Container image containing renovate. Based on WolfiOS and built using the apko-publish GitHub Action.
The image is inspired by the Chainguard node image, i.e. I adapted the apko.yaml file used to build that image.
To make this more usable for my use cases, I included gnupg (to have GPG signing of commits made by renovate) and flux, to allow updating Flux manifests.
To have the image fully work with signals (i.e. SIGTERM), the image runs tini as "init system".
Kudos to the Chainguard team for making it so easy and painless to build a small and secure image!
The image can be tested using the test_the_image.sh, which will run this with
Podman and will output the version:
$ ./test_the_image.sh
Trying to pull ghcr.io/kastl-ars/wolfi-renovate-tini-git-flux:22...
Getting image source signatures
Copying blob 7e5a0c5b4516 skipped: already exists
Copying config 9815666748 done |
Writing manifest to image destination
(node:1) [DEP0040] DeprecationWarning: The `punycode` module is deprecated.
Please use a userland alternative instead.
(Use `node --trace-deprecation ...` to show where the warning was created)
37.381.0
$
The container image contains software packages that are direct or transitive
dependencies. As renovate is the most prominent one, I have taken its license
AGPL-3.0-only as a license for this repository, too.