Enable hermetic builds

Signed-off-by: Dale Haiducek <[email protected]>
stolostron · Jan 27, 2025 · a24d9b5 · a24d9b5
1 parent 00903bb
commit a24d9b5
Show file tree

Hide file tree

Showing 3 changed files with 9 additions and 1 deletion.
diff --git a/.tekton/gatekeeper-3-17-pull-request.yaml b/.tekton/gatekeeper-3-17-pull-request.yaml
@@ -35,6 +35,8 @@ spec:
         - linux/s390x
     - name: path-context
       value: .
+    - name: hermetic
+      value: true
   pipelineSpec:
     description: |
       This pipeline is ideal for building multi-arch container images from a Containerfile while maintaining trust after pipeline customization.

diff --git a/.tekton/gatekeeper-3-17-push.yaml b/.tekton/gatekeeper-3-17-push.yaml
@@ -33,6 +33,8 @@ spec:
         - linux-mlarge/arm64
         - linux/ppc64le
         - linux/s390x
+    - name: hermetic
+      value: true
   pipelineSpec:
     description: |
       This pipeline is ideal for building multi-arch container images from a Containerfile while maintaining trust after pipeline customization.

diff --git a/build/Dockerfile.rhtap b/build/Dockerfile.rhtap
@@ -11,6 +11,10 @@ RUN go build -mod vendor -a -ldflags "${LDFLAGS}" -o manager
 FROM registry.access.redhat.com/ubi9/ubi-minimal:latest
 WORKDIR /
 COPY --from=builder /go/src/github.com/open-policy-agent/gatekeeper/manager .
-RUN microdnf -y update && microdnf -y clean all
+
+RUN mkdir licenses/
+COPY LICENSE licenses/
+
 USER 65532:65532
+
 ENTRYPOINT ["/manager"]