在 linux/amd64 上面使用 qemu 构建 debian docker 镜像

吴小白

以下操作均在 Debian 12 上面进行操作，其他系统应该也行，可以自测。

# 注意，请不要在生产环境操作。
sed -i "s@bookworm@trixie@g" /etc/apt/sources.list
apt update
apt upgrade
apt install sudo vim wget curl qemu-system-loongarch64 qemu-user-static debian-ports-archive-keyring debootstrap git git-lfs
systemctl restart systemd-binfmt.service

安装 Docker Engine

官方文档：https://docs.docker.com/engine/install/debian/

# Add Docker's official GPG key:
sudo apt-get update
sudo apt-get install ca-certificates curl gnupg
sudo install -m 0755 -d /etc/apt/keyrings
curl -fsSL https://download.docker.com/linux/debian/gpg | sudo gpg --dearmor -o /etc/apt/keyrings/docker.gpg
sudo chmod a+r /etc/apt/keyrings/docker.gpg

# Add the repository to Apt sources:
echo \
  "deb [arch=$(dpkg --print-architecture) signed-by=/etc/apt/keyrings/docker.gpg] https://download.docker.com/linux/debian \
  $(. /etc/os-release && echo "$VERSION_CODENAME") stable" | \
  sudo tee /etc/apt/sources.list.d/docker.list > /dev/null

sudo apt-get update
sudo apt-get install docker-ce docker-ce-cli containerd.io docker-buildx-plugin docker-compose-plugin

systemctl start docker

龙芯官方新世界仓库：https://lcr.loongnix.cn/search

如果你希望自己构建基础镜像，可以继续看下面的操作，否则直接使用新世界仓库的镜像即可

cd /opt
git clone --depth=1 https://github.com/debuerreotype/debuerreotype

修改 debuerreotype 代码

懒人链接：https://github.com/loong64/docker-debian-artifacts/tree/dist-loong64

cd /opt/debuerreotype

####
# 这样做的原因是因为 snapshot.debian.org 网站的 debian-port 最近一次快照是 2023-07 年的
# 缺失很多依赖，所以替换成最新的 debian-ports 仓库
sed -i 's@echo "http://snapshot.debian.org/archive/$archive/$t"@# echo "http://snapshot.debian.org/archive/$archive/$t"@g' scripts/.snapshot-url.sh
echo 'echo "http://deb.debian.org/debian-ports"' >> scripts/.snapshot-url.sh

git diff

diff --git a/scripts/.snapshot-url.sh b/scripts/.snapshot-url.sh
index d804de9..de1c57c 100755
--- a/scripts/.snapshot-url.sh
+++ b/scripts/.snapshot-url.sh
@@ -20,4 +20,5 @@ timestamp="${1:-}"; shift || eusage 'missing timestamp'
 archive="${1:-debian}"
 
 t="$(date --date "$timestamp" '+%Y%m%dT%H%M%SZ')"
-echo "http://snapshot.debian.org/archive/$archive/$t"
+# echo "http://snapshot.debian.org/archive/$archive/$t"
+echo "http://deb.debian.org/debian-ports"

ARCH=loong64 SUITE=unstable CODENAME="" TIMESTAMP="today 00:00:00" ./.validate-debian.sh

# 之后会在 validate 目录生成所需要的文件。

开始制作镜像

cd validate/20231204/loong64/sid

cat > Dockerfile << "EOF"
FROM scratch
ADD rootfs.tar.xz /
CMD ["bash"]
EOF

# slim 也拷贝一份
cp Dockerfile slim/Dockerfile

构建 debian:sid和 debian:sid-slim

docker build -t debian:sid . --load

cd slim
docker build -t debian:sid-slim . --load

# 最终成果
docker images
REPOSITORY       TAG                  IMAGE ID       CREATED       SIZE
debian           sid             37b9a5bcb70f   7 hours ago   167MB
debian           sid-slim        0b0915f3d8da   9 hours ago   126MB

容器运行

docker run --rm -it debian:sid-slim bash
name -a
exit

# 特权启动
docker run --rm --privileged -it debian:sid-slim bash
name -a
exit

吴小白

构建 golang 和 python 镜像

cd /opt
git clone --depth=1 https://github.com/docker-library/python

cd /opt/python/3.9/slim-bookworm
docker build -t python:3.9-slim-bookworm

/opt/python/3.10/slim-bookworm
docker build -t python:3.10-slim-bookworm

/opt/python/3.11/slim-bookworm
docker build -t python:3.11-slim-bookworm

/opt/python/3.12/slim-bookworm
docker build -t python:3.12-slim-bookworm

cd /opt
git clone --depth=1 https://github.com/docker-library/buildpack-deps

cd /opt/buildpack-deps/debian/bookworm/curl
docker build -t buildpack-deps:bookworm-curl . --load

cd /opt/buildpack-deps/debian/bookworm/scm
docker build -t buildpack-deps:bookworm-scm . --load

cd /opt
git clone --depth=1 https://github.com/docker-library/golang

cd /opt/golang/1.21/bookworm
# 修改 Dockerfile 加入 loong64 架构的文件
diff --git a/1.21/bookworm/Dockerfile b/1.21/bookworm/Dockerfile
index d89a3c9..1e17b04 100644
--- a/1.21/bookworm/Dockerfile
+++ b/1.21/bookworm/Dockerfile
@@ -57,6 +57,10 @@ RUN set -eux; \
                        url='https://dl.google.com/go/go1.21.4.linux-riscv64.tar.gz'; \
                        sha256='9695edd2109544b364daddb32816f5c7980f1f48b8490c51fa2c167f5b2eca48'; \
                        ;; \
+               'loong64') \
+                       url='https://dl.google.com/go/go1.21.4.linux-loong64.tar.gz'; \
+                       sha256='5ae2508ff678bee7c1254820d7341ae758e61744941887d7f59a0d9d77d13ab2'; \
+                       ;; \
                's390x') \
                        url='https://dl.google.com/go/go1.21.4.linux-s390x.tar.gz'; \
                        sha256='7a75ba4afc7a96058ca65903d994cd862381825d7dca12b2183f087c757c26c0'; \

# 可以从 https://go.dev/dl/ 获取下载路径和校验文件

docker build -t golang:1.21-bookworm . --load

# 构建完成后
docker images
REPOSITORY       TAG                  IMAGE ID       CREATED       SIZE
python           3.11-slim-bookworm   fb1dc320cd88   2 hours ago   218MB
python           3.10-slim-bookworm   f6c1b075cee6   3 hours ago   216MB
golang           1.21-bookworm        3e14d664be47   5 hours ago   867MB
python           3.9-slim-bookworm    11c56225e042   6 hours ago   214MB
buildpack-deps   bookworm-scm         3731caaa5e7c   7 hours ago   436MB
buildpack-deps   bookworm-curl        aa64396c3645   7 hours ago   245MB
debian           bookworm             37b9a5bcb70f   7 hours ago   167MB
debian           bookworm-slim        0b0915f3d8da   9 hours ago   126MB
golang           1.21-bullseye        188861ee8249   12 days ago   746MB

构建出 golang 镜像后，我们就可以构建 docker containerd 相关的组件了。

jint

构建出来的是新世界的镜像吗

吴小白

jint 是的

Qinka

新世界的仓库 lcr.loongnix.cn 崩溃了，有替代品么？

吴小白

Qinka lcr 可以访问呀，如果你那边访问有问题的话也可以自己构建下需要的镜像。

基础镜像这里的也可以使用：https://github.com/loong64/docker-library

本站文章除其作者特殊声明外，一律采用CC BY-NC-SA 4.0许可协议进行授权。
进行转载或二次创作时务必以相同协议进行共享，严禁用于商业用途。