From 60a7cbeb738e43c9b8576b05e49b6cb002c4fdeb Mon Sep 17 00:00:00 2001 From: Ilya Buziuk Date: Fri, 31 Jul 2026 10:48:44 +0200 Subject: [PATCH 1/3] feat:bubblewrap Signed-off-by: Ilya Buziuk --- README.md | 4 ++++ universal/ubi10/Dockerfile | 5 +++++ universal/ubi9/Dockerfile | 5 +++++ 3 files changed, 14 insertions(+) diff --git a/README.md b/README.md index bcb8c45a..510ab81f 100644 --- a/README.md +++ b/README.md @@ -180,6 +180,8 @@ docker run -ti --rm quay.io/devfile/universal-developer-image:ubi9-latest bash | `docker` |`` | | `docker-compose` |`` | | `kamel` |`` | +|------SANDBOX---------|-------------------------------------| +| `bubblewrap` |`bubblewrap` | | **TOTAL SIZE** | **8.75GB** (3.6GB compressed) | **Libraries:** @@ -263,6 +265,8 @@ docker run -ti --rm quay.io/devfile/universal-developer-image:ubi10-latest bash | `skaffold` |`` | | `kamel` |`v2.8.0` | | `shellcheck` |`v0.11.0` | +|------SANDBOX---------|-------------------------------------| +| `bubblewrap` |`bubblewrap` | | **TOTAL SIZE** | **TBD** | **Libraries:** diff --git a/universal/ubi10/Dockerfile b/universal/ubi10/Dockerfile index 112e0c4c..ae07ac16 100644 --- a/universal/ubi10/Dockerfile +++ b/universal/ubi10/Dockerfile @@ -554,6 +554,11 @@ RUN dnf -y install bash-completion \ && dnf clean all \ && rm -rf /var/cache/yum +# bubblewrap +RUN dnf -y install bubblewrap \ + && dnf clean all \ + && rm -rf /var/cache/yum + ## tmux - using pre-built binaries (not available in UBI repos) RUN <<'EOF' set -euf -o pipefail diff --git a/universal/ubi9/Dockerfile b/universal/ubi9/Dockerfile index 543ed9c0..bf7c533a 100644 --- a/universal/ubi9/Dockerfile +++ b/universal/ubi9/Dockerfile @@ -521,6 +521,11 @@ RUN dnf -y install bash-completion \ && dnf clean all \ && rm -rf /var/cache/yum +# bubblewrap +RUN dnf -y install bubblewrap \ + && dnf clean all \ + && rm -rf /var/cache/yum + ## tmux - using pre-built binaries (not available in UBI repos) RUN <<'EOF' set -euf -o pipefail From 08cc66726429f37d4c286107408b9e336f4efce5 Mon Sep 17 00:00:00 2001 From: Ilya Buziuk Date: Fri, 31 Jul 2026 11:18:26 +0200 Subject: [PATCH 2/3] fix: no dnf package available Signed-off-by: Ilya Buziuk --- README.md | 4 ++-- universal/ubi10/Dockerfile | 32 ++++++++++++++++++++++++++++---- 2 files changed, 30 insertions(+), 6 deletions(-) diff --git a/README.md b/README.md index 510ab81f..f7ecfc3b 100644 --- a/README.md +++ b/README.md @@ -181,7 +181,7 @@ docker run -ti --rm quay.io/devfile/universal-developer-image:ubi9-latest bash | `docker-compose` |`` | | `kamel` |`` | |------SANDBOX---------|-------------------------------------| -| `bubblewrap` |`bubblewrap` | +| `bubblewrap` |`` | | **TOTAL SIZE** | **8.75GB** (3.6GB compressed) | **Libraries:** @@ -266,7 +266,7 @@ docker run -ti --rm quay.io/devfile/universal-developer-image:ubi10-latest bash | `kamel` |`v2.8.0` | | `shellcheck` |`v0.11.0` | |------SANDBOX---------|-------------------------------------| -| `bubblewrap` |`bubblewrap` | +| `bubblewrap` |`v0.11.2 (built from source)` | | **TOTAL SIZE** | **TBD** | **Libraries:** diff --git a/universal/ubi10/Dockerfile b/universal/ubi10/Dockerfile index ae07ac16..726c5d3b 100644 --- a/universal/ubi10/Dockerfile +++ b/universal/ubi10/Dockerfile @@ -554,10 +554,34 @@ RUN dnf -y install bash-completion \ && dnf clean all \ && rm -rf /var/cache/yum -# bubblewrap -RUN dnf -y install bubblewrap \ - && dnf clean all \ - && rm -rf /var/cache/yum +## bubblewrap - built from source (not available in UBI 10 repos) +RUN <<'EOF' +set -euf -o pipefail + +TEMP_DIR="$(mktemp -d)" +cd "${TEMP_DIR}" + +BWRAP_VERSION="0.11.2" + +dnf -y install libcap-devel ninja-build +pip install meson + +curl -sSL "https://github.com/containers/bubblewrap/releases/download/v${BWRAP_VERSION}/bubblewrap-${BWRAP_VERSION}.tar.xz" -o bubblewrap.tar.xz +tar -xf bubblewrap.tar.xz +cd "bubblewrap-${BWRAP_VERSION}" + +meson setup _builddir +meson compile -C _builddir +install -m 755 _builddir/bwrap /usr/local/bin/bwrap + +cd / +rm -rf "${TEMP_DIR}" + +pip uninstall -y meson +dnf -y remove libcap-devel ninja-build +dnf clean all +rm -rf /var/cache/yum +EOF ## tmux - using pre-built binaries (not available in UBI repos) RUN <<'EOF' From 9086905dcfe4e892af2bc6b46de058c80f8499a4 Mon Sep 17 00:00:00 2001 From: Ilya Buziuk Date: Fri, 31 Jul 2026 11:48:58 +0200 Subject: [PATCH 3/3] fixup! Signed-off-by: Ilya Buziuk --- README.md | 2 +- universal/ubi9/Dockerfile | 32 ++++++++++++++++++++++++++++---- 2 files changed, 29 insertions(+), 5 deletions(-) diff --git a/README.md b/README.md index f7ecfc3b..c9627d38 100644 --- a/README.md +++ b/README.md @@ -181,7 +181,7 @@ docker run -ti --rm quay.io/devfile/universal-developer-image:ubi9-latest bash | `docker-compose` |`` | | `kamel` |`` | |------SANDBOX---------|-------------------------------------| -| `bubblewrap` |`` | +| `bubblewrap` |`v0.11.2 (built from source)` | | **TOTAL SIZE** | **8.75GB** (3.6GB compressed) | **Libraries:** diff --git a/universal/ubi9/Dockerfile b/universal/ubi9/Dockerfile index bf7c533a..1dec2dfd 100644 --- a/universal/ubi9/Dockerfile +++ b/universal/ubi9/Dockerfile @@ -521,10 +521,34 @@ RUN dnf -y install bash-completion \ && dnf clean all \ && rm -rf /var/cache/yum -# bubblewrap -RUN dnf -y install bubblewrap \ - && dnf clean all \ - && rm -rf /var/cache/yum +## bubblewrap - built from source (not available in UBI 9 repos) +RUN <<'EOF' +set -euf -o pipefail + +TEMP_DIR="$(mktemp -d)" +cd "${TEMP_DIR}" + +BWRAP_VERSION="0.11.2" + +dnf -y install libcap-devel ninja-build +pip install meson + +curl -sSL "https://github.com/containers/bubblewrap/releases/download/v${BWRAP_VERSION}/bubblewrap-${BWRAP_VERSION}.tar.xz" -o bubblewrap.tar.xz +tar -xf bubblewrap.tar.xz +cd "bubblewrap-${BWRAP_VERSION}" + +meson setup _builddir +meson compile -C _builddir +install -m 755 _builddir/bwrap /usr/local/bin/bwrap + +cd / +rm -rf "${TEMP_DIR}" + +pip uninstall -y meson +dnf -y remove libcap-devel ninja-build +dnf clean all +rm -rf /var/cache/yum +EOF ## tmux - using pre-built binaries (not available in UBI repos) RUN <<'EOF'