[manylinux2010] Reduce image size

Final image size is now built from scratch because almost everything gets replaced in the base centos:6 image which means it's useless to pull this base image as it will not help with caching but just increase storage/bandwidth requirements when the host does not use centos:6 base image for other images => 384 MB (including centos:6, 194MB) -> 200MB

Author: mayeut

.travis.yml

@@ -64,7 +64,7 @@ jobs:
       script:
         - PLATFORM=$PLATFORM docker/glibc/build.sh all
       before_cache:
-        - travis-ci/cache_images.sh combined
+        - travis-ci/cache_images.sh combined_build
     - <<: *manylinux-build
       env:
         - PLATFORM="x86_64"

docker/glibc/Dockerfile

@@ -1,5 +1,4 @@
-FROM centos:6
-LABEL maintainer="The Manylinux project"
+FROM centos:6 AS manylinux2010_centos-6-no-vsyscall-build
 
 # do not install debuginfo and what x86_64 already provides
 COPY --from=quay.io/pypa/manylinux2010_centos-6-with-vsyscall32:latest \
@@ -32,10 +31,22 @@ RUN sed -i 's/enabled=1/enabled=0/g' /etc/yum/pluginconf.d/fastestmirror.conf &&
     sed -i 's/^mirrorlist/#mirrorlist/g' /etc/yum.repos.d/*.repo && \
     sed -i 's;^#baseurl=http://mirror;baseurl=https://vault;g' /etc/yum.repos.d/*.repo
 
-RUN yum install -y glibc.i686 glibc-devel.i686 glibc-static.i686 glibc.x86_64 glibc-devel.x86_64 glibc-static.x86_64 && \
-    yum -y install /rpms/* && rm -rf /rpms && yum -y clean all && rm -rf /var/cache/yum/* && \
+RUN yum update -y && \
+    yum install -y glibc.i686 glibc-devel.i686 glibc-static.i686 glibc.x86_64 glibc-devel.x86_64 glibc-static.x86_64 && \
+    yum -y install /rpms/* && rm -rf /rpms && rpm --rebuilddb && yum -y clean all && rm -rf /var/cache/yum/* && \
     # if we updated glibc, we need to strip locales again...
     localedef --list-archive | grep -v -i ^en_US.utf8 | xargs localedef --delete-from-archive && \
     mv -f /usr/lib/locale/locale-archive /usr/lib/locale/locale-archive.tmpl && \
     build-locale-archive && \
-    find /usr/share/locale -mindepth 1 -maxdepth 1 -not \( -name 'en*' -or -name 'locale.alias' \) | xargs rm -rf
+    find /usr/share/locale -mindepth 1 -maxdepth 1 -not \( -name 'en*' -or -name 'locale.alias' \) | xargs rm -rf && \
+    rm -rf /root/* /tmp/* /var/log/*
+
+RUN ln -sf cracklib-small.pwi /usr/share/cracklib/pw_dict.pwi && \
+    ln -sf cracklib-small.pwd /usr/share/cracklib/pw_dict.pwd && \
+    rm -rf /var/lib/yum/history/* && \
+    find /usr/lib64/python2.6 \( -type f -a -name '*.pyc' -o -name '*.pyo' \) -delete
+
+FROM scratch
+LABEL maintainer="The Manylinux project"
+COPY --from=manylinux2010_centos-6-no-vsyscall-build / /
+CMD ["/bin/bash"]

docker/glibc/build.sh

@@ -31,9 +31,14 @@ case "${1-}" in
     ;;
 all)
     docker_build \
-        -t quay.io/pypa/manylinux2010_centos-6-no-vsyscall:latest \
+        --target manylinux2010_centos-6-no-vsyscall-build \
+        -t quay.io/pypa/manylinux2010_centos-6-no-vsyscall-build:latest \
         --cache-from quay.io/pypa/manylinux2010_centos-6-with-vsyscall32:latest \
         --cache-from quay.io/pypa/manylinux2010_centos-6-with-vsyscall64:latest \
+        --cache-from quay.io/pypa/manylinux2010_centos-6-no-vsyscall-build:latest
+    docker_build \
+        -t quay.io/pypa/manylinux2010_centos-6-no-vsyscall:latest \
+        --cache-from quay.io/pypa/manylinux2010_centos-6-no-vsyscall-build:latest \
         --cache-from quay.io/pypa/manylinux2010_centos-6-no-vsyscall:latest
     ;;
 *)

travis-ci/tags.sh

@@ -5,18 +5,25 @@ case "${1-}" in
 64)
     tags=( quay.io/pypa/manylinux2010_centos-6-with-vsyscall64:latest )
     ;;
+combined_build)
+    tags=(
+        quay.io/pypa/manylinux2010_centos-6-no-vsyscall-build:latest
+        quay.io/pypa/manylinux2010_centos-6-no-vsyscall:latest
+    )
+    ;;
 combined)
     tags=( quay.io/pypa/manylinux2010_centos-6-no-vsyscall:latest )
     ;;
 all)
     tags=(
         quay.io/pypa/manylinux2010_centos-6-with-vsyscall32:latest
         quay.io/pypa/manylinux2010_centos-6-with-vsyscall64:latest
+        quay.io/pypa/manylinux2010_centos-6-no-vsyscall-build:latest
         quay.io/pypa/manylinux2010_centos-6-no-vsyscall:latest
     )
     ;;
 *)
-    echo "Usage: $0 {32|64|combined|all}" >&2
+    echo "Usage: $0 {32|64|combined_build|combined|all}" >&2
     exit 1
     ;;
 esac