Dockerfile

# The published image is data and nothing else.
#
# There is no shell, no entrypoint and no runtime, so `docker run` against it
# fails by design. It is a content-addressed tarball with a registry in front
# of it.
#
# The build context is assembled by scripts/fetch.sh, which pulls every blob
# named in manifest.json and verifies its sha256. Nothing is fetched here: a
# release must be reproducible from the manifest alone, and a build step that
# reached the network would put a third party in the release path.
#
# Consumers copy the subtree they need, in a test stage only:
#
#   COPY --from=ghcr.io/virtool/examples:1.0.0 /data/subtractions ./example/subtractions
#
# Always pin a full three-part version. Never `latest`.

FROM scratch

# Links the published package to this repository on GitHub. Without it the
# package does not appear under the repo and cannot inherit its access
# settings.
LABEL org.opencontainers.image.source="https://github.com/virtool/examples"

COPY context/data /data