Add WIP grapheneos build env

localhost/caskd/dev/android/grapheneos/buildenv/Containerfile

@@ -0,0 +1,39 @@
+FROM localhost/caskd/dev/android/grapheneos/tree
+
+RUN --network=host DEBIAN_FRONTEND=noninteractive apt install --no-install-recommends -y \
+	bash \
+	bc \
+	bison \
+	ccache \
+	curl \
+	diffutils \
+	libelf-dev \
+	flex \
+	fontconfig \
+	g++ \
+	gcc \
+	git \
+	gnupg \
+	gperf \
+	imagemagick \
+	libxml2 \
+	libxml2-utils \
+	libxslt1-dev \
+	libreadline-dev \
+	lz4 \
+	lzop \
+	openjdk-17-jre \
+	openssl \
+	libssl-dev \
+	pngcrush \
+	procps \
+	python3 \
+	repo \
+	rsync \
+	squashfs-tools \
+	util-linux \
+	yarn \
+	zip \
+	zlib1g-dev
+
+

localhost/caskd/dev/android/grapheneos/tree/Containerfile

@@ -0,0 +1,27 @@
+FROM debian
+
+ARG GOS_VERSION=2024102100
+
+# Enable contrib for repo
+RUN sed -i 's/Components: main/& contrib/' /etc/apt/sources.list.d/debian.sources
+RUN --network=host DEBIAN_FRONTEND=noninteractive apt update
+RUN --network=host DEBIAN_FRONTEND=noninteractive apt install --no-install-recommends -y \
+	ca-certificates \
+	git \
+	curl \
+	openssh-client \
+	gnupg \
+	python3 \
+	repo
+
+WORKDIR /root/grapheneos
+
+RUN --network=host repo init -u https://github.com/GrapheneOS/platform_manifest.git -b refs/tags/${GOS_VERSION}
+RUN --network=host curl https://grapheneos.org/allowed_signers > /root/grapheneos_allowed_signers
+
+WORKDIR /root/grapheneos/.repo/manifests
+RUN git config gpg.ssh.allowedSignersFile /root/grapheneos_allowed_signers
+RUN git verify-tag ${GOS_VERSION}
+
+WORKDIR /root/grapheneos
+RUN --network=host repo sync -j$(nproc)

localhost/config.mk

@@ -2,6 +2,9 @@ localhost/caskd/scheduled/alpine-rsync/${BUILD_ID_OUT}: \
 	localhost/caskd/scheduled/alpine-rsync/cron \
 	localhost/caskd/daemons/cron/${BUILD_ID_OUT}
 
+localhost/caskd/dev/android/grapheneos/buildenv/${BUILD_ID_OUT}: \
+	localhost/caskd/dev/android/grapheneos/tree/${BUILD_ID_OUT}
+
 # Wine
 WINEDEPS := localhost/caskd/archlinux/wine/${BUILD_ID_OUT}