | * Add `texinfo` from `crb` repo. 37 | * Package `coreutils-single` added Dockerfile (for `el8` it is defined as `DEFAULT_PACKAGE` in `config.yaml`). 38 | * Packages `krb5-devel` and `libcom_err-devel` present in `el9` from first commit, but not present in `el8`. 39 | -------------------------------------------------------------------------------- /el9/Dockerfile: -------------------------------------------------------------------------------- 1 | FROM @BASE_IMAGE_NAME@ 2 | LABEL maintainer="CMS Build" 3 | LABEL name="CMS Worker Node on EL - Buildtime dependencies" 4 | 5 | # Dependency on libXmu might be cleaned up in the future 6 | # Extra packages comparing with el8: krb5-devel libcom_err-devel (coreutils-single in el8 config file) 7 | # Aded python3.11 8 | RUN dnf install --disablerepo=epel -y rpm-build git nspr nss rsync wget openssl openssl-devel ncurses-devel \ 9 | libX11-devel readline-devel tcl-devel tk-devel mesa-libGLU-devel libXext-devel libXft-devel \ 10 | libXpm-devel java-1.8.0-openjdk-devel java-11-openjdk-devel java-17-openjdk-devel libtool libdrm \ 11 | gcc-c++ libXmu krb5-devel coreutils-single libcom_err-devel \ 12 | python3-cryptography jq python3.11 &&\ 13 | dnf clean all 14 | 15 | # Please add user packages in the RUN command below 16 | RUN dnf install --disablerepo=epel -y man-db time bc nano strace xauth vim cmake \ 17 | krb5-workstation environment-modules xdg-utils squid tmux emacs &&\ 18 | dnf install -y screen &&\ 19 | dnf clean all 20 | 21 | RUN dnf --enablerepo=crb install -y texinfo libstdc++-static &&\ 22 | epel_pkgs="@EPEL_PACKAGES@" &&\ 23 | if [ -n "$epel_pkgs" ] ; then dnf install -y $epel_pkgs; fi &&\ 24 | xcmd="@EXTRA_COMMAND@" &&\ 25 | if [ "$xcmd" = "" ] ; then xcmd=true; fi &&\ 26 | eval $xcmd &&\ 27 | dnf update -y ca-certificates &&\ 28 | dnf clean all &&\ 29 | /root/fix_ssh_config.sh /etc/ssh/ssh_config &&\ 30 | echo "Timestamp: @BUILD_DATE@" > /image-build-info.txt 31 | 32 | LABEL build-date="@BUILD_DATE@" 33 | -------------------------------------------------------------------------------- /el9/Dockerfile.bootstrap: -------------------------------------------------------------------------------- 1 | FROM @BASE_IMAGE_NAME@ 2 | RUN yum install -y bzip2-devel file popt-devel nspr-devel nss-devel \ 3 | rpm-build autoconf automake libtool gettext-devel \ 4 | python3-devel cmake bison && \ 5 | yum clean all 6 | -------------------------------------------------------------------------------- /el9/Dockerfile.grid: -------------------------------------------------------------------------------- 1 | FROM @BASE_IMAGE_NAME@ 2 | LABEL maintainer="CMS Build" 3 | LABEL name="CMS Worker Node on EL - Grid packages" 4 | 5 | RUN dnf install -y gfal2-util-scripts gfal2-all python3-gfal2-util xrootd-client openldap-compat &&\ 6 | dnf install -y @EPEL_PACKAGES@ myproxy &&\ 7 | xcmd="@EXTRA_COMMAND@" &&\ 8 | if [ "$xcmd" = "" ] ; then xcmd=true; fi &&\ 9 | eval $xcmd &&\ 10 | /root/fix_ssh_config.sh /etc/ssh/ssh_config &&\ 11 | echo "Timestamp: @BUILD_DATE@" > /image-build-info.txt 12 | 13 | LABEL build-date="@BUILD_DATE@" 14 | -------------------------------------------------------------------------------- /el9/Dockerfile.old: -------------------------------------------------------------------------------- 1 | FROM @BASE_IMAGE_NAME@ 2 | LABEL maintainer="CMS Build" 3 | LABEL name="CMS Worker Node on EL" 4 | 5 | # Note: Monolithic CMSSW image (legacy). Currently using a three-stage image: 6 | # Dockerfile (containing buildtime dependencies and user packages), Dockerfile.runtime 7 | # (runtime dependencies) and Dockerfile.grid (pkgs needed to run on the GRID). 8 | 9 | ADD CERN.repo /tmp/CERN.repo 10 | ADD RPM-GPG-KEY-kojiv2 /tmp/RPM-GPG-KEY-kojiv2 11 | ADD fix_ssh_config.sh /tmp/fix_ssh_config.sh 12 | 13 | RUN dnf install -y @DEFAULT_PACKAGES@ \ 14 | automake bash bzip2 bzip2-libs bzip2-devel coreutils-single e2fsprogs e2fsprogs-libs \ 15 | perl file file-libs fontconfig freetype gcc-c++ git glibc glibc-headers krb5-libs libaio \ 16 | libcom_err libcom_err-devel libgomp libICE \ 17 | libSM libX11 libX11-devel libxcrypt libXcursor libXext \ 18 | libXext-devel libXft libXft-devel libXi libXinerama \ 19 | libXmu libXpm libXpm-devel libXrandr libXrender \ 20 | libglvnd-opengl mesa-libGL mesa-libGLU mesa-libGLU-devel \ 21 | java-1.8.0-openjdk-devel libtool m4 make cmake man-db \ 22 | ncurses ncurses-libs ncurses-devel nspr nss nss-devel nss-util \ 23 | openssl openssl-devel openssl-libs \ 24 | patch popt popt-devel python3 readline readline-devel rpm-build \ 25 | rsync tcl tcsh time tk wget which zlib zsh tcl-devel tk-devel krb5-devel \ 26 | bc strace tar zip unzip hostname nano libnsl procps-ng environment-modules && \ 27 | dnf install -y epel-release &&\ 28 | dnf install -y @EPEL_PACKAGES@ xrootd-client \ 29 | python3-pip python3-requests python3-psutil dnf-plugins-core \ 30 | voms-clients-cpp krb5-workstation myproxy apptainer &&\ 31 | dnf install -y gfal2-all gfal2-util-scripts python3-gfal2-util &&\ 32 | dnf install -y java-11-openjdk-devel xauth xdg-utils vim &&\ 33 | dnf --enablerepo=crb install -y texinfo &&\ 34 | xcmd="@EXTRA_COMMAND@" &&\ 35 | if [ "$xcmd" = "" ] ; then xcmd=true; fi &&\ 36 | eval $xcmd &&\ 37 | echo el9 > /etc/cmsos &&\ 38 | cp /tmp/CERN.repo /etc/yum.repos.d/CERN.repo &&\ 39 | rpm --import /tmp/RPM-GPG-KEY-kojiv2 &&\ 40 | dnf install -y cern-gpg-keys CERN-CA-certs &&\ 41 | update-ca-trust &&\ 42 | dnf update -y ca-certificates &&\ 43 | dnf clean all &&\ 44 | mkdir -p /cvmfs /afs /eos /etc/vomses /etc/grid-security /build /data /pool /opt/cms &&\ 45 | mkdir -p /hdfs /mnt/hadoop /hadoop /cms /etc/cvmfs/SITECONF /lfs_roots /storage &&\ 46 | touch /etc/tnsnames.ora &&\ 47 | /tmp/fix_ssh_config.sh /etc/ssh/ssh_config &&\ 48 | rm -f /tmp/CERN.repo /tmp/RPM-GPG-KEY-kojiv2 /tmp/fix_ssh_config.sh &&\ 49 | echo "Timestamp: @BUILD_DATE@" > /image-build-info.txt &&\ 50 | sed -i -e s'|^ *allow *setuid.*|allow setuid = no|;s|^ *enable *overlay.*|enable overlay = no|;s|^ *enable *underlay.*|enable underlay = yes|' /etc/apptainer/apptainer.conf 51 | 52 | LABEL build-date="@BUILD_DATE@" 53 | -------------------------------------------------------------------------------- /el9/Dockerfile.runtime: -------------------------------------------------------------------------------- 1 | FROM @BASE_IMAGE_NAME@ 2 | LABEL maintainer="CMS Build" 3 | LABEL name="CMS Worker Node on EL - Runtime" 4 | 5 | ADD share/el9-CERN.repo /tmp/CERN.repo 6 | ADD share/RPM-GPG-KEY-kojiv2 /tmp/RPM-GPG-KEY-kojiv2 7 | ADD share/fix_ssh_config.sh /root/fix_ssh_config.sh 8 | 9 | RUN dnf install -y @DEFAULT_PACKAGES@ bash tcsh zsh tar glibc glibc-devel libgcc libxcrypt openssl-libs libcom_err krb5-libs ncurses-libs \ 10 | perl perl-libs libX11 readline tcl tk mesa-libGLU libglvnd-glx libglvnd-opengl libXext libXft libXpm libaio libnsl sssd-client &&\ 11 | dnf install -y python3 which procps-ng &&\ 12 | dnf install -y epel-release &&\ 13 | dnf install -y @EPEL_PACKAGES@ voms-clients-cpp apptainer python3-requests python3-psutil python3-pip &&\ 14 | xcmd="@EXTRA_COMMAND@" &&\ 15 | if [ "$xcmd" = "" ] ; then xcmd=true; fi &&\ 16 | eval $xcmd &&\ 17 | echo el9 > /etc/cmsos &&\ 18 | cp /tmp/CERN.repo /etc/yum.repos.d/CERN.repo &&\ 19 | rpm --import /tmp/RPM-GPG-KEY-kojiv2 &&\ 20 | dnf install -y cern-gpg-keys CERN-CA-certs &&\ 21 | update-ca-trust &&\ 22 | dnf update -y ca-certificates &&\ 23 | update-crypto-policies --set DEFAULT:SHA1 &&\ 24 | dnf clean all &&\ 25 | mkdir -p /cvmfs /afs /eos /etc/vomses /etc/grid-security /build /data /pool /opt/cms /etc/ssh &&\ 26 | mkdir -p /hdfs /mnt/hadoop /hadoop /cms /etc/cvmfs/SITECONF /lfs_roots /storage /scratch &&\ 27 | touch /etc/tnsnames.ora &&\ 28 | chmod +x /root/fix_ssh_config.sh &&\ 29 | /root/fix_ssh_config.sh /etc/ssh/ssh_config &&\ 30 | rm -f /tmp/CERN.repo /tmp/RPM-GPG-KEY-kojiv2 &&\ 31 | echo "Timestamp: @BUILD_DATE@" > /image-build-info.txt &&\ 32 | sed -i -e s'|^ *allow *setuid.*|allow setuid = no|;s|^ *enable *overlay.*|enable overlay = no|;s|^ *enable *underlay.*|enable underlay = yes|' /etc/apptainer/apptainer.conf 33 | 34 | LABEL build-date="@BUILD_DATE@" 35 | -------------------------------------------------------------------------------- /el9/config.yaml: -------------------------------------------------------------------------------- 1 | push: true 2 | override: true 3 | delete_pattern: tmp-${group1}.*-(2[0-9]{7,}) 4 | expires_days: 7 5 | daily: d$${now.strftime("%Y%m%d")} 6 | architecture: ${group1} 7 | build_context: .. 8 | test: 9 | script: test-cmssw.sh 10 | node: singularity 11 | variables: 12 | CI_TESTS: stageout 13 | DEFAULT_PACKAGES: 14 | BUILD_DATE: $${now.strftime("%Y%m%d-%H%M%S")} 15 | EPEL_PACKAGES: imake 16 | EXTRA_COMMAND: 17 | groups: 18 | bootstrap: 19 | docker: Dockerfile.${group0} 20 | from: ${container}:${group1} 21 | variables: 22 | SKIP_TESTS: true 23 | groups: 24 | x86_64: 25 | tags: 26 | ${group1}-${group0}: 27 | aarch64: 28 | tags: 29 | ${group1}-${group0}: 30 | ppc64le: 31 | disabled: true 32 | tags: 33 | ${group1}-${group0}: 34 | runtime: 35 | docker: Dockerfile.${group0} 36 | from: library/almalinux:9 37 | groups: 38 | x86_64: 39 | tags: 40 | ${group1}-${group0}: 41 | aarch64: 42 | tags: 43 | ${group1}-${group0}: 44 | ppc64le: 45 | disabled: true 46 | tags: 47 | ${group1}-${group0}: 48 | grid: 49 | docker: Dockerfile.${group0} 50 | from: ${container}:${group1}-runtime 51 | variables: 52 | SKIP_TESTS: true 53 | groups: 54 | x86_64: 55 | tags: 56 | ${group1}-${group0}: 57 | aarch64: 58 | tags: 59 | ${group1}-${group0}: 60 | ppc64le: 61 | disabled: true 62 | tags: 63 | ${group1}-${group0}: 64 | latest: 65 | alias: ${group1}-${daily} 66 | from: ${container}:${group1}-grid 67 | variables: 68 | NOTIFY_TO: hlt 69 | groups: 70 | x86_64: 71 | variables: 72 | EXTRA_COMMAND: dnf --enablerepo=crb install -y doxygen 73 | tags: 74 | ${group1}: 75 | aarch64: 76 | tags: 77 | ${group1}: 78 | ppc64le: 79 | disabled: true 80 | tags: 81 | ${group1}: 82 | -------------------------------------------------------------------------------- /el9/packages-info/aarch64-runtime-base: -------------------------------------------------------------------------------- 1 | acl 2.3.1-4.el9 2 | almalinux-gpg-keys 9.6-1.el9 3 | almalinux-release 9.6-1.el9 4 | almalinux-repos 9.6-1.el9 5 | alternatives 1.24-2.el9 6 | attr 2.5.1-3.el9 7 | audit-libs 3.1.5-4.el9 8 | basesystem 11-13.el9 9 | bash 5.1.8-9.el9 10 | binutils 2.35.2-63.el9 11 | binutils-gold 2.35.2-63.el9 12 | bzip2-libs 1.0.8-10.el9_5 13 | ca-certificates 2024.2.69_v8.0.303-91.4.el9_4 14 | coreutils-single 8.32-39.el9 15 | cracklib 2.9.6-27.el9 16 | cracklib-dicts 2.9.6-27.el9 17 | crypto-policies 20250128-1.git5269e22.el9 18 | crypto-policies-scripts 20250128-1.git5269e22.el9 19 | curl-minimal 7.76.1-31.el9 20 | cyrus-sasl-lib 2.1.27-21.el9 21 | dbus 1.12.20-8.el9 22 | dbus-broker 28-7.el9 23 | dbus-common 1.12.20-8.el9 24 | dnf 4.14.0-25.el9.alma.1 25 | dnf-data 4.14.0-25.el9.alma.1 26 | elfutils-debuginfod-client 0.192-5.el9 27 | elfutils-default-yama-scope 0.192-5.el9 28 | elfutils-libelf 0.192-5.el9 29 | elfutils-libs 0.192-5.el9 30 | expat 2.5.0-5.el9_6 31 | file-libs 5.39-16.el9 32 | filesystem 3.16-5.el9 33 | findutils 4.8.0-7.el9 34 | gawk 5.1.0-6.el9 35 | gdbm-libs 1.23-1.el9 36 | glib2 2.68.4-16.el9 37 | glibc 2.34-168.el9_6.14.alma.1 38 | glibc-common 2.34-168.el9_6.14.alma.1 39 | glibc-minimal-langpack 2.34-168.el9_6.14.alma.1 40 | gmp 6.2.0-13.el9 41 | gnupg2 2.3.3-4.el9 42 | gnutls 3.8.3-6.el9 43 | gpg-pubkey b86b3716-61e69f29 44 | gpgme 1.15.1-6.el9 45 | grep 3.6-5.el9 46 | gzip 1.12-1.el9 47 | hostname 3.23-6.el9 48 | ima-evm-utils 1.5-3.el9 49 | iputils 20210202-11.el9 50 | json-c 0.14-11.el9 51 | keyutils 1.6.3-1.el9 52 | keyutils-libs 1.6.3-1.el9 53 | kmod-libs 28-10.el9 54 | krb5-libs 1.21.1-6.el9 55 | less 590-5.el9 56 | libacl 2.3.1-4.el9 57 | libarchive 3.5.3-4.el9 58 | libassuan 2.5.5-3.el9 59 | libattr 2.5.1-3.el9 60 | libblkid 2.37.4-21.el9 61 | libcap 2.48-9.el9_2 62 | libcap-ng 0.8.2-7.el9 63 | libcom_err 1.46.5-7.el9 64 | libcomps 0.1.18-1.el9 65 | libcurl-minimal 7.76.1-31.el9 66 | libdb 5.3.28-55.el9 67 | libdnf 0.69.0-13.el9.alma.1 68 | libeconf 0.4.1-4.el9 69 | libevent 2.1.12-8.el9_4 70 | libfdisk 2.37.4-21.el9 71 | libffi 3.4.2-8.el9 72 | libgcc 11.5.0-5.el9_5.alma.1 73 | libgcrypt 1.10.0-11.el9 74 | libgomp 11.5.0-5.el9_5.alma.1 75 | libgpg-error 1.42-5.el9 76 | libidn2 2.3.0-7.el9 77 | libksba 1.5.1-7.el9 78 | libmodulemd 2.13.0-2.el9 79 | libmount 2.37.4-21.el9 80 | libnghttp2 1.43.0-6.el9 81 | libpwquality 1.4.4-8.el9 82 | librepo 1.14.5-2.el9 83 | libreport-filesystem 2.15.2-6.el9.alma 84 | libseccomp 2.5.2-2.el9 85 | libselinux 3.6-3.el9 86 | libsemanage 3.6-5.el9_6 87 | libsepol 3.6-2.el9 88 | libsigsegv 2.13-4.el9 89 | libsmartcols 2.37.4-21.el9 90 | libsolv 0.7.24-3.el9 91 | libstdc++ 11.5.0-5.el9_5.alma.1 92 | libtasn1 4.16.0-9.el9 93 | libtool-ltdl 2.4.6-46.el9 94 | libunistring 0.9.10-15.el9 95 | libutempter 1.2.1-6.el9 96 | libuuid 2.37.4-21.el9 97 | libverto 0.3.2-3.el9 98 | libxcrypt 4.4.18-3.el9 99 | libxml2 2.9.13-9.el9_6 100 | libyaml 0.2.5-7.el9 101 | libzstd 1.5.5-1.el9 102 | lua-libs 5.4.4-4.el9 103 | lz4-libs 1.9.3-5.el9 104 | mpfr 4.1.0-7.el9 105 | ncurses-base 6.2-10.20210508.el9 106 | ncurses-libs 6.2-10.20210508.el9 107 | nettle 3.10.1-1.el9 108 | npth 1.6-8.el9 109 | openldap 2.6.8-4.el9 110 | openssl 3.2.2-6.el9_5.1 111 | openssl-libs 3.2.2-6.el9_5.1 112 | p11-kit 0.25.3-3.el9_5 113 | p11-kit-trust 0.25.3-3.el9_5 114 | pam 1.5.1-23.el9 115 | pcre 8.44-4.el9 116 | pcre2 10.40-6.el9 117 | pcre2-syntax 10.40-6.el9 118 | popt 1.18-8.el9 119 | python3 3.9.21-2.el9 120 | python3-dnf 4.14.0-25.el9.alma.1 121 | python3-gpg 1.15.1-6.el9 122 | python3-hawkey 0.69.0-13.el9.alma.1 123 | python3-libcomps 0.1.18-1.el9 124 | python3-libdnf 0.69.0-13.el9.alma.1 125 | python3-libs 3.9.21-2.el9 126 | python3-pip-wheel 21.3.1-1.el9 127 | python3-rpm 4.16.1.3-37.el9 128 | python3-setuptools-wheel 53.0.0-13.el9 129 | readline 8.1-4.el9 130 | rootfiles 8.1-34.el9 131 | rpm 4.16.1.3-37.el9 132 | rpm-build-libs 4.16.1.3-37.el9 133 | rpm-libs 4.16.1.3-37.el9 134 | rpm-sign-libs 4.16.1.3-37.el9 135 | sed 4.8-9.el9 136 | setup 2.13.7-10.el9 137 | shadow-utils 4.9-12.el9 138 | sqlite-libs 3.34.1-7.el9_3 139 | systemd 252-51.el9.alma.1 140 | systemd-libs 252-51.el9.alma.1 141 | systemd-pam 252-51.el9.alma.1 142 | systemd-rpm-macros 252-51.el9.alma.1 143 | tar 1.34-7.el9 144 | tpm2-tss 3.2.3-1.el9 145 | tzdata 2025b-1.el9 146 | util-linux 2.37.4-21.el9 147 | util-linux-core 2.37.4-21.el9 148 | vim-minimal 8.2.2637-22.el9_6 149 | xz 5.2.5-8.el9_0 150 | xz-libs 5.2.5-8.el9_0 151 | yum 4.14.0-25.el9.alma.1 152 | zlib 1.2.11-40.el9 153 | -------------------------------------------------------------------------------- /el9/packages-info/x86_64-runtime-base: -------------------------------------------------------------------------------- 1 | acl 2.3.1-4.el9 2 | almalinux-gpg-keys 9.6-1.el9 3 | almalinux-release 9.6-1.el9 4 | almalinux-repos 9.6-1.el9 5 | alternatives 1.24-2.el9 6 | attr 2.5.1-3.el9 7 | audit-libs 3.1.5-4.el9 8 | basesystem 11-13.el9 9 | bash 5.1.8-9.el9 10 | binutils 2.35.2-63.el9 11 | binutils-gold 2.35.2-63.el9 12 | bzip2-libs 1.0.8-10.el9_5 13 | ca-certificates 2024.2.69_v8.0.303-91.4.el9_4 14 | coreutils-single 8.32-39.el9 15 | cracklib 2.9.6-27.el9 16 | cracklib-dicts 2.9.6-27.el9 17 | crypto-policies 20250128-1.git5269e22.el9 18 | crypto-policies-scripts 20250128-1.git5269e22.el9 19 | curl-minimal 7.76.1-31.el9 20 | cyrus-sasl-lib 2.1.27-21.el9 21 | dbus 1.12.20-8.el9 22 | dbus-broker 28-7.el9 23 | dbus-common 1.12.20-8.el9 24 | dnf 4.14.0-25.el9.alma.1 25 | dnf-data 4.14.0-25.el9.alma.1 26 | elfutils-debuginfod-client 0.192-5.el9 27 | elfutils-default-yama-scope 0.192-5.el9 28 | elfutils-libelf 0.192-5.el9 29 | elfutils-libs 0.192-5.el9 30 | expat 2.5.0-5.el9_6 31 | file-libs 5.39-16.el9 32 | filesystem 3.16-5.el9 33 | findutils 4.8.0-7.el9 34 | gawk 5.1.0-6.el9 35 | gdbm-libs 1.23-1.el9 36 | glib2 2.68.4-16.el9 37 | glibc 2.34-168.el9_6.14.alma.1 38 | glibc-common 2.34-168.el9_6.14.alma.1 39 | glibc-minimal-langpack 2.34-168.el9_6.14.alma.1 40 | gmp 6.2.0-13.el9 41 | gnupg2 2.3.3-4.el9 42 | gnutls 3.8.3-6.el9 43 | gpg-pubkey b86b3716-61e69f29 44 | gpgme 1.15.1-6.el9 45 | grep 3.6-5.el9 46 | gzip 1.12-1.el9 47 | hostname 3.23-6.el9 48 | ima-evm-utils 1.5-3.el9 49 | iputils 20210202-11.el9 50 | json-c 0.14-11.el9 51 | keyutils 1.6.3-1.el9 52 | keyutils-libs 1.6.3-1.el9 53 | kmod-libs 28-10.el9 54 | krb5-libs 1.21.1-6.el9 55 | less 590-5.el9 56 | libacl 2.3.1-4.el9 57 | libarchive 3.5.3-4.el9 58 | libassuan 2.5.5-3.el9 59 | libattr 2.5.1-3.el9 60 | libblkid 2.37.4-21.el9 61 | libcap 2.48-9.el9_2 62 | libcap-ng 0.8.2-7.el9 63 | libcom_err 1.46.5-7.el9 64 | libcomps 0.1.18-1.el9 65 | libcurl-minimal 7.76.1-31.el9 66 | libdb 5.3.28-55.el9 67 | libdnf 0.69.0-13.el9.alma.1 68 | libeconf 0.4.1-4.el9 69 | libevent 2.1.12-8.el9_4 70 | libfdisk 2.37.4-21.el9 71 | libffi 3.4.2-8.el9 72 | libgcc 11.5.0-5.el9_5.alma.1 73 | libgcrypt 1.10.0-11.el9 74 | libgomp 11.5.0-5.el9_5.alma.1 75 | libgpg-error 1.42-5.el9 76 | libidn2 2.3.0-7.el9 77 | libksba 1.5.1-7.el9 78 | libmodulemd 2.13.0-2.el9 79 | libmount 2.37.4-21.el9 80 | libnghttp2 1.43.0-6.el9 81 | libpwquality 1.4.4-8.el9 82 | librepo 1.14.5-2.el9 83 | libreport-filesystem 2.15.2-6.el9.alma 84 | libseccomp 2.5.2-2.el9 85 | libselinux 3.6-3.el9 86 | libsemanage 3.6-5.el9_6 87 | libsepol 3.6-2.el9 88 | libsigsegv 2.13-4.el9 89 | libsmartcols 2.37.4-21.el9 90 | libsolv 0.7.24-3.el9 91 | libstdc++ 11.5.0-5.el9_5.alma.1 92 | libtasn1 4.16.0-9.el9 93 | libtool-ltdl 2.4.6-46.el9 94 | libunistring 0.9.10-15.el9 95 | libutempter 1.2.1-6.el9 96 | libuuid 2.37.4-21.el9 97 | libverto 0.3.2-3.el9 98 | libxcrypt 4.4.18-3.el9 99 | libxml2 2.9.13-9.el9_6 100 | libyaml 0.2.5-7.el9 101 | libzstd 1.5.5-1.el9 102 | lua-libs 5.4.4-4.el9 103 | lz4-libs 1.9.3-5.el9 104 | mpfr 4.1.0-7.el9 105 | ncurses-base 6.2-10.20210508.el9 106 | ncurses-libs 6.2-10.20210508.el9 107 | nettle 3.10.1-1.el9 108 | npth 1.6-8.el9 109 | openldap 2.6.8-4.el9 110 | openssl 3.2.2-6.el9_5.1 111 | openssl-libs 3.2.2-6.el9_5.1 112 | p11-kit 0.25.3-3.el9_5 113 | p11-kit-trust 0.25.3-3.el9_5 114 | pam 1.5.1-23.el9 115 | pcre 8.44-4.el9 116 | pcre2 10.40-6.el9 117 | pcre2-syntax 10.40-6.el9 118 | popt 1.18-8.el9 119 | python3 3.9.21-2.el9 120 | python3-dnf 4.14.0-25.el9.alma.1 121 | python3-gpg 1.15.1-6.el9 122 | python3-hawkey 0.69.0-13.el9.alma.1 123 | python3-libcomps 0.1.18-1.el9 124 | python3-libdnf 0.69.0-13.el9.alma.1 125 | python3-libs 3.9.21-2.el9 126 | python3-pip-wheel 21.3.1-1.el9 127 | python3-rpm 4.16.1.3-37.el9 128 | python3-setuptools-wheel 53.0.0-13.el9 129 | readline 8.1-4.el9 130 | rootfiles 8.1-34.el9 131 | rpm 4.16.1.3-37.el9 132 | rpm-build-libs 4.16.1.3-37.el9 133 | rpm-libs 4.16.1.3-37.el9 134 | rpm-sign-libs 4.16.1.3-37.el9 135 | sed 4.8-9.el9 136 | setup 2.13.7-10.el9 137 | shadow-utils 4.9-12.el9 138 | sqlite-libs 3.34.1-7.el9_3 139 | systemd 252-51.el9.alma.1 140 | systemd-libs 252-51.el9.alma.1 141 | systemd-pam 252-51.el9.alma.1 142 | systemd-rpm-macros 252-51.el9.alma.1 143 | tar 1.34-7.el9 144 | tpm2-tss 3.2.3-1.el9 145 | tzdata 2025b-1.el9 146 | util-linux 2.37.4-21.el9 147 | util-linux-core 2.37.4-21.el9 148 | vim-minimal 8.2.2637-22.el9_6 149 | xz 5.2.5-8.el9_0 150 | xz-libs 5.2.5-8.el9_0 151 | yum 4.14.0-25.el9.alma.1 152 | zlib 1.2.11-40.el9 153 | -------------------------------------------------------------------------------- /fc39/Changelog.md: -------------------------------------------------------------------------------- 1 | # Changelog fc39 2 | 3 | ## 02-07-2024 4 | * Initial files to build fc39 container 5 | * Used podman on riscv64 node 6 | ``` 7 | cd cms-docker/fc39 8 | #Build cmssw/fc39:riscv64 9 | podman build --cgroup-manager=cgroupfs --network host --pull -f Dockerfile -t docker.io/cmssw/fc39:riscv64 .. 10 | #Push cmssw/fc39:riscv64 11 | podman --cgroup-manager=cgroupfs push --authfile ./auth.json docker.io/cmssw/fc39:riscv64 12 | #Build bootstrap container 13 | podman build --cgroup-manager=cgroupfs --network host --pull -f Dockerfile.bootstrap -t docker.io/cmssw/fc39:riscv64-bootstrap . 14 | podman --cgroup-manager=cgroupfs push --authfile ./auth.json docker.io/cmssw/fc39:riscv64-bootstrap 15 | ``` 16 | -------------------------------------------------------------------------------- /fc39/Dockerfile: -------------------------------------------------------------------------------- 1 | FROM docker.io/fedorariscv/base:39 2 | LABEL maintainer="CMS Build" 3 | LABEL name="CMS Worker Node on FC - Runtime" 4 | 5 | RUN rm -f /tmp/pkgs.txt &&\ 6 | for pkg in bash tcsh tar glibc glibc-devel libgcc libxcrypt openssl-libs libcom_err krb5-libs ncurses-libs \ 7 | libX11 readline tcl tk mesa-libGLU libglvnd-glx libglvnd-opengl libXext libXft libXpm libaio libnsl sssd-client \ 8 | rpm-build nspr rsync wget openssl-devel ncurses-devel \ 9 | libX11-devel readline-devel tcl-devel tk-devel mesa-libGLU-devel libXext-devel libXft-devel \ 10 | libXpm-devel libtool libdrm \ 11 | gcc-c++ libXmu krb5-devel coreutils libcom_err-devel python3-cryptography jq \ 12 | man-db time bc strace xauth vim cmake python3 which procps-ng \ 13 | krb5-workstation environment-modules xdg-utils tmux \ 14 | voms-clients-cpp python3-requests python3-psutil python3-pip \ 15 | gfal2-util-scripts gfal2-all python3-gfal2-util xrootd-client openldap-compat myproxy texinfo \ 16 | perl perl-libs \ 17 | git nss java-17-openjdk-devel squid apptainer ; do \ 18 | dnf5 install -y $pkg || echo " $pkg " >> /tmp/pkgs.txt ;\ 19 | done ;\ 20 | [ -s /tmp/pkgs.txt ] && dnf5 install -y $(cat /tmp/pkgs.txt) &&\ 21 | rm -f /tmp/pkgs.txt &&\ 22 | echo fc39 > /etc/cmsos &&\ 23 | dnf5 clean all &&\ 24 | mkdir -p /cvmfs /afs /eos /etc/vomses /etc/grid-security /build /data /pool /opt/cms /etc/ssh &&\ 25 | mkdir -p /hdfs /mnt/hadoop /hadoop /cms /etc/cvmfs/SITECONF /lfs_roots /storage /scratch &&\ 26 | touch /etc/tnsnames.ora &&\ 27 | sed -i -e s'|^ *allow *setuid.*|allow setuid = no|;s|^ *enable *overlay.*|enable overlay = no|;s|^ *enable *underlay.*|enable underlay = yes|' /etc/apptainer/apptainer.conf 28 | 29 | ADD share/fix_ssh_config.sh /root/fix_ssh_config.sh 30 | RUN dnf5 install -y libgfortran openssl gcc-gfortran elfutils-libelf-devel gettext-devel libatomic && dnf5 clean all &&\ 31 | chmod +x /root/fix_ssh_config.sh &&\ 32 | /root/fix_ssh_config.sh /etc/ssh/ssh_config 33 | -------------------------------------------------------------------------------- /fc39/Dockerfile.bootstrap: -------------------------------------------------------------------------------- 1 | FROM docker.io/cmssw/fc39:riscv64 2 | RUN dnf5 install -y bzip2-devel file popt-devel nspr-devel nss-devel \ 3 | rpm-build autoconf automake libtool gettext-devel \ 4 | python3-devel cmake bison && \ 5 | dnf5 clean all 6 | -------------------------------------------------------------------------------- /init/Dockerfile: -------------------------------------------------------------------------------- 1 | FROM scratch 2 | LABEL cms-type="initialize repo" 3 | COPY helloworld helloworld 4 | -------------------------------------------------------------------------------- /init/helloworld: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cms-sw/cms-docker/166d2cde855e8d1d2e49f1802297d7fe2fb03bf1/init/helloworld -------------------------------------------------------------------------------- /rocky8/Dockerfile: -------------------------------------------------------------------------------- 1 | FROM @BASE_IMAGE_NAME@ 2 | 3 | RUN dnf install -y @DEFAULT_PACKAGES@ bash automake bzip2 bzip2-libs bzip2-devel \ 4 | file file-libs fontconfig freetype gcc-c++ git glibc krb5-libs libaio \ 5 | libcom_err libgomp libICE libidn \ 6 | libSM libX11 libX11-devel libxcrypt libXcursor libXext \ 7 | libXft libXi libXinerama \ 8 | libXmu libXpm libXpm-devel libXrandr libXrender \ 9 | java-1.8.0-openjdk-devel libtool m4 make \ 10 | ncurses ncurses-libs ncurses-devel nspr nss nss-util \ 11 | openssl openssl-devel openssl-libs \ 12 | perl perl-interpreter perl-libs \ 13 | perl-Carp perl-constant perl-Data-Dumper perl-DBI \ 14 | perl-Digest-MD5 perl-Encode perl-Env perl-Exporter perl-ExtUtils-Embed \ 15 | perl-File-Path perl-File-Temp perl-Getopt-Long perl-IO perl-libnet \ 16 | perl-Memoize perl-PathTools perl-Scalar-List-Utils perl-Socket perl-Storable \ 17 | perl-Term-ANSIColor perl-Test-Harness perl-Text-ParseWords perl-Thread-Queue \ 18 | perl-Time-HiRes perl-Time-Local perl-YAML \ 19 | patch popt python2 python3 readline rpm-build \ 20 | rsync tcl time tk wget which zlib \ 21 | bc tar zip unzip hostname nano procps-ng dnf-plugins-core python3-requests \ 22 | libnsl e2fsprogs e2fsprogs-libs libXext-devel libXft-devel \ 23 | libglvnd-opengl mesa-libGLU mesa-libGLU-devel nss-devel perl-CGI \ 24 | popt-devel readline-devel tcsh zsh tcl-devel tk-devel strace \ 25 | krb5-workstation python2-requests environment-modules &&\ 26 | dnf install -y epel-release &&\ 27 | dnf install -y @EPEL_PACKAGES@ voms-clients-cpp python2-psutil myproxy apptainer &&\ 28 | dnf update -y ca-certificates &&\ 29 | dnf config-manager --set-enabled powertools &&\ 30 | dnf install -y libstdc++-static &&\ 31 | ([ "@EXTRA_PACKAGES@" != "" ] && dnf -y install @EXTRA_PACKAGES@ || true) &&\ 32 | alternatives --set python `which python2` &&\ 33 | echo el8 > /etc/cmsos &&\ 34 | dnf clean all 35 | 36 | ADD share/krb5.conf /etc/krb5.conf 37 | ADD share/ca-bundle.crt /etc/pki/tls/certs/ca-bundle.crt 38 | ADD share/fix_ssh_config.sh /tmp/fix_ssh_config.sh 39 | RUN mkdir -p /cvmfs /afs /eos /etc/vomses /etc/grid-security /build /data /pool /opt/cms &&\ 40 | touch /etc/tnsnames.ora &&\ 41 | /tmp/fix_ssh_config.sh /etc/ssh/ssh_config && rm -f /tmp/fix_ssh_config.sh &&\ 42 | sed -i -e s'|^ *allow *setuid.*|allow setuid = no|;s|^ *enable *overlay.*|enable overlay = no|;s|^ *enable *underlay.*|enable underlay = yes|' /etc/apptainer/apptainer.conf 43 | -------------------------------------------------------------------------------- /rocky8/Dockerfile.bootstrap: -------------------------------------------------------------------------------- 1 | FROM @BASE_IMAGE_NAME@ 2 | RUN yum install -y bzip2-devel file popt-devel nspr-devel nss-devel \ 3 | rpm-build autoconf automake libtool gettext-devel && \ 4 | yum clean all 5 | -------------------------------------------------------------------------------- /rocky8/config.yaml: -------------------------------------------------------------------------------- 1 | push: true 2 | override: true 3 | delete_pattern: tmp-${group1}.*-(2[0-9]{7,}) 4 | expires_days: 7 5 | daily: d$${now.strftime("%Y%m%d")} 6 | architecture: ${group1} 7 | build_context: .. 8 | test: 9 | script: test-cmssw.sh 10 | node: singularity 11 | variables: 12 | CMS_COMPATIBLE_OS: el8 13 | DEFAULT_PACKAGES: coreutils-single 14 | EPEL_PACKAGES: 15 | groups: 16 | latest: 17 | alias: ${group1}-${daily} 18 | from: library/rockylinux:8 19 | groups: 20 | x86_64: 21 | variables: 22 | EXTRA_PACKAGES: doxygen 23 | tags: 24 | ${group1}: 25 | aarch64: 26 | tags: 27 | ${group1}: 28 | -------------------------------------------------------------------------------- /rocky8/packages-info/aarch64-base: -------------------------------------------------------------------------------- 1 | # Build date: 2024-05-31 2 | acl 2.2.53-1.el8.1 3 | audit-libs 3.0.7-5.el8 4 | basesystem 11-5.el8 5 | bash 4.4.20-4.el8_6 6 | binutils 2.30-123.el8 7 | bzip2-libs 1.0.6-26.el8 8 | ca-certificates 2023.2.60_v7.0.306-80.0.el8_8 9 | chkconfig 1.19.2-1.el8 10 | coreutils-single 8.30-15.el8 11 | cracklib 2.9.6-15.el8 12 | cracklib-dicts 2.9.6-15.el8 13 | crypto-policies 20230731-1.git3177e06.el8 14 | cryptsetup-libs 2.3.7-7.el8 15 | curl 7.61.1-33.el8 16 | cyrus-sasl-lib 2.1.27-6.el8_5 17 | dbus 1.12.8-26.el8 18 | dbus-common 1.12.8-26.el8 19 | dbus-daemon 1.12.8-26.el8 20 | dbus-libs 1.12.8-26.el8 21 | dbus-tools 1.12.8-26.el8 22 | device-mapper 1.02.181-13.el8_9 23 | device-mapper-libs 1.02.181-13.el8_9 24 | dnf 4.7.0-19.el8 25 | dnf-data 4.7.0-19.el8 26 | elfutils-default-yama-scope 0.189-3.el8 27 | elfutils-libelf 0.189-3.el8 28 | elfutils-libs 0.189-3.el8 29 | expat 2.2.5-11.el8 30 | file-libs 5.33-25.el8 31 | filesystem 3.8-6.el8 32 | gawk 4.2.1-4.el8 33 | gdbm 1.18-2.el8 34 | gdbm-libs 1.18-2.el8 35 | glib2 2.56.4-161.el8 36 | glibc 2.28-236.el8_9.7 37 | glibc-common 2.28-236.el8_9.7 38 | glibc-minimal-langpack 2.28-236.el8_9.7 39 | gmp 6.1.2-10.el8 40 | gnupg2 2.2.20-3.el8_6 41 | gnutls 3.6.16-7.el8 42 | gpgme 1.13.1-11.el8 43 | grep 3.1-6.el8 44 | gzip 1.9-13.el8_5 45 | hostname 3.20-6.el8 46 | ima-evm-utils 1.3.2-12.el8 47 | info 6.5-7.el8 48 | iputils 20180629-11.el8 49 | json-c 0.13.1-3.el8 50 | keyutils-libs 1.5.10-9.el8 51 | kmod-libs 25-19.el8 52 | krb5-libs 1.18.2-26.el8 53 | langpacks-en 1.0-12.el8 54 | less 530-1.el8 55 | libacl 2.2.53-1.el8.1 56 | libarchive 3.3.3-5.el8 57 | libassuan 2.5.1-3.el8 58 | libattr 2.4.48-3.el8 59 | libblkid 2.32.1-43.el8 60 | libcap 2.48-5.el8_8 61 | libcap-ng 0.7.11-1.el8 62 | libcom_err 1.45.6-5.el8 63 | libcomps 0.1.18-1.el8 64 | libcurl-minimal 7.61.1-33.el8 65 | libdb 5.3.28-42.el8_4 66 | libdb-utils 5.3.28-42.el8_4 67 | libdnf 0.63.0-17.el8_9 68 | libfdisk 2.32.1-43.el8 69 | libffi 3.1-24.el8 70 | libgcc 8.5.0-20.el8 71 | libgcrypt 1.8.5-7.el8_6 72 | libgpg-error 1.31-1.el8 73 | libidn2 2.2.0-1.el8 74 | libksba 1.3.5-9.el8_7 75 | libmodulemd 2.13.0-1.el8 76 | libmount 2.32.1-43.el8 77 | libnghttp2 1.33.0-5.el8_8 78 | libnsl2 1.2.0-2.20180605git4a062cf.el8 79 | libpwquality 1.4.4-6.el8 80 | librepo 1.14.2-4.el8 81 | libreport-filesystem 2.9.5-15.el8.rocky.6.3 82 | libseccomp 2.5.2-1.el8 83 | libselinux 2.9-8.el8 84 | libsemanage 2.9-9.el8_6 85 | libsepol 2.9-3.el8 86 | libsigsegv 2.11-5.el8 87 | libsmartcols 2.32.1-43.el8 88 | libsolv 0.7.20-6.el8 89 | libstdc++ 8.5.0-20.el8 90 | libtasn1 4.13-4.el8_7 91 | libtirpc 1.1.4-8.el8 92 | libunistring 0.9.9-3.el8 93 | libusbx 1.0.23-4.el8 94 | libutempter 1.1.6-14.el8 95 | libuuid 2.32.1-43.el8 96 | libverto 0.3.2-2.el8 97 | libxcrypt 4.1.1-6.el8 98 | libxml2 2.9.7-16.el8_8.1 99 | libyaml 0.1.7-5.el8 100 | libzstd 1.4.4-1.el8 101 | lua-libs 5.3.4-12.el8 102 | lz4-libs 1.8.3-3.el8_4 103 | mpfr 3.1.6-1.el8 104 | ncurses-base 6.1-10.20180224.el8 105 | ncurses-libs 6.1-10.20180224.el8 106 | nettle 3.4.1-7.el8 107 | npth 1.5-4.el8 108 | openldap 2.4.46-18.el8 109 | openssl-libs 1.1.1k-9.el8_7 110 | p11-kit 0.23.22-1.el8 111 | p11-kit-trust 0.23.22-1.el8 112 | pam 1.3.1-27.el8 113 | pcre 8.42-6.el8 114 | pcre2 10.32-3.el8_6 115 | platform-python 3.6.8-56.el8_9.rocky.0 116 | platform-python-setuptools 39.2.0-7.el8 117 | popt 1.18-1.el8 118 | python3-dnf 4.7.0-19.el8 119 | python3-gpg 1.13.1-11.el8 120 | python3-hawkey 0.63.0-17.el8_9 121 | python3-libcomps 0.1.18-1.el8 122 | python3-libdnf 0.63.0-17.el8_9 123 | python3-libs 3.6.8-56.el8_9.rocky.0 124 | python3-pip-wheel 9.0.3-23.el8.rocky.0 125 | python3-rpm 4.14.3-26.el8 126 | python3-setuptools-wheel 39.2.0-7.el8 127 | readline 7.0-10.el8 128 | rocky-gpg-keys 8.9-1.6.el8 129 | rocky-release 8.9-1.6.el8 130 | rocky-repos 8.9-1.6.el8 131 | rootfiles 8.1-22.el8 132 | rpm 4.14.3-26.el8 133 | rpm-build-libs 4.14.3-26.el8 134 | rpm-libs 4.14.3-26.el8 135 | sed 4.5-5.el8 136 | setup 2.12.2-9.el8 137 | shadow-utils 4.6-19.el8 138 | sqlite-libs 3.26.0-18.el8_8 139 | systemd 239-78.el8 140 | systemd-libs 239-78.el8 141 | systemd-pam 239-78.el8 142 | tar 1.30-9.el8 143 | tpm2-tss 2.3.2-5.el8 144 | tzdata 2023c-2.el8 145 | util-linux 2.32.1-43.el8 146 | vim-minimal 8.0.1763-19.el8_6.4 147 | xz-libs 5.2.4-4.el8_6 148 | yum 4.7.0-19.el8 149 | zlib 1.2.11-25.el8 150 | -------------------------------------------------------------------------------- /rocky8/packages-info/x86_64-base: -------------------------------------------------------------------------------- 1 | # Build date: 2024-05-30 2 | acl 2.2.53-1.el8.1 3 | audit-libs 3.0.7-5.el8 4 | basesystem 11-5.el8 5 | bash 4.4.20-4.el8_6 6 | binutils 2.30-123.el8 7 | bzip2-libs 1.0.6-26.el8 8 | ca-certificates 2023.2.60_v7.0.306-80.0.el8_8 9 | chkconfig 1.19.2-1.el8 10 | coreutils-single 8.30-15.el8 11 | cracklib 2.9.6-15.el8 12 | cracklib-dicts 2.9.6-15.el8 13 | crypto-policies 20230731-1.git3177e06.el8 14 | cryptsetup-libs 2.3.7-7.el8 15 | curl 7.61.1-33.el8 16 | cyrus-sasl-lib 2.1.27-6.el8_5 17 | dbus 1.12.8-26.el8 18 | dbus-common 1.12.8-26.el8 19 | dbus-daemon 1.12.8-26.el8 20 | dbus-libs 1.12.8-26.el8 21 | dbus-tools 1.12.8-26.el8 22 | device-mapper 1.02.181-13.el8_9 23 | device-mapper-libs 1.02.181-13.el8_9 24 | dnf 4.7.0-19.el8 25 | dnf-data 4.7.0-19.el8 26 | elfutils-default-yama-scope 0.189-3.el8 27 | elfutils-libelf 0.189-3.el8 28 | elfutils-libs 0.189-3.el8 29 | expat 2.2.5-11.el8 30 | file-libs 5.33-25.el8 31 | filesystem 3.8-6.el8 32 | gawk 4.2.1-4.el8 33 | gdbm 1.18-2.el8 34 | gdbm-libs 1.18-2.el8 35 | glib2 2.56.4-161.el8 36 | glibc 2.28-236.el8_9.7 37 | glibc-common 2.28-236.el8_9.7 38 | glibc-minimal-langpack 2.28-236.el8_9.7 39 | gmp 6.1.2-10.el8 40 | gnupg2 2.2.20-3.el8_6 41 | gnutls 3.6.16-7.el8 42 | gpgme 1.13.1-11.el8 43 | grep 3.1-6.el8 44 | gzip 1.9-13.el8_5 45 | hostname 3.20-6.el8 46 | ima-evm-utils 1.3.2-12.el8 47 | info 6.5-7.el8 48 | iputils 20180629-11.el8 49 | json-c 0.13.1-3.el8 50 | keyutils-libs 1.5.10-9.el8 51 | kmod-libs 25-19.el8 52 | krb5-libs 1.18.2-26.el8 53 | langpacks-en 1.0-12.el8 54 | less 530-1.el8 55 | libacl 2.2.53-1.el8.1 56 | libarchive 3.3.3-5.el8 57 | libassuan 2.5.1-3.el8 58 | libattr 2.4.48-3.el8 59 | libblkid 2.32.1-43.el8 60 | libcap 2.48-5.el8_8 61 | libcap-ng 0.7.11-1.el8 62 | libcom_err 1.45.6-5.el8 63 | libcomps 0.1.18-1.el8 64 | libcurl-minimal 7.61.1-33.el8 65 | libdb 5.3.28-42.el8_4 66 | libdb-utils 5.3.28-42.el8_4 67 | libdnf 0.63.0-17.el8_9 68 | libfdisk 2.32.1-43.el8 69 | libffi 3.1-24.el8 70 | libgcc 8.5.0-20.el8 71 | libgcrypt 1.8.5-7.el8_6 72 | libgpg-error 1.31-1.el8 73 | libidn2 2.2.0-1.el8 74 | libksba 1.3.5-9.el8_7 75 | libmodulemd 2.13.0-1.el8 76 | libmount 2.32.1-43.el8 77 | libnghttp2 1.33.0-5.el8_8 78 | libnsl2 1.2.0-2.20180605git4a062cf.el8 79 | libpwquality 1.4.4-6.el8 80 | librepo 1.14.2-4.el8 81 | libreport-filesystem 2.9.5-15.el8.rocky.6.3 82 | libseccomp 2.5.2-1.el8 83 | libselinux 2.9-8.el8 84 | libsemanage 2.9-9.el8_6 85 | libsepol 2.9-3.el8 86 | libsigsegv 2.11-5.el8 87 | libsmartcols 2.32.1-43.el8 88 | libsolv 0.7.20-6.el8 89 | libstdc++ 8.5.0-20.el8 90 | libtasn1 4.13-4.el8_7 91 | libtirpc 1.1.4-8.el8 92 | libunistring 0.9.9-3.el8 93 | libusbx 1.0.23-4.el8 94 | libutempter 1.1.6-14.el8 95 | libuuid 2.32.1-43.el8 96 | libverto 0.3.2-2.el8 97 | libxcrypt 4.1.1-6.el8 98 | libxml2 2.9.7-16.el8_8.1 99 | libyaml 0.1.7-5.el8 100 | libzstd 1.4.4-1.el8 101 | lua-libs 5.3.4-12.el8 102 | lz4-libs 1.8.3-3.el8_4 103 | mpfr 3.1.6-1.el8 104 | ncurses-base 6.1-10.20180224.el8 105 | ncurses-libs 6.1-10.20180224.el8 106 | nettle 3.4.1-7.el8 107 | npth 1.5-4.el8 108 | openldap 2.4.46-18.el8 109 | openssl-libs 1.1.1k-9.el8_7 110 | p11-kit 0.23.22-1.el8 111 | p11-kit-trust 0.23.22-1.el8 112 | pam 1.3.1-27.el8 113 | pcre 8.42-6.el8 114 | pcre2 10.32-3.el8_6 115 | platform-python 3.6.8-56.el8_9.rocky.0 116 | platform-python-setuptools 39.2.0-7.el8 117 | popt 1.18-1.el8 118 | python3-dnf 4.7.0-19.el8 119 | python3-gpg 1.13.1-11.el8 120 | python3-hawkey 0.63.0-17.el8_9 121 | python3-libcomps 0.1.18-1.el8 122 | python3-libdnf 0.63.0-17.el8_9 123 | python3-libs 3.6.8-56.el8_9.rocky.0 124 | python3-pip-wheel 9.0.3-23.el8.rocky.0 125 | python3-rpm 4.14.3-26.el8 126 | python3-setuptools-wheel 39.2.0-7.el8 127 | readline 7.0-10.el8 128 | rocky-gpg-keys 8.9-1.6.el8 129 | rocky-release 8.9-1.6.el8 130 | rocky-repos 8.9-1.6.el8 131 | rootfiles 8.1-22.el8 132 | rpm 4.14.3-26.el8 133 | rpm-build-libs 4.14.3-26.el8 134 | rpm-libs 4.14.3-26.el8 135 | sed 4.5-5.el8 136 | setup 2.12.2-9.el8 137 | shadow-utils 4.6-19.el8 138 | sqlite-libs 3.26.0-18.el8_8 139 | systemd 239-78.el8 140 | systemd-libs 239-78.el8 141 | systemd-pam 239-78.el8 142 | tar 1.30-9.el8 143 | tpm2-tss 2.3.2-5.el8 144 | tzdata 2023c-2.el8 145 | util-linux 2.32.1-43.el8 146 | vim-minimal 8.0.1763-19.el8_6.4 147 | xz-libs 5.2.4-4.el8_6 148 | yum 4.7.0-19.el8 149 | zlib 1.2.11-25.el8 150 | -------------------------------------------------------------------------------- /share/RPM-GPG-KEY-kojiv2: -------------------------------------------------------------------------------- 1 | -----BEGIN PGP PUBLIC KEY BLOCK----- 2 | Version: GnuPG v2.0.14 (GNU/Linux) 3 | 4 | mQGiBFVd2qERBAC4YbDNYf7cE9foTZlvpYNAvHwPsZkIDra7Pi6ugYlrfiEYTjTl 5 | QkYYZiZedGEXKQ7fH84YfaOnlm6Uaeyllan+PD8JrgRy7eyvl2sRNdC+2LYomg1q 6 | MGF8D9hptusK0g/RStIq3QmdX3FfJWCQpkOHsyzmbV4In4UWI/iu7EvYSwCgljsO 7 | 0epMK/zSDCdS07nzZsEcba0D+wcSjYwEeboNy12cRgP1gVPzRPeaDKv0iSTMzvyY 8 | zNrSelytOtoIBtdlOn/R7h6qTAPdszMRYrTpG25Wz6XR2qrwz6dN/sbZBxCWwGXl 9 | elJM6oaNU9VNP3bFeqxHtw6n+ZuCl0B9huOJgAMXVtN/TVjZmFBXq/8KFpMScIT/ 10 | FpTRA/9eFfyiJ4itF5mjTgxh19IHcJdDXEZfNxr5t12acug1hI9oSRGQWfICgRuI 11 | lX2MJe+vEiMCCcLEPDlVT1ctHWOePRFrsTJVpIK2VDT2EL8Y6g0e/HDu9XtXf2hk 12 | y9GOzAOQlzltm/DawaYT0cGEQ/rfrq52r4WlnSz3ejpsaX9vu7RTQ0VSTiBLb2pp 13 | IFN1cHBvcnQgdjIgKFJQTSBzaWduaW5nIGtleSBmb3IgQ0VSTiBLb2ppIFN1cHBv 14 | cnQpIDxrb2ppLnN1cHBvcnRAY2Vybi5jaD6IYgQTEQIAIgUCVV3aoQIbAwYLCQgH 15 | AwIGFQgCCQoLBBYCAwECHgECF4AACgkQO5kDqi9Pn25TAQCeJc1cnaGWb5GG6yq0 16 | /ENK+7U8cgMAnRHoMIWNMisWMo+DzERjTukEUeZCuQENBFVd2qEQBADswsnc+h5H 17 | vmT2Xlpe8Uig9tof/GIvbKdN+Is+JYH8xJknGpkxLfutFuQJDYAbWo3KjzFb19v+ 18 | g1jvKlC9L5ZYdWCQCbCsU6G2jSwWEYGhHkj/byUkXQj98guSjIzLl+HaWZVjlgDF 19 | 4LkV37lIAQbkmdZzZfndqJqAwBZzRLXPSwADBQP/ZHS1DQmZn9duIbx+N8coRfdv 20 | YIJdPYIdjTqHPpoJx/J3sazz8gJdESyNtcj0Os2ZcwfBYWkX9u3v6C3kHmuW5umk 21 | 6X4qn00CS2iyR1S07JLeSrVujNn9w+eGYTaxx/xDhevZqOXW+XskBOItcsRcqpME 22 | 1Ea14AKzSHbTVLvdA0aISQQYEQIACQUCVV3aoQIbDAAKCRA7mQOqL0+fbs92AJ9w 23 | UrFuIvEpytNmfDtYlhTPFF0rbACfc3r491D5Wywg7E2POn15eeU284s= 24 | =nVin 25 | -----END PGP PUBLIC KEY BLOCK----- 26 | -------------------------------------------------------------------------------- /share/el8-CERN.repo: -------------------------------------------------------------------------------- 1 | [CERN] 2 | name=AlmaLinux-8 - CERN [HEAD] 3 | baseurl=http://linuxsoft.cern.ch/cern/alma/8/CERN/x86_64 4 | enabled=1 5 | gpgcheck=1 6 | gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-kojiv2 7 | exclude=puppet-agent 8 | priority=4 9 | -------------------------------------------------------------------------------- /share/el9-CERN.repo: -------------------------------------------------------------------------------- 1 | [CERN] 2 | name=AlmaLinux-9 - CERN [HEAD] 3 | baseurl=http://linuxsoft.cern.ch/cern/alma/9/CERN/x86_64 4 | enabled=1 5 | gpgcheck=1 6 | gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-kojiv2 7 | exclude=puppet-agent 8 | priority=4 9 | -------------------------------------------------------------------------------- /share/fix_ssh_config.sh: -------------------------------------------------------------------------------- 1 | #!/bin/bash 2 | function fix_ssh_config() 3 | { 4 | cat "$1" | while read line ; do 5 | if [ $(echo "$line" | grep '^\s*Include\s\s*' | wc -l) -eq 0 ] ; then 6 | echo "$line" 7 | else 8 | echo "#${line}" 9 | cfgs=$(echo "$line" | sed 's|^\s*Include\s\s*||') 10 | for cfg in $(ls $cfgs 2>/dev/null) ; do 11 | echo "### Start of $cfg ###" 12 | fix_ssh_config "$cfg" 13 | echo "### End of $cfg ###" 14 | done 15 | fi 16 | done 17 | } 18 | 19 | fix_ssh_config $1 > $1.tmp 20 | mv $1.tmp $1 21 | -------------------------------------------------------------------------------- /share/krb5.conf: -------------------------------------------------------------------------------- 1 | ; AD : This Kerberos configuration is for CERN's Active Directory realm 2 | ; The line above this is magic and is used by cern-config-keytab. Do 3 | ; not remove. 4 | 5 | ; Installed with puppet from a series of 6 | ; template fragments. 7 | 8 | ; /etc/krb5.conf 9 | 10 | [libdefaults] 11 | default_realm = CERN.CH 12 | ticket_lifetime = 25h 13 | renew_lifetime = 120h 14 | forwardable = true 15 | proxiable = true 16 | default_tkt_enctypes = arcfour-hmac-md5 aes256-cts aes128-cts des3-cbc-sha1 des-cbc-md5 des-cbc-crc 17 | chpw_prompt = true 18 | 19 | 20 | [appdefaults] 21 | pam = { 22 | external = true 23 | krb4_convert = false 24 | krb4_convert_524 = false 25 | krb4_use_as_req = false 26 | } 27 | 28 | [domain_realm] 29 | .cern.ch = CERN.CH 30 | .fnal.gov = FNAL.GOV 31 | .hep.man.ac.uk = HEP.MAN.AC.UK 32 | .in2p3.fr = IN2P3.FR 33 | # No default domain for KFKI.HU specified. 34 | 35 | [realms] 36 | # Start of puppet output for CERN.CH 37 | CERN.CH = { 38 | default_domain = cern.ch 39 | kpasswd_server = cerndc.cern.ch 40 | admin_server = cerndc.cern.ch 41 | kdc = cerndc.cern.ch 42 | v4_name_convert = { 43 | host = { 44 | rcmd = host 45 | } 46 | } 47 | } 48 | 49 | 50 | # Start of puppet output for FNAL.GOV 51 | FNAL.GOV = { 52 | default_domain = fnal.gov 53 | admin_server = krb-fnal-admin.fnal.gov 54 | kdc = krb-fnal-1.fnal.gov:88 55 | kdc = krb-fnal-2.fnal.gov:88 56 | kdc = krb-fnal-3.fnal.gov:88 57 | } 58 | 59 | 60 | # Start of puppet output for HEP.MAN.AC.UK 61 | HEP.MAN.AC.UK = { 62 | default_domain = hep.man.ac.uk 63 | kpasswd_server = afs4.hep.man.ac.uk 64 | admin_server = afs4.hep.man.ac.uk 65 | kdc = afs1.hep.man.ac.uk 66 | kdc = afs2.hep.man.ac.uk 67 | kdc = afs3.hep.man.ac.uk 68 | kdc = afs4.hep.man.ac.uk 69 | } 70 | 71 | 72 | # Start of puppet output for IN2P3.FR 73 | IN2P3.FR = { 74 | default_domain = in2p3.fr 75 | kpasswd_server = kerberos-admin.in2p3.fr 76 | admin_server = kerberos-admin.in2p3.fr 77 | kdc = kerberos-1.in2p3.fr 78 | kdc = kerberos-2.in2p3.fr 79 | kdc = kerberos-3.in2p3.fr 80 | } 81 | 82 | 83 | # Start of puppet output for KFKI.HU 84 | KFKI.HU = { 85 | admin_server = kerberos.kfki.hu 86 | kdc = kerberos.hkfi.hu 87 | } 88 | 89 | 90 | -------------------------------------------------------------------------------- /slc5/Dockerfile: -------------------------------------------------------------------------------- 1 | FROM cern/slc5-base 2 | 3 | RUN yum update -y && yum install -y libXft-devel libX11-devel libXpm-devel libXext-devel mesa-libGLU-devel \ 4 | libXmu libXpm libSM libXft libXext \ 5 | wget git \ 6 | glibc-devel \ 7 | tcsh zsh tcl \ 8 | perl-libwww-perl \ 9 | compat-libstdc++-33 zip \ 10 | voms-clients-cpp python-simplejson \ 11 | tk mesa-libGLU mesa-libGL \ 12 | krb5-devel cern-wrappers krb5-workstation \ 13 | time strace sudo && \ 14 | yum clean -y all 15 | 16 | RUN wget http://repository.egi.eu/sw/production/cas/1/current/repo-files/EGI-trustanchors.repo && \ 17 | mv EGI-trustanchors.repo /etc/yum.repos.d/ && \ 18 | wget http://repository.egi.eu/sw/production/cas/1/GPG-KEY-EUGridPMA-RPM-3 && \ 19 | mv GPG-KEY-EUGridPMA-RPM-3 /etc/pki/rpm-gpg/ && \ 20 | wget http://linuxsoft.cern.ch/wlcg/wlcg-sl5.repo && \ 21 | mv wlcg-sl5.repo /etc/yum.repos.d/ && \ 22 | wget http://linuxsoft.cern.ch/wlcg/RPM-GPG-KEY-wlcg && \ 23 | mv RPM-GPG-KEY-wlcg /etc/pki/rpm-gpg/ && \ 24 | wget http://grid-deployment.web.cern.ch/grid-deployment/download/HEP/repo/HEP_OSlibs.repo && \ 25 | mv HEP_OSlibs.repo /etc/yum.repos.d/ && \ 26 | yum update -y && yum install -y HEP_OSlibs_SL5 ca-policy-lcg ca-policy-egi-core wlcg-repo.noarch wlcg-voms-cms && \ 27 | yum clean -y all 28 | 29 | 30 | ADD krb5.conf /etc/krb5.conf 31 | RUN groupadd -g 1399 zh 32 | RUN adduser -u 22527 -g 1399 cmsbuild && install -d /opt && install -d -o cmsbuild /opt/cms /build 33 | RUN install -d -o cmsbuild /build 34 | 35 | RUN wget -O /usr/local/bin/dumb-init http://cmsrep.cern.ch/cmssw/download/dumb-init_1.2.2_amd64 36 | RUN chmod +x /usr/local/bin/dumb-init 37 | ENTRYPOINT ["/usr/local/bin/dumb-init", "-c", "--" ] 38 | WORKDIR /build 39 | RUN touch /etc/tnsnames.ora 40 | RUN mkdir -p /cvmfs /afs /eos /etc/vomses /etc/grid-security /data /pool 41 | USER cmsbuild 42 | -------------------------------------------------------------------------------- /slc5/EXECUTE_BUILD_MAIN.sh: -------------------------------------------------------------------------------- 1 | # Do not foget to change tag on each update or prevous version will be overwriten 2 | # CONTAINER_TAG=latest 3 | # DOCKERHUB_USER="Use job default" 4 | # EXTRA_BUILD_ARGS= 5 | PUSH_CONTAINER=true 6 | # DOCKER_FILE=Dockerfile 7 | #CONTAINER_NAME=slc6 8 | # GITHUT_REPO="Use job default" 9 | # DOCKER_DIR="Get from commit dir" 10 | -------------------------------------------------------------------------------- /slc5/krb5.conf: -------------------------------------------------------------------------------- 1 | ; AD : This Kerberos configuration is for CERN's Active Directory realm 2 | ; The line above this is magic and is used by cern-config-keytab. Do 3 | ; not remove. 4 | 5 | ; Installed with puppet from a series of 6 | ; template fragments. 7 | 8 | ; /etc/krb5.conf 9 | 10 | [libdefaults] 11 | default_realm = CERN.CH 12 | ticket_lifetime = 25h 13 | renew_lifetime = 120h 14 | forwardable = true 15 | proxiable = true 16 | default_tkt_enctypes = arcfour-hmac-md5 aes256-cts aes128-cts des3-cbc-sha1 des-cbc-md5 des-cbc-crc 17 | chpw_prompt = true 18 | 19 | 20 | [appdefaults] 21 | pam = { 22 | external = true 23 | krb4_convert = false 24 | krb4_convert_524 = false 25 | krb4_use_as_req = false 26 | } 27 | 28 | [domain_realm] 29 | .cern.ch = CERN.CH 30 | .fnal.gov = FNAL.GOV 31 | .hep.man.ac.uk = HEP.MAN.AC.UK 32 | .in2p3.fr = IN2P3.FR 33 | # No default domain for KFKI.HU specified. 34 | 35 | [realms] 36 | # Start of puppet output for CERN.CH 37 | CERN.CH = { 38 | default_domain = cern.ch 39 | kpasswd_server = cerndc.cern.ch 40 | admin_server = cerndc.cern.ch 41 | kdc = cerndc.cern.ch 42 | v4_name_convert = { 43 | host = { 44 | rcmd = host 45 | } 46 | } 47 | } 48 | 49 | 50 | # Start of puppet output for FNAL.GOV 51 | FNAL.GOV = { 52 | default_domain = fnal.gov 53 | admin_server = krb-fnal-admin.fnal.gov 54 | kdc = krb-fnal-1.fnal.gov:88 55 | kdc = krb-fnal-2.fnal.gov:88 56 | kdc = krb-fnal-3.fnal.gov:88 57 | } 58 | 59 | 60 | # Start of puppet output for HEP.MAN.AC.UK 61 | HEP.MAN.AC.UK = { 62 | default_domain = hep.man.ac.uk 63 | kpasswd_server = afs4.hep.man.ac.uk 64 | admin_server = afs4.hep.man.ac.uk 65 | kdc = afs1.hep.man.ac.uk 66 | kdc = afs2.hep.man.ac.uk 67 | kdc = afs3.hep.man.ac.uk 68 | kdc = afs4.hep.man.ac.uk 69 | } 70 | 71 | 72 | # Start of puppet output for IN2P3.FR 73 | IN2P3.FR = { 74 | default_domain = in2p3.fr 75 | kpasswd_server = kerberos-admin.in2p3.fr 76 | admin_server = kerberos-admin.in2p3.fr 77 | kdc = kerberos-1.in2p3.fr 78 | kdc = kerberos-2.in2p3.fr 79 | kdc = kerberos-3.in2p3.fr 80 | } 81 | 82 | 83 | # Start of puppet output for KFKI.HU 84 | KFKI.HU = { 85 | admin_server = kerberos.kfki.hu 86 | kdc = kerberos.hkfi.hu 87 | } 88 | 89 | 90 | -------------------------------------------------------------------------------- /slc5/tags.yaml: -------------------------------------------------------------------------------- 1 | #CMS tags mapping. Format 2 | #Destination tag: source tag 3 | 4 | cmssw/el5:x86_64: latest 5 | -------------------------------------------------------------------------------- /slc5/test.sh: -------------------------------------------------------------------------------- 1 | #!/bin/bash -e 2 | if [ "$WORKSPACE" = "" ] ; then WORKSPACE=$(/bin/pwd) ; fi 3 | cd $WORKSPACE 4 | GET_CMD="wget -q -O" 5 | if wget --help >/dev/null 2>&1 ; then 6 | $GET_CMD cmsos https://raw.githubusercontent.com/cms-sw/cmsdist/master/cmsos.file 7 | else 8 | GET_CMD="curl -s -k -L -o" 9 | $GET_CMD cmsos https://raw.githubusercontent.com/cms-sw/cmsdist/master/cmsos.file 10 | fi 11 | chmod +x cmsos 12 | HOST_CMS_ARCH=$(./cmsos 2>/dev/null) 13 | $GET_CMD bootstrap.sh http://cmsrep.cern.ch/cmssw/bootstrap.sh 14 | 15 | INVALID_ARCHS='' 16 | for repo in cms ; do 17 | echo "############# REPO $repo ##################" 18 | mkdir -p $repo 19 | pushd $repo 20 | $GET_CMD archs http://cmsrep.cern.ch/cgi-bin/repos/$repo 21 | for arch in $(grep ">${HOST_CMS_ARCH}_" archs | sed "s|.*>${HOST_CMS_ARCH}_|${HOST_CMS_ARCH}_|;s|<.*||") ; do 22 | if [ $(echo ${INVALID_ARCHS} | tr ' ' '\n' | grep "${repo}/${arch}$" | wc -l) -gt 0 ] ; then continue ; fi 23 | echo "============= $arch ================" 24 | mkdir -p $arch 25 | pushd $arch 26 | sh -e $WORKSPACE/bootstrap.sh -a $arch setup 27 | popd 28 | done 29 | popd 30 | done 31 | echo "ALL_OK" 32 | -------------------------------------------------------------------------------- /slc6/Dockerfile: -------------------------------------------------------------------------------- 1 | FROM @BASE_IMAGE_NAME@ 2 | 3 | ADD slc6.repo /etc/yum.repos.d/slc6.repo 4 | ADD ca.repo /etc/yum.repos.d/ca.repo 5 | ADD RPM-GPG-KEY-cern /etc/pki/rpm-gpg/RPM-GPG-KEY-cern 6 | ADD GPG-KEY-EUGridPMA-RPM-3 /etc/pki/rpm-gpg/GPG-KEY-EUGridPMA-RPM-3 7 | 8 | RUN sed -i -e 's|^mirrorlist=|#mirrorlist=|;s|#baseurl=|baseurl=|;s|mirror.centos.org|vault.centos.org|' /etc/yum.repos.d/CentOS-Base.repo &&\ 9 | yum update -y && \ 10 | yum install -y https://dl.fedoraproject.org/pub/archive/epel/6/x86_64/epel-release-6-8.noarch.rpm && \ 11 | yum install -y git-core openssl glibc-devel.x86_64 mesa-libGL-devel.x86_64 mesa-libGLU-devel.x86_64 \ 12 | libXext-devel tcsh zsh tcl tk e2fsprogs perl-ExtUtils-Embed compat-libstdc++-33 libXmu e2fsprogs-libs \ 13 | libXpm bc libaio tar patch krb5-devel gcc unzip zip perl-libwww-perl libXpm-devel libXft-devel svn \ 14 | cvs gcc-c++ strace cern-wrappers krb5-workstation wget readline-devel nano bzip2 \ 15 | CERN-CA-certs tk-devel tcl-devel which python-pip file voms-clients-cpp \ 16 | java-1.8.0-openjdk java-1.8.0-openjdk-devel compat-readline5 libXcursor libXrandr libXinerama \ 17 | PyYAML python-requests-kerberos xz libxslt xrootd-client time \ 18 | voms-clients-cpp voms myproxy jq && yum clean all 19 | ADD krb5.conf /etc/krb5.conf 20 | RUN mkdir -p /cvmfs /afs /eos /etc/vomses /etc/grid-security /data /pool /build &&\ 21 | touch /etc/tnsnames.ora 22 | WORKDIR /build 23 | -------------------------------------------------------------------------------- /slc6/GPG-KEY-EUGridPMA-RPM-3: -------------------------------------------------------------------------------- 1 | -----BEGIN PGP PUBLIC KEY BLOCK----- 2 | Version: GnuPG v1.2.1 (GNU/Linux) 3 | 4 | mQGiBELTiyYRBAD8goP2vWdf46e/stZvzgkBgJIFTMkHqZOpLqlCKTRGf4VHUASh 5 | hdaktDtPx44fVO4E3zmugc7FP6xz/Hj3SqrUKt98vzF1EMb3i4UMCOBif+jM6VFS 6 | N5N3gDEukNpP2h46LkNPbRPgAEeUmUZy4kTyB9xC/VA7d1sFx6sJZpCHiwCg7DNX 7 | bj4Wuk5b+FyyCOg9++xabokEAJwt4+iyDX3uYZrkzh9hOXgrbBiyGrorAz3jOpqM 8 | 4L9+OKs5q9UsBwVXs5Zjei/irgxNjHNZCPo/V4f7o2CHxa88rn4GvstftSK6Oeey 9 | 8PaV3vdb5C5SRSbRgvxoUOo6eGVBpv8bVpKm//tNkTboHVsEAKQ1rYzx/m89aCZj 10 | VCw5A/0c3E0rH4ZCeNg7yvta9ur3U7n/aFhzbU3wFLhcIndrPaufz5Sy/SYhOaS9 11 | RgH36GbsmOq6JskdtSpBLq0768BUmrjcosgWl3REpMAZc4vvtb55WRYsrNSrqmXZ 12 | /jHLjQkFHFdObIEcvxl+yIIwUxybMkvdxPZxnpGjF2gg6AoP7rQ5RVVHcmlkUE1B 13 | IERpc3RyaWJ1dGlvbiBTaWduaW5nIEtleSAzIDxpbmZvQGV1Z3JpZHBtYS5vcmc+ 14 | iFkEExECABkFAkLTiyYECwcDAgMVAgMDFgIBAh4BAheAAAoJEMMtmcg827xx5PQA 15 | oON2EH0dqfwNjGr1GlGyt1o5bWkzAJ0Y4QOPWaCIJFABoluX5nifjKWV9w== 16 | =qXx1 17 | -----END PGP PUBLIC KEY BLOCK----- 18 | 19 | -------------------------------------------------------------------------------- /slc6/RPM-GPG-KEY-cern: -------------------------------------------------------------------------------- 1 | -----BEGIN PGP PUBLIC KEY BLOCK----- 2 | Version: GnuPG v1.2.6 (GNU/Linux) 3 | 4 | mQGiBEK/0MURBACv5Rm/jRnrbyocW5t43hrjFxlw/DPLTWiA16apk3P2HQQ8F6cs 5 | EY/gmNmUf4U8KB6ncxdye/ostSBFJmVYh0YEYUxBSYM6ZFui3teVRxxXqN921jU2 6 | GbbWGqqlxbDqvBxDEG95pA9oSiFYalVfjxVv0hrcrAHQDW5DL2b8l48kGwCgnxs1 7 | iO7Z/5KRalKSJqKx70TVIUkD/2YkkHjcwp4Nt1pPlKxLaFp41cnCEGMEZVsNIQuJ 8 | 1SgHyMHKBzMWkD7QHqAeW3Sa9CDAJKoVPHZK99puF8etyUpC/HfmOIF6jwGpfG5A 9 | S7YbqHX6vitRlQt1b1aq5K83J8Y0+8WmjZmCQY6+y2KHOPP+zHWKe5TJDeqDnN0j 10 | sZsKA/441IF4JJTPEhvRFsPJO5WKg1zGFbxRPKvgi7+YY6pJ0VFbOMcJVMkvSZ2w 11 | 4QRD+2ets/pRxNhITHfPToMV3lhC8m1Je5fzoSvSixgH/5o9mekWWSW7Uq7U0IWA 12 | 7OD7RraJRrGxy0Tz3G+exA7svv/zn9TW/BaHFlMHoyyDHOYZmIhhBB8RAgAhBQJC 13 | v+/uFwyAEeb+6rc8Txi4s8pfgZAf4xOTel99AgcAAAoJEF4D/eUdHgNLGCgAmwdu 14 | KegSOBXpDe061zF8NoN6+OFiAJ9nKo+uC6xBZ9Ey550SmhFCPPA2/rRTQ0VSTiBM 15 | aW51eCBTdXBwb3J0IChSUE0gc2lnbmluZyBrZXkgZm9yIENFUk4gTGludXggU3Vw 16 | cG9ydCkgPGxpbnV4LnN1cHBvcnRAY2Vybi5jaD6IWgQTEQIAGgUCQr/QxQULBwMC 17 | AQMVAgMDFgIBAh4BAheAAAoJEF4D/eUdHgNL/HsAn1ntKwRoSA9L0r8UyF7Zqn3U 18 | 79m1AJ9Y4NsSE/dlFYLfmf0+baoq7b5asIicBBMBAgAGBQJCv9DjAAoJEPy9YCiW 19 | u335GTwEALjUQ7+cHxi0sifstCLoyRYQSu7Eas0M1UD2ZxSQNBnYsx4rDZJk9TmK 20 | 7QCzR1yRw9aixzZsRlNbed5VPxSzn89PE5m7Sx1bpl89sPgZ4BY95AL2wExyDWRp 21 | 1ON2+ztYeYtT7ZCkmeM+PBzt6RHR/jo3361faBS+qOkmpiiRWf3XiEYEExECAAYF 22 | AkK/0WAACgkQkB/jE5N6X33DFQCgkvy1ruogu5Ibs5CzGY/ALiSJhyAAn3ygn3p/ 23 | xrNQ8Dy5j4KfgJINoxT4iEYEEBECAAYFAkK/9CcACgkQDIloXtlLxZSiRACdG0kT 24 | KlB4X4VBocUyxMReO9e5MvsAoIKWgcJYE8AGmRXjfIisCAzPtVX+iEYEExECAAYF 25 | AkK/8oUACgkQtQgG0wyY/52z1ACgkkxNdhHKbEol3Kwka1tICWHMIwIAn3PWJQR0 26 | C1MV1+CnT8UupHzxy6J7 27 | =IUD3 28 | -----END PGP PUBLIC KEY BLOCK----- 29 | -------------------------------------------------------------------------------- /slc6/ca.repo: -------------------------------------------------------------------------------- 1 | [carepo] 2 | gpgkey=file:///etc/pki/rpm-gpg/GPG-KEY-EUGridPMA-RPM-3 3 | name=IGTF CA Repository 4 | baseurl=http://linuxsoft.cern.ch/mirror/repository.egi.eu/sw/production/cas/1/current/ 5 | gpgcheck=1 6 | enabled=1 7 | 8 | -------------------------------------------------------------------------------- /slc6/config.yaml: -------------------------------------------------------------------------------- 1 | override: true 2 | push: true 3 | test: 4 | script: test-cmssw.sh 5 | node: singularity 6 | delete_pattern: tmp-${tag}-(2[0-9]{7,}) 7 | expires_days: 7 8 | daily: d$${now.strftime("%Y%m%d")} 9 | from: library/centos:centos6 10 | docker: Dockerfile 11 | architecture: ${group0} 12 | groups: 13 | amd64: 14 | alias: ${group}-${daily} ${group} x86_64 15 | tags: 16 | ${group}-latest: 17 | -------------------------------------------------------------------------------- /slc6/krb5.conf: -------------------------------------------------------------------------------- 1 | ; AD : This Kerberos configuration is for CERN's Active Directory realm 2 | ; The line above this is magic and is used by cern-config-keytab. Do 3 | ; not remove. 4 | 5 | ; Installed with puppet from a series of 6 | ; template fragments. 7 | 8 | ; /etc/krb5.conf 9 | 10 | [libdefaults] 11 | default_realm = CERN.CH 12 | ticket_lifetime = 25h 13 | renew_lifetime = 120h 14 | forwardable = true 15 | proxiable = true 16 | default_tkt_enctypes = arcfour-hmac-md5 aes256-cts aes128-cts des3-cbc-sha1 des-cbc-md5 des-cbc-crc 17 | chpw_prompt = true 18 | 19 | 20 | [appdefaults] 21 | pam = { 22 | external = true 23 | krb4_convert = false 24 | krb4_convert_524 = false 25 | krb4_use_as_req = false 26 | } 27 | 28 | [domain_realm] 29 | .cern.ch = CERN.CH 30 | .fnal.gov = FNAL.GOV 31 | .hep.man.ac.uk = HEP.MAN.AC.UK 32 | .in2p3.fr = IN2P3.FR 33 | # No default domain for KFKI.HU specified. 34 | 35 | [realms] 36 | # Start of puppet output for CERN.CH 37 | CERN.CH = { 38 | default_domain = cern.ch 39 | kpasswd_server = cerndc.cern.ch 40 | admin_server = cerndc.cern.ch 41 | kdc = cerndc.cern.ch 42 | v4_name_convert = { 43 | host = { 44 | rcmd = host 45 | } 46 | } 47 | } 48 | 49 | 50 | # Start of puppet output for FNAL.GOV 51 | FNAL.GOV = { 52 | default_domain = fnal.gov 53 | admin_server = krb-fnal-admin.fnal.gov 54 | kdc = krb-fnal-1.fnal.gov:88 55 | kdc = krb-fnal-2.fnal.gov:88 56 | kdc = krb-fnal-3.fnal.gov:88 57 | } 58 | 59 | 60 | # Start of puppet output for HEP.MAN.AC.UK 61 | HEP.MAN.AC.UK = { 62 | default_domain = hep.man.ac.uk 63 | kpasswd_server = afs4.hep.man.ac.uk 64 | admin_server = afs4.hep.man.ac.uk 65 | kdc = afs1.hep.man.ac.uk 66 | kdc = afs2.hep.man.ac.uk 67 | kdc = afs3.hep.man.ac.uk 68 | kdc = afs4.hep.man.ac.uk 69 | } 70 | 71 | 72 | # Start of puppet output for IN2P3.FR 73 | IN2P3.FR = { 74 | default_domain = in2p3.fr 75 | kpasswd_server = kerberos-admin.in2p3.fr 76 | admin_server = kerberos-admin.in2p3.fr 77 | kdc = kerberos-1.in2p3.fr 78 | kdc = kerberos-2.in2p3.fr 79 | kdc = kerberos-3.in2p3.fr 80 | } 81 | 82 | 83 | # Start of puppet output for KFKI.HU 84 | KFKI.HU = { 85 | admin_server = kerberos.kfki.hu 86 | kdc = kerberos.hkfi.hu 87 | } 88 | 89 | 90 | -------------------------------------------------------------------------------- /slc6/packages-info/amd64-latest-base: -------------------------------------------------------------------------------- 1 | # Build date: 2024-07-08 2 | MAKEDEV 3.24-6.el6 3 | audit-libs 2.4.5-6.el6 4 | basesystem 10.0-4.el6 5 | bash 4.1.2-48.el6 6 | bind-libs 9.8.2-0.68.rc1.el6_10.1 7 | bind-utils 9.8.2-0.68.rc1.el6_10.1 8 | binutils 2.20.51.0.2-5.48.el6 9 | bzip2 1.0.5-7.el6_0 10 | bzip2-libs 1.0.5-7.el6_0 11 | ca-certificates 2018.2.22-65.1.el6 12 | centos-release 6-10.el6.centos.12.3 13 | checkpolicy 2.0.22-1.el6 14 | chkconfig 1.3.49.5-1.el6 15 | coreutils 8.4-47.el6 16 | coreutils-libs 8.4-47.el6 17 | cpio 2.10-13.el6 18 | cracklib 2.8.16-4.el6 19 | cracklib-dicts 2.8.16-4.el6 20 | curl 7.19.7-53.el6_9 21 | cyrus-sasl-lib 2.1.23-15.el6_6.2 22 | dash 0.5.5.1-4.el6 23 | db4 4.7.25-22.el6 24 | db4-utils 4.7.25-22.el6 25 | dbus-libs 1.2.24-9.el6 26 | diffutils 2.8.1-28.el6 27 | elfutils-libelf 0.164-2.el6 28 | ethtool 3.5-6.el6 29 | expat 2.0.1-13.el6_8 30 | file 5.04-30.el6 31 | file-libs 5.04-30.el6 32 | filesystem 2.4.30-3.el6 33 | findutils 4.4.2-9.el6 34 | gamin 0.1.10-9.el6 35 | gawk 3.1.7-10.el6_7.3 36 | gdbm 1.8.0-39.el6 37 | glib2 2.28.8-10.el6 38 | glibc 2.12-1.212.el6 39 | glibc-common 2.12-1.212.el6 40 | gmp 4.3.1-13.el6 41 | gnupg2 2.0.14-9.el6_10 42 | gpgme 1.1.8-3.el6 43 | grep 2.20-6.el6 44 | groff 1.18.1.4-21.el6 45 | gzip 1.3.12-24.el6 46 | info 4.13a-8.el6 47 | keyutils-libs 1.4-5.el6 48 | krb5-libs 1.10.3-65.el6 49 | less 436-13.el6 50 | libacl 2.2.49-7.el6_9.1 51 | libattr 2.4.44-7.el6 52 | libblkid 2.17.2-12.28.el6_9.2 53 | libcap 2.16-5.5.el6 54 | libcom_err 1.41.12-24.el6 55 | libcurl 7.19.7-53.el6_9 56 | libffi 3.0.5-3.2.el6 57 | libgcc 4.4.7-23.el6 58 | libgcrypt 1.4.5-12.el6_8 59 | libgpg-error 1.7-4.el6 60 | libidn 1.18-2.el6 61 | libnih 1.0.1-8.el6 62 | libselinux 2.0.94-7.el6 63 | libselinux-utils 2.0.94-7.el6 64 | libsemanage 2.0.43-5.1.el6 65 | libsepol 2.0.41-4.el6 66 | libssh2 1.4.2-2.el6_7.1 67 | libstdc++ 4.4.7-23.el6 68 | libtasn1 2.3-6.el6_5 69 | libusb 0.1.12-23.el6 70 | libuser 0.56.13-8.el6_7 71 | libutempter 1.1.5-4.1.el6 72 | libuuid 2.17.2-12.28.el6_9.2 73 | libxml2 2.7.6-21.el6_8.1 74 | lua 5.1.4-4.1.el6 75 | make 3.81-23.el6 76 | mingetty 1.08-5.el6 77 | module-init-tools 3.9-26.el6 78 | ncurses 5.7-4.20090207.el6 79 | ncurses-base 5.7-4.20090207.el6 80 | ncurses-libs 5.7-4.20090207.el6 81 | net-tools 1.60-114.el6 82 | nspr 4.19.0-1.el6 83 | nss 3.36.0-8.el6 84 | nss-softokn 3.14.3-23.3.el6_8 85 | nss-softokn-freebl 3.14.3-23.3.el6_8 86 | nss-sysinit 3.36.0-8.el6 87 | nss-tools 3.36.0-8.el6 88 | nss-util 3.36.0-1.el6 89 | openldap 2.4.40-16.el6 90 | openssl 1.0.1e-57.el6 91 | p11-kit 0.18.5-2.el6_5.2 92 | p11-kit-trust 0.18.5-2.el6_5.2 93 | pam 1.1.1-24.el6 94 | passwd 0.77-7.el6 95 | pcre 7.8-7.el6 96 | pinentry 0.7.6-8.el6 97 | pkgconfig 0.23-9.1.el6 98 | plymouth-core-libs 0.8.3-29.el6.centos 99 | plymouth-scripts 0.8.3-29.el6.centos 100 | popt 1.13-7.el6 101 | procps 3.2.8-45.el6_9.3 102 | psmisc 22.6-24.el6 103 | pth 2.0.7-9.3.el6 104 | pygpgme 0.1-18.20090824bzr68.el6 105 | python 2.6.6-66.el6_8 106 | python-iniparse 0.3.1-2.1.el6 107 | python-libs 2.6.6-66.el6_8 108 | python-pycurl 7.19.0-9.el6 109 | python-urlgrabber 3.9.1-11.el6 110 | readline 6.0-4.el6 111 | rootfiles 8.1-6.1.el6 112 | rpm 4.8.0-59.el6 113 | rpm-libs 4.8.0-59.el6 114 | rpm-python 4.8.0-59.el6 115 | sed 4.2.1-10.el6 116 | setup 2.8.14-23.el6 117 | shadow-utils 4.1.5.1-5.el6 118 | shared-mime-info 0.70-6.el6 119 | sqlite 3.6.20-1.el6_7.2 120 | tar 1.23-15.el6_8 121 | tzdata 2018e-3.el6 122 | ustr 1.0.4-9.1.el6 123 | vim-minimal 7.4.629-5.el6_8.1 124 | which 2.19-6.el6 125 | xz-libs 4.999.9-0.5.beta.20091007git.el6 126 | yum 3.2.29-81.el6.centos 127 | yum-metadata-parser 1.1.2-16.el6 128 | yum-plugin-fastestmirror 1.1.30-42.el6_10 129 | yum-plugin-ovl 1.1.30-42.el6_10 130 | zlib 1.2.3-29.el6 131 | -------------------------------------------------------------------------------- /slc6/slc6.repo: -------------------------------------------------------------------------------- 1 | [slc6-cern] 2 | name=CERN SLC6 3 | baseurl=http://linuxsoft.cern.ch/cern/slc6X/x86_64/ 4 | enabled=1 5 | gpgcheck=1 6 | gpgkey=http://linuxsoft.cern.ch/cern/slc6X/x86_64/RPM-GPG-KEY-cern 7 | 8 | -------------------------------------------------------------------------------- /slc6/tags.yaml: -------------------------------------------------------------------------------- 1 | #CMS tags mapping. Format 2 | #Destination tag: source tag 3 | 4 | cmssw/el6:x86_64: x86_64 5 | -------------------------------------------------------------------------------- /ubi8/Dockerfile: -------------------------------------------------------------------------------- 1 | FROM @BASE_IMAGE_NAME@ 2 | 3 | RUN sed -i -e 's|enabled=1|enabled=0|' /etc/dnf/plugins/subscription-manager.conf &&\ 4 | dnf install -y bash automake bzip2 bzip2-libs bzip2-devel coreutils-single file \ 5 | file-libs fontconfig freetype gcc-c++ libstdc++-static git glibc krb5-libs libaio \ 6 | libcom_err libgomp libICE libidn \ 7 | libSM libX11 libX11-devel libxcrypt libXcursor libXext \ 8 | libXft libXi libXinerama \ 9 | libXmu libXpm libXpm-devel libXrandr libXrender \ 10 | java-1.8.0-openjdk-devel libtool m4 make \ 11 | ncurses ncurses-libs ncurses-devel nspr nss nss-util \ 12 | openssl openssl-devel openssl-libs \ 13 | perl perl-interpreter perl-libs \ 14 | perl-Carp perl-constant perl-Data-Dumper perl-DBI \ 15 | perl-Digest-MD5 perl-Encode perl-Env perl-Exporter perl-ExtUtils-Embed \ 16 | perl-File-Path perl-File-Temp perl-Getopt-Long perl-IO perl-libnet \ 17 | perl-Memoize perl-PathTools perl-Scalar-List-Utils perl-Socket perl-Storable \ 18 | perl-Term-ANSIColor perl-Test-Harness perl-Text-ParseWords perl-Thread-Queue \ 19 | perl-Time-HiRes perl-Time-Local perl-YAML \ 20 | patch popt python2 python3 readline rpm-build \ 21 | rsync tcl time tk wget which zlib \ 22 | bc tar zip unzip hostname nano procps-ng dnf-plugins-core python3-requests environment-modules &&\ 23 | dnf install -y http://mirror.centos.org/centos/8-stream/BaseOS/x86_64/os/Packages/centos-gpg-keys-8-3.el8.noarch.rpm &&\ 24 | dnf install -y http://mirror.centos.org/centos/8-stream/BaseOS/x86_64/os/Packages/centos-stream-repos-8-3.el8.noarch.rpm &&\ 25 | dnf install -y epel-release &&\ 26 | dnf install -y libnsl e2fsprogs e2fsprogs-libs libXext-devel libXft-devel \ 27 | libglvnd-opengl mesa-libGLU mesa-libGLU-devel nss-devel perl-CGI \ 28 | popt-devel readline-devel tcsh zsh tcl-devel tk-devel strace \ 29 | voms-clients-cpp krb5-workstation python2-psutil myproxy apptainer python2-requests &&\ 30 | dnf update -y ca-certificates &&\ 31 | dnf config-manager --set-enabled powertools &&\ 32 | ([ "@EXTRA_PACKAGES@" != "" ] && dnf -y install @EXTRA_PACKAGES@ || true) &&\ 33 | alternatives --set python `which python2` &&\ 34 | yum clean all 35 | 36 | ADD share/krb5.conf /etc/krb5.conf 37 | ADD share/ca-bundle.crt /etc/pki/tls/certs/ca-bundle.crt 38 | ADD share/fix_ssh_config.sh /tmp/fix_ssh_config.sh 39 | RUN mkdir -p /cvmfs /afs /eos /etc/vomses /etc/grid-security /build /data /pool /opt/cms &&\ 40 | touch /etc/tnsnames.ora &&\ 41 | echo el8 > /etc/cmsos &&\ 42 | /tmp/fix_ssh_config.sh /etc/ssh/ssh_config && rm -f /tmp/fix_ssh_config.sh &&\ 43 | sed -i -e s'|^ *allow *setuid.*|allow setuid = no|;s|^ *enable *overlay.*|enable overlay = no|;s|^ *enable *underlay.*|enable underlay = yes|' /etc/apptainer/apptainer.conf 44 | -------------------------------------------------------------------------------- /ubi8/Dockerfile.bootstrap: -------------------------------------------------------------------------------- 1 | FROM @BASE_IMAGE_NAME@ 2 | RUN yum install -y bzip2-devel file popt-devel nspr-devel nss-devel \ 3 | rpm-build autoconf automake libtool gettext-devel && \ 4 | yum clean all 5 | -------------------------------------------------------------------------------- /ubi8/config.yaml: -------------------------------------------------------------------------------- 1 | push: true 2 | override: true 3 | delete_pattern: tmp-${group1}.*-(2[0-9]{7,}) 4 | expires_days: 7 5 | daily: d$${now.strftime("%Y%m%d")} 6 | architecture: ${group1} 7 | build_context: .. 8 | test: 9 | script: test-cmssw.sh 10 | node: singularity 11 | groups: 12 | latest: 13 | alias: ${group1}-${daily} 14 | from: redhat/ubi8:8.7 15 | groups: 16 | x86_64: 17 | variables: 18 | EXTRA_PACKAGES: doxygen 19 | tags: 20 | ${group1}: 21 | aarch64: 22 | tags: 23 | ${group1}: 24 | ppc64le: 25 | disabled: true 26 | tags: 27 | ${group1}: 28 | --------------------------------------------------------------------------------