Merge pull request #1 from redhat-et/tegra

Add initial workflow for building tegra base image

Author: NickCao

.github/workflows/build-rhel-bootc-image.yml

@@ -0,0 +1,101 @@
+# Reference: https://github.com/redhat-cop/redhat-image-mode-actions
+name: Build RHEL bootc image
+on:
+  workflow_call:
+    inputs:
+      containerfile:
+        type: string
+        required: true
+      dest-image:
+        type: string
+        required: true
+      tag-list:
+        type: string
+        required: true
+      runs-on:
+        type: string
+        default: ubuntu-24.04-arm
+
+jobs:
+  rhel-bootc-image-build:
+    name: Build RHEL bootc image
+    runs-on: ${{ inputs.runs-on }}
+    env:
+      # Disable Subscription Manager container passthrough
+      SMDEV_CONTAINER_OFF: 1
+
+      # Source registry for base image
+      SOURCE_REGISTRY_HOST: "registry.redhat.io"
+
+      # Destination registry for built images
+      DEST_REGISTRY_HOST: "quay.io"
+
+      # Destination image namespace and name (eg: myrepo/myimage)
+      DEST_IMAGE: ${{ inputs.dest-image }}
+
+      # List of tags to publish
+      TAGLIST: ${{ inputs.tag-list }}
+
+      # Containerfile to build
+      CONTAINERFILE: ${{ inputs.containerfile }}
+
+    container:
+      image: registry.access.redhat.com/ubi9/ubi
+      options: --privileged
+    permissions:
+      contents: write
+      packages: write
+
+    steps:
+      - name: Clone the repository
+        uses: actions/checkout@v4
+
+      - name: Get container tools in UBI builder
+        run: dnf -y install podman buildah skopeo
+
+      - name: Access a subscription via activation key
+        run: subscription-manager register --org=${{ secrets.RHT_ORGID }} --activationkey=${{ secrets.RHT_ACT_KEY }}
+
+      # workaround for https://github.com/redhat-actions/podman-login/issues/42 since the docker config from the host doesn't come up to the container
+      - name: Workaround open podman-login action issue
+        env:
+          auth: "{ \"auths\": {} }"
+        run: |
+          mkdir -p $HOME/.docker
+          echo $auth > $HOME/.docker/config.json
+
+      - name: Log in to the RHT terms based registry
+        uses: redhat-actions/podman-login@v1
+        with:
+          registry: ${{ env.SOURCE_REGISTRY_HOST }}
+          username: ${{ secrets.SOURCE_REGISTRY_USER }}
+          password: ${{ secrets.SOURCE_REGISTRY_PASSWORD }}
+          auth_file_path: /run/containers/0/auth.json
+
+      - name: Use buildah bud to create the image
+        id: build-image
+        uses: redhat-actions/buildah-build@v2
+        with:
+          image: ${{ env.DEST_IMAGE }}
+          tags: ${{ env.TAGLIST }}
+          containerfiles: ${{ env.CONTAINERFILE }}
+
+      - name: Log in to the Container registry
+        uses: redhat-actions/podman-login@v1
+        with:
+          registry: ${{ env.DEST_REGISTRY_HOST }}
+          username: ${{ secrets.DEST_REGISTRY_USER }}
+          password: ${{ secrets.DEST_REGISTRY_PASSWORD }}
+          auth_file_path: /run/containers/0/auth.json
+
+      - name: Push to Container Repository
+        id: push-to-ghcr
+        uses: redhat-actions/push-to-registry@v2
+        with:
+          image: ${{ steps.build-image.outputs.image }}
+          tags: ${{ steps.build-image.outputs.tags }}
+          registry: ${{ env.DEST_REGISTRY_HOST }}
+
+      - name: Clean up the subscription
+        if: always()
+        run: subscription-manager unregister

.github/workflows/tegra.yml

@@ -0,0 +1,15 @@
+name: Build RHEL bootc image for Nvidia Tegra
+on:
+  push:
+    branches:
+      - "main"
+    paths:
+      - "tegra/**"
+jobs:
+  build-tegra-base:
+    uses: ./.github/workflows/build-rhel-bootc-image.yml
+    secrets: inherit
+    with:
+      containerfile: tegra/Containerfile.base
+      dest-image: "redhat-et/rhel-bootc-tegra"
+      tag-list: "base"

tegra/Containerfile.base

@@ -0,0 +1,11 @@
+FROM registry.redhat.io/rhel9/rhel-bootc:9.4-1730828483
+
+RUN curl -s -L https://nvidia.github.io/libnvidia-container/stable/rpm/nvidia-container-toolkit.repo | \
+    sudo tee /etc/yum.repos.d/nvidia-container-toolkit.repo && \
+    curl -s -L https://repo.download.nvidia.com/jetson/rhel-9.4/jp6.1/nvidia-l4t.repo | \
+    sudo tee /etc/yum.repos.d/nvidia-l4t.repo && \
+    sudo dnf -y install \
+      nvidia-jetpack-kmod \
+      nvidia-jetpack-all \
+      nvidia-container-toolkit && \
+    sudo dnf clean all