diff --git a/Dockerfile b/Dockerfile index 6700c79..f40e3b9 100644 --- a/Dockerfile +++ b/Dockerfile @@ -34,12 +34,24 @@ RUN dnf install -y ${KERNEL} ${KERNEL}-devel-matched RUN dnf remove -y kernel kernel-core kernel-modules kernel-modules-core kernel-modules-extra kernel-tools kernel-tools-libs -# Install Negativo17 Nvidia driver -RUN dnf install -y dkms-nvidia nvidia-driver nvidia-persistenced opencl-filesystem libva-nvidia-driver +# Install Negativo17 Nvidia driver, waydroid and SELinux rules +# Dette kræver at du kører build med --privileged eller --cap-add SYS_ADMIN +# eller bruger Buildah's RUN --mount feature + +RUN dnf install -y dkms-nvidia nvidia-driver nvidia-persistenced opencl-filesystem libva-nvidia-driver waydroid policycoreutils && \ + mkdir -p /tmp/selinux-tmp && \ + mount -t tmpfs tmpfs /tmp/selinux-tmp && \ + mkdir -p /tmp/selinux-tmp/etc/selinux/targeted && \ + cp -r /etc/selinux/targeted/* /tmp/selinux-tmp/etc/selinux/targeted/ && \ + semodule -p /tmp/selinux-tmp/etc/selinux -B && \ + semodule -p /tmp/selinux-tmp/etc/selinux -i /usr/share/selinux/targeted/waydroid.pp && \ + semodule -p /tmp/selinux-tmp/etc/selinux -i /usr/share/selinux/packages/targeted/nvidia-driver.pp.bz2 && \ + cp -a /tmp/selinux-tmp/etc/selinux/targeted/* /etc/selinux/targeted/ && \ + umount /tmp/selinux-tmp RUN dkms install nvidia/$(ls /usr/src/ | grep nvidia- | cut -d- -f2-) -k $(rpm -q --queryformat "%{VERSION}-%{RELEASE}.%{ARCH}\n" ${KERNEL}) -RUN dnf install -y waydroid scx-scheds +RUN dnf install -y scx-scheds # Remove plocate to avoid updatedb going crazy with scanning the file system once a day RUN dnf remove -y plocate