generate.sh 4.0 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131
  1. #!/usr/bin/env bash
  2. set -e
  3. # usage: ./generate.sh [versions]
  4. # ie: ./generate.sh
  5. # to update all Dockerfiles in this directory
  6. # or: ./generate.sh debian-jessie
  7. # to only update debian-jessie/Dockerfile
  8. # or: ./generate.sh debian-newversion
  9. # to create a new folder and a Dockerfile within it
  10. cd "$(dirname "$(readlink -f "$BASH_SOURCE")")"
  11. versions=( "$@" )
  12. if [ ${#versions[@]} -eq 0 ]; then
  13. versions=( */ )
  14. fi
  15. versions=( "${versions[@]%/}" )
  16. for version in "${versions[@]}"; do
  17. distro="${version%-*}"
  18. suite="${version##*-}"
  19. from="${distro}:${suite}"
  20. case "$from" in
  21. debian:wheezy)
  22. # add -backports, like our users have to
  23. from+='-backports'
  24. ;;
  25. esac
  26. mkdir -p "$version"
  27. echo "$version -> FROM $from"
  28. cat > "$version/Dockerfile" <<-EOF
  29. #
  30. # THIS FILE IS AUTOGENERATED; SEE "contrib/builder/deb/amd64/generate.sh"!
  31. #
  32. FROM $from
  33. EOF
  34. echo >> "$version/Dockerfile"
  35. if [ "$distro" = "debian" ]; then
  36. cat >> "$version/Dockerfile" <<-'EOF'
  37. # allow replacing httpredir or deb mirror
  38. ARG APT_MIRROR=deb.debian.org
  39. RUN sed -ri "s/(httpredir|deb).debian.org/$APT_MIRROR/g" /etc/apt/sources.list
  40. EOF
  41. if [ "$suite" = "wheezy" ]; then
  42. cat >> "$version/Dockerfile" <<-'EOF'
  43. RUN sed -ri "s/(httpredir|deb).debian.org/$APT_MIRROR/g" /etc/apt/sources.list.d/backports.list
  44. EOF
  45. fi
  46. echo "" >> "$version/Dockerfile"
  47. fi
  48. extraBuildTags='pkcs11'
  49. runcBuildTags=
  50. # this list is sorted alphabetically; please keep it that way
  51. packages=(
  52. apparmor # for apparmor_parser for testing the profile
  53. bash-completion # for bash-completion debhelper integration
  54. btrfs-tools # for "btrfs/ioctl.h" (and "version.h" if possible)
  55. build-essential # "essential for building Debian packages"
  56. cmake # tini dep
  57. curl ca-certificates # for downloading Go
  58. debhelper # for easy ".deb" building
  59. dh-apparmor # for apparmor debhelper
  60. dh-systemd # for systemd debhelper integration
  61. git # for "git commit" info in "docker -v"
  62. libapparmor-dev # for "sys/apparmor.h"
  63. libdevmapper-dev # for "libdevmapper.h"
  64. libltdl-dev # for pkcs11 "ltdl.h"
  65. libseccomp-dev # for "seccomp.h" & "libseccomp.so"
  66. pkg-config # for detecting things like libsystemd-journal dynamically
  67. vim-common # tini dep
  68. )
  69. # packaging for "sd-journal.h" and libraries varies
  70. case "$suite" in
  71. wheezy) ;;
  72. jessie|trusty) packages+=( libsystemd-journal-dev ) ;;
  73. *) packages+=( libsystemd-dev ) ;;
  74. esac
  75. # debian wheezy does not have the right libseccomp libs
  76. # debian jessie & ubuntu trusty have a libseccomp < 2.2.1 :(
  77. case "$suite" in
  78. wheezy|jessie|trusty)
  79. packages=( "${packages[@]/libseccomp-dev}" )
  80. runcBuildTags="apparmor selinux"
  81. ;;
  82. *)
  83. extraBuildTags+=' seccomp'
  84. runcBuildTags="apparmor seccomp selinux"
  85. ;;
  86. esac
  87. if [ "$suite" = 'wheezy' ]; then
  88. # pull a couple packages from backports explicitly
  89. # (build failures otherwise)
  90. backportsPackages=( btrfs-tools )
  91. for pkg in "${backportsPackages[@]}"; do
  92. packages=( "${packages[@]/$pkg}" )
  93. done
  94. echo "RUN apt-get update && apt-get install -y -t $suite-backports ${backportsPackages[*]} --no-install-recommends && rm -rf /var/lib/apt/lists/*" >> "$version/Dockerfile"
  95. fi
  96. echo "RUN apt-get update && apt-get install -y ${packages[*]} --no-install-recommends && rm -rf /var/lib/apt/lists/*" >> "$version/Dockerfile"
  97. echo >> "$version/Dockerfile"
  98. awk '$1 == "ENV" && $2 == "GO_VERSION" { print; exit }' ../../../../Dockerfile >> "$version/Dockerfile"
  99. echo 'RUN curl -fSL "https://golang.org/dl/go${GO_VERSION}.linux-amd64.tar.gz" | tar xzC /usr/local' >> "$version/Dockerfile"
  100. echo 'ENV PATH $PATH:/usr/local/go/bin' >> "$version/Dockerfile"
  101. echo >> "$version/Dockerfile"
  102. echo 'ENV AUTO_GOPATH 1' >> "$version/Dockerfile"
  103. echo >> "$version/Dockerfile"
  104. # print build tags in alphabetical order
  105. buildTags=$( echo "apparmor selinux $extraBuildTags" | xargs -n1 | sort -n | tr '\n' ' ' | sed -e 's/[[:space:]]*$//' )
  106. echo "ENV DOCKER_BUILDTAGS $buildTags" >> "$version/Dockerfile"
  107. echo "ENV RUNC_BUILDTAGS $runcBuildTags" >> "$version/Dockerfile"
  108. done