# container-rpmbuilder

The estate's RPM packaging image, built on each `container-base` distro image.
Published as `artifactapi.k8s.syd1.au.unkin.net/docker-internal/rpmbuilder:<version>-<suffix>`;
the default distro's build is retagged as the unsuffixed `:<version>`, so both resolve
to one digest. Only explicit versions are published; never a floating tag.

| distro | from | tag suffix | default |
| --- | --- | --- | --- |
| `alma9` | `docker-internal/almalinux9:<base version>` | `alma9` | yes |
| `fedora42` | `docker-internal/fedora42:<base version>` | `fedora42` | no |
| `fedora43` | `docker-internal/fedora43:<base version>` | `fedora43` | no |
| `fedora44` | `docker-internal/fedora44:<base version>` | `fedora44` | no |

Adds `rpm-build`, `rpmdevtools`, `rpmlint`, `rpm-sign`, `nfpm`, `envsubst` (`gettext`),
`buildah`, `go`, `gcc` and the usual autotools/debug toolchain; see `PACKAGES` in each
`distros/<name>/distro.env`.

The `container-base` release this image builds on is `BASE_VERSION` in the `Dockerfile`.

## Adding a distro

1. `distros/<name>/distro.env` — `BASE_IMAGE_NAME`, `IMAGE`, `TAG_SUFFIX`, `DEFAULT`, `PACKAGES`.
2. One `include` entry in each of `.woodpecker/{build-matrix,docker}.yaml`.

The `check-distros` pre-commit hook fails if step 1 or 2 is incomplete, or if more than
one distro claims `DEFAULT`. `.woodpecker/build.yaml` only aggregates the matrix into the
`ci/woodpecker/pr/build` context that branch protection requires.

## Make

    make build          # build every distro
    make pre-commit     # uvx pre-commit run --all-files
    make build-alma9    # one distro
    make patch|minor|major