Add radicale

- rename the files
- fully qualify base
- add compose build

base.busybox.Dockerfile

@@ -0,0 +1,12 @@
+# syntax=docker/dockerfile:1
+# gentoo-base-busybox
+FROM docker.io/gentoo/stage3:nomultilib AS builder
+
+WORKDIR /workdir
+COPY --exclude=repos . .
+COPY repos /var/db/repos
+RUN echo 'FEATURES="-ipc-sandbox -network-sandbox -pid-sandbox"' >> /etc/portage/make.conf
+RUN --mount=type=cache,target=/workdir/cache,sharing=locked \
+	    /bin/bash src/bootstrap.sh -u -r /var/db/repos/ceamac -p ceamac:linux/arch/amd64/busybox -m make-docker.conf /mnt/gentoo -j12
+
+CMD ["/bin/sh"]

base.busybox.yaml

@@ -0,0 +1,13 @@
+services:
+  gentoo-base-busybox:
+    image: registry.ceamac.ro/gentoo-base-busybox
+    restart: always
+    build:
+      context: .
+      dockerfile: base.busybox.Dockerfile
+      tags:
+        - "registry.ceamac.ro/gentoo-base-busybox"
+
+    command: /bin/sh
+    #stdin_open: true
+    #tty: true

gitea.Dockerfile

@@ -1,6 +1,6 @@
 # syntax=docker/dockerfile:1
 # gentoo-gitea
-FROM gentoo-base-gnu AS builder
+FROM registry.ceamac.ro/gentoo-base-busybox AS builder
 
 WORKDIR /workdir
 COPY --exclude=repos --exclude=bin . .
@@ -15,6 +15,6 @@ WORKDIR /
 EXPOSE 3000 32799
 VOLUME ["/etc/gitea", "/var/lib/gitea"]
 COPY --from=builder /mnt/gentoo /
-RUN rm -fR /var/db
+RUN tar c -j -f /var/db/pkg.tar.bz2 -C /var/db/pkg . && rm -fR /var/db/pkg
 USER git:git
 CMD ["/usr/bin/gitea", "web"]

gitea.yaml

@@ -3,7 +3,7 @@ services:
     image: registry.ceamac.ro/gentoo-gitea
     restart: always
     #user: 196:196
-    userns: nomap
+    #userns: nomap
     ports:
       - "127.0.0.1:3000:3000/tcp"
       - "127.0.0.1:32799:32799/tcp"
@@ -16,6 +16,9 @@ services:
         source: /var/lib/gitea
         target: /var/lib/gitea
         read_only: false
+    build:
+      dockerfile: gitea.Dockerfile
+      context: .
 
     #command: /bin/bash
     #stdin_open: true

radicale.Dockerfile

@@ -0,0 +1,18 @@
+# syntax=docker/dockerfile:1
+# gentoo-radicale
+FROM registry.ceamac.ro/gentoo-base-busybox AS builder
+
+WORKDIR /workdir
+COPY --exclude=repos --exclude=bin . .
+RUN --mount=type=cache,target=/workdir/cache,sharing=locked <<-EOF
+	/bin/bash src/setup-radicale.sh /mnt/gentoo -j8
+EOF
+
+FROM scratch
+WORKDIR /
+EXPOSE 5232
+VOLUME ["/etc/radicale", "/var/lib/radicale"]
+COPY --from=builder /mnt/gentoo /
+RUN tar c -j -f /var/db/pkg.tar.bz2 -C /var/db/pkg . && rm -fR /var/db/pkg
+USER radicale:radicale
+CMD ["/usr/bin/radicale"]

radicale.yaml

@@ -0,0 +1,28 @@
+services:
+  radicale:
+    image: registry.ceamac.ro/gentoo-radicale
+    restart: always
+    #userns: nomap
+    ports:
+      - "127.0.0.1:5232:5232/tcp"
+    volumes:
+      - type: volume
+        source: radicale-etc
+        target: /etc/radicale
+      - type: volume
+        source: radicale-var-lib
+        target: /var/lib/radicale
+    build:
+      context: .
+      dockerfile: radicale.Dockerfile
+      tags:
+        - "registry.ceamac.ro/gentoo-radicale"
+
+    #command: /bin/bash
+    #stdin_open: true
+    #tty: true
+    command: /usr/bin/radicale -D
+
+volumes:
+  radicale-etc:
+  radicale-var-lib:

src/bootstrap.sh

@@ -158,9 +158,10 @@ ROOT="${ROOT}"
 PORTAGE_CONFIGROOT="${ROOT}"
 PORTAGE_TMPDIR="${PORTAGE_TMPDIR}"
 PKGDIR="${PKGDIR}"
+EMERGE="${EMERGE:=emerge}"
 
 export ROOT PORTAGE_CONFIGROOT PORTAGE_TMPDIR PKGDIR
-exec emerge "\$@"
+exec "${EMERGE}" "\$@"
 EOF
 chmod +x bin/"${imagename}"-emerge
 
@@ -180,4 +181,5 @@ exec bwrap --bind "${ROOT}" / --proc /proc --dev /dev --perms 01777 --tmpfs /dev
 EOF
 chmod +x bin/"${imagename}"-bwrap
 
-emerge -1vuDUk ${steve} "$@" @system
+EMERGE="${EMERGE:=emerge}"
+"${EMERGE}" -1vuDUk ${steve} "$@" @system

src/setup-gitea.sh

@@ -8,7 +8,7 @@ imagename="$(basename "${imagedir}")"
 shift
 
 usename="${imagedir}"/etc/portage/package.use
-[[ -d ${usename} ]] && usename="${usename}"/php.conf
+[[ -d ${usename} ]] && usename="${usename}"/gitea.conf
 
 cat <<-EOF >> "${usename}"
 */*			cxx
@@ -21,7 +21,7 @@ dev-vcs/git		-perl
 sys-apps/shadow		su
 EOF
 
-bin/"${imagename}"-emerge -vk "$@" gitea dev-vcs/git-lfs
+bin/"${imagename}"-emerge -vk "$@" www-apps/gitea dev-vcs/git-lfs app-shells/bash
 bin/"${imagename}"-emerge -1vuDUk "$@" @world
 bin/"${imagename}"-emerge -1c --with-bdeps=n "$@"
 

src/setup-radicale.sh

@@ -0,0 +1,21 @@
+#! /bin/bash
+
+set -euo pipefail
+
+imagedir="${1}"
+imagename="$(basename "${imagedir}")"
+shift
+
+usename="${imagedir}"/etc/portage/package.use
+[[ -d ${usename} ]] && usename="${usename}"/global.conf
+
+cat <<-EOF >> "${usename}"
+*/*	verify-sig verify-provenance
+EOF
+
+emerge -vk "$@" acct-user/radicale acct-group/radicale
+bin/"${imagename}"-emerge -vk "$@" www-apps/radicale dev-python/packaging app-crypt/argon2 dev-python/requests
+
+chown -R radicale:radicale "${imagedir}"/var/lib/radicale
+chmod 0750 "${imagedir}"/var/lib/radicale
+chmod -R o= "${imagedir}"/var/lib/radicale