StarMirror/toxcore
1
0
Fork 0
mirror of https://github.com/irungentoo/toxcore.git synced 2024-03-22 13:30:51 +08:00
Code Issues Projects Releases Wiki Activity
e58ee06492
toxcore/other/bootstrap_daemon/docker/Dockerfile

89 lines
3.1 KiB
Docker
Raw Normal View History

Rework the toxchat/bootstrap-node Docker image. * Use fully static build for the bootstrap daemon. * Store a sha256sum of the binary in the repo. * Updated documentation for it. * Add support for fully static build in cmake. * Enable the docker build on every PR, so we catch changes to the checksum. I realise this is adding toil, but having the checksum is valuable for security of released binaries.
2020-04-24 00:18:15 +08:00
###########################################################
# Builder image: we compile the code here (static build)
Update base images of toxchat/bootstrap-node
2021-12-14 12:17:53 +08:00
FROM alpine:3.15.0 AS build
Rework the toxchat/bootstrap-node Docker image. * Use fully static build for the bootstrap daemon. * Store a sha256sum of the binary in the repo. * Updated documentation for it. * Add support for fully static build in cmake. * Enable the docker build on every PR, so we catch changes to the checksum. I realise this is adding toil, but having the checksum is valuable for security of released binaries.
2020-04-24 00:18:15 +08:00
RUN ["apk", "--no-cache", "add",\
"build-base",\
"cmake",\
"linux-headers",\
"libconfig-dev",\
"libconfig-static",\
"libsodium-dev",\
"libsodium-static",\
cleanup: Add nonnull annotations to function definitions. These help static analysis and ubsan. We should eventually have all functions annotated like this with a cimple check to make sure every pointer has an explicit nullability annotation. The `nullable` annotation does nothing in GCC, but will be used by cimple to validate that every parameter has defined nullability.
2022-02-08 19:30:59 +08:00
"msgpack-c-dev",\
Rework the toxchat/bootstrap-node Docker image. * Use fully static build for the bootstrap daemon. * Store a sha256sum of the binary in the repo. * Updated documentation for it. * Add support for fully static build in cmake. * Enable the docker build on every PR, so we catch changes to the checksum. I realise this is adding toil, but having the checksum is valuable for security of released binaries.
2020-04-24 00:18:15 +08:00
"ninja",\
"python3"\
]
WORKDIR /src/c-toxcore
# Very selectively add files to the image, because we may have random stuff
# lying around. In particular, we don't need to rebuild the docker image when
# toxav changes or the Dockerfile changes down from the build.
COPY cmake cmake
Add bash-completion for tox-bootstrapd
2022-02-09 08:16:32 +08:00
COPY other/bootstrap_daemon/bash-completion other/bootstrap_daemon/bash-completion
Rework the toxchat/bootstrap-node Docker image. * Use fully static build for the bootstrap daemon. * Store a sha256sum of the binary in the repo. * Updated documentation for it. * Add support for fully static build in cmake. * Enable the docker build on every PR, so we catch changes to the checksum. I realise this is adding toil, but having the checksum is valuable for security of released binaries.
2020-04-24 00:18:15 +08:00
COPY other/bootstrap_daemon/src other/bootstrap_daemon/src
COPY other/bootstrap_node_packets.[ch] other/
COPY other/DHT_bootstrap.c other/
COPY other/pkgconfig other/pkgconfig
COPY other/rpm other/rpm
COPY testing/misc_tools.[ch] testing/
COPY toxcore toxcore
COPY toxencryptsave toxencryptsave
COPY CMakeLists.txt so.version ./
Make CodeFactor happy
2021-12-14 20:27:33 +08:00
RUN cmake -B_build -H. \
-GNinja \
cleanup: Add nonnull annotations to function definitions. These help static analysis and ubsan. We should eventually have all functions annotated like this with a cimple check to make sure every pointer has an explicit nullability annotation. The `nullable` annotation does nothing in GCC, but will be used by cimple to validate that every parameter has defined nullability.
2022-02-08 19:30:59 +08:00
-DCMAKE_C_FLAGS="-DTCP_SERVER_USE_EPOLL -fstack-protector-all -fisolate-erroneous-paths-attribute" \
-DCMAKE_UNITY_BUILD=ON \
Make CodeFactor happy
2021-12-14 20:27:33 +08:00
-DCMAKE_BUILD_TYPE=Release \
-DFULLY_STATIC=ON \
cleanup: Add nonnull annotations to function definitions. These help static analysis and ubsan. We should eventually have all functions annotated like this with a cimple check to make sure every pointer has an explicit nullability annotation. The `nullable` annotation does nothing in GCC, but will be used by cimple to validate that every parameter has defined nullability.
2022-02-08 19:30:59 +08:00
-DMIN_LOGGER_LEVEL=DEBUG \
Make CodeFactor happy
2021-12-14 20:27:33 +08:00
-DBUILD_TOXAV=OFF \
-DBOOTSTRAP_DAEMON=ON && \
cmake --build _build --target install
Add Dockerfile for the daemon
2016-01-02 06:18:37 +08:00
Rework the toxchat/bootstrap-node Docker image. * Use fully static build for the bootstrap daemon. * Store a sha256sum of the binary in the repo. * Updated documentation for it. * Add support for fully static build in cmake. * Enable the docker build on every PR, so we catch changes to the checksum. I realise this is adding toil, but having the checksum is valuable for security of released binaries.
2020-04-24 00:18:15 +08:00
# Verify checksum from dev-built binary, so we can be sure Docker Hub doesn't
# mess with your binaries.
COPY other/bootstrap_daemon/docker/tox-bootstrapd.sha256 other/bootstrap_daemon/docker/
Make CodeFactor happy
2021-12-14 20:27:33 +08:00
RUN sha256sum /usr/local/bin/tox-bootstrapd && \
sha256sum -c other/bootstrap_daemon/docker/tox-bootstrapd.sha256
Rework the toxchat/bootstrap-node Docker image. * Use fully static build for the bootstrap daemon. * Store a sha256sum of the binary in the repo. * Updated documentation for it. * Add support for fully static build in cmake. * Enable the docker build on every PR, so we catch changes to the checksum. I realise this is adding toil, but having the checksum is valuable for security of released binaries.
2020-04-24 00:18:15 +08:00
# Remove all the example bootstrap nodes from the config file.
COPY other/bootstrap_daemon/tox-bootstrapd.conf other/bootstrap_daemon/
# hadolint ignore=SC2086,SC2154
RUN ["sed", "-i", "/^bootstrap_nodes = /,$d", "other/bootstrap_daemon/tox-bootstrapd.conf"]
# Add bootstrap nodes from https://nodes.tox.chat/.
COPY other/bootstrap_daemon/docker/get-nodes.py other/bootstrap_daemon/docker/
RUN ["other/bootstrap_daemon/docker/get-nodes.py", "other/bootstrap_daemon/tox-bootstrapd.conf"]
###########################################################
# Final image build: this is what runs the bootstrap node
Update base images of toxchat/bootstrap-node
2021-12-14 12:17:53 +08:00
FROM debian:bullseye-slim
Re-format to reduce image file by 50%
2016-01-27 23:11:45 +08:00
Rework the toxchat/bootstrap-node Docker image. * Use fully static build for the bootstrap daemon. * Store a sha256sum of the binary in the repo. * Updated documentation for it. * Add support for fully static build in cmake. * Enable the docker build on every PR, so we catch changes to the checksum. I realise this is adding toil, but having the checksum is valuable for security of released binaries.
2020-04-24 00:18:15 +08:00
COPY --from=build /usr/local/bin/tox-bootstrapd /usr/local/bin/
COPY --from=build /src/c-toxcore/other/bootstrap_daemon/tox-bootstrapd.conf /etc/tox-bootstrapd.conf
Make CodeFactor happy
2021-12-14 20:27:33 +08:00
RUN useradd --home-dir /var/lib/tox-bootstrapd --create-home \
--system --shell /sbin/nologin \
--comment "Account to run the Tox DHT bootstrap daemon" \
--user-group tox-bootstrapd && \
chmod 644 /etc/tox-bootstrapd.conf && \
chmod 700 /var/lib/tox-bootstrapd
Re-format to reduce image file by 50%
2016-01-27 23:11:45 +08:00
Changes from @nurupo for build and runtime dependencies that reduce image size Also removal of example bootstrap nodes from the config file in one line
2016-02-07 06:51:41 +08:00
WORKDIR /var/lib/tox-bootstrapd
Add Dockerfile for the daemon
2016-01-02 06:18:37 +08:00
USER tox-bootstrapd
cleanup: Add nonnull annotations to function definitions. These help static analysis and ubsan. We should eventually have all functions annotated like this with a cimple check to make sure every pointer has an explicit nullability annotation. The `nullable` annotation does nothing in GCC, but will be used by cimple to validate that every parameter has defined nullability.
2022-02-08 19:30:59 +08:00
# Smoke-test: make sure the binary actually starts up.
# hadolint ignore=DL4006
RUN script /usr/local/bin/tox-bootstrapd --help | grep "Usage"
Rework the toxchat/bootstrap-node Docker image. * Use fully static build for the bootstrap daemon. * Store a sha256sum of the binary in the repo. * Updated documentation for it. * Add support for fully static build in cmake. * Enable the docker build on every PR, so we catch changes to the checksum. I realise this is adding toil, but having the checksum is valuable for security of released binaries.
2020-04-24 00:18:15 +08:00
ENTRYPOINT ["/usr/local/bin/tox-bootstrapd",\
"--config", "/etc/tox-bootstrapd.conf",\
"--log-backend", "stdout",\
"--foreground"\
]
Add Dockerfile for the daemon
2016-01-02 06:18:37 +08:00
Changes from @nurupo for build and runtime dependencies that reduce image size Also removal of example bootstrap nodes from the config file in one line
2016-02-07 06:51:41 +08:00
EXPOSE 443/tcp 3389/tcp 33445/tcp 33445/udp
Reference in New Issue Copy Permalink