@@ -7,6 +7,9 @@ RUN ln -sfr /bin/bash /bin/sh
77RUN <<EORUN
88set -xeuo pipefail
99
10+ # Disable apt sandboxing for nested container environments
11+ echo 'APT::Sandbox::User "root";' > /etc/apt/apt.conf.d/99sandbox-disable
12+
1013# Initialize some basic packages
1114apt -y update && apt -y install curl time bzip2
1215
@@ -30,8 +33,13 @@ FROM base as tools
3033ARG bcvkversion=v0.9.0
3134# renovate: datasource=github-releases depName=ossf/scorecard
3235ARG scorecardversion=v5.1.1
33- COPY fetch-tools.sh /run/src/
34- RUN bcvkversion=$bcvkversion scorecardversion=$scorecardversion /run/src/fetch-tools.sh
36+ # renovate: datasource=github-releases depName=nushell/nushell
37+ ARG nushellversion=0.110.0
38+ # renovate: datasource=github-releases depName=astral-sh/uv
39+ ARG uvversion=0.10.2
40+ COPY fetch-tools.sh install-uv.sh /run/src/
41+ RUN bcvkversion=$bcvkversion scorecardversion=$scorecardversion nushellversion=$nushellversion /run/src/fetch-tools.sh
42+ RUN uvversion=$uvversion /run/src/install-uv.sh
3543
3644FROM base as rust
3745COPY install-rust.sh /run/src/
5967COPY npm.txt /run/src
6068RUN grep -vEe '^#' npm.txt | /bin/time -f '%E %C' xargs npm i -g
6169
70+ # Install tmt via uv tool install for isolated environment
71+ # UV_TOOL_DIR and UV_TOOL_BIN_DIR set to system-wide locations like rustup
72+ COPY --from=tools /usr/local/bin/uv /usr/local/bin/uv
73+ COPY --from=tools /usr/local/bin/uvx /usr/local/bin/uvx
74+ ENV UV_TOOL_DIR=/usr/local/uv-tools
75+ ENV UV_TOOL_BIN_DIR=/usr/local/bin
76+ RUN uv tool install 'tmt[provision-virtual]'
77+
6278# Copy in the binaries from our tools container image
6379COPY --from=tools /usr/local/bin/* /usr/local/bin/
6480COPY --from=kani /usr/local/bin/* /usr/local/bin/
0 commit comments