deckhouse · eofff · Aug 21, 2025 · Aug 22, 2025 · Aug 22, 2025 · Aug 22, 2025
@@ -75,3 +75,7 @@ package:
   util-linux: v2.41.1
   zlib: v1.3.1
   zstd: v1.5.7
+  krb5: krb5-1.21.3-final
+  lz4: v1.9.4
+  lzo: lzo-2.10
+  xz: v5.4.5
@@ -10,6 +10,8 @@ binaries:
 - /cdi-binaries/cdi-source-update-poller
 packages:
 - libnbd
+- xz
+- libxml2
 {{- end -}}
 
 {{ $builderDependencies := include "$name" . | fromYaml }}
@@ -58,7 +60,7 @@ shell:
   beforeInstall:
   {{- include "alt packages proxy" . | nindent 2 }}
   - |
-    apt-get -qq install -y libxml2-devel \
+    apt-get -qq install -y \
       git binutils make gcc glibc-pthread glibc-devel glibc-devel-static golang
   {{- include "alt packages clean" . | nindent 2 }}
   install:

@@ -50,6 +50,12 @@ import:
   - cdi-image-size-detection
   - cdi-importer
   - cdi-source-update-poller
+- image: {{ .ModuleNamePrefix }}cdi-artifact
+  add: /cdi-binaries
+  to: /usr/lib64
+  before: setup
+  includePaths:
+  - libxml2.s*
 - image: {{ .ModuleNamePrefix }}qemu
   add: /qemu-img
   to: /relocate

@@ -4,9 +4,9 @@
 altPackages:
 - gcc glibc-pthread glibc-devel glibc-devel-static
 - git golang make binutils
-- libxml2-devel
 packages:
 - libnbd
+- libxml2
 {{- end -}}
 
 {{ $builderDeps := include "$nameDeps" . | fromYaml }}
@@ -68,8 +68,6 @@ shell:
 ---
 {{- $name := print $.ImageName "-dependencies" -}}
 {{- define "$name" -}}
-altPackages:
-- libxml2-devel
 binaries:
 - /usr/local/bin/dvcr-importer
 - /usr/sbin/nbd*
@@ -82,8 +80,9 @@ binaries:
 - /usr/bin/qemu-img
 - /usr/bin/qemu-nbd
 - /usr/lib64/libnbd.s*
+- /usr/lib64/libxml2.s*
 packages:
-- bzip2 file nbdkit libnbd
+- bzip2 file nbdkit libnbd xz libxml2
 {{- end -}}
 
 {{ $builderDependencies := include "$name" . | fromYaml }}

@@ -92,6 +92,7 @@ packages:
 - openssl libcurl e2fsprogs libxcrypt numactl
 - zlib p11-kit
 - libssh libssh2 libjson-c5 keyutils
+- krb5 xz
 {{- end -}}
 
 {{ $builderDependencies := include "$name" . | fromYaml }}

@@ -35,7 +35,7 @@ altPackages:
 - bzlib-devel liblzma-devel libseccomp-devel libcap-devel lzip ncompress strace
 - tree
 packages:
-- zlib zstd
+- zlib zstd xz
 {{- end -}}
 
 

@@ -0,0 +1,109 @@
+└── [drwxr-xr-x        4096]  usr
+    ├── [drwxr-xr-x        4096]  include
+    │   ├── [drwxr-xr-x        4096]  gssapi
+    │   │   ├── [-rw-r--r--       30083]  gssapi.h
+    │   │   ├── [-rw-r--r--        2640]  gssapi_alloc.h
+    │   │   ├── [-rw-r--r--       21165]  gssapi_ext.h
+    │   │   ├── [-rw-r--r--        2217]  gssapi_generic.h
+    │   │   ├── [-rw-r--r--       12027]  gssapi_krb5.h
+    │   │   └── [-rw-r--r--        1652]  mechglue.h
+    │   ├── [-rw-r--r--         181]  gssapi.h
+    │   ├── [drwxr-xr-x        4096]  gssrpc
+    │   │   ├── [-rw-r--r--        6441]  auth.h
+    │   │   ├── [-rw-r--r--        4840]  auth_gss.h
+    │   │   ├── [-rw-r--r--        4333]  auth_gssapi.h
+    │   │   ├── [-rw-r--r--        2896]  auth_unix.h
+    │   │   ├── [-rw-r--r--        9654]  clnt.h
+    │   │   ├── [-rw-r--r--        2442]  netdb.h
+    │   │   ├── [-rw-r--r--        3429]  pmap_clnt.h
+    │   │   ├── [-rw-r--r--        3841]  pmap_prot.h
+    │   │   ├── [-rw-r--r--        2303]  pmap_rmt.h
+    │   │   ├── [-rw-r--r--       10034]  rename.h
+    │   │   ├── [-rw-r--r--        3143]  rpc.h
+    │   │   ├── [-rw-r--r--        5107]  rpc_msg.h
+    │   │   ├── [-rw-r--r--       11402]  svc.h
+    │   │   ├── [-rw-r--r--        3976]  svc_auth.h
+    │   │   ├── [-rw-r--r--        3628]  types.h
+    │   │   └── [-rw-r--r--       11781]  xdr.h
+    │   ├── [drwxr-xr-x        4096]  kadm5
+    │   │   ├── [-rw-r--r--       20688]  admin.h
+    │   │   ├── [-rw-r--r--        1548]  chpass_util_strings.h
+    │   │   └── [-rw-r--r--        4345]  kadm_err.h
+    │   ├── [-rw-r--r--       64259]  kdb.h
+    │   ├── [-rw-r--r--        8933]  krad.h
+    │   ├── [drwxr-xr-x        4096]  krb5
+    │   │   ├── [-rw-r--r--        4213]  ccselect_plugin.h
+    │   │   ├── [-rw-r--r--        5864]  certauth_plugin.h
+    │   │   ├── [-rw-r--r--       15529]  clpreauth_plugin.h
+    │   │   ├── [-rw-r--r--        5460]  hostrealm_plugin.h
+    │   │   ├── [-rw-r--r--       12482]  kadm5_auth_plugin.h
+    │   │   ├── [-rw-r--r--        6161]  kadm5_hook_plugin.h
+    │   │   ├── [-rw-r--r--        5320]  kdcpolicy_plugin.h
+    │   │   ├── [-rw-r--r--       18241]  kdcpreauth_plugin.h
+    │   │   ├── [-rw-r--r--      348689]  krb5.h
+    │   │   ├── [-rw-r--r--        5881]  localauth_plugin.h
+    │   │   ├── [-rw-r--r--        2686]  locate_plugin.h
+    │   │   ├── [-rw-r--r--        2090]  plugin.h
+    │   │   ├── [-rw-r--r--        1774]  preauth_plugin.h
+    │   │   └── [-rw-r--r--        4426]  pwqual_plugin.h
+    │   ├── [-rw-r--r--         402]  krb5.h
+    │   ├── [-rw-r--r--       12154]  profile.h
+    │   ├── [-rw-r--r--        6640]  verto-module.h
+    │   └── [-rw-r--r--       19437]  verto.h
+    └── [drwxr-xr-x        4096]  lib64
+        ├── [drwxr-xr-x        4096]  krb5
+        │   └── [drwxr-xr-x        4096]  plugins
+        │       ├── [drwxr-xr-x        4096]  authdata
+        │       ├── [drwxr-xr-x        4096]  kdb
+        │       │   └── [-rwxr-xr-x      112496]  db2.so
+        │       ├── [drwxr-xr-x        4096]  libkrb5
+        │       ├── [drwxr-xr-x        4096]  preauth
+        │       │   ├── [-rwxr-xr-x       32520]  otp.so
+        │       │   ├── [-rwxr-xr-x      154992]  pkinit.so
+        │       │   ├── [-rwxr-xr-x       93936]  spake.so
+        │       │   └── [-rwxr-xr-x       21824]  test.so
+        │       └── [drwxr-xr-x        4096]  tls
+        │           └── [-rwxr-xr-x       29120]  k5tls.so
+        ├── [lrwxrwxrwx          21]  libgssapi_krb5.so -> libgssapi_krb5.so.2.2
+        ├── [lrwxrwxrwx          21]  libgssapi_krb5.so.2 -> libgssapi_krb5.so.2.2
+        ├── [-rwxr-xr-x      392192]  libgssapi_krb5.so.2.2
+        ├── [lrwxrwxrwx          16]  libgssrpc.so -> libgssrpc.so.4.2
+        ├── [lrwxrwxrwx          16]  libgssrpc.so.4 -> libgssrpc.so.4.2
+        ├── [-rwxr-xr-x      145832]  libgssrpc.so.4.2
+        ├── [lrwxrwxrwx          18]  libk5crypto.so -> libk5crypto.so.3.1
+        ├── [lrwxrwxrwx          18]  libk5crypto.so.3 -> libk5crypto.so.3.1
+        ├── [-rwxr-xr-x      201744]  libk5crypto.so.3.1
+        ├── [lrwxrwxrwx          19]  libkadm5clnt.so -> libkadm5clnt_mit.so
+        ├── [lrwxrwxrwx          24]  libkadm5clnt_mit.so -> libkadm5clnt_mit.so.12.0
+        ├── [lrwxrwxrwx          24]  libkadm5clnt_mit.so.12 -> libkadm5clnt_mit.so.12.0
+        ├── [-rwxr-xr-x      105088]  libkadm5clnt_mit.so.12.0
+        ├── [lrwxrwxrwx          18]  libkadm5srv.so -> libkadm5srv_mit.so
+        ├── [lrwxrwxrwx          23]  libkadm5srv_mit.so -> libkadm5srv_mit.so.12.0
+        ├── [lrwxrwxrwx          23]  libkadm5srv_mit.so.12 -> libkadm5srv_mit.so.12.0
+        ├── [-rwxr-xr-x      137216]  libkadm5srv_mit.so.12.0
+        ├── [lrwxrwxrwx          15]  libkdb5.so -> libkdb5.so.10.0
+        ├── [lrwxrwxrwx          15]  libkdb5.so.10 -> libkdb5.so.10.0
+        ├── [-rwxr-xr-x       96008]  libkdb5.so.10.0
+        ├── [lrwxrwxrwx          14]  libkrad.so -> libkrad.so.0.0
+        ├── [lrwxrwxrwx          14]  libkrad.so.0 -> libkrad.so.0.0
+        ├── [-rwxr-xr-x       44456]  libkrad.so.0.0
+        ├── [lrwxrwxrwx          14]  libkrb5.so -> libkrb5.so.3.3
+        ├── [lrwxrwxrwx          14]  libkrb5.so.3 -> libkrb5.so.3.3
+        ├── [-rwxr-xr-x     1054216]  libkrb5.so.3.3
+        ├── [lrwxrwxrwx          21]  libkrb5support.so -> libkrb5support.so.0.1
+        ├── [lrwxrwxrwx          21]  libkrb5support.so.0 -> libkrb5support.so.0.1
+        ├── [-rwxr-xr-x       63408]  libkrb5support.so.0.1
+        ├── [lrwxrwxrwx          15]  libverto.so -> libverto.so.0.0
+        ├── [lrwxrwxrwx          15]  libverto.so.0 -> libverto.so.0.0
+        ├── [-rwxr-xr-x       47696]  libverto.so.0.0
+        └── [drwxr-xr-x        4096]  pkgconfig
+            ├── [-rw-r--r--         241]  gssrpc.pc
+            ├── [-rw-r--r--         262]  kadm-client.pc
+            ├── [-rw-r--r--         258]  kadm-server.pc
+            ├── [-rw-r--r--         293]  kdb.pc
+            ├── [-rw-r--r--         199]  krb5-gssapi.pc
+            ├── [-rw-r--r--         324]  krb5.pc
+            ├── [-rw-r--r--         249]  mit-krb5-gssapi.pc
+            └── [-rw-r--r--         396]  mit-krb5.pc
+
+16 directories, 92 files
@@ -0,0 +1,89 @@
+---
+image: {{ .ModuleNamePrefix }}{{ .PackagePath }}/{{ $.ImageName }}
+final: false
+fromImage: builder/scratch
+import:
+- image: {{ .ModuleNamePrefix }}{{ .PackagePath }}/{{ $.ImageName }}-builder
+  add: /out
+  to: /{{ $.ImageName }}
+  before: setup
+
+---
+{{- $version := get $.PackageVersion $.ImageName }}
+{{- $gitRepoUrl := "krb5/krb5.git" }}
+
+image: {{ .ModuleNamePrefix }}{{ .PackagePath }}/{{ .ImageName }}-src-artifact
+final: false
+fromImage: builder/src
+secrets:
+- id: SOURCE_REPO
+  value: {{ $.SOURCE_REPO_GIT }}
+shell:
+  install:
+  - git clone --depth=1 $(cat /run/secrets/SOURCE_REPO)/{{ $gitRepoUrl }} --branch {{ $version }} /src
+
+---
+{{- $name := print $.ImageName "-dependencies" -}}
+{{- define "$name" -}}
+altPackages:
+- git gcc automake make tree
+- flex libcom_err-devel libkeyutils-devel bison
+- libncurses-devel libss-devel libtinfo-devel
+packages:
+- linux-pam openssl
+{{- end -}}
+
+{{ $builderDependencies := include "$name" . | fromYaml }}
+
+image: {{ .ModuleNamePrefix }}{{ .PackagePath }}/{{ $.ImageName }}-builder
+final: false
+fromImage: builder/alt
+import:
+- image: {{ .ModuleNamePrefix }}{{ .PackagePath }}/{{ .ImageName }}-src-artifact
+  add: /src
+  to: /src
+  before: install
+{{- include "importPackageImages" (list . $builderDependencies.packages "install") -}}
+shell:
+  beforeInstall:
+  {{- include "alt packages proxy" . | nindent 2 }}
+  - |
+    apt-get install -y \
+      {{ $builderDependencies.altPackages | join " " }}
+
+  {{- include "alt packages clean" . | nindent 2 }}
+
+  install:
+  - |
+    # Install packages
+    PKGS="{{ $builderDependencies.packages | join " " }}"
+    for pkg in $PKGS; do
+      cp -a /$pkg/. /
+      rm -rf /$pkg
+    done
+    OUTDIR=/out
+
+    cd /src/src
+    export YACC="bison -y"
+    export CFLAGS="-O2 -fcommon"
+
+    autoreconf
+
+    ./configure \
+        --prefix=/usr \
+        --libdir=/usr/lib64 \
+        --exec-prefix=/usr \
+        --enable-shared --disable-static \
+        --enable-dns-for-realm \
+        --enable-pkinit \
+        --with-system-et \
+        --with-system-ss \
+        --with-pkinit-crypto-impl=openssl \
+        --with-tls-impl=openssl
+
+    make -j$(nproc)
+    make DESTDIR=$OUTDIR install
+
+    rm -rf $OUTDIR/usr/share
+    rm -rf $OUTDIR/usr/var
+    tree -sp $OUTDIR
@@ -30,10 +30,10 @@ altPackages:
 - gcc gcc-c++ make git autoconf libtool gettext-tools
 - automake pkgconf glibc-devel
 - bash-completion hardlink libfuse3-devel
-- liburing-devel libxml2-devel perl-podlators
+- liburing-devel perl-podlators
 - ocaml ocaml-findlib ocaml-ocamldoc
 packages:
-- gnutls libidn2 libgmp ubdsrv
+- gnutls libidn2 libgmp ubdsrv xz libxml2
 {{- end -}}
 
 {{ $builderDependencies := include "$name" . | fromYaml }}

@@ -31,6 +31,7 @@ altPackages:
 - meson ninja-build
 - gettext-devel liblzma-devel
 - xz git
+- tree
 packages:
 - zlib
 - openssl
@@ -85,3 +86,5 @@ shell:
       echo "Stripped: $execfile"
     fi
     done
+
+    tree -hp /out
@@ -0,0 +1,22 @@
+# lz4
+└── [drwxr-xr-x        4096]  usr
+    ├── [drwxr-xr-x        4096]  bin
+    │   ├── [-rwxr-xr-x      324192]  lz4
+    │   ├── [lrwxrwxrwx           3]  lz4c -> lz4
+    │   ├── [lrwxrwxrwx           3]  lz4cat -> lz4
+    │   └── [lrwxrwxrwx           3]  unlz4 -> lz4
+    ├── [drwxr-xr-x        4096]  include
+    │   ├── [-rw-r--r--       43263]  lz4.h
+    │   ├── [-rw-r--r--       32749]  lz4frame.h
+    │   ├── [-rw-r--r--        2044]  lz4frame_static.h
+    │   └── [-rw-r--r--       20179]  lz4hc.h
+    └── [drwxr-xr-x        4096]  lib64
+        ├── [-rw-r--r--      263272]  liblz4.a
+        ├── [lrwxrwxrwx          15]  liblz4.so -> liblz4.so.1.9.4
+        ├── [lrwxrwxrwx          15]  liblz4.so.1 -> liblz4.so.1.9.4
+        ├── [-rwxr-xr-x      237024]  liblz4.so.1.9.4
+        └── [drwxr-xr-x        4096]  pkgconfig
+            └── [-rw-r--r--         391]  liblz4.pc
+
+6 directories, 13 files
+```