https://github.com/foundata/oci-debian11-itt
OCI container image config: Debian 11 (Bullseye), Integration Test Target (ITT)
https://github.com/foundata/oci-debian11-itt
continuous-integration debian docker-image oci-image podman podman-image podman-systemd
Last synced: 17 days ago
JSON representation
OCI container image config: Debian 11 (Bullseye), Integration Test Target (ITT)
- Host: GitHub
- URL: https://github.com/foundata/oci-debian11-itt
- Owner: foundata
- Created: 2025-03-12T13:36:56.000Z (about 1 year ago)
- Default Branch: main
- Last Pushed: 2025-03-16T22:52:04.000Z (about 1 year ago)
- Last Synced: 2025-10-23T13:43:57.828Z (7 months ago)
- Topics: continuous-integration, debian, docker-image, oci-image, podman, podman-image, podman-systemd
- Language: Dockerfile
- Homepage: https://foundata.com/en/projects/oci-images/#itt
- Size: 32.2 KB
- Stars: 0
- Watchers: 1
- Forks: 0
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
- License: LICENSES/GPL-3.0-or-later.txt
Awesome Lists containing this project
README
# OCI Image: Debian 11 (Bullseye), Integration Test Target (ITT)
[Debian 11 (Bullseye)](https://www.debian.org/releases/bullseye/index.en.html) (Linux) for integration testing.
Main features of the [OCI](https://opencontainers.org/) image:
- Fully functional [`systemd`](https://systemd.io/) (not a shim)
- Unprivileged execution support
The image aims to replicate a "VM-like" operating system environment while maintaining container portability, making it ideal for:
- DevOps validation (like testing Ansible collections, roles, and playbooks)
- CI pipeline testing for quick smoke tests (e.g. before running full VM integration test)
- Development environments requiring systemd
- Testing system services and daemons
- [Tags](#tags)
- [How to build](#build)
- [How to use](#usage)
- [Non-goals / Limitations](#limitations)
- [Licensing, copyright](#licensing-copyright)
- [Container configuration, repository](#licensing-copyright-project)
- [Container image](#licensing-copyright-image)
- [Author information](#author-information)
- `latest`: Latest release of this image.
Images are typically rebuilt approximately every four weeks to include updates and security patches.
To build the image locally, do the following:
1. [Install Podman](https://podman.io/docs/installation).
2. Clone or pull the latest changes from the [`foundata/oci-debian11-itt` git repository](https://github.com/foundata/oci-debian11-itt).
3. Change into the directory and execute the [build command](https://docs.podman.io/en/latest/markdown/podman-build.1.html):
```bash
podman build -t debian11-itt .
```
1. [Install Podman](https://podman.io/docs/installation).
2. Use the image you built earlier or pull the image from a registry:
- [Quay](https://quay.io/repository/foundata/debian11-itt):
```bash
podman pull quay.io/foundata/debian11-itt:latest
```
3. Run a container from the image:
```bash
podman run --detach debian11-itt:latest
```
Note: **On SELinux-enabled systems**, systemd attempts to write to the cgroup filesystem, which might be denied by default security policies. To allow this operation, you must **enable the `container_manage_cgroup` boolean** on the host system: `sudo setsebool -P container_manage_cgroup 1`
4. You can now work with the container, e.g. open a Bash terminal:
```bash
podman ps
podman exec -it "" "/bin/bash"
```
Look around and check if `systemd` is really working:
```bash
cat /etc/os-release
systemctl status
```
This image is intentionally scoped for integration testing and development scenarios. It prioritizes compatibility and functionality over security and performance and is for **usage in isolated environments only**.
Specifically, it does **not** provide:
- Guaranteed compatibility with container runtimes other than [Podman](https://podman.io/). We do *not* support [Docker](https://www.docker.com/) (but it might work).
- A production-hardened or security-optimized environment (e.g. CIS hardening, minimal attack surface).
- Support for long-running, multi-tenant, or internet-facing workloads.
- Optimizations for image size, fast startup time, or minimal resource usage.
- High availability, clustering, or orchestration features (e.g. Kubernetes tuning).
### Container configuration, repository
Copyright (c) 2025, 2026 [foundata GmbH](https://foundata.com/) (https://foundata.com)
This project is licensed under the GNU General Public License v3.0 or later (SPDX-License-Identifier: `GPL-3.0-or-later`), see [`LICENSES/GPL-3.0-or-later.txt`](LICENSES/GPL-3.0-or-later.txt) for the full text.
The [`REUSE.toml`](REUSE.toml) file provides detailed licensing and copyright information in a human- and machine-readable format. This includes parts that may be subject to different licensing or usage terms, such as third-party components. The repository conforms to the [REUSE specification](https://reuse.software/spec/). You can use [`reuse spdx`](https://reuse.readthedocs.io/en/latest/readme.html#cli) to create a [SPDX software bill of materials (SBOM)](https://en.wikipedia.org/wiki/Software_Package_Data_Exchange).
[](https://api.reuse.software/info/github.com/foundata/oci-debian11-itt)
The pre-built image itself bundles various software components along with direct and indirect dependencies, which are subject to their respective licenses. When using the pre-built image, **you are responsible for ensuring that your usage complies with all relevant licenses** for the software contained within the image.
For further licensing information about the software contained in this image, please refer to the following resources:
- https://www.debian.org/legal/licenses/
This [project](https://foundata.com/en/projects/) was created and is maintained by [foundata](https://foundata.com/).