Build Alma9 base images for WMCore services, specifically MSUnmerged

docker/cmsweb-alma9-base/Dockerfile

@@ -0,0 +1,18 @@
+FROM cern/alma9-base:latest
+LABEL author="Dennis Lee dylee@fnal.gov"
+
+# Install EPEL repository (required for voms, fetch-crl and CA-related packages)
+RUN dnf -y install epel-release && dnf -y upgrade && \
+    dnf install -y http://linuxsoft.cern.ch/wlcg/el9/x86_64/wlcg-repo-1.0.0-1.el9.noarch.rpm && \
+    dnf clean all
+
+# Upgrade packages  from the base image and install CMSWEB required packages
+RUN dnf -y install fetch-crl cern-get-certificate CERN-CA-certs ca-certificates \
+    wlcg-voms-cms && \
+    dnf clean all
+
+# Required OS packages
+RUN dnf -y install vim less procps python3-pycurl pip && dnf clean all
+RUN ln -s /usr/bin/python3 /usr/bin/python
+
+RUN update-ca-trust

docker/pypi/dmwm-base/Dockerfile.alma9

@@ -0,0 +1,26 @@
+FROM registry.cern.ch/cmsweb/cmsweb-alma9-base:20250506 AS cmsweb-base
+FROM registry.cern.ch/cmsweb/exporters AS exporters
+FROM almalinux:latest
+LABEL org.opencontainers.image.authors="Alan Malta alan.malta@cern.ch"
+
+# base image stuff: certificates, monitoring, exporters, etc
+RUN mkdir /etc/grid-security
+COPY --from=cmsweb-base /etc/grid-security/certificates /etc/grid-security/certificates
+COPY --from=cmsweb-base /etc/grid-security/vomsdir /etc/grid-security/vomsdir
+COPY --from=exporters /data/cmsweb-ping /usr/bin/cmsweb-ping
+COPY --from=exporters /data/process_exporter /usr/bin/process_exporter
+COPY --from=exporters /data/cpy_exporter /usr/bin/cpy_exporter
+
+# Required OS packages
+RUN dnf -y upgrade && \
+    dnf -y install --skip-broken curl libcurl && \
+    dnf -y install sudo vim less procps && \
+    dnf -y install python3.12 python3.12-pip python3-pycurl pip && \
+    dnf clean all
+RUN ln -s /usr/bin/python3.12 /usr/bin/python
+
+ENV WDIR=/data
+ADD run.sh $WDIR/run.sh
+ADD monitor.sh $WDIR/monitor.sh
+ADD manage $WDIR/manage
+WORKDIR /data

docker/pypi/msunmerged/Dockerfile.alma9

@@ -0,0 +1,40 @@
+FROM registry.cern.ch/cmsweb/dmwm-base:alma9-py3.12-20250506
+LABEL org.opencontainers.image.authors="Alan Malta alan.malta@cern.ch"
+
+# Specific MSUnmerged requirements from epel repository
+RUN dnf install epel-release -y && dnf clean all && \
+    dnf -y install python3-gfal2-util gfal2-plugin-http gfal2-plugin-dcap gfal2-plugin-file \
+                   gfal2-plugin-srm gfal2-plugin-xrootd gfal2-plugin-gridftp gfal2-plugin-sftp && \
+    dnf clean all
+
+# Specific run.sh for MSUnmerged
+ENV WDIR=/data
+WORKDIR $WDIR
+ADD run.sh $WDIR/run.sh
+
+# TAG to be passed at build time through `--build-arg TAG=<PYPI_TAG>`. Default: None
+ARG TAG=None
+# We already installed gfal2 via dnf, so first install only non-gfal2 service dependencies
+# FIXME: it is probably best to remove it from the requirements.txt file
+RUN curl -ksLO https://raw.githubusercontent.com/dmwm/WMCore/$TAG/requirements.txt
+RUN cat requirements.txt | grep dbs3-client > req.txt
+RUN cat requirements.txt | grep msunmerged | grep -v gfal2 >> req.txt
+# Create venv based on environment python,
+# install modified requirements,
+# and install MSUnmerged itself, without any dependencies
+RUN python -m venv .venv && \ 
+    .venv/bin/pip install -r req.txt && \
+    .venv/bin/pip install --no-deps msunmerged==$TAG
+
+# add venv to the path to use the proper python3
+ENV PATH="/data/.venv/bin:$PATH"
+
+# and now setup run.sh and manage scripts accordingly
+RUN sed -i -e "s,-config.py,-config-unmerged.py,g" /data/run.sh
+RUN sed -i -e "s,config.py,config-unmerged.py,g" /data/manage
+ENV USER=_reqmgr2ms
+RUN useradd ${USER} && install -o ${USER} -d ${WDIR}
+RUN echo "%$USER ALL=(ALL) NOPASSWD:ALL" >> /etc/sudoers
+USER ${USER}
+RUN sudo chown -R $USER.$USER $WDIR
+CMD ["python3"]