rocky 10 build

Author: buluma

.github/workflows/rockylinux10.yml

@@ -0,0 +1,105 @@
+---
+name: rockylinux10
+
+on:
+  pull_request:
+  push:
+    paths:
+      - 'rockylinux10/**'
+      - '.github/workflows/rockylinux10.yml'
+  schedule:
+    - cron: '10 6,15 * * 1,6'
+  workflow_dispatch:
+
+permissions: write-all
+
+concurrency:
+  group: ${{ github.ref }}-${{ github.workflow }}
+  cancel-in-progress: true
+
+jobs:
+  # Test the image builds and works correctly.
+  test:
+    name: Test rockylinux10
+    runs-on: ${{ matrix.os }}
+    strategy:
+      matrix:
+        os: [ubuntu-22.04]
+
+    steps:
+      - uses: actions/[email protected]
+
+      - name: Test building image.
+        run: cd rockylinux10 && docker build -t rockylinux10 .
+
+      - name: Run the built image.
+        run: docker run --name test-container -d --privileged -v /sys/fs/cgroup:/sys/fs/cgroup:rw rockylinux10
+
+  # If on master branch, build and release image.
+  release:
+    name: Release
+    runs-on: ubuntu-latest
+    needs: test
+    if: github.ref == 'refs/heads/master'
+
+    steps:
+      - uses: actions/checkout@v4
+      - name: Docker meta
+        id: meta
+        uses: docker/metadata-action@v5
+        with:
+          # list of Docker images to use as base name for tags
+          images: |
+            ${{ github.repository }}:rockylinux10
+          # generate Docker tags based on the following events/attributes
+          tags: |
+            type=schedule
+            type=ref,event=branch
+            type=ref,event=pr
+            type=semver,pattern={{version}}
+            type=semver,pattern={{major}}.{{minor}}
+            type=semver,pattern={{major}}
+            type=sha
+      - uses: docker/setup-qemu-action@v3
+      - uses: docker/setup-buildx-action@v3
+
+      - name: Login to DockerHub
+        if: github.event_name != 'pull_request'
+        uses: docker/login-action@v3
+        with:
+          username: ${{ secrets.DOCKERHUB_USERNAME }}
+          password: ${{ secrets.DOCKERHUB_TOKEN }}
+
+      - name: Login to GHCR
+        if: github.event_name != 'pull_request'
+        uses: docker/login-action@v3
+        with:
+          registry: ghcr.io
+          username: ${{ github.repository_owner }}
+          password: ${{ secrets.GITHUB_TOKEN }}
+
+      - name: Build and push image.
+        uses: docker/build-push-action@v5
+        with:
+          context: rockylinux10/
+          sbom: true
+          provenance: mode=max
+          file: rockylinux10/Dockerfile
+          platforms: linux/amd64, linux/arm64
+          push: ${{ github.event_name != 'pull_request' }}
+          tags: |
+            ${{ github.repository }}:rockylinux10
+          labels: ${{ steps.meta.outputs.labels }}
+
+      - name: Docker Scout
+        id: docker-scout
+        if: ${{ github.event_name == 'pull_request' }}
+        uses: docker/[email protected]
+        with:
+          command: quickview,cves,recommendations,sbom,environment
+          image: ${{ steps.meta.outputs.tags }}
+          environment: prod
+          organization: shadownet
+          only-severities: critical,high,medium
+          exit-code: true
+          only-fixed: true

rockylinux10/Dockerfile

@@ -0,0 +1,41 @@
+FROM rockylinux:10
+LABEL maintainer="Michael Buluma"
+LABEL build_date="2025-12-01"
+
+ENV container=docker
+
+ENV pip_packages "ansible"
+
+# Install systemd -- See https://hub.docker.com/_/centos/
+RUN rm -f /lib/systemd/system/multi-user.target.wants/*;\
+rm -f /etc/systemd/system/*.wants/*;\
+rm -f /lib/systemd/system/local-fs.target.wants/*; \
+rm -f /lib/systemd/system/sockets.target.wants/*udev*; \
+rm -f /lib/systemd/system/sockets.target.wants/*initctl*; \
+rm -f /lib/systemd/system/basic.target.wants/*;\
+rm -f /lib/systemd/system/anaconda.target.wants/*;
+
+# Install requirements.
+RUN yum -y install rpm dnf-plugins-core \
+ && yum -y update \
+ && yum -y install \
+      epel-release \
+      initscripts \
+      sudo \
+      which \
+      hostname \
+      libyaml \
+      python3 \
+      python3-pip \
+      python3-pyyaml \
+ && yum clean all
+
+COPY requirements.txt ./
+RUN pip install -r requirements.txt
+
+# Upgrade packages.
+RUN yum -y update \
+ && yum clean all
+
+VOLUME ["/sys/fs/cgroup"]
+CMD ["/usr/lib/systemd/systemd"]

rockylinux10/requirements.txt

@@ -0,0 +1,6 @@
+ansible-compat == 4.*
+molecule == 6.*
+molecule-plugins[docker] == 23.*
+ansible-lint == 6.*
+paramiko == 3.*
+setuptools==69.2.0