More Podman work needed

[Uri Simchoni]

I chose the quay.io/podman/stable image because it seemed to have 
everything we need to carry out the process but come to think of it, I 
see no harm in installing packages as a preliminary step in the build 
pipeline. The extra cost of installing packages isn't significant 
considering that we rebuild images less than once per week.

So we can start with centos/centos:stream9 and install podman and 
diffutils and whatever else is needed as a first step.

One thing that did strike me as odd concerning 
quay.io/centos/centos:stream9 was that when installing packages I had to 
OK the installation of a GPG key, and I wonder why those don't come 
pre-installed on the image and how can I trust the repository if I don't 
have the keys pre-installed (or maybe I can just forget about package 
signatures, if we already trust distro repos in the image building process).

Does that seem reasonable?

On 6/8/22 15:03, Andreas Schneider wrote:
> On Wednesday, June 8, 2022 5:23:09 AM CEST Andrew Bartlett via samba-technical
> wrote:
>> Kia Ora Uri,
>>
>> Thanks so much for the podman work, this was awesome!
>>
>> We have had a couple of niggles on the CI recently, and one was
>> that quay.io/podman/stable is following Fedora images fairly closely,
>> and 'diff' got dropped from fedora 36 by default.  Ouch!
> 
> I would suggest to use CentOS 9 Stream
> 
> https://quay.io/repository/centos/centos?tab=tags <<< stream9
> 
> instead.
> 
>