support kylin gfb

Signed-off-by: bo.jiang <bo.jiang@daocloud.io>

.github/workflows/os-pkgs-matrix.json

@@ -7,6 +7,7 @@
   { "name": "rocky9", "dockerfile":"build/os-packages/Dockerfile.rocky9"},
   { "name": "kylin-v10sp2", "dockerfile":"build/os-packages/Dockerfile.kylin-v10sp2"},
   { "name": "kylin-v10sp3", "dockerfile":"build/os-packages/Dockerfile.kylin-v10sp3"},
+  { "name": "kylin-v10gfb", "dockerfile":"build/os-packages/Dockerfile.kylin-v10gfb"},
   { "name": "openeuler22.03", "dockerfile":"build/os-packages/Dockerfile.openeuler22.03"},
   { "name": "oracle8", "dockerfile":"build/os-packages/Dockerfile.oracle8"},
   { "name": "oracle9", "dockerfile":"build/os-packages/Dockerfile.oracle9"},

build/os-packages/Dockerfile.kylin-v10gfb

@@ -0,0 +1,29 @@
+FROM rockylinux:8 as os-kylin-v10gfb
+ARG OS_VERSION=10
+ARG BUILD_TOOLS="dnf-utils dnf-plugins-core createrepo"
+
+WORKDIR /kylin/${OS_VERSION}/gfb/os
+COPY build/os-packages/repos/kylin.gfb.repo /etc/yum.repos.d/
+COPY build/os-packages/repos/kylin.sp3.repo /etc/yum.repos.d/
+COPY build/os-packages/packages.yml .
+COPY --from=mikefarah/yq:4.30.8 /usr/bin/yq /usr/bin/yq
+RUN yq eval '.common[],.yum[],.kylin-gfb[]' packages.yml > packages.list
+
+RUN ARCH=$(uname -m) \
+    && dnf install -y ${BUILD_TOOLS} \
+    && dnf config-manager --add-repo https://download.docker.com/linux/centos/docker-ce.repo \
+    && mkdir /etc/yum.repos.d.sp3/ && mv /etc/yum.repos.d/kylin.sp3.repo /etc/yum.repos.d.sp3/ \
+    && rm -rf /etc/yum.repos.d/Rocky* && dnf clean all && dnf makecache \
+    && while read -r line; do \
+        echo "> Processing package: ${line}" && \
+        dnf -d 10 install -y --downloadonly --downloaddir=${ARCH} ${line} \
+            --nobest --allowerasing --setopt=install_weak_deps=False; \
+    done <<<"$(sort -u packages.list)" \
+    && echo "Switched to sp3.repos for container-selinux due to gfb.repos dependency issues." \
+    && dnf -d 10 --setopt=reposdir=/etc/yum.repos.d.sp3/ install -y --downloadonly --downloaddir=${ARCH} \
+    && "socat" "xfsprogs" "ebtables" "iputils" "libseccomp" "device-mapper-libs" "container-selinux" "python3-libselinux" \
+        --nobest --allowerasing --setopt=install_weak_deps=False \
+    && createrepo -d ${ARCH}
+
+FROM scratch
+COPY --from=os-kylin-v10gfb /kylin /resources/kylin

build/os-packages/packages.yml

@@ -75,6 +75,27 @@ kylin:
   - docker-ce-26.1.2-1.el8
   - docker-ce-cli-26.1.2-1.el8
 
+kylin-gfb:
+  - libselinux-devel
+  - python3-libselinux
+  - device-mapper-libs
+  - nss-tools
+  - conntrack
+  - container-selinux
+  - libseccomp
+  - chrony
+  - iputils
+  - openssl
+  - curl
+  - rsync
+  - socat
+  - unzip
+  - e2fsprogs
+  - xfsprogs
+  - ebtables
+  - bash-completion
+  - tar
+
 # https://download.docker.com/linux/ubuntu/
 ubuntu2004:
   - containerd.io=1.6.28-1

build/os-packages/repos/kylin.gfb.repo

@@ -0,0 +1,22 @@
+###Kylin Linux Advanced Server 10 - os repo###
+
+[ks10-adv-os]
+name = Kylin Linux Advanced Server 10 - Os
+baseurl = http://update.cs2c.com.cn:8080/NS/V10/V10-GFB/030/os/adv/lic/base/$basearch/
+enabled = 1
+sslverify=0
+gpgcheck = 0
+
+[ks10-adv-updates]
+name = Kylin Linux Advanced Server 10 - Updates
+baseurl = http://update.cs2c.com.cn:8080/NS/V10/V10-GFB/030/os/adv/lic/updates/$basearch/
+enabled = 1
+sslverify=0
+gpgcheck = 0
+
+[ks10-adv-addons]
+name = Kylin Linux Advanced Server 10 - Addons
+baseurl = http://update.cs2c.com.cn:8080/NS/V10/V10-GFB/030/os/adv/lic/addons/$basearch/
+enabled = 1
+sslverify=0
+gpgcheck = 0