fix(images): fix mirrors and versions and pin cmake version

images/CMAKE_VERSION

@@ -0,0 +1 @@
+3.24.4

images/Makefile

@@ -6,16 +6,20 @@ CLEANUP ?= false
 REPOSITORY ?= ghcr.io/falcosecurity/kernel-testing
 ARCH ?= $(shell uname -m)
 YAML_FILE ?= images.yaml
+CMAKE_VERSION ?= $(shell cat CMAKE_VERSION)
 
 .PHONY: build-rootfs build-kernel generate-yaml build-all initrd-builder modernprobe-builder builder
 
 builder:
 	if [ "$(DRY_RUN)" = "true" ]; then \
-		echo "Dry run: Building builder image: docker build -t $(REPOSITORY)/builder:$(ARCH)-$(TAG)"; \
+		echo "Dry run: Building builder image: docker build -t $(REPOSITORY)/builder:$(ARCH)-$(TAG) --build-arg CMAKE_VERSION=\"$(CMAKE_VERSION)\" builder"; \
 	else \
 		echo "Building builder image"; \
 		image=$(REPOSITORY)/builder:$(ARCH); \
-		docker build -t $$image-$(TAG) builder || echo "FAIL: $$image-$(TAG)" >> failed.txt; \
+		docker build \
+			-t $$image-$(TAG) \
+			--build-arg CMAKE_VERSION="$(CMAKE_VERSION)" \
+			 builder || echo "FAIL: $$image-$(TAG)" >> failed.txt; \
 		if [ "$(PUSH)" = "true" ]; then \
 			echo "Pushing image: $$image-$(TAG)"; \
 			docker push $$image-$(TAG); \
@@ -29,11 +33,14 @@ builder:
 
 modernprobe-builder:
 	if [ "$(DRY_RUN)" = "true" ]; then \
-		echo "Dry run: Building modernprobe-builder image: docker build -t $(REPOSITORY)/modernprobe-builder:$(ARCH)-$(TAG) modernprobe-builder"; \
+		echo "Dry run: Building modernprobe-builder image: docker build -t $(REPOSITORY)/modernprobe-builder:$(ARCH)-$(TAG) --build-arg CMAKE_VERSION=\"$(CMAKE_VERSION)\" modernprobe-builder"; \
 	else \
 		echo "Building modernprobe-builder image"; \
 		image=$(REPOSITORY)/modernprobe-builder:$(ARCH); \
-		docker build -t $$image-$(TAG) modernprobe-builder || echo "FAIL: $$image-$(TAG)" >> failed.txt; \
+		docker build \
+			-t $$image-$(TAG) \
+			--build-arg CMAKE_VERSION="$(CMAKE_VERSION)" \
+			modernprobe-builder || echo "FAIL: $$image-$(TAG)" >> failed.txt; \
 		if [ "$(PUSH)" = "true" ]; then \
 			echo "Pushing image: $$image-$(TAG)"; \
 			docker push $$image-$(TAG); \
@@ -60,10 +67,13 @@ build-rootfs:
 		distro=$$(basename $$(dirname $$rootfs_dir)); \
 		image=$(REPOSITORY)/$$distro-image:$$version-$(ARCH); \
 		if [ "$(DRY_RUN)" = "true" ]; then \
-			echo "Dry run: Building rootfs image: docker build -t $$image-$(TAG) $$rootfs_dir"; \
+			echo "Dry run: Building rootfs image: docker build -t $$image-$(TAG) --build-arg CMAKE_VERSION=\"$(CMAKE_VERSION)\" $$rootfs_dir"; \
 		else \
 			echo "Building rootfs image: $$image-$(TAG)"; \
-			docker build -t $$image-$(TAG) $$rootfs_dir || echo "FAIL: $$image-$(TAG)" >> failed.txt; \
+			docker build \
+				-t $$image-$(TAG) \
+				--build-arg CMAKE_VERSION="$(CMAKE_VERSION)" \
+				$$rootfs_dir || echo "FAIL: $$image-$(TAG)" >> failed.txt; \
 			if [ "$(PUSH)" = "true" ]; then \
 				echo "Pushing image: $$image-$(TAG)"; \
 				docker push $$image-$(TAG); \
@@ -120,10 +130,13 @@ build-kernel: initrd-builder
 	kernel_image=$(REPOSITORY)/$$distro-kernel:$$version-$$arch; \
 	if [ -n "$$rootfs_dir" ]; then \
 		if [ "$(DRY_RUN)" = "true" ]; then \
-			echo "Dry run: Building rootfs image: docker build -t $$rootfs_image $$rootfs_dir"; \
+			echo "Dry run: Building rootfs image: docker build -t $$rootfs_image --build-arg CMAKE_VERSION=\"$(CMAKE_VERSION)\" $$rootfs_dir"; \
 		else \
 			echo "Building rootfs image: $$rootfs_image"; \
-			docker build -t $$rootfs_image $$rootfs_dir; \
+			docker build \
+				-t $$rootfs_image \
+				--build-arg CMAKE_VERSION="$(CMAKE_VERSION)" \
+				$$rootfs_dir; \
 			if [ "$(PUSH)" = "true" ]; then \
 				echo "Pushing image: $$rootfs_image"; \
 				docker push $$rootfs_image; \

images/README.md

@@ -98,4 +98,7 @@ You can customize the Makefile to suit your specific requirements. The variables
 
 - `YAML_FILE`: The name of the YAML file that will be generated by the `generate-yaml` target.
 
+-  `CMAKE_VERSION`: The specific cmake version to install inside the images. This affects rootfs and builder images
+build. By default, it is set to the content of the [CMAKE_VERSION](./CMAKE_VERSION) file.
+
 Feel free to adjust these variables to match your desired configuration.

images/aarch64/amazonlinux2/5.4/Dockerfile

@@ -2,6 +2,10 @@ FROM amazonlinux:2
 
 ARG VERSION=5.4.247-162.350
 ARG URL='http://amazonlinux.us-east-1.amazonaws.com/2/extras/kernel-5.4/latest/aarch64'
+ARG CMAKE_VERSION
+
+# Use bash for all RUN steps with some safety options enabled.
+SHELL ["/bin/bash", "-euo", "pipefail", "-c"]
 
 RUN yum install -y \
 		binutils-devel \
@@ -29,14 +33,13 @@ RUN yum install -y \
 		xargs -I@ curl -Lo sources.rpm ${URL}/@ && \
 	yum install -y ./*.rpm && \
 	rm -v ./*.rpm && \
+	CMAKE_ARCH="aarch64" && \
+	CMAKE_RELEASE_NAME="cmake-${CMAKE_VERSION}-linux-${CMAKE_ARCH}" && \
+	curl -L "https://github.com/Kitware/CMake/releases/download/v${CMAKE_VERSION}/${CMAKE_RELEASE_NAME}.tar.gz" | \
+		tar -C /usr --strip-components 1 "${CMAKE_RELEASE_NAME}/bin" "${CMAKE_RELEASE_NAME}/share" -xzpvf - && \
 	sed -i -e 's/^AcceptEnv LANG LC_\*$/#AcceptEnv LANG LC_*/' /etc/ssh/sshd_config && \
 	echo 'UseDNS no' >> /etc/ssh/sshd_config && \
 	echo "root:root" | chpasswd && \
-	curl -LO https://cmake.org/files/v3.19/cmake-3.19.8-Linux-aarch64.tar.gz && \
-	tar -xaf cmake-3.19.8-Linux-aarch64.tar.gz && \
-	rm -vf cmake-3.19.8-Linux-aarch64.tar.gz && \
-	mv cmake-3.19.8-Linux-aarch64     /opt/cmake-3.19.8 && \
-	ln -sf  /opt/cmake-3.19.8/bin/*    /usr/bin/ && \
 	mkdir -p  /lib/modules/${VERSION}.amzn2.aarch64/ && \
 	ln -s /usr/src/kernels/${VERSION}.amzn2.aarch64/ /lib/modules/${VERSION}.amzn2.aarch64/build && \
 	rm -vf /usr/bin/gcc /usr/bin/g++ && \

images/aarch64/amazonlinux2022/5.15/Dockerfile

@@ -2,14 +2,16 @@ FROM amazonlinux:2022
 
 ARG VERSION=5.15.73-45.135
 ARG URL='https://al2022-repos-us-east-1-9761ab97.s3.dualstack.us-east-1.amazonaws.com/core/mirrors/latest/aarch64'
+ARG CMAKE_VERSION
 
+# Use bash for all RUN steps with some safety options enabled.
+SHELL ["/bin/bash", "-euo", "pipefail", "-c"]
 
 RUN dnf groupinstall -y 'Development Tools' && \
 	dnf install -y \
 		binutils-devel \
 		chrony \
 		clang \
-		cmake \
 		iproute \
 		kmod \
 		libcap-devel \
@@ -28,6 +30,10 @@ RUN dnf groupinstall -y 'Development Tools' && \
 		xargs -I@ curl -Lo sources.rpm ${URL}@ && \
 	dnf install -y ./*.rpm && \
 	rm -f ./*.rpm && \
+	CMAKE_ARCH="aarch64" && \
+	CMAKE_RELEASE_NAME="cmake-${CMAKE_VERSION}-linux-${CMAKE_ARCH}" && \
+	curl -L "https://github.com/Kitware/CMake/releases/download/v${CMAKE_VERSION}/${CMAKE_RELEASE_NAME}.tar.gz" | \
+		tar -C /usr --strip-components 1 "${CMAKE_RELEASE_NAME}/bin" "${CMAKE_RELEASE_NAME}/share" -xzpvf - && \
 	mkdir -p /lib/modules/${VERSION}.amzn2022.aarch64/ && \
 	ln -s /usr/src/kernels/${VERSION}.amzn2022.aarch64/ /lib/modules/${VERSION}.amzn2022.aarch64/build && \
 	sed -i -e 's/^AcceptEnv LANG LC_\*$/#AcceptEnv LANG LC_*/' /etc/ssh/sshd_config && \

images/aarch64/archlinux/4.14/Dockerfile

@@ -2,13 +2,16 @@ FROM lopsided/archlinux:latest
 
 ARG VERSION=4.14.15-1
 ARG URL='http://tardis.tiny-vps.com/aarm/packages'
+ARG CMAKE_VERSION
+
+# Use bash for all RUN steps with some safety options enabled.
+SHELL ["/bin/bash", "-euo", "pipefail", "-c"]
 
 WORKDIR /home/ubuntu
 
 RUN pacman -Syyu --noconfirm && \
 	pacman -S --noconfirm \
 		clang \
-		cmake \
 		gcc \
 		git \
 		libcap \
@@ -19,6 +22,10 @@ RUN pacman -Syyu --noconfirm && \
 		rsync \
 		systemd \
 		wget && \
+	CMAKE_ARCH="aarch64" && \
+	CMAKE_RELEASE_NAME="cmake-${CMAKE_VERSION}-linux-${CMAKE_ARCH}" && \
+	curl -L "https://github.com/Kitware/CMake/releases/download/v${CMAKE_VERSION}/${CMAKE_RELEASE_NAME}.tar.gz" | \
+		tar -C /usr --strip-components 1 "${CMAKE_RELEASE_NAME}/bin" "${CMAKE_RELEASE_NAME}/share" -xzpvf - && \
 	ln -sf /usr/share/zoneinfo/US/Eastern /etc/localtime && \
 	echo 'LANG=en_US.UTF-8' > /etc/locale.gen && \
 	locale-gen && \
@@ -32,4 +39,4 @@ RUN pacman -Syyu --noconfirm && \
 	pacman -U --noconfirm ./headers.tar.xz && \
 	rm -v ./headers.tar.xz && \
 	ln -s /usr/lib/systemd/systemd /sbin/init && \
-	yes | pacman -Scc || exit 0
+	pacman -Scc --noconfirm || exit 0

images/aarch64/fedora/6.2/Dockerfile

@@ -3,12 +3,15 @@ FROM fedora:38
 ARG VERSION=6.2.9-300
 ARG HVERSION=6.2.6-300
 ARG ARCHITECTURE=aarch64
-ARG URL='https://mirrors.kernel.org/fedora/releases/38/Everything/aarch64/os/Packages'
+ARG URL='https://archives.fedoraproject.org/pub/archive/fedora/linux/releases/38/Everything/aarch64/os/Packages'
+ARG CMAKE_VERSION
+
+# Use bash for all RUN steps with some safety options enabled.
+SHELL ["/bin/bash", "-euo", "pipefail", "-c"]
 
 RUN dnf groupinstall -y 'Development Tools' && \
 	dnf install -y \
 		clang \
-		cmake \
 		iproute \
 		libcap-devel \
 		llvm \
@@ -19,6 +22,11 @@ RUN dnf groupinstall -y 'Development Tools' && \
 	curl -Lo headers.rpm ${URL}/k/kernel-headers-${HVERSION}.fc38.${ARCHITECTURE}.rpm && \
 	dnf install -y ./*.rpm && \
 	rm -v ./*.rpm && \
+    dnf clean all && \
+	CMAKE_ARCH="aarch64" && \
+	CMAKE_RELEASE_NAME="cmake-${CMAKE_VERSION}-linux-${CMAKE_ARCH}" && \
+	curl -L "https://github.com/Kitware/CMake/releases/download/v${CMAKE_VERSION}/${CMAKE_RELEASE_NAME}.tar.gz" | \
+		tar -C /usr --strip-components 1 "${CMAKE_RELEASE_NAME}/bin" "${CMAKE_RELEASE_NAME}/share" -xzpvf - && \
 	mkdir -p /lib/modules/${VERSION}.fc38.${ARCHITECTURE} && \
 	ln -s /usr/src/kernels/${VERSION}.fc38.${ARCHITECTURE}/ /lib/modules/${VERSION}.fc38.${ARCHITECTURE}/build && \
 	sed -i -e 's/^AcceptEnv LANG LC_\*$/#AcceptEnv LANG LC_*/' /etc/ssh/sshd_config && \

images/aarch64/fedora/6.2/Dockerfile.kernel

@@ -1,7 +1,7 @@
 ARG VERSION=6.2.9-300
 ARG HVERSION=6.2.6-300
 ARG ARCHITECTURE=aarch64
-ARG URL='https://mirrors.kernel.org/fedora/releases/38/Everything/aarch64/os/Packages/k/'
+ARG URL='https://archives.fedoraproject.org/pub/archive/fedora/linux/releases/38/Everything/aarch64/os/Packages/k/'
 
 FROM initrd-builder:0.0.1 AS stage1
 
@@ -40,7 +40,7 @@ RUN touch .placeholder && \
 
 	#extract-vmlinux $(find lib/modules -name vmlinuz) > /home/ubuntu/extracted/vmlinux
 
-FROM fedora:38 as kmod-builder
+FROM fedora:38 AS kmod-builder
 
 ARG VERSION
 ARG ARCHITECTURE

images/aarch64/oraclelinux/4.14/Dockerfile

@@ -2,6 +2,10 @@ FROM oraclelinux:7
 
 ARG VERSION=4.14.35-2047.527.2
 ARG URL='https://yum.oracle.com/repo/OracleLinux/OL7/latest/aarch64'
+ARG CMAKE_VERSION
+
+# Use bash for all RUN steps with some safety options enabled.
+SHELL ["/bin/bash", "-euo", "pipefail", "-c"]
 
 COPY /dev.repo /etc/yum.repos.d/
 
@@ -29,11 +33,10 @@ RUN yum groupinstall -y 'Development Tools' && \
 	sed -i -e 's/^AcceptEnv LANG LC_\*$/#AcceptEnv LANG LC_*/' /etc/ssh/sshd_config && \
 	echo "root:root" | chpasswd && \
 	echo 'UseDNS no' >> /etc/ssh/sshd_config && \
-	curl -LO https://cmake.org/files/v3.19/cmake-3.19.8-Linux-aarch64.tar.gz && \
-	tar -xaf cmake-3.19.8-Linux-aarch64.tar.gz && \
-	rm -vf cmake-3.19.8-Linux-aarch64.tar.gz && \
-	mv cmake-3.19.8-Linux-aarch64   /opt/cmake-3.19.8 && \
-	ln -sf /opt/cmake-3.19.8/bin/* /usr/bin/ && \
+	CMAKE_ARCH="aarch64" && \
+	CMAKE_RELEASE_NAME="cmake-${CMAKE_VERSION}-linux-${CMAKE_ARCH}" && \
+	curl -L "https://github.com/Kitware/CMake/releases/download/v${CMAKE_VERSION}/${CMAKE_RELEASE_NAME}.tar.gz" | \
+		tar -C /usr --strip-components 1 "${CMAKE_RELEASE_NAME}/bin" "${CMAKE_RELEASE_NAME}/share" -xzpvf - && \
 	mkdir -p /lib/modules/${VERSION}.el7uek.aarch64/ && \
 	ln -s /usr/src/kernels/${VERSION}.el7uek.aarch64/ /lib/modules/${VERSION}.el7uek.aarch64/build && \
 	yum clean all && \

images/aarch64/oraclelinux/5.15/Dockerfile

@@ -3,6 +3,10 @@ FROM oraclelinux:9
 ARG VERSION=5.15.0-8.91.4.1
 ARG URL='https://yum.oracle.com/repo/OracleLinux/OL9/baseos/latest/aarch64'
 ARG ARCHITECTURE='aarch64'
+ARG CMAKE_VERSION
+
+# Use bash for all RUN steps with some safety options enabled.
+SHELL ["/bin/bash", "-euo", "pipefail", "-c"]
 
 RUN yum install -y \
 		binutils-devel \
@@ -25,10 +29,9 @@ RUN yum install -y \
 	sed -i -e 's/^AcceptEnv LANG LC_\*$/#AcceptEnv LANG LC_*/' /etc/ssh/sshd_config && \
 	echo "root:root" | chpasswd && \
 	echo 'UseDNS no' >> /etc/ssh/sshd_config && \
-	curl -LO https://cmake.org/files/v3.19/cmake-3.19.8-Linux-aarch64.tar.gz && \
-	tar -xaf cmake-3.19.8-Linux-aarch64.tar.gz && \
-	rm -vf cmake-3.19.8-Linux-aarch64.tar.gz && \
-	mv cmake-3.19.8-Linux-aarch64   /opt/cmake-3.19.8 && \
-	ln -sf /opt/cmake-3.19.8/bin/* /usr/bin/ && \
+	CMAKE_ARCH="aarch64" && \
+	CMAKE_RELEASE_NAME="cmake-${CMAKE_VERSION}-linux-${CMAKE_ARCH}" && \
+	curl -L "https://github.com/Kitware/CMake/releases/download/v${CMAKE_VERSION}/${CMAKE_RELEASE_NAME}.tar.gz" | \
+		tar -C /usr --strip-components 1 "${CMAKE_RELEASE_NAME}/bin" "${CMAKE_RELEASE_NAME}/share" -xzpvf - && \
 	mkdir -p /lib/modules/5.15.0-8.91.4.1.el9uek.${ARCHITECTURE}/ && \
 	ln -s /usr/src/kernels/5.15.0-8.91.4.1.el9uek.${ARCHITECTURE}/ /lib/modules/5.15.0-8.91.4.1.el9uek.${ARCHITECTURE}/build

images/aarch64/ubuntu/6.5/Dockerfile

@@ -1,15 +1,17 @@
-FROM ubuntu:23.10
+FROM ubuntu:22.04
 
-ARG VERSION=6.5.0-17
-ARG URL='http://ports.ubuntu.com/ubuntu-ports/pool/main/l/linux/'
+ARG VERSION=6.5.0-1024-aws
+ARG URL='https://ports.ubuntu.com/ubuntu-ports/pool/main/l/linux-aws-6.5/'
+ARG CMAKE_VERSION
+
+# Use bash for all RUN steps with some safety options enabled.
+SHELL ["/bin/bash", "-euo", "pipefail", "-c"]
 
 WORKDIR /home/ubuntu
 
 RUN apt-get update && apt-get install -y \
 		build-essential \
 		clang \
-		cmake \
-		curl \
 		curl \
 		dbus \
 		git \
@@ -32,17 +34,14 @@ RUN apt-get update && apt-get install -y \
 	curl ${URL} | \
 		grep -E "linux-headers-${VERSION}|linux-tools-${VERSION}" | \
 		grep "arm64" | \
-		grep -v "64k" | \
-		cut -d\" -f8 | \
-		xargs -I@ curl -LO ${URL}@ && \
-	curl ${URL} | \
-		grep -E "linux-headers-${VERSION}|linux-tools-common-${VERSION}" | \
-		grep -E "_all.deb" | \
-		grep -v "64k" | \
 		cut -d\" -f8 | \
 		xargs -I@ curl -LO ${URL}@ && \
 	find . -name '*.deb' | xargs -n1 dpkg -i --force-depends && \
 	rm -f *.deb && \
+	CMAKE_ARCH="aarch64" && \
+	CMAKE_RELEASE_NAME="cmake-${CMAKE_VERSION}-linux-${CMAKE_ARCH}" && \
+	curl -L "https://github.com/Kitware/CMake/releases/download/v${CMAKE_VERSION}/${CMAKE_RELEASE_NAME}.tar.gz" | \
+		tar -C /usr --strip-components 1 "${CMAKE_RELEASE_NAME}/bin" "${CMAKE_RELEASE_NAME}/share" -xzpvf - && \
 	sed -ie '/^ConditionVirtualization.*/d' /lib/systemd/system/systemd-timesyncd.service && \
 	echo "" > /etc/machine-id && echo "" > /var/lib/dbus/machine-id  && \
 	sed -i -e 's/^AcceptEnv LANG LC_\*$/#AcceptEnv LANG LC_*/' /etc/ssh/sshd_config && \

images/aarch64/ubuntu/6.5/Dockerfile.kernel

@@ -1,14 +1,13 @@
 FROM initrd-builder:0.0.1 AS builder
 
-ARG VERSION=6.5.0-17-generic
-ARG URL='http://ports.ubuntu.com/ubuntu-ports/pool/main/l/linux/'
+ARG VERSION=6.5.0-1024-aws
+ARG URL='https://ports.ubuntu.com/ubuntu-ports/pool/main/l/linux-aws-6.5/'
 
 WORKDIR /home/ubuntu
 
 RUN touch .placeholder && \
                 curl ${URL} | \
                 grep 'arm64' | \
-                grep -v '64k' | \
                 grep -oE "linux-image-unsigned-${VERSION}.*deb\"|linux-modules-${VERSION}.*deb\"" | \
                 tr -d '"' | \
                 xargs -I@ curl -LO ${URL}@ && \

images/builder/Dockerfile

@@ -2,6 +2,10 @@ FROM centos:7
 
 # TARGETARCH is automatically set by BuildKit (arm64 or amd64)
 ARG TARGETARCH
+ARG CMAKE_VERSION
+
+# Use bash for all RUN steps with some safety options enabled.
+SHELL ["/bin/bash", "-euo", "pipefail", "-c"]
 
 COPY /dhclient.service /usr/lib/systemd/system/
 
@@ -21,7 +25,6 @@ RUN sed -i s/mirror.centos.org/vault.centos.org/g /etc/yum.repos.d/*.repo; \
     fi
 
 RUN yum install -y \
-		cmake \
 		curl \
 		dhclient \
 		gcc \
@@ -37,16 +40,13 @@ RUN yum install -y \
 		systemd \
 		tar \
 	    wget \
-        sed && \
-    yum -y install devtoolset-9-gcc devtoolset-9-gcc-c++ && \
-	source /opt/rh/devtoolset-9/enable
-
-ARG CMAKE_VERSION=3.24.4
-RUN	curl -L -o /tmp/cmake.tar.gz https://github.com/Kitware/CMake/releases/download/v${CMAKE_VERSION}/cmake-${CMAKE_VERSION}-linux-$(uname -m).tar.gz && \
-	gzip -d /tmp/cmake.tar.gz && \
-	tar -xpf /tmp/cmake.tar --directory=/tmp && \
-	cp -R /tmp/cmake-${CMAKE_VERSION}-linux-$(uname -m)/* /usr && \
-	rm -rf /tmp/cmake-${CMAKE_VERSION}-linux-$(uname -m) cmake.tar && \
+        sed \
+        devtoolset-9-gcc \
+        devtoolset-9-gcc-c++
+
+RUN	CMAKE_RELEASE_NAME="cmake-${CMAKE_VERSION}-linux-$(uname -m)" && \
+	curl -L "https://github.com/Kitware/CMake/releases/download/v${CMAKE_VERSION}/${CMAKE_RELEASE_NAME}.tar.gz" | \
+		tar -C /usr --strip-components 1 "${CMAKE_RELEASE_NAME}/bin" "${CMAKE_RELEASE_NAME}/share" -xzpvf - && \
 	yum clean all && \
 	rm -rf /var/cache/yum /usr/man /usr/doc && \
 	systemctl enable dhclient && \