|
| 1 | +# Copyright 2017-2017 Amazon.com, Inc. or its affiliates. All Rights Reserved. |
| 2 | +# |
| 3 | +# Licensed under the Amazon Software License (the "License"). You may not use this file except in compliance with the License. |
| 4 | +# A copy of the License is located at |
| 5 | +# |
| 6 | +# http://aws.amazon.com/asl/ |
| 7 | +# |
| 8 | +# or in the "license" file accompanying this file. |
| 9 | +# This file is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, express or implied. |
| 10 | +# See the License for the specific language governing permissions and limitations under the License. |
| 11 | +# |
| 12 | + |
| 13 | +FROM ubuntu:14.04.5 |
| 14 | + |
| 15 | +ENV DOCKER_BUCKET="download.docker.com" \ |
| 16 | + DOCKER_VERSION="17.09.0-ce" \ |
| 17 | + DOCKER_CHANNEL="stable" \ |
| 18 | + DOCKER_SHA256="a9e90a73c3cdfbf238f148e1ec0eaff5eb181f92f35bdd938fd7dab18e1c4647" \ |
| 19 | + DIND_COMMIT="3b5fac462d21ca164b3778647420016315289034" \ |
| 20 | + DOCKER_COMPOSE_VERSION="1.16.1" \ |
| 21 | + GITVERSION_VERSION="3.6.5" |
| 22 | + |
| 23 | +# Building git from source code: |
| 24 | +# Ubuntu's default git package is built with broken gnutls. Rebuild git with openssl. |
| 25 | +########################################################################## |
| 26 | +RUN set -ex \ |
| 27 | + && echo 'Acquire::CompressionTypes::Order:: "gz";' > /etc/apt/apt.conf.d/99use-gzip-compression \ |
| 28 | + && apt-get update \ |
| 29 | + && apt-get install -y --no-install-recommends \ |
| 30 | + wget=1.15-* python=2.7.5-* python2.7-dev=2.7.6-* fakeroot=1.20-* ca-certificates \ |
| 31 | + tar=1.27.1-* gzip=1.6-* zip=3.0-* autoconf=2.69-* automake=1:1.14.1-* \ |
| 32 | + bzip2=1.0.6-* file=1:5.14-* g++=4:4.8.2-* gcc=4:4.8.2-* imagemagick=8:6.7.7.10-* \ |
| 33 | + libbz2-dev=1.0.6-* libc6-dev=2.19-* libcurl4-openssl-dev=7.35.0-* libdb-dev=1:5.3.21~* \ |
| 34 | + libevent-dev=2.0.21-stable-* libffi-dev=3.1~rc1+r3.0.13-* libgeoip-dev=1.6.0-* libglib2.0-dev=2.40.2-* \ |
| 35 | + libjpeg-dev=8c-* libkrb5-dev=1.12+dfsg-* liblzma-dev=5.1.1alpha+20120614-* \ |
| 36 | + libmagickcore-dev=8:6.7.7.10-* libmagickwand-dev=8:6.7.7.10-* libmysqlclient-dev=5.5.60-* \ |
| 37 | + libncurses5-dev=5.9+20140118-* libpng12-dev=1.2.50-* libpq-dev=9.3.22-* libreadline-dev=6.3-* \ |
| 38 | + libsqlite3-dev=3.8.2-* libssl-dev=1.0.1f-* libtool=2.4.2-* libwebp-dev=0.4.0-* \ |
| 39 | + libxml2-dev=2.9.1+dfsg1-* libxslt1-dev=1.1.28-* libyaml-dev=0.1.4-* make=3.81-* \ |
| 40 | + patch=2.7.1-* xz-utils=5.1.1alpha+20120614-* zlib1g-dev=1:1.2.8.dfsg-* unzip=6.0-* curl=7.35.0-* \ |
| 41 | + e2fsprogs=1.42.9-* iptables=1.4.21-* xfsprogs=3.1.9ubuntu2 xz-utils=5.1.1alpha+20120614-* \ |
| 42 | + mono-mcs=3.2.8+dfsg-* \ |
| 43 | + && apt-get install -y -qq less=458-* groff=1.22.2-* \ |
| 44 | + && apt-get -qy build-dep git=1:1.9.1 \ |
| 45 | + && apt-get -qy install libcurl4-openssl-dev=7.35.0-* git-man=1:1.9.1-* liberror-perl=0.17-* \ |
| 46 | + && mkdir -p /usr/src/git-openssl \ |
| 47 | + && cd /usr/src/git-openssl \ |
| 48 | + && apt-get source git=1:1.9.1 \ |
| 49 | + && cd $(find -mindepth 1 -maxdepth 1 -type d -name "git-*") \ |
| 50 | + && sed -i -- 's/libcurl4-gnutls-dev/libcurl4-openssl-dev/' ./debian/control \ |
| 51 | + && sed -i -- '/TEST\s*=\s*test/d' ./debian/rules \ |
| 52 | + && dpkg-buildpackage -rfakeroot -b \ |
| 53 | + && find .. -type f -name "git_*ubuntu*.deb" -exec dpkg -i \{\} \; \ |
| 54 | + && rm -rf /usr/src/git-openssl \ |
| 55 | + && rm -rf /var/lib/apt/lists/* \ |
| 56 | + && apt-get clean |
| 57 | + |
| 58 | +# Download and set up GitVersion |
| 59 | +RUN set -ex \ |
| 60 | + && wget "https://github.com/GitTools/GitVersion/releases/download/v${GITVERSION_VERSION}/GitVersion_${GITVERSION_VERSION}.zip" -O /tmp/GitVersion_${GITVERSION_VERSION}.zip \ |
| 61 | + && mkdir -p /usr/local/GitVersion_${GITVERSION_VERSION} \ |
| 62 | + && unzip /tmp/GitVersion_${GITVERSION_VERSION}.zip -d /usr/local/GitVersion_${GITVERSION_VERSION} \ |
| 63 | + && rm /tmp/GitVersion_${GITVERSION_VERSION}.zip \ |
| 64 | + && echo "mono /usr/local/GitVersion_${GITVERSION_VERSION}/GitVersion.exe /output json /showvariable \$1" >> /usr/local/bin/gitversion \ |
| 65 | + && chmod +x /usr/local/bin/gitversion |
| 66 | +# Install Docker |
| 67 | +RUN set -ex \ |
| 68 | + && curl -fSL "https://${DOCKER_BUCKET}/linux/static/${DOCKER_CHANNEL}/x86_64/docker-${DOCKER_VERSION}.tgz" -o docker.tgz \ |
| 69 | + && echo "${DOCKER_SHA256} *docker.tgz" | sha256sum -c - \ |
| 70 | + && tar --extract --file docker.tgz --strip-components 1 --directory /usr/local/bin/ \ |
| 71 | + && rm docker.tgz \ |
| 72 | + && docker -v \ |
| 73 | +# set up subuid/subgid so that "--userns-remap=default" works out-of-the-box |
| 74 | + && addgroup dockremap \ |
| 75 | + && useradd -g dockremap dockremap \ |
| 76 | + && echo 'dockremap:165536:65536' >> /etc/subuid \ |
| 77 | + && echo 'dockremap:165536:65536' >> /etc/subgid \ |
| 78 | + && wget "https://raw.githubusercontent.com/docker/docker/${DIND_COMMIT}/hack/dind" -O /usr/local/bin/dind \ |
| 79 | + && curl -L https://github.com/docker/compose/releases/download/${DOCKER_COMPOSE_VERSION}/docker-compose-Linux-x86_64 > /usr/local/bin/docker-compose \ |
| 80 | + && chmod +x /usr/local/bin/dind /usr/local/bin/docker-compose \ |
| 81 | +# Ensure docker-compose works |
| 82 | + && docker-compose version |
| 83 | + |
| 84 | +# Install dependencies by all python images equivalent to buildpack-deps:jessie |
| 85 | +# on the public repos. |
| 86 | + |
| 87 | +RUN set -ex \ |
| 88 | + && wget "https://bootstrap.pypa.io/2.6/get-pip.py" -O /tmp/get-pip.py \ |
| 89 | + && python /tmp/get-pip.py \ |
| 90 | + && pip install awscli==1.* \ |
| 91 | + && rm -fr /var/lib/apt/lists/* /tmp/* /var/tmp/* |
| 92 | + |
| 93 | +VOLUME /var/lib/docker |
| 94 | + |
| 95 | +COPY dockerd-entrypoint.sh /usr/local/bin/ |
| 96 | + |
| 97 | +ENV NODE_VERSION="10.1.0" |
| 98 | + |
| 99 | +RUN set -ex \ |
| 100 | + && for key in \ |
| 101 | + 94AE36675C464D64BAFA68DD7434390BDBE9B9C5 \ |
| 102 | + 0034A06D9D9B0064CE8ADF6BF1747F4AD2306D93 \ |
| 103 | + FD3A5288F042B6850C66B31F09FE44734EB7990E \ |
| 104 | + 71DCFD284A79C3B38668286BC97EC7A07EDE3FC1 \ |
| 105 | + DD8F2338BAE7501E3DD5AC78C273792F7D83545D \ |
| 106 | + B9AE9905FFD7803F25714661B63B535A4C206CA9 \ |
| 107 | + C4F0DFFF4E8C1A8236409D08E73BC641CC11F4C8 \ |
| 108 | + 77984A986EBC2AA786BC0F66B01FBB92821C587A \ |
| 109 | + 56730D5401028683275BD23C23EFEFE93C4CFFFE \ |
| 110 | + ; do \ |
| 111 | + gpg --keyserver ha.pool.sks-keyservers.net --recv-keys "$key"; \ |
| 112 | + done |
| 113 | + |
| 114 | +RUN set -ex \ |
| 115 | + && wget "https://nodejs.org/download/release/v$NODE_VERSION/node-v$NODE_VERSION-linux-x64.tar.gz" -O node-v$NODE_VERSION-linux-x64.tar.gz \ |
| 116 | + && wget "https://nodejs.org/download/release/v$NODE_VERSION/SHASUMS256.txt.asc" -O SHASUMS256.txt.asc \ |
| 117 | + && gpg --batch --decrypt --output SHASUMS256.txt SHASUMS256.txt.asc \ |
| 118 | + && grep " node-v$NODE_VERSION-linux-x64.tar.gz\$" SHASUMS256.txt | sha256sum -c - \ |
| 119 | + && tar -xzf "node-v$NODE_VERSION-linux-x64.tar.gz" -C /usr/local --strip-components=1 \ |
| 120 | + && rm "node-v$NODE_VERSION-linux-x64.tar.gz" SHASUMS256.txt.asc SHASUMS256.txt \ |
| 121 | + && ln -s /usr/local/bin/node /usr/local/bin/nodejs \ |
| 122 | + && rm -fr /var/lib/apt/lists/* /tmp/* /var/tmp/* |
| 123 | + |
| 124 | +CMD [ "node" ] |
0 commit comments