2013-06-21 22:42:17 -04:00
|
|
|
# This file describes the standard way to build Docker, using docker
|
2013-09-06 22:58:05 -04:00
|
|
|
#
|
|
|
|
|
# Usage:
|
|
|
|
|
#
|
2018-02-14 06:03:52 -05:00
|
|
|
# # Use make to build a development environment image and run it in a container.
|
|
|
|
|
# # This is slow the first time.
|
|
|
|
|
# make BIND_DIR=. shell
|
2013-09-06 22:58:05 -04:00
|
|
|
#
|
2018-02-14 06:03:52 -05:00
|
|
|
# The following commands are executed inside the running container.
|
|
|
|
|
|
|
|
|
|
# # Make a dockerd binary.
|
|
|
|
|
# # hack/make.sh binary
|
2013-09-06 23:16:13 -04:00
|
|
|
#
|
2018-02-14 06:03:52 -05:00
|
|
|
# # Install dockerd to /usr/local/bin
|
|
|
|
|
# # make install
|
|
|
|
|
#
|
|
|
|
|
# # Run unit tests
|
|
|
|
|
# # hack/test/unit
|
|
|
|
|
#
|
|
|
|
|
# # Run tests e.g. integration, py
|
|
|
|
|
# # hack/make.sh binary test-integration test-docker-py
|
2013-09-06 22:58:05 -04:00
|
|
|
#
|
2015-06-13 12:21:50 -04:00
|
|
|
# Note: AppArmor used to mess with privileged mode, but this is no longer
|
2013-10-31 17:58:43 -04:00
|
|
|
# the case. Therefore, you don't have to disable it anymore.
|
|
|
|
|
#
|
2013-09-06 22:58:05 -04:00
|
|
|
|
2019-04-05 20:20:06 -04:00
|
|
|
ARG CROSS="false"
|
bump golang 1.13.1 (CVE-2019-16276)
full diff: https://github.com/golang/go/compare/go1.13...go1.13.1
```
Hi gophers,
We have just released Go 1.13.1 and Go 1.12.10 to address a recently reported security issue. We recommend that all affected users update to one of these releases (if you're not sure which, choose Go 1.13.1).
net/http (through net/textproto) used to accept and normalize invalid HTTP/1.1 headers with a space before the colon, in violation of RFC 7230. If a Go server is used behind an uncommon reverse proxy that accepts and forwards but doesn't normalize such invalid headers, the reverse proxy and the server can interpret the headers differently. This can lead to filter bypasses or request smuggling, the latter if requests from separate clients are multiplexed onto the same upstream connection by the proxy. Such invalid headers are now rejected by Go servers, and passed without normalization to Go client applications.
The issue is CVE-2019-16276 and Go issue golang.org/issue/34540.
Thanks to Andrew Stucki, Adam Scarr (99designs.com), and Jan Masarik (masarik.sh) for discovering and reporting this issue.
Downloads are available at https://golang.org/dl for all supported platforms.
Alla prossima,
Filippo on behalf of the Go team
```
From the patch: https://github.com/golang/go/commit/6e6f4aaf70c8b1cc81e65a26332aa9409de03ad8
```
net/textproto: don't normalize headers with spaces before the colon
RFC 7230 is clear about headers with a space before the colon, like
X-Answer : 42
being invalid, but we've been accepting and normalizing them for compatibility
purposes since CL 5690059 in 2012.
On the client side, this is harmless and indeed most browsers behave the same
to this day. On the server side, this becomes a security issue when the
behavior doesn't match that of a reverse proxy sitting in front of the server.
For example, if a WAF accepts them without normalizing them, it might be
possible to bypass its filters, because the Go server would interpret the
header differently. Worse, if the reverse proxy coalesces requests onto a
single HTTP/1.1 connection to a Go server, the understanding of the request
boundaries can get out of sync between them, allowing an attacker to tack an
arbitrary method and path onto a request by other clients, including
authentication headers unknown to the attacker.
This was recently presented at multiple security conferences:
https://portswigger.net/blog/http-desync-attacks-request-smuggling-reborn
net/http servers already reject header keys with invalid characters.
Simply stop normalizing extra spaces in net/textproto, let it return them
unchanged like it does for other invalid headers, and let net/http enforce
RFC 7230, which is HTTP specific. This loses us normalization on the client
side, but there's no right answer on the client side anyway, and hiding the
issue sounds worse than letting the application decide.
```
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2019-09-27 08:26:12 -04:00
|
|
|
ARG GO_VERSION=1.13.1
|
2019-08-11 11:08:33 -04:00
|
|
|
ARG DEBIAN_FRONTEND=noninteractive
|
2019-04-05 20:20:06 -04:00
|
|
|
|
2019-07-20 04:32:08 -04:00
|
|
|
FROM golang:${GO_VERSION}-stretch AS base
|
2019-07-16 06:16:56 -04:00
|
|
|
ARG APT_MIRROR
|
|
|
|
|
RUN sed -ri "s/(httpredir|deb).debian.org/${APT_MIRROR:-deb.debian.org}/g" /etc/apt/sources.list \
|
|
|
|
|
&& sed -ri "s/(security).debian.org/${APT_MIRROR:-security.debian.org}/g" /etc/apt/sources.list
|
2019-09-11 03:36:53 -04:00
|
|
|
ENV GO111MODULE=off
|
2016-11-20 17:14:51 -05:00
|
|
|
|
2017-09-29 17:09:14 -04:00
|
|
|
FROM base AS criu
|
2019-08-11 11:08:33 -04:00
|
|
|
ARG DEBIAN_FRONTEND
|
2016-05-12 10:52:00 -04:00
|
|
|
# Install CRIU for checkpoint/restore support
|
2019-08-14 14:43:52 -04:00
|
|
|
ENV CRIU_VERSION 3.12
|
2018-08-08 11:45:00 -04:00
|
|
|
# Install dependency packages specific to criu
|
2019-07-30 19:49:57 -04:00
|
|
|
RUN apt-get update && apt-get install -y --no-install-recommends \
|
2017-09-29 17:09:14 -04:00
|
|
|
libnet-dev \
|
2019-07-17 08:35:51 -04:00
|
|
|
libprotobuf-c-dev \
|
2017-09-29 17:09:14 -04:00
|
|
|
libprotobuf-dev \
|
|
|
|
|
libnl-3-dev \
|
|
|
|
|
libcap-dev \
|
|
|
|
|
protobuf-compiler \
|
|
|
|
|
protobuf-c-compiler \
|
|
|
|
|
python-protobuf \
|
2019-07-30 19:49:57 -04:00
|
|
|
&& rm -rf /var/lib/apt/lists/*
|
|
|
|
|
RUN mkdir -p /usr/src/criu \
|
2017-12-04 18:51:08 -05:00
|
|
|
&& curl -sSL https://github.com/checkpoint-restore/criu/archive/v${CRIU_VERSION}.tar.gz | tar -C /usr/src/criu/ -xz --strip-components=1 \
|
2016-05-12 10:52:00 -04:00
|
|
|
&& cd /usr/src/criu \
|
|
|
|
|
&& make \
|
2018-04-13 14:45:57 -04:00
|
|
|
&& make PREFIX=/build/ install-criu
|
2017-09-29 17:09:14 -04:00
|
|
|
|
2018-02-27 03:20:55 -05:00
|
|
|
FROM base AS registry
|
2019-06-17 17:50:31 -04:00
|
|
|
# Install two versions of the registry. The first is an older version that
|
|
|
|
|
# only supports schema1 manifests. The second is a newer version that supports
|
|
|
|
|
# both. This allows integration-cli tests to cover push/pull with both schema1
|
|
|
|
|
# and schema2 manifests.
|
|
|
|
|
ENV REGISTRY_COMMIT_SCHEMA1 ec87e9b6971d831f0eff752ddb54fb64693e51cd
|
2016-01-19 16:28:51 -05:00
|
|
|
ENV REGISTRY_COMMIT 47a064d4195a9b56133891bbb13620c3ac83a827
|
2015-01-20 22:40:19 -05:00
|
|
|
RUN set -x \
|
2015-06-05 18:20:04 -04:00
|
|
|
&& export GOPATH="$(mktemp -d)" \
|
|
|
|
|
&& git clone https://github.com/docker/distribution.git "$GOPATH/src/github.com/docker/distribution" \
|
|
|
|
|
&& (cd "$GOPATH/src/github.com/docker/distribution" && git checkout -q "$REGISTRY_COMMIT") \
|
|
|
|
|
&& GOPATH="$GOPATH/src/github.com/docker/distribution/Godeps/_workspace:$GOPATH" \
|
2018-04-13 14:45:57 -04:00
|
|
|
go build -buildmode=pie -o /build/registry-v2 github.com/docker/distribution/cmd/registry \
|
2019-06-17 17:50:31 -04:00
|
|
|
&& case $(dpkg --print-architecture) in \
|
|
|
|
|
amd64|ppc64*|s390x) \
|
|
|
|
|
(cd "$GOPATH/src/github.com/docker/distribution" && git checkout -q "$REGISTRY_COMMIT_SCHEMA1"); \
|
|
|
|
|
GOPATH="$GOPATH/src/github.com/docker/distribution/Godeps/_workspace:$GOPATH"; \
|
|
|
|
|
go build -buildmode=pie -o /build/registry-v2-schema1 github.com/docker/distribution/cmd/registry; \
|
|
|
|
|
;; \
|
|
|
|
|
esac \
|
2015-06-05 18:20:04 -04:00
|
|
|
&& rm -rf "$GOPATH"
|
2015-01-20 22:40:19 -05:00
|
|
|
|
2018-02-27 03:20:55 -05:00
|
|
|
FROM base AS swagger
|
2016-11-03 13:15:27 -04:00
|
|
|
# Install go-swagger for validating swagger.yaml
|
|
|
|
|
ENV GO_SWAGGER_COMMIT c28258affb0b6251755d92489ef685af8d4ff3eb
|
2017-12-08 17:02:32 -05:00
|
|
|
RUN set -x \
|
|
|
|
|
&& export GOPATH="$(mktemp -d)" \
|
|
|
|
|
&& git clone https://github.com/go-swagger/go-swagger.git "$GOPATH/src/github.com/go-swagger/go-swagger" \
|
|
|
|
|
&& (cd "$GOPATH/src/github.com/go-swagger/go-swagger" && git checkout -q "$GO_SWAGGER_COMMIT") \
|
2018-04-13 14:45:57 -04:00
|
|
|
&& go build -o /build/swagger github.com/go-swagger/go-swagger/cmd/swagger \
|
2017-12-08 17:02:32 -05:00
|
|
|
&& rm -rf "$GOPATH"
|
2016-11-03 13:15:27 -04:00
|
|
|
|
2018-02-27 03:20:55 -05:00
|
|
|
FROM base AS frozen-images
|
2019-08-11 11:08:33 -04:00
|
|
|
ARG DEBIAN_FRONTEND
|
2019-07-30 19:49:57 -04:00
|
|
|
RUN apt-get update && apt-get install -y --no-install-recommends \
|
|
|
|
|
ca-certificates \
|
|
|
|
|
jq \
|
|
|
|
|
&& rm -rf /var/lib/apt/lists/*
|
2015-03-06 20:12:41 -05:00
|
|
|
# Get useful and necessary Hub images so we can "docker load" locally instead of pulling
|
2017-09-29 17:09:14 -04:00
|
|
|
COPY contrib/download-frozen-image-v2.sh /
|
2018-04-13 14:45:57 -04:00
|
|
|
RUN /download-frozen-image-v2.sh /build \
|
2018-01-04 21:58:14 -05:00
|
|
|
buildpack-deps:jessie@sha256:dd86dced7c9cd2a724e779730f0a53f93b7ef42228d4344b25ce9a42a1486251 \
|
2018-02-27 01:28:29 -05:00
|
|
|
busybox:latest@sha256:bbc3a03235220b170ba48a157dd097dd1379299370e1ed99ce976df0355d24f0 \
|
|
|
|
|
busybox:glibc@sha256:0b55a30394294ab23b9afd58fab94e61a923f5834fba7ddbae7f8e0c11ba85e6 \
|
2018-01-04 21:58:14 -05:00
|
|
|
debian:jessie@sha256:287a20c5f73087ab406e6b364833e3fb7b3ae63ca0eb3486555dc27ed32c6e60 \
|
|
|
|
|
hello-world:latest@sha256:be0cd392e45be79ffeffa6b05338b98ebb16c87b255f48e297ec7f98e123905c
|
2016-12-31 14:11:30 -05:00
|
|
|
# See also ensureFrozenImagesLinux() in "integration-cli/fixtures_linux_daemon_test.go" (which needs to be updated when adding images to this list)
|
2015-02-28 00:53:36 -05:00
|
|
|
|
2019-04-16 19:31:49 -04:00
|
|
|
FROM base AS cross-false
|
2017-09-29 17:09:14 -04:00
|
|
|
|
2019-04-16 19:31:49 -04:00
|
|
|
FROM base AS cross-true
|
2019-08-11 11:08:33 -04:00
|
|
|
ARG DEBIAN_FRONTEND
|
2019-04-05 20:20:06 -04:00
|
|
|
RUN dpkg --add-architecture armhf
|
|
|
|
|
RUN dpkg --add-architecture arm64
|
|
|
|
|
RUN dpkg --add-architecture armel
|
2019-04-16 19:31:49 -04:00
|
|
|
RUN if [ "$(go env GOHOSTARCH)" = "amd64" ]; then \
|
2019-07-30 19:49:57 -04:00
|
|
|
apt-get update && apt-get install -y --no-install-recommends \
|
2019-04-16 19:31:49 -04:00
|
|
|
crossbuild-essential-armhf \
|
|
|
|
|
crossbuild-essential-arm64 \
|
2019-07-30 19:49:57 -04:00
|
|
|
crossbuild-essential-armel \
|
|
|
|
|
&& rm -rf /var/lib/apt/lists/*; \
|
2019-04-16 19:31:49 -04:00
|
|
|
fi
|
|
|
|
|
|
|
|
|
|
FROM cross-${CROSS} as dev-base
|
|
|
|
|
|
|
|
|
|
FROM dev-base AS runtime-dev-cross-false
|
2019-08-11 11:08:33 -04:00
|
|
|
ARG DEBIAN_FRONTEND
|
2019-07-30 19:49:57 -04:00
|
|
|
RUN apt-get update && apt-get install -y --no-install-recommends \
|
2019-04-16 19:31:49 -04:00
|
|
|
libapparmor-dev \
|
2019-07-30 19:49:57 -04:00
|
|
|
libseccomp-dev \
|
|
|
|
|
&& rm -rf /var/lib/apt/lists/*
|
2019-04-16 19:31:49 -04:00
|
|
|
FROM cross-true AS runtime-dev-cross-true
|
2019-08-11 11:08:33 -04:00
|
|
|
ARG DEBIAN_FRONTEND
|
2019-04-05 20:20:06 -04:00
|
|
|
# These crossbuild packages rely on gcc-<arch>, but this doesn't want to install
|
|
|
|
|
# on non-amd64 systems.
|
|
|
|
|
# Additionally, the crossbuild-amd64 is currently only on debian:buster, so
|
|
|
|
|
# other architectures cannnot crossbuild amd64.
|
|
|
|
|
RUN if [ "$(go env GOHOSTARCH)" = "amd64" ]; then \
|
2019-07-30 19:49:57 -04:00
|
|
|
apt-get update && apt-get install -y --no-install-recommends \
|
2019-04-05 20:20:06 -04:00
|
|
|
libseccomp-dev:armhf \
|
|
|
|
|
libseccomp-dev:arm64 \
|
2019-04-16 19:31:49 -04:00
|
|
|
libseccomp-dev:armel \
|
|
|
|
|
libapparmor-dev:armhf \
|
|
|
|
|
libapparmor-dev:arm64 \
|
|
|
|
|
libapparmor-dev:armel \
|
|
|
|
|
# install this arches seccomp here due to compat issues with the v0 builder
|
|
|
|
|
# This is as opposed to inheriting from runtime-dev-cross-false
|
|
|
|
|
libapparmor-dev \
|
2019-07-30 19:49:57 -04:00
|
|
|
libseccomp-dev \
|
|
|
|
|
&& rm -rf /var/lib/apt/lists/*; \
|
2019-04-05 20:20:06 -04:00
|
|
|
fi
|
|
|
|
|
|
|
|
|
|
FROM runtime-dev-cross-${CROSS} AS runtime-dev
|
2017-09-29 17:09:14 -04:00
|
|
|
|
2018-02-27 03:20:55 -05:00
|
|
|
FROM base AS tomlv
|
2017-09-29 17:09:14 -04:00
|
|
|
ENV INSTALL_BINARY_NAME=tomlv
|
|
|
|
|
COPY hack/dockerfile/install/install.sh ./install.sh
|
|
|
|
|
COPY hack/dockerfile/install/$INSTALL_BINARY_NAME.installer ./
|
2018-12-24 11:42:24 -05:00
|
|
|
RUN PREFIX=/build ./install.sh $INSTALL_BINARY_NAME
|
2017-09-29 17:09:14 -04:00
|
|
|
|
2018-02-27 03:20:55 -05:00
|
|
|
FROM base AS vndr
|
2017-09-29 17:09:14 -04:00
|
|
|
ENV INSTALL_BINARY_NAME=vndr
|
|
|
|
|
COPY hack/dockerfile/install/install.sh ./install.sh
|
|
|
|
|
COPY hack/dockerfile/install/$INSTALL_BINARY_NAME.installer ./
|
2018-12-24 11:42:24 -05:00
|
|
|
RUN PREFIX=/build ./install.sh $INSTALL_BINARY_NAME
|
2017-09-29 17:09:14 -04:00
|
|
|
|
2019-04-16 19:31:49 -04:00
|
|
|
FROM dev-base AS containerd
|
2019-08-11 11:08:33 -04:00
|
|
|
ARG DEBIAN_FRONTEND
|
2019-07-30 19:49:57 -04:00
|
|
|
RUN apt-get update && apt-get install -y --no-install-recommends \
|
|
|
|
|
btrfs-tools \
|
|
|
|
|
&& rm -rf /var/lib/apt/lists/*
|
2017-09-29 17:09:14 -04:00
|
|
|
ENV INSTALL_BINARY_NAME=containerd
|
|
|
|
|
COPY hack/dockerfile/install/install.sh ./install.sh
|
|
|
|
|
COPY hack/dockerfile/install/$INSTALL_BINARY_NAME.installer ./
|
2018-12-24 11:42:24 -05:00
|
|
|
RUN PREFIX=/build ./install.sh $INSTALL_BINARY_NAME
|
2017-09-29 17:09:14 -04:00
|
|
|
|
2019-04-16 19:31:49 -04:00
|
|
|
FROM dev-base AS proxy
|
2017-09-29 17:09:14 -04:00
|
|
|
ENV INSTALL_BINARY_NAME=proxy
|
|
|
|
|
COPY hack/dockerfile/install/install.sh ./install.sh
|
|
|
|
|
COPY hack/dockerfile/install/$INSTALL_BINARY_NAME.installer ./
|
2018-12-24 11:42:24 -05:00
|
|
|
RUN PREFIX=/build ./install.sh $INSTALL_BINARY_NAME
|
2017-09-29 17:09:14 -04:00
|
|
|
|
2019-08-05 06:32:43 -04:00
|
|
|
FROM base AS golangci_lint
|
|
|
|
|
ENV INSTALL_BINARY_NAME=golangci_lint
|
2017-09-29 17:09:14 -04:00
|
|
|
COPY hack/dockerfile/install/install.sh ./install.sh
|
|
|
|
|
COPY hack/dockerfile/install/$INSTALL_BINARY_NAME.installer ./
|
2018-12-24 11:42:24 -05:00
|
|
|
RUN PREFIX=/build ./install.sh $INSTALL_BINARY_NAME
|
2017-09-29 17:09:14 -04:00
|
|
|
|
2019-07-30 20:07:30 -04:00
|
|
|
FROM base AS gotestsum
|
|
|
|
|
ENV INSTALL_BINARY_NAME=gotestsum
|
|
|
|
|
COPY hack/dockerfile/install/install.sh ./install.sh
|
|
|
|
|
COPY hack/dockerfile/install/$INSTALL_BINARY_NAME.installer ./
|
|
|
|
|
RUN PREFIX=/build ./install.sh $INSTALL_BINARY_NAME
|
|
|
|
|
|
2019-04-16 19:31:49 -04:00
|
|
|
FROM dev-base AS dockercli
|
2017-09-29 17:09:14 -04:00
|
|
|
ENV INSTALL_BINARY_NAME=dockercli
|
|
|
|
|
COPY hack/dockerfile/install/install.sh ./install.sh
|
|
|
|
|
COPY hack/dockerfile/install/$INSTALL_BINARY_NAME.installer ./
|
2018-12-24 11:42:24 -05:00
|
|
|
RUN PREFIX=/build ./install.sh $INSTALL_BINARY_NAME
|
2017-09-29 17:09:14 -04:00
|
|
|
|
|
|
|
|
FROM runtime-dev AS runc
|
|
|
|
|
ENV INSTALL_BINARY_NAME=runc
|
|
|
|
|
COPY hack/dockerfile/install/install.sh ./install.sh
|
|
|
|
|
COPY hack/dockerfile/install/$INSTALL_BINARY_NAME.installer ./
|
2018-12-24 11:42:24 -05:00
|
|
|
RUN PREFIX=/build ./install.sh $INSTALL_BINARY_NAME
|
2017-09-29 17:09:14 -04:00
|
|
|
|
2019-04-16 19:31:49 -04:00
|
|
|
FROM dev-base AS tini
|
2019-08-11 11:08:33 -04:00
|
|
|
ARG DEBIAN_FRONTEND
|
2019-07-30 19:49:57 -04:00
|
|
|
RUN apt-get update && apt-get install -y --no-install-recommends \
|
|
|
|
|
cmake \
|
|
|
|
|
vim-common \
|
|
|
|
|
&& rm -rf /var/lib/apt/lists/*
|
2017-09-29 17:09:14 -04:00
|
|
|
COPY hack/dockerfile/install/install.sh ./install.sh
|
|
|
|
|
ENV INSTALL_BINARY_NAME=tini
|
|
|
|
|
COPY hack/dockerfile/install/$INSTALL_BINARY_NAME.installer ./
|
2018-12-24 11:42:24 -05:00
|
|
|
RUN PREFIX=/build ./install.sh $INSTALL_BINARY_NAME
|
2017-09-29 17:09:14 -04:00
|
|
|
|
2019-04-16 19:31:49 -04:00
|
|
|
FROM dev-base AS rootlesskit
|
2018-10-15 03:52:53 -04:00
|
|
|
ENV INSTALL_BINARY_NAME=rootlesskit
|
|
|
|
|
COPY hack/dockerfile/install/install.sh ./install.sh
|
|
|
|
|
COPY hack/dockerfile/install/$INSTALL_BINARY_NAME.installer ./
|
|
|
|
|
RUN PREFIX=/build/ ./install.sh $INSTALL_BINARY_NAME
|
|
|
|
|
COPY ./contrib/dockerd-rootless.sh /build
|
2017-09-29 17:09:14 -04:00
|
|
|
|
|
|
|
|
# TODO: Some of this is only really needed for testing, it would be nice to split this up
|
|
|
|
|
FROM runtime-dev AS dev
|
2019-08-11 11:08:33 -04:00
|
|
|
ARG DEBIAN_FRONTEND
|
2017-09-29 17:09:14 -04:00
|
|
|
RUN groupadd -r docker
|
|
|
|
|
RUN useradd --create-home --gid docker unprivilegeduser
|
2018-06-29 06:39:36 -04:00
|
|
|
# Let us use a .bashrc file
|
|
|
|
|
RUN ln -sfv /go/src/github.com/docker/docker/.bashrc ~/.bashrc
|
2017-06-24 17:51:06 -04:00
|
|
|
# Activate bash completion and include Docker's completion if mounted with DOCKER_BASH_COMPLETION_PATH
|
|
|
|
|
RUN echo "source /usr/share/bash-completion/bash_completion" >> /etc/bash.bashrc
|
2017-06-23 12:05:38 -04:00
|
|
|
RUN ln -s /usr/local/completion/bash/docker /etc/bash_completion.d/docker
|
2017-09-29 17:09:14 -04:00
|
|
|
RUN ldconfig
|
|
|
|
|
# This should only install packages that are specifically needed for the dev environment and nothing else
|
|
|
|
|
# Do you really need to add another package here? Can it be done in a different build stage?
|
2019-07-30 19:49:57 -04:00
|
|
|
RUN apt-get update && apt-get install -y --no-install-recommends \
|
2017-09-29 17:09:14 -04:00
|
|
|
apparmor \
|
|
|
|
|
aufs-tools \
|
|
|
|
|
bash-completion \
|
|
|
|
|
btrfs-tools \
|
|
|
|
|
iptables \
|
|
|
|
|
jq \
|
2018-11-29 02:14:35 -05:00
|
|
|
libcap2-bin \
|
2017-09-29 17:09:14 -04:00
|
|
|
libdevmapper-dev \
|
|
|
|
|
libudev-dev \
|
|
|
|
|
libsystemd-dev \
|
|
|
|
|
binutils-mingw-w64 \
|
2018-03-09 01:09:59 -05:00
|
|
|
g++-mingw-w64-x86-64 \
|
2017-09-29 17:09:14 -04:00
|
|
|
net-tools \
|
|
|
|
|
pigz \
|
2019-07-30 19:59:02 -04:00
|
|
|
python3-pip \
|
|
|
|
|
python3-setuptools \
|
Dockerfile: add python3-wheel back again (for yamllint)
Although the Dockerfile builds without it, adding wheel back
should save some time
```
00:45:28 #14 10.70 Building wheels for collected packages: pathspec, pyyaml
00:45:28 #14 10.70 Running setup.py bdist_wheel for pathspec: started
00:45:28 #14 10.88 Running setup.py bdist_wheel for pathspec: finished with status 'error'
00:45:28 #14 10.88 Complete output from command /usr/bin/python3 -u -c "import setuptools, tokenize;__file__='/tmp/pip-build-mbotnxes/pathspec/setup.py';f=getattr(tokenize, 'open', open)(__file__);code=f.read().replace('\r\n', '\n');f.close();exec(compile(code, __file__, 'exec'))" bdist_wheel -d /tmp/tmpg9pl4u6kpip-wheel- --python-tag cp35:
00:45:28 #14 10.88 usage: -c [global_opts] cmd1 [cmd1_opts] [cmd2 [cmd2_opts] ...]
00:45:28 #14 10.88 or: -c --help [cmd1 cmd2 ...]
00:45:28 #14 10.88 or: -c --help-commands
00:45:28 #14 10.88 or: -c cmd --help
00:45:28 #14 10.88
00:45:28 #14 10.88 error: invalid command 'bdist_wheel'
00:45:28 #14 10.88
00:45:28 #14 10.88 ----------------------------------------
00:45:28 #14 10.88 Failed building wheel for pathspec
00:45:28 #14 10.88 Running setup.py clean for pathspec
00:45:28 #14 11.05 Running setup.py bdist_wheel for pyyaml: started
00:45:28 #14 11.25 Running setup.py bdist_wheel for pyyaml: finished with status 'error'
00:45:28 #14 11.25 Complete output from command /usr/bin/python3 -u -c "import setuptools, tokenize;__file__='/tmp/pip-build-mbotnxes/pyyaml/setup.py';f=getattr(tokenize, 'open', open)(__file__);code=f.read().replace('\r\n', '\n');f.close();exec(compile(code, __file__, 'exec'))" bdist_wheel -d /tmp/tmpyci_xi0bpip-wheel- --python-tag cp35:
00:45:28 #14 11.25 usage: -c [global_opts] cmd1 [cmd1_opts] [cmd2 [cmd2_opts] ...]
00:45:28 #14 11.25 or: -c --help [cmd1 cmd2 ...]
00:45:28 #14 11.25 or: -c --help-commands
00:45:28 #14 11.25 or: -c cmd --help
00:45:28 #14 11.25
00:45:28 #14 11.25 error: invalid command 'bdist_wheel'
00:45:28 #14 11.25
00:45:28 #14 11.25 ----------------------------------------
00:45:28 #14 11.25 Failed building wheel for pyyaml
00:45:28 #14 11.25 Running setup.py clean for pyyaml
00:45:28 #14 11.44 Failed to build pathspec pyyaml
00:45:28 #14 11.45 Installing collected packages: pathspec, pyyaml, yamllint
00:45:28 #14 11.45 Running setup.py install for pathspec: started
00:45:29 #14 11.73 Running setup.py install for pathspec: finished with status 'done'
00:45:29 #14 11.73 Running setup.py install for pyyaml: started
00:45:29 #14 12.05 Running setup.py install for pyyaml: finished with status 'done'
00:45:29 #14 12.12 Successfully installed pathspec-0.5.9 pyyaml-5.1.2 yamllint-1.16.0
```
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2019-08-10 18:52:01 -04:00
|
|
|
python3-wheel \
|
2017-09-29 17:09:14 -04:00
|
|
|
thin-provisioning-tools \
|
|
|
|
|
vim \
|
|
|
|
|
vim-common \
|
|
|
|
|
xfsprogs \
|
|
|
|
|
zip \
|
2018-02-27 03:20:55 -05:00
|
|
|
bzip2 \
|
|
|
|
|
xz-utils \
|
2018-12-29 05:33:34 -05:00
|
|
|
libprotobuf-c1 \
|
|
|
|
|
libnet1 \
|
|
|
|
|
libnl-3-200 \
|
2019-07-30 19:49:57 -04:00
|
|
|
&& rm -rf /var/lib/apt/lists/*
|
2019-07-30 19:59:02 -04:00
|
|
|
|
|
|
|
|
RUN pip3 install yamllint==1.16.0
|
|
|
|
|
|
2018-04-13 14:45:57 -04:00
|
|
|
COPY --from=swagger /build/swagger* /usr/local/bin/
|
|
|
|
|
COPY --from=frozen-images /build/ /docker-frozen-images
|
2019-08-05 06:32:43 -04:00
|
|
|
COPY --from=golangci_lint /build/ /usr/local/bin/
|
2019-07-30 20:07:30 -04:00
|
|
|
COPY --from=gotestsum /build/ /usr/local/bin/
|
2018-04-13 14:45:57 -04:00
|
|
|
COPY --from=tomlv /build/ /usr/local/bin/
|
|
|
|
|
COPY --from=vndr /build/ /usr/local/bin/
|
|
|
|
|
COPY --from=tini /build/ /usr/local/bin/
|
|
|
|
|
COPY --from=runc /build/ /usr/local/bin/
|
|
|
|
|
COPY --from=containerd /build/ /usr/local/bin/
|
|
|
|
|
COPY --from=proxy /build/ /usr/local/bin/
|
|
|
|
|
COPY --from=dockercli /build/ /usr/local/cli
|
|
|
|
|
COPY --from=registry /build/registry* /usr/local/bin/
|
|
|
|
|
COPY --from=criu /build/ /usr/local/
|
2018-10-15 03:52:53 -04:00
|
|
|
COPY --from=rootlesskit /build/ /usr/local/bin/
|
2019-02-05 21:11:18 -05:00
|
|
|
COPY --from=djs55/vpnkit@sha256:e508a17cfacc8fd39261d5b4e397df2b953690da577e2c987a47630cd0c42f8e /vpnkit /usr/local/bin/vpnkit.x86_64
|
2017-06-23 12:05:38 -04:00
|
|
|
|
2017-09-29 17:09:14 -04:00
|
|
|
ENV PATH=/usr/local/cli:$PATH
|
|
|
|
|
ENV DOCKER_BUILDTAGS apparmor seccomp selinux
|
|
|
|
|
WORKDIR /go/src/github.com/docker/docker
|
|
|
|
|
VOLUME /var/lib/docker
|
|
|
|
|
# Wrap all commands in the "docker-in-docker" script to allow nested containers
|
|
|
|
|
ENTRYPOINT ["hack/dind"]
|
2018-12-13 20:26:10 -05:00
|
|
|
|
|
|
|
|
FROM dev AS final
|
2013-09-06 23:14:03 -04:00
|
|
|
# Upload docker source
|
2014-12-24 02:12:27 -05:00
|
|
|
COPY . /go/src/github.com/docker/docker
|