Skip to content

Dockerfile.sdk-*: Disable Portage sandboxes during all image builds #4071

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
chewi merged 1 commit into from
Jun 4, 2026
+6 −3
Merged

Dockerfile.sdk-*: Disable Portage sandboxes during all image builds #4071

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
3 changes: 2 additions & 1 deletion sdk_lib/Dockerfile.lean-arch
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -5,7 +5,8 @@ ARG RMARCH
ARG RMCROSS

RUN if [ -n "$RMCROSS" ]; then \
sudo crossdev --clean --force "$RMCROSS"; \
FEATURES="-ipc-sandbox -network-sandbox -pid-sandbox" \
sudo crossdev --clean --force "$RMCROSS"; \
Comment thread
krnowak marked this conversation as resolved.
fi

RUN if [ -n "$RMARCH" ]; then \
Expand Down
3 changes: 2 additions & 1 deletion sdk_lib/Dockerfile.sdk-build
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -7,7 +7,8 @@ ARG OFFICIAL=0
# mark build as official where appropriate
RUN echo "export COREOS_OFFICIAL=$OFFICIAL" > /mnt/host/source/.env

RUN /home/sdk/sdk_entry.sh ./sdk_lib/setup_boards.sh start "${BINHOST}"
RUN FEATURES="-ipc-sandbox -network-sandbox -pid-sandbox" \
/home/sdk/sdk_entry.sh ./sdk_lib/setup_boards.sh start "${BINHOST}"

RUN rm /mnt/host/source/.env
RUN rm -rf /home/sdk/toolchain-pkgs
Expand Down
3 changes: 2 additions & 1 deletion sdk_lib/Dockerfile.sdk-import
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -48,7 +48,8 @@ RUN chmod 755 /home/sdk/sdk_entry.sh

# This should be a NOP; if you see packages being rebuilt
# it's likely that scripts and SDK tarball are out of sync
RUN /home/sdk/sdk_entry.sh ./update_chroot --toolchain_boards="amd64-usr arm64-usr"
RUN FEATURES="-ipc-sandbox -network-sandbox -pid-sandbox" \
/home/sdk/sdk_entry.sh ./update_chroot --toolchain_boards="amd64-usr arm64-usr"

# Clean up ephemeral key directory variables that were added during build
RUN sed -i -e '/export MODULE_SIGNING_KEY_DIR=/d' \
Expand Down