From 2bc5ca18e2c2ca4cca2026fa7e36eea9b700b3b9 Mon Sep 17 00:00:00 2001
From: Haitao Pan <manbuzhe2009@qq.com>
Date: Fri, 10 Mar 2023 11:16:29 +0800
Subject: [PATCH] add oci/base/ubuntu/

---
 .github/workflows/base-images.yaml | 20 ++++++++++++++++++++
 oci/base/ubuntu/Dockerfile         | 14 ++++++++++++++
 2 files changed, 34 insertions(+)
 create mode 100644 oci/base/ubuntu/Dockerfile

diff --git a/.github/workflows/base-images.yaml b/.github/workflows/base-images.yaml
index eb71002..2e5bd73 100644
--- a/.github/workflows/base-images.yaml
+++ b/.github/workflows/base-images.yaml
@@ -4,6 +4,7 @@ on:
   push:
     paths:
       - '.github/workflows/base-images.yaml'
+      - 'oci/base/ubuntu/Dockerfile'
       - 'oci/base/debian/Dockerfile'
       - 'oci/base/debian-slim/Dockerfile'
       - 'oci/base/alpine/Dockerfile'
@@ -125,3 +126,22 @@ jobs:
           tag: latest
           cache: true
           cache_registry: cache
+  ubuntu:
+    runs-on: ubuntu-latest
+    name: Build ubuntu base image
+    steps:
+      - uses: actions/checkout@master
+
+      - name: 'Artifact: build && push alpine with custom ca image'
+        uses: aevea/action-kaniko@master
+        with:
+          registry: artifact.onwalk.net
+          username: admin 
+          password: ${{ secrets.HELM_REPO_PASSWORD }}
+          path: './oci/base/ubuntu'
+          build_file: 'Dockerfile' 
+          image: public/ubuntu
+          tag: latest
+          cache: true
+          cache_registry: cache
+  debian-slim:
diff --git a/oci/base/ubuntu/Dockerfile b/oci/base/ubuntu/Dockerfile
new file mode 100644
index 0000000..c64c884
--- /dev/null
+++ b/oci/base/ubuntu/Dockerfile
@@ -0,0 +1,14 @@
+FROM ubuntu:22.04
+RUN apt update && apt install ca-certificates curl -y
+RUN cd /usr/local/share/ca-certificates/ && curl http://certinfo.roche.com/rootcerts/Roche%20Root%20CA%201.cer -o RocheRootCA1.cer && \
+    curl http://certinfo.roche.com/rootcerts/RocheEnterpriseCA1.cer -o RocheEnterpriseCA1.cer && \
+    curl http://certinfo.roche.com/rootcerts/RocheEnterpriseCA2.cer \
+                                                                    -o RocheEnterpriseCA2.cer && curl http://certinfo.roche.com/rootcerts/Roche%20Root%20CA%201%20-%20G2.crt \
+                                                                    -o RocheRootCA1-G2.crt && curl http://certinfo.roche.com/rootcerts/Roche%20Enterprise%20CA%201%20-%20G2.crt \
+                                                                    -o RocheEnterpriseCA1-G2.crt && curl http://certinfo.roche.com/rootcerts/Roche%20G3%20Root%20CA.crt \
+                                                                    -o RocheG3RootCA.crt && curl http://certinfo.roche.com/rootcerts/Roche%20G3%20Issuing%20CA%201.crt \
+                                                                    -o RocheG3IssuingCA1.crt && curl http://certinfo.roche.com/rootcerts/Roche%20G3%20Issuing%20CA%202.crt \
+                                                                    -o RocheG3IssuingCA2.crt && curl http://certinfo.roche.com/rootcerts/Roche%20G3%20Issuing%20CA%203.crt \
+                                                                    -o RocheG3IssuingCA3.crt && curl http://certinfo.roche.com/rootcerts/Roche%20G3%20Issuing%20CA%204.crt \
+                                                                    -o RocheG3IssuingCA4.crt && update-ca-certificates
+