wip
All checks were successful
Build and push nixos-based docker container / build (push) Successful in 38s

This commit is contained in:
James Andariese 2024-08-04 01:47:08 -05:00
parent 27588a1d35
commit f8281604aa

View File

@ -1,20 +1,62 @@
{ config, pkgs, ...}:
{ config, pkgs, lib, ...}:
let
name = "node-red";
packages =
with pkgs;
[
less
bashInteractive
coreutils
nodejs
findutils
nodePackages.npm
nodePackages.node-red
dockerTools.usrBinEnv
dockerTools.binSh
dockerTools.caCertificates
dockerTools.fakeNss
#ungoogled-chromium
];
entrypoint = pkgs.writeShellApplication {
name = "entrypoint";
runtimeInputs = with pkgs; with nodePackages; [
node-red
#ungoogled-chromium
];
runtimeInputs = packages;
text = ''
node-red -u "''${DATA-/data}" -s "''${SETTINGS-/data/settings.js}"
DATA="''${DATA-/data}"
cd "$DATA"
node-red -u "$DATA" -s "''${SETTINGS-/data/settings.js}"
'';
};
linkPackageToRoot = p: ''
for wbin in bin sbin;do
for f in ${p}/$wbin/*;do
if [ -x "$f" ];then
ln -sf "$f" "$wbin"/
fi
done
done
'';
in pkgs.dockerTools.streamLayeredImage {
inherit name;
contents = packages;
config.Cmd = [ "${entrypoint}/bin/entrypoint" ];
config.Workdir = "/data";
config.Env = with pkgs; [ "HOME=/data" ];
fakeRootCommands = ''
# ${pkgs.runtimeShell}
mkdir -p /tmp
chmod 1777 /tmp
${pkgs.dockerTools.shadowSetup}
groupadd -r node-red
useradd -r -g node-red node-red
mkdir -p /data
chown -R node-red:node-red /data
chmod -R 750 /data
'';
extraCommands = ''
#find / > files-that-existed-at-extraCommands-time.txt || true
${pkgs.lib.strings.concatStringsSep "\n" (map linkPackageToRoot packages)}
'';
}