Initial build

.gitlab-ci.yml

+---
+.template: &template
+  image: '${CI_REGISTRY}/nest/tools/buildah:${CI_HOST_CPU}'
+  stage: 'build'
+  tags: ['nest']
+  script:
+    - 'mkdir -p debug/usr/lib/debug'
+    - 'buildah login -u "$CI_REGISTRY_USER" -p "$CI_REGISTRY_PASSWORD" "$CI_REGISTRY"'
+    - 'buildah bud --security-opt seccomp=unconfined
+                   --build-arg STAGE1_TAG="${CPU}-server"
+                   --build-arg FACTER_emerge_default_opts="$CI_HOST_EMERGE_DEFAULT_OPTS"
+                   --build-arg FACTER_makeopts="$CI_HOST_MAKEOPTS"
+                   -v "${PUPPET_CERTIFICATE}:/etc/puppetlabs/puppet/ssl/certs/builder.pem"
+                   -v "${PUPPET_PRIVATE_KEY}:/etc/puppetlabs/puppet/ssl/private_keys/builder.pem"
+                   -v "${PWD}/debug/usr/lib/debug:/usr/lib/debug"
+                   -v /nest:/nest
+                   -t "${CI_REGISTRY_IMAGE}:${CPU}" .'
+    - 'buildah bud --build-arg STAGE1_TAG="${CPU}-server" -t "${CI_REGISTRY_IMAGE}/debug:${CPU}" -f Containerfile.debug .'
+    - 'buildah push "${CI_REGISTRY_IMAGE}:${CPU}"'
+    - 'buildah push "${CI_REGISTRY_IMAGE}/debug:${CPU}"'
+
+'Build haswell':
+  <<: *template
+  variables:
+    CPU: 'haswell'

Containerfile

+ARG STAGE1_TAG
+FROM nest/stage1:${STAGE1_TAG}
+
+ARG FACTER_build=pdk
+ARG FACTER_emerge_default_opts
+ARG FACTER_makeopts
+
+RUN eix-sync -q
+RUN puppet agent --test --runtimeout 0; [ $? -eq 2 ]
+RUN rm -rf /var/db/repos

Containerfile.debug

+ARG STAGE1_TAG
+FROM nest/stage1/debug:${STAGE1_TAG}
+COPY debug/ /