Add chisel manifest slice to .NET 10 noble images (#6176)

Author: lbussell

eng/dockerfile-templates/runtime-deps/Dockerfile.chiseled-ubuntu

@@ -28,6 +28,7 @@
         ] ^
 
     set basePkgs to when (dotnetVersion = "8.0", cat(basePkgs, ["zlib1g_libs"]), basePkgs) ^
+    set basePkgs to when (dotnetVersion != "8.0" && dotnetVersion != "9.0", cat(basePkgs, ["base-files_chisel"]), basePkgs) ^
 
     _ Arrays in cottle are actually key-value maps. Sorting the array sorts by value
         but does not change the key value. In order to have the right index in the

src/runtime-deps/10.0/noble-chiseled-extra/amd64/Dockerfile

@@ -27,6 +27,7 @@ RUN mkdir -p /rootfs/var/lib/dpkg/ \
     && chisel-wrapper --generate-dpkg-status /rootfs/var/lib/dpkg/status -- \
         --release ubuntu-24.04 --root /rootfs \
             base-files_base \
+            base-files_chisel \
             base-files_release-info \
             ca-certificates_data \
             libc6_libs \

src/runtime-deps/10.0/noble-chiseled-extra/arm32v7/Dockerfile

@@ -27,6 +27,7 @@ RUN mkdir -p /rootfs/var/lib/dpkg/ \
     && chisel-wrapper --generate-dpkg-status /rootfs/var/lib/dpkg/status -- \
         --release ubuntu-24.04 --root /rootfs \
             base-files_base \
+            base-files_chisel \
             base-files_release-info \
             ca-certificates_data \
             libc6_libs \

src/runtime-deps/10.0/noble-chiseled-extra/arm64v8/Dockerfile

@@ -27,6 +27,7 @@ RUN mkdir -p /rootfs/var/lib/dpkg/ \
     && chisel-wrapper --generate-dpkg-status /rootfs/var/lib/dpkg/status -- \
         --release ubuntu-24.04 --root /rootfs \
             base-files_base \
+            base-files_chisel \
             base-files_release-info \
             ca-certificates_data \
             libc6_libs \

src/runtime-deps/10.0/noble-chiseled/amd64/Dockerfile

@@ -27,6 +27,7 @@ RUN mkdir -p /rootfs/var/lib/dpkg/ \
     && chisel-wrapper --generate-dpkg-status /rootfs/var/lib/dpkg/status -- \
         --release ubuntu-24.04 --root /rootfs \
             base-files_base \
+            base-files_chisel \
             base-files_release-info \
             ca-certificates_data \
             libc6_libs \

src/runtime-deps/10.0/noble-chiseled/arm32v7/Dockerfile

@@ -27,6 +27,7 @@ RUN mkdir -p /rootfs/var/lib/dpkg/ \
     && chisel-wrapper --generate-dpkg-status /rootfs/var/lib/dpkg/status -- \
         --release ubuntu-24.04 --root /rootfs \
             base-files_base \
+            base-files_chisel \
             base-files_release-info \
             ca-certificates_data \
             libc6_libs \

src/runtime-deps/10.0/noble-chiseled/arm64v8/Dockerfile

@@ -27,6 +27,7 @@ RUN mkdir -p /rootfs/var/lib/dpkg/ \
     && chisel-wrapper --generate-dpkg-status /rootfs/var/lib/dpkg/status -- \
         --release ubuntu-24.04 --root /rootfs \
             base-files_base \
+            base-files_chisel \
             base-files_release-info \
             ca-certificates_data \
             libc6_libs \

tests/Microsoft.DotNet.Docker.Tests/RuntimeDepsImageTests.cs

@@ -121,6 +121,46 @@ public void VerifyDistrolessOSReleaseInfo(ProductImageData imageData)
             Assert.NotEmpty(GetOSReleaseInfo(imageData, ImageRepo, DockerHelper));
         }
 
+        /// <summary>
+        /// Verifies the presence of the Chisel manifest in Ubuntu Chiseled images. Chisel manifest documentation:
+        /// https://discourse.ubuntu.com/t/chisel-manifest-is-supported-in-newly-released-v1-0-0/48944
+        /// </summary>
+        [LinuxImageTheory]
+        [MemberData(nameof(GetImageData))]
+        public void VerifyChiselManifest(ProductImageData imageData)
+        {
+            if (!imageData.OS.Contains(OS.ChiseledSuffix))
+            {
+                OutputHelper.WriteLine("Test is only relevant to Ubuntu Chiseled images");
+                return;
+            }
+
+            // https://github.com/dotnet/dotnet-docker/issues/5973#issuecomment-2501510550
+            bool shouldContainManifest = imageData.Version.Major != 8 && imageData.Version.Major != 9;
+
+            const string RootFs = "/rootfs";
+            const string ChiselManifestFileName = "/var/lib/chisel/manifest.wall";
+
+            // Setup a distroless helper image to inspect the filesystem of the Chiseled image
+            string distrolessHelperImageTag = DockerHelper.BuildDistrolessHelper(ImageRepo, imageData, RootFs);
+
+            // Check for the presence of the Chisel manifest by listing the files in the directory
+            // and then verifying the output.
+            string actualOutput = DockerHelper.Run(
+                image: distrolessHelperImageTag,
+                name: imageData.GetIdentifier(nameof(VerifyChiselManifest)),
+                command: $"find {RootFs}/var/lib/ -path *chisel* -type f");
+
+            if (shouldContainManifest)
+            {
+                Assert.Contains(ChiselManifestFileName, actualOutput);
+            }
+            else
+            {
+                Assert.DoesNotContain(ChiselManifestFileName, actualOutput);
+            }
+        }
+
         private static string GetOSReleaseInfo(
             ProductImageData imageData,
             DotNetImageRepo imageRepo,