2026-03-17 14:30:19 UTC (buildkit.dockerfile.v0)

LABEL org.opencontainers.image.ref.name=ubuntu

2026-03-17 14:30:19 UTC (buildkit.dockerfile.v0)

LABEL org.opencontainers.image.version=24.04

2026-03-17 14:30:19 UTC (buildkit.dockerfile.v0)

ENV PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin

2026-03-17 14:30:19 UTC (buildkit.dockerfile.v0)

CMD ["/bin/bash"]

2026-03-17 14:30:19 UTC (buildkit.dockerfile.v0)

COPY / / # buildkit

2026-03-17 14:30:19 UTC (buildkit.dockerfile.v0)

ARG ARCH

2026-03-17 14:30:19 UTC (buildkit.dockerfile.v0)

ARG DEBIAN_FRONTEND=noninteractive

2026-03-17 14:31:23 UTC (buildkit.dockerfile.v0)

RUN |2 ARCH=amd64 DEBIAN_FRONTEND=noninteractive /bin/sh -c apt update && apt upgrade -y && apt install ca-certificates netbase ethtool iproute2 ncat libunbound8 kmod iptables python3-netifaces python3-sortedcontainers tcpdump ipvsadm ipset curl uuid-runtime openssl inetutils-ping arping ndisc6 conntrack traceroute iputils-tracepath logrotate dnsutils net-tools strongswan strongswan-pki libcharon-extra-plugins libcharon-extauth-plugins libstrongswan-extra-plugins libstrongswan-standard-plugins -y --no-install-recommends --auto-remove && apt remove -y --allow-remove-essential --auto-remove login && setcap CAP_NET_ADMIN+eip $(readlink -f $(which conntrack)) && setcap CAP_NET_ADMIN+eip $(readlink -f $(which ethtool)) && setcap CAP_NET_ADMIN+eip $(readlink -f $(which ip)) && setcap CAP_NET_ADMIN+eip $(readlink -f $(which ipset)) && setcap CAP_NET_ADMIN+eip $(readlink -f $(which traceroute)) && setcap CAP_NET_ADMIN,CAP_NET_RAW+eip $(readlink -f $(which xtables-legacy-multi)) && setcap CAP_NET_ADMIN,CAP_NET_RAW+eip $(readlink -f $(which xtables-nft-multi)) && setcap CAP_NET_RAW+eip $(readlink -f $(which arping)) && setcap CAP_NET_RAW+eip $(readlink -f $(which ndisc6)) && setcap CAP_NET_RAW+eip $(readlink -f $(which tcpdump)) && setcap CAP_SYS_ADMIN+eip $(readlink -f $(which nsenter)) && setcap CAP_SYS_ADMIN+eip $(readlink -f $(which sysctl)) && setcap CAP_SYS_MODULE+eip $(readlink -f $(which modprobe)) && setcap CAP_SYS_NICE+eip $(readlink -f $(which nice)) && rm -rf /var/lib/apt/lists/* && rm -rf /etc/localtime && rm -f /usr/bin/nc && rm -f /usr/bin/netcat && rm -f /usr/lib/apt/methods/mirror # buildkit

2026-03-17 14:31:23 UTC (buildkit.dockerfile.v0)

RUN |2 ARCH=amd64 DEBIAN_FRONTEND=noninteractive /bin/sh -c mkdir -p /var/run/openvswitch && mkdir -p /var/run/ovn && mkdir -p /etc/cni/net.d && mkdir -p /opt/cni/bin # buildkit

2026-03-17 14:31:23 UTC (buildkit.dockerfile.v0)

ARG DUMB_INIT_VERSION=1.2.5

2026-03-17 14:31:24 UTC (buildkit.dockerfile.v0)

RUN |3 ARCH=amd64 DEBIAN_FRONTEND=noninteractive DUMB_INIT_VERSION=1.2.5 /bin/sh -c curl -sSf -L --retry 5 -o /usr/bin/dumb-init https://github.com/Yelp/dumb-init/releases/download/v${DUMB_INIT_VERSION}/dumb-init_${DUMB_INIT_VERSION}_$(arch) && chmod +x /usr/bin/dumb-init # buildkit

2026-03-17 14:33:29 UTC (buildkit.dockerfile.v0)

RUN |3 ARCH=amd64 DEBIAN_FRONTEND=noninteractive DUMB_INIT_VERSION=1.2.5 /bin/sh -c cp /godeps/loopback /godeps/portmap /godeps/macvlan ./ && cp /godeps/kubectl /godeps/gobgp /usr/bin/ # buildkit

2026-03-17 14:33:29 UTC (buildkit.dockerfile.v0)

ARG DEBUG=false

2026-03-17 14:40:42 UTC (buildkit.dockerfile.v0)

RUN |4 ARCH=amd64 DEBIAN_FRONTEND=noninteractive DUMB_INIT_VERSION=1.2.5 DEBUG=false /bin/sh -c cp /packages/bfdd-beacon /packages/bfdd-control /usr/bin/ && cp /packages/ovs-sandbox /usr/bin/ && chmod +x /usr/bin/ovs-sandbox && setcap CAP_NET_BIND_SERVICE+eip /usr/bin/bfdd-beacon && dpkg -i /packages/openvswitch-*.deb /packages/python3-openvswitch*.deb /packages/ovn-*.deb && rm -rf /var/lib/openvswitch/pki/ && chown -R nobody: /var/lib/logrotate && setcap CAP_NET_ADMIN+eip $(readlink -f $(which ovs-dpctl)) && if [ "${DEBUG}" != "true" ]; then setcap CAP_NET_BIND_SERVICE+eip $(readlink -f $(which ovsdb-server)) && setcap CAP_NET_ADMIN,CAP_NET_BIND_SERVICE,CAP_SYS_ADMIN+eip $(readlink -f $(which ovs-vswitchd)) && dpkg --purge gpgv apt; else apt update && apt install -y --no-install-recommends gdb valgrind && rm -rf /var/lib/apt/lists/* && dpkg -i /packages/*.ddeb; fi # buildkit

2026-03-17 14:41:36 UTC (buildkit.dockerfile.v0)

RUN |4 ARCH=amd64 DEBIAN_FRONTEND=noninteractive DUMB_INIT_VERSION=1.2.5 DEBUG=false /bin/sh -c dpkg -i /packages/*.deb && openssl fipsinstall -out /usr/lib/ssl/fipsmodule.cnf -module $(find / -name fips.so) && sed -i --follow-symlinks -e '/^\[provider_sect\]/a fips = fips_sect' -e '/^\[default_sect\]/a activate = 1' -e '$a \\n.include /usr/lib/ssl/fipsmodule.cnf' /usr/lib/ssl/openssl.cnf # buildkit

2026-03-17 14:41:36 UTC (buildkit.dockerfile.v0)

ENTRYPOINT ["/usr/bin/dumb-init" "--"]

2026-03-18 03:22:01 UTC (buildkit.dockerfile.v0)

COPY logrotate/* /etc/logrotate.d/ # buildkit

2026-03-18 03:22:01 UTC (buildkit.dockerfile.v0)

COPY grace_stop_ovn_controller /usr/share/ovn/scripts/grace_stop_ovn_controller # buildkit

2026-03-18 03:22:04 UTC (buildkit.dockerfile.v0)

COPY /kube-ovn /kube-ovn # buildkit

2026-03-18 03:22:04 UTC (buildkit.dockerfile.v0)

RUN /bin/sh -c /kube-ovn/iptables-wrapper-installer.sh --no-sanity-check # buildkit

2026-03-18 03:22:04 UTC (buildkit.dockerfile.v0)

WORKDIR /kube-ovn