Watson Studioでカスタム・イメージを利用する

# oc -n openshift-image-registry get route

 image-registry.openshift-image-registry.svc:5000

  <CloudPakforData_URL>/zen-data/v1/volumes/files/%2F_global_%2Fconfig%2F.runtime-definitions%2Fibm%2F<runtime-config-server.json>

https://<CloudPakforDara_URL>/zen-data/v1/volumes/files/%2F_global_%2Fconfig%2F.runtime-definitions%2Fibm%2Fjupyter-py37-server.json

[...]
"replicas": 1,
 "image": "<image-registry-host>/<namespace>/wslocal-runtime-py37main:3.5.2011.1800-amd64",
 "command": ["/usr/sbin/tini", "--", "/opt/ibm/ws/bin/setup_container.sh"],
 [...]

# podman login -u <username> -p <password> <image-registry-url>

# podman pull <image-registry-host>/<namespace>/wslocal-runtime-py37main:3.5.2011.1800-amd64

ARG  base_image_tag
FROM ${base_image_tag}


# Operating system packages must be installed as root.
USER root:root

# If you don't need to install additional operating system packages from the
# default repositories, remove the "microdnf install" command and package list,
# but keep the rest of this RUN statement. This will install security updates.
# The chown and chmod commands are needed when system certificates get updated.
RUN microdnf update \
 && microdnf install --nodocs \
    poppler-utils \
 && microdnf clean all \
 && rm -rf /var/cache/yum \
 && chown -cR :wsbuild \
          /etc/pki/ca-trust/source/anchors/ \
          /etc/pki/ca-trust/extracted/ \
 && chmod -cR g+w \
          /etc/pki/ca-trust/source/anchors/ \
          /etc/pki/ca-trust/extracted/


# =========================================
# Change display name of the Jupyter kernel
# =========================================
# The kernel spec is in /opt/ibm/run/kernels/<name>/
# It must be modified as root.

RUN sed -i -e '/display_name/{s/",/ with modifications",/}' \
    /opt/ibm/run/kernels/*/kernel.json


# ==================================================
# Modify the conda environment of the Jupyter kernel
# ==================================================
# The name of the kernel conda environment is given by $DSX_KERNEL_CONDENV.
# The examples assume that you are modifying the conda environment of the
# base image. If you prefer to create and use a different conda environment
# from scratch, set DSX_KERNEL_CONDENV to the name of that environment.
#
# The conda environment should be changed with user and group "wsbuild".
# In each layer, call fix-conda-permissions to ensure group write permission,
# because some files may get installed without respect for the umask.

USER wsbuild:wsbuild

# If you need to add files to the image, use
# COPY --chown=wsbuild:wsbuild ...


# ===========================
# Install packages with conda
# ===========================

# If you don't need to install packages with conda, remove this RUN statement.
RUN umask 002 \
 && conda install -n $DSX_KERNEL_CONDENV \
    basemap=1.3.0 \
    py4j \
 && source /opt/ibm/build/bin/installutils.sh \
 && fix-conda-permissions

# =========================
# Install packages with pip
# =========================

# If you don't need to install packages with pip, remove this RUN statement.
RUN umask 002 \
 && conda run -n $DSX_KERNEL_CONDENV pip install \
    astrotools==1.4.2 \
    scikit-multilearn \
    scikit-plot \
    seawater \
    fuzzy \
 && source /opt/ibm/build/bin/installutils.sh \
 && fix-conda-permissions

# ======================================
# change from build user to runtime user
# ======================================
USER $DSX_USERNAME:wsbuild

# docker build -t <new-image-name>:<new-image-tag> --build-arg base_image_tag= <image-registry_
host>/<name_space>/wslocal-runtime-py37main:3.5.2011.1800-amd64  -f <path_to_dockerfile> .

# podman build  -t cp4dimagetest:3301410 --build-arg base_image_tag=<image-registry-host>/<name_space>/wslocal-runtime-py37main:3.5.2011.1800-amd64 ---format docker -f ./cp4dimagetest .

# podman images
REPOSITORY               TAG       IMAGE ID       CREATED         SIZE
localhost/cp4dimagetest  3301410   925036b3f611   5 minutes ago   6.54 GB

podman push 925036b3f611 <image-registry-host>/<name_space>/cp4dimagetest:3301410

  apiVersion: batch/v1
  kind: Job
  metadata:
  labels:
    app: imagePrepull
    run: jupyter-py36
  name: jupyter-py36-pull
  spec:
  completions: 20
  parallelism: 20
  template:
    metadata:
      labels:
        app: imagePrepull
        run: jupyter-py36
    spec:
      affinity:
        nodeAffinity:
          requiredDuringSchedulingIgnoredDuringExecution:
            nodeSelectorTerms:
            - matchExpressions:
              - key: beta.kubernetes.io/arch
                operator: In
                values:
                - amd64
        podAntiAffinity:
          requiredDuringSchedulingIgnoredDuringExecution:
          - labelSelector:
              matchExpressions:
              - key: run
                operator: In
                values:
                - jupyter-py36
            topologyKey: kubernetes.io/hostname
      containers:
      - command:
        - echo
        - Image new-image-name preloaded
        image: new-image-name
        imagePullPolicy: Always
        name: jupyter-custom-container
      restartPolicy: OnFailure

Image: image-registry.openshift-image-registry.svc:5000/<name_space>/cp4dimagetest:3301410cp4dimagetest:3301410

oc create -f prepull.yam

oc get pods | grep pull

"image": "image-registry.openshift-image-regisry.svc:5000/<namespace>/cp4dimagetest:3301410",

curl <CloudPakforData_URL>/v1/preauth/validateAuth -u <username>:<password>

curl -X PUT \
   'https://<CloudPakforData_URL>/zen-data/v1/volumes/files/%2F_global_%2Fconfig%2F.runtime-definitions%2Fibm' \
   -H 'Authorization: Bearer <platform-access-token>' \
   -H 'content-type: multipart/form-data' \
   -F upFile=@/path/to/runtime/def/<custom-def-name>-server.json