Attempt to build the Dockerfile in singleuser

[kcpevey]

Summary

Attempt to build the Dockerfile in singleuser repo (https://repo1.dso.mil/dsop/opensource/metrostar/singleuser/-/blob/development/Dockerfile). If this is something we can build, its something we can test, and should test.

Report results here.

[iameskild]

I'm having trouble building the docker image because the base image needs to be pulled from a private registry which I don't have access to which makes sense.

Image: singleuser

 => ERROR [internal] load metadata for registry1.dso.mil/ironbank/opensource/metrostar/miniconda:4.12.0                 1.2s
------
 > [internal] load metadata for registry1.dso.mil/ironbank/opensource/metrostar/miniconda:4.12.0:
------
failed to solve with frontend dockerfile.v0: failed to create LLB definition: unexpected status code [manifests 4.12.0]: 401 Unauthorized

Reverse engineering the image:

The singleuser base image:

• registry1.dso.mil/ironbank/opensource/metrostar/miniconda:4.12.0

The miniconda base image:

• registry1.dso.mil/ironbank/redhat/ubi/ubi8:8.6
  • The public equivalent of this would be:
    • registry.access.redhat.com/ubi8/ubi:8.6

Current steps to build singleuser image:

1. From the scripts folder in the miniconda repo, run the following to download the tar files for each conda package.
   • python download_conda_packages.py
2. Build the docker image locally using the public equivalent base image:
   • docker build -t ib_miniconda:test . --build-arg BASE_REGISTRY=registry.access.redhat.com --build-arg BASE_IMAGE=ubi8/ubi --build-arg BASE_TAG=8.6
3. From the scripts folder in the singleuser repo, run the following to download the tar files for each conda package.
   • python download_conda_packages.py
4. Use this ib_miniconda:test image to build the singleuser image (update FROM ib_miniconda:test) by running:
   • docker build -t ib_singleuser:test .

We should be able to build this process into the test script.

[kcpevey]

@rycrow @tylerpotts is there any way we can access registry1.dso.mil/ironbank/opensource/metrostar/miniconda:4.12.0 ? Or the Dockerfile that builds it?

[kcpevey]

registry1.dso.mil/ironbank/opensource/metrostar/miniconda:4.12.0 is built from https://repo1.dso.mil/dsop/opensource/metrostar/miniconda/-/blob/development/Dockerfile

[kcpevey]

https://repo1.dso.mil/dsop/redhat/ubi/ubi8/-/blob/development/Dockerfile

[kcpevey]

Think through how this can be done outside of CI. Report back here.