generated from openziti/template-repo
-
Notifications
You must be signed in to change notification settings - Fork 0
/
Dockerfile
125 lines (110 loc) · 4.31 KB
/
Dockerfile
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
# this is the x86 container image used by GitHub Actions and developers to
# cross-compile Ziti projects that use CMake
# pin the cmake version to ensure repeatable builds
ARG CMAKE_VERSION="3.26.3"
ARG VCPKG_VERSION="2024.03.25"
# Ubuntu Bionic 20.04 LTS has GLIBC 2.31
FROM ubuntu:focal
ARG CMAKE_VERSION
ARG VCPKG_VERSION
ARG XDG_CONFIG_HOME
ARG DEBIAN_FRONTEND=noninteractive
LABEL org.opencontainers.image.authors="[email protected]"
USER root
ENV GIT_DISCOVERY_ACROSS_FILESYSTEM=1
ENV TZ=UTC
ENV PATH="/usr/local/:${PATH}"
# used by git to find global config in container that is writeable by the
# developer's UID
ENV GIT_CONFIG_GLOBAL="/ziti-builder-gitconfig"
# used by build scripts to detect running in docker
ENV BUILD_ENVIRONMENT="ziti-builder-docker"
RUN apt-get update \
&& apt-get --yes --quiet --no-install-recommends install \
autoconf \
automake \
autopoint \
build-essential \
cppcheck \
crossbuild-essential-arm64 \
crossbuild-essential-armhf \
curl \
doxygen \
expect \
flex \
g++-arm-linux-gnueabihf \
gcc-aarch64-linux-gnu \
gcc-arm-linux-gnueabihf \
gcovr \
gpg \
graphviz \
libcap-dev \
libssl-dev \
libsystemd-dev \
libtool \
ninja-build \
pkg-config \
python3 \
python3-pip \
software-properties-common \
tar \
unzip \
wget \
zip \
zlib1g-dev \
&& apt-get --yes autoremove \
&& apt-get clean autoclean \
&& rm -fr /var/lib/apt/lists/{apt,dpkg,cache,log} /tmp/* /var/tmp/*
RUN curl -sSLf https://apt.llvm.org/llvm-snapshot.gpg.key \
| gpg --dearmor --output /usr/share/keyrings/llvm-snapshot.gpg \
&& chmod +r /usr/share/keyrings/llvm-snapshot.gpg \
&& echo "deb [signed-by=/usr/share/keyrings/llvm-snapshot.gpg] http://apt.llvm.org/focal/ llvm-toolchain-focal-17 main" > /etc/apt/sources.list.d/llvm-snapshot.list
# re-added git ppa because cmake failed to find git version tag on focal runner
RUN add-apt-repository ppa:git-core/ppa \
&& apt-get update \
&& apt-get --yes --quiet --no-install-recommends install \
git \
clang-17 \
clang-tidy-17 \
&& apt-get --yes autoremove \
&& apt-get clean autoclean \
&& rm -fr /var/lib/apt/lists/{apt,dpkg,cache,log} /tmp/* /var/tmp/*
RUN ln -sfvn /usr/bin/clang-17 /usr/bin/clang \
&& ln -sfvn /usr/bin/clang++-17 /usr/bin/clang++ \
&& ln -sfvn /usr/bin/clang-tidy-17 /usr/bin/clang-tidy
RUN curl -sSfL https://cmake.org/files/v${CMAKE_VERSION%.*}/cmake-${CMAKE_VERSION}-linux-$(uname -m).sh -o cmake.sh \
&& (bash cmake.sh --skip-license --prefix=/usr/local) \
&& rm cmake.sh
# configure Debian Multi-Arch to allow cross-compiling
RUN dpkg --add-architecture armhf
RUN dpkg --add-architecture arm64
COPY ./crossbuild.list /etc/apt/sources.list.d/crossbuild.list
RUN sed -Ei 's/^deb/deb [arch=amd64]/g' /etc/apt/sources.list
RUN apt-get update \
&& apt-get --yes --quiet --no-install-recommends install \
libcap-dev:armhf \
libcap-dev:arm64 \
zlib1g-dev:armhf \
zlib1g-dev:arm64 \
libssl-dev:armhf \
libssl-dev:arm64 \
&& apt-get --yes autoremove \
&& apt-get clean autoclean \
&& rm -fr /var/lib/apt/lists/{apt,dpkg,cache,log} /tmp/* /var/tmp/*
ENV VCPKG_ROOT=/usr/local/vcpkg
# this must be set on arm. see https://learn.microsoft.com/en-us/vcpkg/users/config-environment#vcpkg_force_system_binaries
ENV VCPKG_FORCE_SYSTEM_BINARIES=yes
# VCPKG_ROOT is set to filemode 0777 to allow the developer's UID to write the lockfile at build time; and git writes
# global config settings as root in GIT_CONFIG_GLOBAL
RUN cd /usr/local \
&& touch "${GIT_CONFIG_GLOBAL}" \
&& git config --global advice.detachedHead false \
&& git clone --branch "${VCPKG_VERSION}" https://github.com/microsoft/vcpkg \
&& ./vcpkg/bootstrap-vcpkg.sh -disableMetrics \
&& chmod -R ugo+rwX /usr/local/vcpkg
# this is set to document the expectation of a predictable workdir in build
# scripts used by CI and developers building locally, but GitHub Actions will
# always override with WORKDIR=/github/workspace when running the job container
WORKDIR /github/workspace
COPY ./entrypoint.sh /entrypoint.sh
ENTRYPOINT [ "/entrypoint.sh" ]