|
|
|
|
@ -50,7 +50,7 @@
|
|
|
|
|
{% else %}
|
|
|
|
|
{% set package_arch_target_param = "" %}
|
|
|
|
|
{% endif %}
|
|
|
|
|
{% if "buildx" in target_file %}
|
|
|
|
|
{% if "buildkit" in target_file %}
|
|
|
|
|
{% set mount_rust_cache = "--mount=type=cache,target=/root/.cargo/git --mount=type=cache,target=/root/.cargo/registry " %}
|
|
|
|
|
{% else %}
|
|
|
|
|
{% set mount_rust_cache = "" %}
|
|
|
|
|
@ -83,8 +83,6 @@ FROM vaultwarden/web-vault@{{ vault_image_digest }} as vault
|
|
|
|
|
########################## BUILD IMAGE ##########################
|
|
|
|
|
FROM {{ build_stage_base_image }} as build
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
# Build time options to avoid dpkg warnings and help with reproducible builds.
|
|
|
|
|
ENV DEBIAN_FRONTEND=noninteractive \
|
|
|
|
|
LANG=C.UTF-8 \
|
|
|
|
|
@ -93,7 +91,6 @@ ENV DEBIAN_FRONTEND=noninteractive \
|
|
|
|
|
CARGO_HOME="/root/.cargo" \
|
|
|
|
|
USER="root"
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
# Create CARGO_HOME folder and don't download rust docs
|
|
|
|
|
RUN {{ mount_rust_cache -}} mkdir -pv "${CARGO_HOME}" \
|
|
|
|
|
&& rustup set profile minimal
|
|
|
|
|
@ -104,21 +101,20 @@ RUN {{ mount_rust_cache -}} mkdir -pv "${CARGO_HOME}" \
|
|
|
|
|
ENV RUSTFLAGS='-Clink-arg=/usr/local/musl/{{ package_arch_target }}/lib/libatomic.a'
|
|
|
|
|
{% endif %}
|
|
|
|
|
{% elif "arm" in target_file %}
|
|
|
|
|
#
|
|
|
|
|
# Install required build libs for {{ package_arch_name }} architecture.
|
|
|
|
|
# hadolint ignore=DL3059
|
|
|
|
|
# Install build dependencies for the {{ package_arch_name }} architecture
|
|
|
|
|
RUN dpkg --add-architecture {{ package_arch_name }} \
|
|
|
|
|
&& apt-get update \
|
|
|
|
|
&& apt-get install -y \
|
|
|
|
|
--no-install-recommends \
|
|
|
|
|
libssl-dev{{ package_arch_prefix }} \
|
|
|
|
|
gcc-{{ package_cross_compiler }} \
|
|
|
|
|
libc6-dev{{ package_arch_prefix }} \
|
|
|
|
|
libpq5{{ package_arch_prefix }} \
|
|
|
|
|
libpq-dev{{ package_arch_prefix }} \
|
|
|
|
|
libmariadb3{{ package_arch_prefix }} \
|
|
|
|
|
libcap2-bin \
|
|
|
|
|
libmariadb-dev{{ package_arch_prefix }} \
|
|
|
|
|
libmariadb-dev-compat{{ package_arch_prefix }} \
|
|
|
|
|
gcc-{{ package_cross_compiler }} \
|
|
|
|
|
libmariadb3{{ package_arch_prefix }} \
|
|
|
|
|
libpq-dev{{ package_arch_prefix }} \
|
|
|
|
|
libpq5{{ package_arch_prefix }} \
|
|
|
|
|
libssl-dev{{ package_arch_prefix }} \
|
|
|
|
|
#
|
|
|
|
|
# Make sure cargo has the right target config
|
|
|
|
|
&& echo '[target.{{ package_arch_target }}]' >> "${CARGO_HOME}/config" \
|
|
|
|
|
@ -130,16 +126,14 @@ ENV CC_{{ package_arch_target | replace("-", "_") }}="/usr/bin/{{ package_cross_
|
|
|
|
|
CROSS_COMPILE="1" \
|
|
|
|
|
OPENSSL_INCLUDE_DIR="/usr/include/{{ package_cross_compiler }}" \
|
|
|
|
|
OPENSSL_LIB_DIR="/usr/lib/{{ package_cross_compiler }}"
|
|
|
|
|
|
|
|
|
|
{% elif "amd64" in target_file %}
|
|
|
|
|
# Install DB packages
|
|
|
|
|
# Install build dependencies
|
|
|
|
|
RUN apt-get update \
|
|
|
|
|
&& apt-get install -y \
|
|
|
|
|
--no-install-recommends \
|
|
|
|
|
libmariadb-dev{{ package_arch_prefix }} \
|
|
|
|
|
libpq-dev{{ package_arch_prefix }} \
|
|
|
|
|
&& apt-get clean \
|
|
|
|
|
&& rm -rf /var/lib/apt/lists/*
|
|
|
|
|
libcap2-bin \
|
|
|
|
|
libmariadb-dev \
|
|
|
|
|
libpq-dev
|
|
|
|
|
{% endif %}
|
|
|
|
|
|
|
|
|
|
# Creates a dummy project used to grab dependencies
|
|
|
|
|
@ -178,9 +172,20 @@ RUN touch src/main.rs
|
|
|
|
|
|
|
|
|
|
# Builds again, this time it'll just be
|
|
|
|
|
# your actual source files being built
|
|
|
|
|
# hadolint ignore=DL3059
|
|
|
|
|
RUN {{ mount_rust_cache -}} cargo build --features ${DB} --release{{ package_arch_target_param }}
|
|
|
|
|
|
|
|
|
|
{% if "buildkit" in target_file %}
|
|
|
|
|
# Add the `cap_net_bind_service` capability to allow listening on
|
|
|
|
|
# privileged (< 1024) ports even when running as a non-root user.
|
|
|
|
|
# This is only done if building with BuildKit; with the legacy
|
|
|
|
|
# builder, the `COPY` instruction doesn't carry over capabilities.
|
|
|
|
|
{% if package_arch_target is defined %}
|
|
|
|
|
RUN setcap cap_net_bind_service=+ep target/{{ package_arch_target }}/release/vaultwarden
|
|
|
|
|
{% else %}
|
|
|
|
|
RUN setcap cap_net_bind_service=+ep target/release/vaultwarden
|
|
|
|
|
{% endif %}
|
|
|
|
|
{% endif %}
|
|
|
|
|
|
|
|
|
|
######################## RUNTIME IMAGE ########################
|
|
|
|
|
# Create a new stage with a minimal image
|
|
|
|
|
# because we already have a binary built
|
|
|
|
|
@ -195,7 +200,6 @@ ENV ROCKET_PROFILE="release" \
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
{% if "amd64" not in target_file %}
|
|
|
|
|
# hadolint ignore=DL3059
|
|
|
|
|
RUN [ "cross-build-start" ]
|
|
|
|
|
{% endif %}
|
|
|
|
|
|
|
|
|
|
@ -203,18 +207,18 @@ RUN [ "cross-build-start" ]
|
|
|
|
|
RUN mkdir /data \
|
|
|
|
|
{% if "alpine" in runtime_stage_base_image %}
|
|
|
|
|
&& apk add --no-cache \
|
|
|
|
|
openssl \
|
|
|
|
|
tzdata \
|
|
|
|
|
ca-certificates \
|
|
|
|
|
curl \
|
|
|
|
|
ca-certificates
|
|
|
|
|
openssl \
|
|
|
|
|
tzdata
|
|
|
|
|
{% else %}
|
|
|
|
|
&& apt-get update && apt-get install -y \
|
|
|
|
|
--no-install-recommends \
|
|
|
|
|
openssl \
|
|
|
|
|
ca-certificates \
|
|
|
|
|
curl \
|
|
|
|
|
libmariadb-dev-compat \
|
|
|
|
|
libpq5 \
|
|
|
|
|
openssl \
|
|
|
|
|
&& apt-get clean \
|
|
|
|
|
&& rm -rf /var/lib/apt/lists/*
|
|
|
|
|
{% endif %}
|
|
|
|
|
@ -222,13 +226,11 @@ RUN mkdir /data \
|
|
|
|
|
{% if "armv6" in target_file and "alpine" not in target_file %}
|
|
|
|
|
# In the Balena Bullseye images for armv6/rpi-debian there is a missing symlink.
|
|
|
|
|
# This symlink was there in the buster images, and for some reason this is needed.
|
|
|
|
|
# hadolint ignore=DL3059
|
|
|
|
|
RUN ln -v -s /lib/ld-linux-armhf.so.3 /lib/ld-linux.so.3
|
|
|
|
|
|
|
|
|
|
{% endif -%}
|
|
|
|
|
|
|
|
|
|
{% if "amd64" not in target_file %}
|
|
|
|
|
# hadolint ignore=DL3059
|
|
|
|
|
RUN [ "cross-build-end" ]
|
|
|
|
|
{% endif %}
|
|
|
|
|
|
|
|
|
|
|
Daniel García
2 years ago
committed by
GitHub