From 60a7cbeb738e43c9b8576b05e49b6cb002c4fdeb Mon Sep 17 00:00:00 2001 From: Ilya Buziuk Date: Fri, 31 Jul 2026 10:48:44 +0200 Subject: [PATCH 1/4] feat:bubblewrap Signed-off-by: Ilya Buziuk --- README.md | 4 ++++ universal/ubi10/Dockerfile | 5 +++++ universal/ubi9/Dockerfile | 5 +++++ 3 files changed, 14 insertions(+) diff --git a/README.md b/README.md index bcb8c45a..510ab81f 100644 --- a/README.md +++ b/README.md @@ -180,6 +180,8 @@ docker run -ti --rm quay.io/devfile/universal-developer-image:ubi9-latest bash | `docker` |`` | | `docker-compose` |`` | | `kamel` |`` | +|------SANDBOX---------|-------------------------------------| +| `bubblewrap` |`bubblewrap` | | **TOTAL SIZE** | **8.75GB** (3.6GB compressed) | **Libraries:** @@ -263,6 +265,8 @@ docker run -ti --rm quay.io/devfile/universal-developer-image:ubi10-latest bash | `skaffold` |`` | | `kamel` |`v2.8.0` | | `shellcheck` |`v0.11.0` | +|------SANDBOX---------|-------------------------------------| +| `bubblewrap` |`bubblewrap` | | **TOTAL SIZE** | **TBD** | **Libraries:** diff --git a/universal/ubi10/Dockerfile b/universal/ubi10/Dockerfile index 112e0c4c..ae07ac16 100644 --- a/universal/ubi10/Dockerfile +++ b/universal/ubi10/Dockerfile @@ -554,6 +554,11 @@ RUN dnf -y install bash-completion \ && dnf clean all \ && rm -rf /var/cache/yum +# bubblewrap +RUN dnf -y install bubblewrap \ + && dnf clean all \ + && rm -rf /var/cache/yum + ## tmux - using pre-built binaries (not available in UBI repos) RUN <<'EOF' set -euf -o pipefail diff --git a/universal/ubi9/Dockerfile b/universal/ubi9/Dockerfile index 543ed9c0..bf7c533a 100644 --- a/universal/ubi9/Dockerfile +++ b/universal/ubi9/Dockerfile @@ -521,6 +521,11 @@ RUN dnf -y install bash-completion \ && dnf clean all \ && rm -rf /var/cache/yum +# bubblewrap +RUN dnf -y install bubblewrap \ + && dnf clean all \ + && rm -rf /var/cache/yum + ## tmux - using pre-built binaries (not available in UBI repos) RUN <<'EOF' set -euf -o pipefail From 08cc66726429f37d4c286107408b9e336f4efce5 Mon Sep 17 00:00:00 2001 From: Ilya Buziuk Date: Fri, 31 Jul 2026 11:18:26 +0200 Subject: [PATCH 2/4] fix: no dnf package available Signed-off-by: Ilya Buziuk --- README.md | 4 ++-- universal/ubi10/Dockerfile | 32 ++++++++++++++++++++++++++++---- 2 files changed, 30 insertions(+), 6 deletions(-) diff --git a/README.md b/README.md index 510ab81f..f7ecfc3b 100644 --- a/README.md +++ b/README.md @@ -181,7 +181,7 @@ docker run -ti --rm quay.io/devfile/universal-developer-image:ubi9-latest bash | `docker-compose` |`` | | `kamel` |`` | |------SANDBOX---------|-------------------------------------| -| `bubblewrap` |`bubblewrap` | +| `bubblewrap` |`` | | **TOTAL SIZE** | **8.75GB** (3.6GB compressed) | **Libraries:** @@ -266,7 +266,7 @@ docker run -ti --rm quay.io/devfile/universal-developer-image:ubi10-latest bash | `kamel` |`v2.8.0` | | `shellcheck` |`v0.11.0` | |------SANDBOX---------|-------------------------------------| -| `bubblewrap` |`bubblewrap` | +| `bubblewrap` |`v0.11.2 (built from source)` | | **TOTAL SIZE** | **TBD** | **Libraries:** diff --git a/universal/ubi10/Dockerfile b/universal/ubi10/Dockerfile index ae07ac16..726c5d3b 100644 --- a/universal/ubi10/Dockerfile +++ b/universal/ubi10/Dockerfile @@ -554,10 +554,34 @@ RUN dnf -y install bash-completion \ && dnf clean all \ && rm -rf /var/cache/yum -# bubblewrap -RUN dnf -y install bubblewrap \ - && dnf clean all \ - && rm -rf /var/cache/yum +## bubblewrap - built from source (not available in UBI 10 repos) +RUN <<'EOF' +set -euf -o pipefail + +TEMP_DIR="$(mktemp -d)" +cd "${TEMP_DIR}" + +BWRAP_VERSION="0.11.2" + +dnf -y install libcap-devel ninja-build +pip install meson + +curl -sSL "https://github.com/containers/bubblewrap/releases/download/v${BWRAP_VERSION}/bubblewrap-${BWRAP_VERSION}.tar.xz" -o bubblewrap.tar.xz +tar -xf bubblewrap.tar.xz +cd "bubblewrap-${BWRAP_VERSION}" + +meson setup _builddir +meson compile -C _builddir +install -m 755 _builddir/bwrap /usr/local/bin/bwrap + +cd / +rm -rf "${TEMP_DIR}" + +pip uninstall -y meson +dnf -y remove libcap-devel ninja-build +dnf clean all +rm -rf /var/cache/yum +EOF ## tmux - using pre-built binaries (not available in UBI repos) RUN <<'EOF' From 9086905dcfe4e892af2bc6b46de058c80f8499a4 Mon Sep 17 00:00:00 2001 From: Ilya Buziuk Date: Fri, 31 Jul 2026 11:48:58 +0200 Subject: [PATCH 3/4] fixup! Signed-off-by: Ilya Buziuk --- README.md | 2 +- universal/ubi9/Dockerfile | 32 ++++++++++++++++++++++++++++---- 2 files changed, 29 insertions(+), 5 deletions(-) diff --git a/README.md b/README.md index f7ecfc3b..c9627d38 100644 --- a/README.md +++ b/README.md @@ -181,7 +181,7 @@ docker run -ti --rm quay.io/devfile/universal-developer-image:ubi9-latest bash | `docker-compose` |`` | | `kamel` |`` | |------SANDBOX---------|-------------------------------------| -| `bubblewrap` |`` | +| `bubblewrap` |`v0.11.2 (built from source)` | | **TOTAL SIZE** | **8.75GB** (3.6GB compressed) | **Libraries:** diff --git a/universal/ubi9/Dockerfile b/universal/ubi9/Dockerfile index bf7c533a..1dec2dfd 100644 --- a/universal/ubi9/Dockerfile +++ b/universal/ubi9/Dockerfile @@ -521,10 +521,34 @@ RUN dnf -y install bash-completion \ && dnf clean all \ && rm -rf /var/cache/yum -# bubblewrap -RUN dnf -y install bubblewrap \ - && dnf clean all \ - && rm -rf /var/cache/yum +## bubblewrap - built from source (not available in UBI 9 repos) +RUN <<'EOF' +set -euf -o pipefail + +TEMP_DIR="$(mktemp -d)" +cd "${TEMP_DIR}" + +BWRAP_VERSION="0.11.2" + +dnf -y install libcap-devel ninja-build +pip install meson + +curl -sSL "https://github.com/containers/bubblewrap/releases/download/v${BWRAP_VERSION}/bubblewrap-${BWRAP_VERSION}.tar.xz" -o bubblewrap.tar.xz +tar -xf bubblewrap.tar.xz +cd "bubblewrap-${BWRAP_VERSION}" + +meson setup _builddir +meson compile -C _builddir +install -m 755 _builddir/bwrap /usr/local/bin/bwrap + +cd / +rm -rf "${TEMP_DIR}" + +pip uninstall -y meson +dnf -y remove libcap-devel ninja-build +dnf clean all +rm -rf /var/cache/yum +EOF ## tmux - using pre-built binaries (not available in UBI repos) RUN <<'EOF' From b3a2a155147dd93b672d7c11a6857051f759da10 Mon Sep 17 00:00:00 2001 From: Ilya Buziuk Date: Fri, 31 Jul 2026 17:14:13 +0200 Subject: [PATCH 4/4] fixup Signed-off-by: Ilya Buziuk --- universal/ubi10/Dockerfile | 15 +++++++-------- universal/ubi9/Dockerfile | 15 +++++++-------- 2 files changed, 14 insertions(+), 16 deletions(-) diff --git a/universal/ubi10/Dockerfile b/universal/ubi10/Dockerfile index 726c5d3b..cef92624 100644 --- a/universal/ubi10/Dockerfile +++ b/universal/ubi10/Dockerfile @@ -563,22 +563,21 @@ cd "${TEMP_DIR}" BWRAP_VERSION="0.11.2" -dnf -y install libcap-devel ninja-build -pip install meson +dnf -y install libcap-devel -curl -sSL "https://github.com/containers/bubblewrap/releases/download/v${BWRAP_VERSION}/bubblewrap-${BWRAP_VERSION}.tar.xz" -o bubblewrap.tar.xz +curl -fsSL "https://github.com/containers/bubblewrap/releases/download/v${BWRAP_VERSION}/bubblewrap-${BWRAP_VERSION}.tar.xz" -o bubblewrap.tar.xz tar -xf bubblewrap.tar.xz cd "bubblewrap-${BWRAP_VERSION}" -meson setup _builddir -meson compile -C _builddir -install -m 755 _builddir/bwrap /usr/local/bin/bwrap +printf '#define PACKAGE_STRING "bubblewrap %s"\n' "${BWRAP_VERSION}" > config.h +gcc -o bwrap bubblewrap.c bind-mount.c network.c utils.c -lcap +install -m 755 bwrap /usr/local/bin/bwrap +bwrap --version cd / rm -rf "${TEMP_DIR}" -pip uninstall -y meson -dnf -y remove libcap-devel ninja-build +dnf -y remove libcap-devel dnf clean all rm -rf /var/cache/yum EOF diff --git a/universal/ubi9/Dockerfile b/universal/ubi9/Dockerfile index 1dec2dfd..34bb3b56 100644 --- a/universal/ubi9/Dockerfile +++ b/universal/ubi9/Dockerfile @@ -530,22 +530,21 @@ cd "${TEMP_DIR}" BWRAP_VERSION="0.11.2" -dnf -y install libcap-devel ninja-build -pip install meson +dnf -y install libcap-devel -curl -sSL "https://github.com/containers/bubblewrap/releases/download/v${BWRAP_VERSION}/bubblewrap-${BWRAP_VERSION}.tar.xz" -o bubblewrap.tar.xz +curl -fsSL "https://github.com/containers/bubblewrap/releases/download/v${BWRAP_VERSION}/bubblewrap-${BWRAP_VERSION}.tar.xz" -o bubblewrap.tar.xz tar -xf bubblewrap.tar.xz cd "bubblewrap-${BWRAP_VERSION}" -meson setup _builddir -meson compile -C _builddir -install -m 755 _builddir/bwrap /usr/local/bin/bwrap +printf '#define PACKAGE_STRING "bubblewrap %s"\n' "${BWRAP_VERSION}" > config.h +gcc -o bwrap bubblewrap.c bind-mount.c network.c utils.c -lcap +install -m 755 bwrap /usr/local/bin/bwrap +bwrap --version cd / rm -rf "${TEMP_DIR}" -pip uninstall -y meson -dnf -y remove libcap-devel ninja-build +dnf -y remove libcap-devel dnf clean all rm -rf /var/cache/yum EOF