| # Copyright 2025 The Chromium Authors |
| # Use of this source code is governed by a BSD-style license that can be |
| # found in the LICENSE file. |
| |
| # ash-chrome-provision will use chromite |
| FROM python:3.8-slim-buster |
| |
| USER root |
| |
| # zstd for extracting Chrome builder artifacts. |
| # openssh-client and rsync for chromite to deploy chrome. |
| # curl, ca-certificates, and gnupg for google-cloud-sdk install below. |
| RUN sed -i -e 's/deb.debian.org/archive.debian.org/g' -e 's|security.debian.org/debian-security|archive.debian.org/debian-security|g' -e '/buster-updates/d' /etc/apt/sources.list \ |
| && apt-get update \ |
| && apt-get install -y zstd curl ca-certificates gnupg openssh-client rsync sudo |
| |
| # grab gsutil |
| RUN echo \ |
| "deb [signed-by=/usr/share/keyrings/cloud.google.gpg] \ |
| http://packages.cloud.google.com/apt cloud-sdk main" | \ |
| tee -a /etc/apt/sources.list.d/google-cloud-sdk.list && \ |
| curl https://packages.cloud.google.com/apt/doc/apt-key.gpg | \ |
| apt-key --keyring /usr/share/keyrings/cloud.google.gpg \ |
| add - && apt-get update -y && apt-get install google-cloud-sdk=369.0.0-0 -y |
| RUN rm -rf /usr/lib/google-cloud-sdk/bin/anthoscli \ |
| /usr/lib/google-cloud-sdk/bin/kuberun |
| |
| COPY ash-chrome-provision /usr/bin/ash-chrome-provision |
| |
| RUN useradd -m ash-chrome-provision |
| RUN echo 'ash-chrome-provision ALL=NOPASSWD:ALL' > /etc/sudoers.d/ash-chrome-provision |
| |
| USER ash-chrome-provision |
