From ad99ac9356a875b3e2afbf020a4a7d58f03417dd Mon Sep 17 00:00:00 2001 From: Kevin Brubeck Unhammer Date: Thu, 25 Jan 2024 16:10:21 +0100 Subject: doc: Note on how to use shadowSetup with buildLayeredImage (#267220) * Note on how to use shadowSetup with buildLayeredImage * Update doc/build-helpers/images/dockertools.section.md --------- Co-authored-by: Silvan Mosberger --- doc/build-helpers/images/dockertools.section.md | 12 ++++++++++++ 1 file changed, 12 insertions(+) (limited to 'doc/build-helpers') diff --git a/doc/build-helpers/images/dockertools.section.md b/doc/build-helpers/images/dockertools.section.md index e732e0472926..d063f1961d89 100644 --- a/doc/build-helpers/images/dockertools.section.md +++ b/doc/build-helpers/images/dockertools.section.md @@ -845,6 +845,18 @@ buildImage { Creating base files like `/etc/passwd` or `/etc/login.defs` is necessary for shadow-utils to manipulate users and groups. +When using `buildLayeredImage`, you can put this in `fakeRootCommands` if you `enableFakechroot`: +```nix +buildLayeredImage { + name = "shadow-layered"; + + fakeRootCommands = '' + ${pkgs.dockerTools.shadowSetup} + ''; + enableFakechroot = true; +} +``` + ## fakeNss {#ssec-pkgs-dockerTools-fakeNss} If your primary goal is providing a basic skeleton for user lookups to work, -- cgit 1.4.1