118 lines
3.7 KiB
Docker
118 lines
3.7 KiB
Docker
ARG BUILDER_IMAGE=rust:1-bookworm
|
|
ARG RUNTIME_IMAGE=debian:bookworm-slim
|
|
|
|
FROM --platform=$BUILDPLATFORM ${BUILDER_IMAGE} AS builder
|
|
|
|
ARG BUILDARCH
|
|
ARG TARGETARCH
|
|
ARG TARGETPLATFORM
|
|
|
|
WORKDIR /src
|
|
|
|
RUN apt-get update \
|
|
&& apt-get install -y --no-install-recommends \
|
|
build-essential \
|
|
ca-certificates \
|
|
clang \
|
|
cmake \
|
|
git \
|
|
libclang-dev \
|
|
make \
|
|
perl \
|
|
pkg-config \
|
|
python3 \
|
|
&& if [ "$TARGETARCH" != "$BUILDARCH" ]; then \
|
|
case "$TARGETARCH" in \
|
|
arm64) \
|
|
apt-get install -y --no-install-recommends \
|
|
g++-aarch64-linux-gnu \
|
|
gcc-aarch64-linux-gnu \
|
|
libc6-dev-arm64-cross \
|
|
;; \
|
|
amd64) \
|
|
apt-get install -y --no-install-recommends \
|
|
g++-x86-64-linux-gnu \
|
|
gcc-x86-64-linux-gnu \
|
|
libc6-dev-amd64-cross \
|
|
;; \
|
|
*) \
|
|
echo "unsupported TARGETARCH=$TARGETARCH" >&2; exit 2 \
|
|
;; \
|
|
esac; \
|
|
fi \
|
|
&& rm -rf /var/lib/apt/lists/* \
|
|
&& case "$TARGETARCH" in \
|
|
amd64|arm64) ;; \
|
|
*) echo "unsupported TARGETARCH=$TARGETARCH" >&2; exit 2 ;; \
|
|
esac
|
|
|
|
COPY . .
|
|
|
|
RUN --mount=type=cache,target=/usr/local/cargo/registry \
|
|
--mount=type=cache,target=/usr/local/cargo/git \
|
|
--mount=type=cache,target=/src/target \
|
|
set -eux; \
|
|
case "$TARGETARCH" in \
|
|
amd64) target_triple=x86_64-unknown-linux-gnu ;; \
|
|
arm64) target_triple=aarch64-unknown-linux-gnu ;; \
|
|
*) echo "unsupported TARGETARCH=$TARGETARCH" >&2; exit 2 ;; \
|
|
esac; \
|
|
rustup target add "$target_triple"; \
|
|
if [ "$TARGETARCH" != "$BUILDARCH" ]; then \
|
|
case "$TARGETARCH" in \
|
|
arm64) \
|
|
export \
|
|
CARGO_TARGET_AARCH64_UNKNOWN_LINUX_GNU_LINKER=aarch64-linux-gnu-gcc \
|
|
CC_aarch64_unknown_linux_gnu=aarch64-linux-gnu-gcc \
|
|
CXX_aarch64_unknown_linux_gnu=aarch64-linux-gnu-g++ \
|
|
AR_aarch64_unknown_linux_gnu=aarch64-linux-gnu-ar \
|
|
PKG_CONFIG_ALLOW_CROSS=1 \
|
|
;; \
|
|
amd64) \
|
|
export \
|
|
CARGO_TARGET_X86_64_UNKNOWN_LINUX_GNU_LINKER=x86_64-linux-gnu-gcc \
|
|
CC_x86_64_unknown_linux_gnu=x86_64-linux-gnu-gcc \
|
|
CXX_x86_64_unknown_linux_gnu=x86_64-linux-gnu-g++ \
|
|
AR_x86_64_unknown_linux_gnu=x86_64-linux-gnu-ar \
|
|
PKG_CONFIG_ALLOW_CROSS=1 \
|
|
;; \
|
|
*) \
|
|
echo "unsupported TARGETARCH=$TARGETARCH" >&2; exit 2 \
|
|
;; \
|
|
esac; \
|
|
fi; \
|
|
cargo build --release --target "$target_triple" --bin rpki_artifact_metrics; \
|
|
mkdir -p /build-out/bin; \
|
|
cp "target/$target_triple/release/rpki_artifact_metrics" /build-out/bin/
|
|
|
|
FROM --platform=$TARGETPLATFORM ${RUNTIME_IMAGE} AS runtime
|
|
|
|
RUN apt-get update \
|
|
&& apt-get install -y --no-install-recommends \
|
|
ca-certificates \
|
|
tzdata \
|
|
&& rm -rf /var/lib/apt/lists/*
|
|
|
|
WORKDIR /opt/ours-rp
|
|
|
|
COPY --from=builder /build-out/bin/ /opt/ours-rp/bin/
|
|
|
|
ARG SOURCE_COMMIT=unknown
|
|
ARG SOURCE_DIRTY=unknown
|
|
ARG BUILD_TIMESTAMP_UTC=unknown
|
|
|
|
LABEL org.opencontainers.image.title="ours-rp-metrics" \
|
|
org.opencontainers.image.description="Ours RP artifact metrics image for multi-arch Docker Compose deployment" \
|
|
org.opencontainers.image.revision="${SOURCE_COMMIT}" \
|
|
org.opencontainers.image.created="${BUILD_TIMESTAMP_UTC}" \
|
|
org.opencontainers.image.source-dirty="${SOURCE_DIRTY}"
|
|
|
|
RUN chmod +x /opt/ours-rp/bin/* \
|
|
&& mkdir -p /var/lib/ours-rp/state /var/lib/ours-rp/runs /var/lib/ours-rp/logs
|
|
|
|
ENV RUN_ROOT=/var/lib/ours-rp \
|
|
BIN_DIR=/opt/ours-rp/bin \
|
|
RUST_BACKTRACE=1
|
|
|
|
VOLUME ["/var/lib/ours-rp"]
|