mon (0e018ee)
Published 2026-10-03 21:13:04 -07:00 by tral
Installation
docker pull repo.rdfrn.net/tral/mon:0e018eesha256:584beb2501e5da73ecb1fc56ac32b26dd4686e644ba8c501a13c0cab3e20fee8About this package
AlmaLinux Bootable Container Image
Image layers
| ostree export of commit 9d2262803c258bd88d54716bb0197329523f4383e041f215deff68a9de21e981 |
| nvidia-gpu-firmware-20260804-23.2.el10_2.noarch |
| linux-firmware-20260804-23.2.el10_2.noarch |
| podman-7:5.8.2-9.el10_2.alma.1.x86_64 |
| atheros-firmware-20260804-23.2.el10_2.noarch |
| python3-libs-3.12.14-1.el10_2.x86_64 |
| kernel-modules-6.12.0-211.56.1.el10_2.x86_64 |
| rpm-4.19.1.1-23.el10.alma.1.x86_64 |
| libicu-74.2-5.el10_0.x86_64 |
| mt7xxx-firmware-20260804-23.2.el10_2.noarch |
| kernel-modules-core-6.12.0-211.56.1.el10_2.x86_64 |
| amd-gpu-firmware-20260804-23.2.el10_2.noarch |
| skopeo-2:1.22.2-5.el10_2.x86_64 |
| kernel-core-6.12.0-211.56.1.el10_2.x86_64 |
| samba-client-libs-4.23.5-110.el10_2.x86_64 |
| bootc-1.16.4-2.el10_2.alma.1.x86_64 |
| sequoia-sq-1.3.1.1-1.el10.x86_64 |
| microcode_ctl-4:20260812-0.el10_2.noarch |
| systemd-257-23.el10_2.2.alma.1.x86_64 |
| glib2-2.80.4-12.el10_2.22.x86_64 |
| rpm-ostree-2026.2-2.el10_2.x86_64 |
| toolbox-0.3-2.el10_2.x86_64 |
| systemd-udev-257-23.el10_2.2.alma.1.x86_64 |
| coreutils-common-9.5-8.el10_2.1.x86_64 |
| fwupd-2.0.19-4.1.el10_2.x86_64 |
| NetworkManager-libnm-1:1.56.0-2.el10_2.x86_64 |
| file-libs-5.45-9.el10.x86_64 |
| hwdata-0.379-10.8.el10.noarch |
| brcmfmac-firmware-20260804-23.2.el10_2.noarch |
| gnupg2-2.4.5-4.el10_1.x86_64 |
| cracklib-dicts-2.9.11-8.el10.x86_64 |
| netavark-2:1.17.2-1.el10.x86_64 |
| intel-gpu-firmware-20260804-23.2.el10_2.noarch |
| grub2-tools-1:2.12-46.el10_2.alma.1.x86_64 |
| bash-5.2.26-6.el10.x86_64 |
| glibc-gconv-extra-2.39-128.el10_2.alma.1.x86_64 |
| podman-sequoia-0.4.0~pqc.3-1.el10_2.x86_64 |
| 152 components |
| glibc-2.39-128.el10_2.alma.1.x86_64 |
| glibc-common-2.39-128.el10_2.alma.1.x86_64 and kernel-modules-extra-6.12.0-211.56.1.el10_2.x86_64 |
| openssl-libs-1:3.5.8-1.el10_2.alma.1.x86_64 and grub2-common-1:2.12-46.el10_2.alma.1.noarch |
| 7 components |
| 10 components |
| grub2-tools-minimal-1:2.12-46.el10_2.alma.1.x86_64 and vim-minimal-2:9.1.083-9.el10_2.20.x86_64 |
| 10 components |
| realtek-firmware-20260804-23.2.el10_2.noarch and tiwilink-firmware-20260804-23.2.el10_2.noarch |
| 10 components |
| 10 components |
| 10 components |
| 10 components |
| 10 components |
| 10 components |
| 10 components |
| 10 components |
| 10 components |
| 10 components |
| 20 components |
| 20 components |
| 13 components |
| 20 components |
| 20 components |
| 20 components |
| 9 components |
| initramfs (kernel 6.12.0-211.56.1.el10_2.x86_64) and rpmostree-unpackaged-content |
| Reserved for new packages |
| COPY multi:dc74a071b1aaef9530d8cd18cb2d56e69ae7ce9962c814e2896cd7d066005055 in /etc/yum.repos.d/ |
| COPY file:fd7ad48161ff1c845aed5b48c26fab12bf8218dd5915766ee4c32729fd6655b2 in /etc/pki/rpm-gpg/RPM-GPG-KEY-grafana |
| /bin/sh -c rpm --import /etc/pki/rpm-gpg/RPM-GPG-KEY-grafana |
| /bin/sh -c dnf install -y ipa-client oddjob-mkhomedir firewalld cloud-init nfs-utils rsync vim-enhanced && dnf clean all && systemctl enable firewalld oddjobd && systemctl enable cloud-init-local.service cloud-init.service cloud-config.service cloud-final.service |
| /bin/sh -c dnf install -y alloy-1.20.1-1 && dnf clean all && systemctl enable alloy.service && rm -rf /var/lib/alloy |
| COPY dir:03075414ad5fb40a14031751f0d35ac2f2a61a77aba15243e0827b228c788058 in / |
| /bin/sh -c rmdir /opt && ln -s var/opt /opt |
| /bin/sh -c ln -sf ../usr/share/zoneinfo/America/Los_Angeles /etc/localtime |
| /bin/sh -c mkdir -p /sysroot/ostree/bootc/storage |
| /bin/sh -c chmod 0440 /etc/sudoers.d/10-rdfrn-secure-path && visudo -cf /etc/sudoers.d/10-rdfrn-secure-path |
| /bin/sh -c update-ca-trust |
| /bin/sh -c chmod 0700 /usr/local/sbin/ipa-enroll-firstboot && systemctl enable ipa-enroll-firstboot.service |
| ARG RESTIC_VERSION |
| ARG RESTIC_SHA256 RESTIC_VERSION |
| |2 RESTIC_SHA256=f415415624dcc452f2a02b8c33641791a8c6d6d3b65bbb3543fcf9a25151585c RESTIC_VERSION=0.19.1 /bin/sh -c curl -fsSL -o /tmp/restic.bz2 "https://github.com/restic/restic/releases/download/v${RESTIC_VERSION}/restic_${RESTIC_VERSION}_linux_amd64.bz2" && echo "${RESTIC_SHA256} /tmp/restic.bz2" | sha256sum -c - && bzip2 -d /tmp/restic.bz2 && install -m 0755 -o root -g root /tmp/restic /usr/local/bin/restic && rm -f /tmp/restic |
| |2 RESTIC_SHA256=f415415624dcc452f2a02b8c33641791a8c6d6d3b65bbb3543fcf9a25151585c RESTIC_VERSION=0.19.1 /bin/sh -c mkdir -p /etc/rdfrn-backup.d && chmod 0755 /usr/local/sbin/rdfrn-backup && systemctl enable rdfrn-backup.timer |
| |2 RESTIC_SHA256=f415415624dcc452f2a02b8c33641791a8c6d6d3b65bbb3543fcf9a25151585c RESTIC_VERSION=0.19.1 /bin/sh -c chmod 0755 /usr/local/sbin/rdfrn-drift-check && systemctl enable rdfrn-drift-check.timer |
| |2 RESTIC_SHA256=f415415624dcc452f2a02b8c33641791a8c6d6d3b65bbb3543fcf9a25151585c RESTIC_VERSION=0.19.1 /bin/sh -c systemctl mask bootc-fetch-apply-updates.timer bootc-fetch-apply-updates.service |
| |2 RESTIC_SHA256=f415415624dcc452f2a02b8c33641791a8c6d6d3b65bbb3543fcf9a25151585c RESTIC_VERSION=0.19.1 /bin/sh -c rm -rf /var/cache/dnf /var/log/dnf*.log /var/log/hawkey.log /var/lib/dnf/history.sqlite* /var/cache/ldconfig/aux-cache && find /var/log -type f -exec truncate -s0 {} \; && for entry in /run/* /run/.*; do case "$entry" in /run/.|/run/..) continue ;; esac; [ -e "$entry" ] || continue; mountpoint -q "$entry" && continue; rm -rf "$entry"; done && rm -rf /tmp/* |
| |2 RESTIC_SHA256=f415415624dcc452f2a02b8c33641791a8c6d6d3b65bbb3543fcf9a25151585c RESTIC_VERSION=0.19.1 /bin/sh -c rm -rf /var/lib/certmonger /var/lib/dnf |
| |2 RESTIC_SHA256=f415415624dcc452f2a02b8c33641791a8c6d6d3b65bbb3543fcf9a25151585c RESTIC_VERSION=0.19.1 /bin/sh -c bootc container lint --fatal-warnings |
| /bin/sh -c dnf install -y nginx sqlite httpd-tools && dnf clean all && rm -rf /var/cache/dnf /var/log/dnf*.log /var/log/hawkey.log /var/lib/dnf/history.sqlite* /var/cache/ldconfig/aux-cache /var/lib/dnf && find /var/log -type f -exec truncate -s0 {} \; |
| COPY dir:8d0531553baecedee50fd6d08637c37a18a663639e6bf068fd74269416ad46da in / |
| /bin/sh -c chown root:nginx /etc/nginx/metrics-proxy.htpasswd /etc/nginx/telemetry-ingest.htpasswd && chmod 0640 /etc/nginx/metrics-proxy.htpasswd /etc/nginx/telemetry-ingest.htpasswd && chmod 0700 /usr/local/sbin/metrics-proxy-gen-cert && chmod 0755 /usr/local/sbin/mon-backup-prehook && chmod 0600 /etc/ntfy-auth.env && chmod 0644 /etc/ntfy/server.yml && systemctl enable nginx metrics-proxy-cert.service |
| /bin/sh -c chown 65534:65534 /etc/prometheus/secrets/homeassistant-token /etc/prometheus/secrets/eyes-basic-auth /etc/alertmanager/secrets/ntfy-password && chmod 0640 /etc/prometheus/secrets/homeassistant-token /etc/prometheus/secrets/eyes-basic-auth /etc/alertmanager/secrets/ntfy-password && chown 1000:1000 /etc/mktxp/credentials.yml && chmod 0640 /etc/mktxp/credentials.yml && chmod 0600 /etc/grafana-oidc.env /etc/opnsense-exporter.env |
| /bin/sh -c firewall-offline-cmd --add-service=http && firewall-offline-cmd --add-port=8443/tcp && firewall-offline-cmd --add-rich-rule='rule family="ipv4" source address="192.168.20.50/32" port port="8444" protocol="tcp" accept' && firewall-offline-cmd --add-rich-rule='rule family="ipv4" source address="192.168.25.30/32" port port="8444" protocol="tcp" accept' && firewall-offline-cmd --add-port=8445/tcp && firewall-offline-cmd --add-port=3000/tcp && firewall-offline-cmd --add-port=3100/tcp && firewall-offline-cmd --add-port=9100/tcp && firewall-offline-cmd --add-port=8080/tcp && firewall-offline-cmd --add-port=49090/tcp && firewall-offline-cmd --add-port=514/udp && firewall-offline-cmd --add-port=1514/tcp && firewall-offline-cmd --add-port=5514/udp |
| /bin/sh -c semanage port -a -t http_port_t -p tcp 8444 && semanage port -a -t http_port_t -p tcp 8445 |
| /bin/sh -c setsebool -P httpd_can_network_connect on && systemctl enable mon-selinux-booleans.service |
| /bin/sh -c cd /usr/share/selinux/rdfrn && checkmodule -M -m -o rdfrn_alloy_journal.mod rdfrn_alloy_journal.te && semodule_package -o rdfrn_alloy_journal.pp -m rdfrn_alloy_journal.mod && semodule -N -i rdfrn_alloy_journal.pp && rm -f rdfrn_alloy_journal.mod rdfrn_alloy_journal.pp |
| /bin/sh -c for entry in /run/* /run/.*; do case "$entry" in /run/.|/run/..) continue ;; esac; [ -e "$entry" ] || continue; mountpoint -q "$entry" && continue; rm -rf "$entry"; done && rm -rf /tmp/* |
| /bin/sh -c bootc container lint --fatal-warnings |
Labels
| Key | Value |
|---|---|
| build-date | 2026-10-02T03:12:41+00:00 |
| containers.bootc | 1 |
| io.buildah.version | 1.43.1 |
| org.opencontainers.image.created | 2026-10-02T03:12:41+00:00 |
| org.opencontainers.image.description | AlmaLinux Bootable Container Image |
| org.opencontainers.image.source | git://github.com/AlmaLinux/bootc-images.git |
| org.opencontainers.image.title | almalinux-bootc |
| org.opencontainers.image.url | https://github.com/AlmaLinux/bootc-images |
| org.opencontainers.image.vendor | AlmaLinux OS Foundation |
| org.opencontainers.image.version | 10.2.20261002.0 |
| ostree.bootable | 1 |
| ostree.commit | 9d2262803c258bd88d54716bb0197329523f4383e041f215deff68a9de21e981 |
| ostree.final-diffid | sha256:12787d84fa137cd5649a9005efe98ec9d05ea46245fdc50aecb7dd007f2035b1 |
| redhat.id | almalinux |
| redhat.version-id | 10.2 |
| release | 10.2 |
| version | 10.2 |