summaryrefslogtreecommitdiffstats
path: root/taskcluster/docker/ubuntu1804-test-base
diff options
context:
space:
mode:
authorDaniel Baumann <daniel.baumann@progress-linux.org>2024-04-28 14:29:10 +0000
committerDaniel Baumann <daniel.baumann@progress-linux.org>2024-04-28 14:29:10 +0000
commit2aa4a82499d4becd2284cdb482213d541b8804dd (patch)
treeb80bf8bf13c3766139fbacc530efd0dd9d54394c /taskcluster/docker/ubuntu1804-test-base
parentInitial commit. (diff)
downloadfirefox-2aa4a82499d4becd2284cdb482213d541b8804dd.tar.xz
firefox-2aa4a82499d4becd2284cdb482213d541b8804dd.zip
Adding upstream version 86.0.1.upstream/86.0.1upstream
Signed-off-by: Daniel Baumann <daniel.baumann@progress-linux.org>
Diffstat (limited to 'taskcluster/docker/ubuntu1804-test-base')
-rw-r--r--taskcluster/docker/ubuntu1804-test-base/Dockerfile22
-rw-r--r--taskcluster/docker/ubuntu1804-test-base/apt-prefs18
2 files changed, 40 insertions, 0 deletions
diff --git a/taskcluster/docker/ubuntu1804-test-base/Dockerfile b/taskcluster/docker/ubuntu1804-test-base/Dockerfile
new file mode 100644
index 0000000000..ebef3d76df
--- /dev/null
+++ b/taskcluster/docker/ubuntu1804-test-base/Dockerfile
@@ -0,0 +1,22 @@
+# This docker image only sets up packages on top of the original Ubuntu image.
+# Everything else is setup is a child docker image derived from this one, such
+# that changes to our scripts don't trigger the rebuild of this base image,
+# possibly leading to breakage. (See bug 1503756 and bug 1678451 for examples
+# of such recent breakages)
+FROM ubuntu:bionic-20200112
+MAINTAINER Edwin Takahashi <egao@mozilla.com>
+
+ADD apt-prefs /etc/apt/preferences.d/custom
+
+# %include taskcluster/docker/recipes/ubuntu1804-test-system-setup-base.sh
+ADD topsrcdir/taskcluster/docker/recipes/ubuntu1804-test-system-setup-base.sh /setup/system-setup.sh
+RUN bash /setup/system-setup.sh
+
+# gnome-keyring-daemon is configured to have the IPC_LOCK capability (to lock pages with secrets in
+# memory), but docker isn't run with that capability granted. So, if we were to try running
+# gnome-keyring-daemon without first clearing the capability, it would just exit with the message
+# "Operation not permitted". Luckily it doesn't actually require the capability.
+RUN setcap -r /usr/bin/gnome-keyring-daemon
+
+# Set a default command useful for debugging
+CMD ["/bin/bash", "--login"]
diff --git a/taskcluster/docker/ubuntu1804-test-base/apt-prefs b/taskcluster/docker/ubuntu1804-test-base/apt-prefs
new file mode 100644
index 0000000000..9a6882c7c2
--- /dev/null
+++ b/taskcluster/docker/ubuntu1804-test-base/apt-prefs
@@ -0,0 +1,18 @@
+# Make bionic-security and bionic take precedence over bionic-updates for
+# libc packages to the point of forcing downgrades. This works around the
+# update somehow turning a gst-launch fatal warning into a crash randomly.
+Package: libc-dev*
+Pin: release a=bionic-security
+Pin-Priority: 1001
+
+Package: libc6*
+Pin: release a=bionic-security
+Pin-Priority: 1001
+
+Package: libc-dev*
+Pin: release a=bionic
+Pin-Priority: 1001
+
+Package: libc6*
+Pin: release a=bionic
+Pin-Priority: 1001