Dockerfile.rhel

FROM images.paas.redhat.com/osci/base-minimal
LABEL maintainer "OSCI"
LABEL description="rpminspect for RHEL"

# https://copr.fedorainfracloud.org/coprs/g/osci/rpminspect/
ENV RPMINSPECT_PACKAGE_NAME=rpminspect
# https://copr.devel.redhat.com/coprs/dcantrell/rpminspect-data-redhat/
ENV RPMINSPECT_DATA_PACKAGE_NAME=rpminspect-data-redhat

ENV KOJI_BIN=/usr/bin/brew
ENV RPMINSPECT_CONFIG=/usr/share/rpminspect/redhat.yaml

# Add repository for "brew" command
RUN cd /etc/yum.repos.d/ && \
    curl -L -O https://download.devel.redhat.com/rel-eng/RCMTOOLS/rcm-tools-rhel-9-baseos.repo

# Add COPR repository with rpminspect
RUN cd /etc/yum.repos.d/ && \
    curl -L -O https://copr.fedorainfracloud.org/coprs/g/osci/rpminspect/repo/epel-9/group_osci-rpminspect-epel-9.repo

# Add COPR repository with rpminspect data package
RUN cd /etc/yum.repos.d/ && \
    curl -L -O https://copr.devel.redhat.com/coprs/dcantrell/rpminspect-data-redhat/repo/epel-9/dcantrell-rpminspect-data-redhat-epel-9.repo

# Add COPR repository with latest fedora-license-data
RUN cd /etc/yum.repos.d/ && \
    curl -L -O  https://copr.fedorainfracloud.org/coprs/g/osci/fedora-license-data/repo/epel-9/group_osci-fedora-license-data-epel-9.repo

# Update and install dependencies
RUN dnf -y update &&\
    dnf -y install --enablerepo=rhel-9-buildroot \
    ${RPMINSPECT_PACKAGE_NAME} \
    ${RPMINSPECT_DATA_PACKAGE_NAME} \
    clamav-update \
    python3-pyyaml \
    python3-click \
    python3-retry \
    python3-GitPython \
    koji \
    git \
    jq \
    brewkoji \
    "libabigail >= 2.5" \
    "annobin-annocheck >= 12.59" \
    && dnf clean all

# Prepare the configuration file to run rpminspect against Brew stage.
RUN cp /usr/share/rpminspect/redhat.yaml /usr/share/rpminspect/redhat-stage.yaml && \
    sed -i 's,brewhub.engineering,brewhub.stage.engineering,g' /usr/share/rpminspect/redhat-stage.yaml && \
    sed -i 's,download.devel.redhat.com,brewweb.stage.engineering.redhat.com,g' /usr/share/rpminspect/redhat-stage.yaml

RUN freshclam

COPY *.sh *.py /usr/local/bin/