Ecosyste.ms: Awesome

An open API service indexing awesome lists of open source software.

Awesome Lists | Featured Topics | Projects

https://github.com/travier/quay-containerfiles

Containerfiles for various personal projets. Those containers are hosted on Quay.io
https://github.com/travier/quay-containerfiles

Last synced: about 2 months ago
JSON representation

Containerfiles for various personal projets. Those containers are hosted on Quay.io

Awesome Lists containing this project

README

        

# Containerfiles for various personal projects

Those containers are based on the Fedora container image, built using GitHub
Actions and hosted on Quay.io.

Some might require volume mounts or manual configuration. See the individual
READMEs for more information.

Each `Containerfile` is in a specific folder in this repo. All repositories are
under the [travier](https://quay.io/user/travier) namespace.

## Service containers

| Quay.io repository | Description |
|-|-|
| [filebrowser](https://quay.io/repository/travier/filebrowser) | Based on [Filebrowser](https://github.com/filebrowser/filebrowser)'s official container image |
| [nginx](https://quay.io/repository/travier/nginx) | [nginx](https://nginx.org/) |
| [php-fpm-ttrss](https://quay.io/repository/travier/php-fpm-ttrss) | [PHP-FPM](https://www.php.net/manual/en/install.fpm.php) and modules for [Tiny Tiny RSS](https://tt-rss.org/) |
| [quasselcore](https://quay.io/repository/travier/quasselcore) | [Quassel IRC](https://quassel-irc.org/) |
| [unbound](https://quay.io/repository/travier/unbound) | [Unbound](https://www.nlnetlabs.nl/projects/unbound/about/) |

## Toolbox containers and tools

The toolbox container images are based on the Fedora toolbox container image.

| Quay.io repository | Description |
|-|-|
| [toolbox](https://quay.io/repository/travier/toolbox) | Personal toolbox for general use cases |
| [toolbox-kdedev](https://quay.io/repository/travier/toolbox-kdedev) | Tools and dependencies needed for KDE development |

## Unmaintained images and experiments

Those images are kept in the repo for reference and sporadic uses but are not
actively maintained nor regularly updated.

| Quay.io repository | Description |
|-|-|
| [kdedev](https://quay.io/repository/travier/kdedev) | Experiment to make a smaller KDE development toolbox (work in progress, not maintained, use `toolbox-kdedev` instead) |
| [toolbox-cloud-cli](https://quay.io/repository/travier/toolbox-cloud-cli) | Cloud cli pre-installed (not actively maintained, no regular updates) |
| [toolbox-texlive](https://quay.io/repository/travier/toolbox-texlive) | TeX Live tools for LaTeX |

## Verifying sigstore container signatures with podman

How to configure sigstore signature verification in podman:

```
$ sudo mkdir /etc/pki/containers
$ curl -O "https://raw.githubusercontent.com/travier/quay-containerfiles/main/quay.io-travier-containers.pub"
$ sudo cp quay.io-travier-containers.pub /etc/pki/containers/
$ sudo restorecon -RFv /etc/pki/containers

$ cat /etc/containers/registries.d/quay.io-travier.yaml
docker:
quay.io/travier:
use-sigstore-attachments: true
$ sudo restorecon -RFv /etc/containers/registries.d/quay.io-travier.yaml

$ cat /etc/containers/policy.json
{
"default": [
{
"type": "reject"
}
],
"transports": {
"docker": {
...
"quay.io/travier": [
{
"type": "sigstoreSigned",
"keyPath": "/etc/pki/containers/quay.io-travier-containers.pub",
"signedIdentity": {
"type": "matchRepository"
}
}
],
...
"": [
{
"type": "insecureAcceptAnything"
}
]
},
...
}
}
...
```

## License

See [LICENSE](LICENSE) or [CC0](https://creativecommons.org/public-domain/cc0/).