Merge pull request #81 from RedHatInsights/enable_hermetic_builds

Enabling hermetic builds for all Konflux pipelines

.tekton/rhproxy-engine-container-pull-request.yaml

@@ -30,6 +30,10 @@ spec:
     value: /Containerfile
   - name: build-source-image
     value: "true"
+  - name: hermetic
+    value: "true"
+  - name: prefetch-input
+    value: '{"type": "rpm", "path": "."}'
   pipelineSpec:
     description: |
       This pipeline is ideal for building multi-arch container images from a Containerfile while maintaining trust after pipeline customization.
@@ -184,6 +188,8 @@ spec:
         value: $(params.output-image).prefetch
       - name: ociArtifactExpiresAfter
         value: $(params.image-expires-after)
+      - name: dev-package-managers
+        value: "true"
       runAfter:
       - clone-repository
       taskRef:

.tekton/rhproxy-engine-container-push.yaml

@@ -27,6 +27,10 @@ spec:
     value: /Containerfile
   - name: build-source-image
     value: "true"
+  - name: hermetic
+    value: "true"
+  - name: prefetch-input
+    value: '{"type": "rpm", "path": "."}'
   pipelineSpec:
     description: |
       This pipeline is ideal for building multi-arch container images from a Containerfile while maintaining trust after pipeline customization.
@@ -181,6 +185,8 @@ spec:
         value: $(params.output-image).prefetch
       - name: ociArtifactExpiresAfter
         value: $(params.image-expires-after)
+      - name: dev-package-managers
+        value: "true"
       runAfter:
       - clone-repository
       taskRef:

.tekton/rhproxy-engine-container-release-push.yaml

@@ -26,6 +26,10 @@ spec:
     value: /Containerfile
   - name: build-source-image
     value: "true"
+  - name: hermetic
+    value: "true"
+  - name: prefetch-input
+    value: '{"type": "rpm", "path": "."}'
   pipelineSpec:
     description: |
       This pipeline is ideal for building multi-arch container images from a Containerfile while maintaining trust after pipeline customization.
@@ -221,6 +225,8 @@ spec:
         value: $(params.output-image).prefetch
       - name: ociArtifactExpiresAfter
         value: $(params.image-expires-after)
+      - name: dev-package-managers
+        value: "true"
       runAfter:
       - clone-repository
       taskRef:

rpms.in.yaml

@@ -0,0 +1,23 @@
+packages:
+  - gettext
+  - zlib
+  - libaio
+  - openssl
+  - shadow-utils
+  - procps-ng
+  - less
+  - util-linux
+  - vim
+  - gcc
+  - gcc-c++
+  - kernel-headers
+  - make
+  - zlib-devel
+  - pcre-devel
+  - openssl-devel
+  - libxml2-devel
+  - libxslt-devel
+  - gd-devel
+  - perl
+contentOrigin:
+  repofiles: ["./ubi.repo"]