File tree Expand file tree Collapse file tree 2 files changed +9
-3
lines changed Expand file tree Collapse file tree 2 files changed +9
-3
lines changed Original file line number Diff line number Diff line change @@ -57,7 +57,6 @@ gpgkey=https://pkgs.k8s.io/addons:/cri-o:/prerelease:/main/rpm/repodata/repomd.x
57
57
EOF
58
58
59
59
dnf install -y \
60
- cri-o \
61
60
conntrack \
62
61
container-selinux \
63
62
gcc \
72
71
openssl \
73
72
podman
74
73
74
+ # Podman installs /usr/libexec/crio/conmon
75
+ dnf download --repo cri-o --arch x86_64 cri-o
76
+ rpm -i --nodeps --force cri-o-*.rpm
77
+
75
78
# Load the prebuilt container image
76
79
podman load -i /vagrant/image.tar
77
80
Original file line number Diff line number Diff line change @@ -27,6 +27,9 @@ record_seccomp_profiles() {
27
27
k apply -f examples/profilerecording-seccomp-bpf.yaml
28
28
29
29
RUNTIMES=(runc crun)
30
+ # Default location for CRI-O specific runtime binaries
31
+ export PATH=" /usr/libexec/crio:$PATH "
32
+
30
33
for RUNTIME in " ${RUNTIMES[@]} " ; do
31
34
echo " For runtime $RUNTIME "
32
35
BASEPROFILE=examples/baseprofile-$RUNTIME .yaml
88
91
) " " $BASEPROFILE "
89
92
90
93
echo " Getting runtime version"
91
- VERSION=$( crio- " $RUNTIME " --version | grep " $RUNTIME version" | grep -oP ' \d+.*' )
94
+ VERSION=$( " $RUNTIME " --version | grep " $RUNTIME version" | grep -oP ' \d+.*' )
92
95
yq -i ' .metadata.name = "' " $RUNTIME " ' -v' " $VERSION " ' "' " $BASEPROFILE "
93
96
94
97
echo " Deleting seccomp profile"
100
103
101
104
for RUNTIME in " ${RUNTIMES[@]} " ; do
102
105
echo " Verifying that the profile for runtime $RUNTIME is available in the GitHub container registry"
103
- VERSION=$( crio- " $RUNTIME " --version | grep " $RUNTIME version" | grep -oP ' \d+.*' )
106
+ VERSION=$( " $RUNTIME " --version | grep " $RUNTIME version" | grep -oP ' \d+.*' )
104
107
cosign verify --certificate-identity-regexp ' .*' --certificate-oidc-issuer-regexp ' .*' \
105
108
" ghcr.io/security-profiles/$RUNTIME :v$VERSION "
106
109
done
You can’t perform that action at this time.
0 commit comments