ipgrep/Dockerfile at main · ossobv/ipgrep · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
#FROM rust:1.75 AS builder
FROM ghcr.io/rust-cross/rust-musl-cross:x86_64-musl AS builder

USER root
# Unfortunately also giving write perms to /srv/ipgrep so we can locally
# alter Cargo.toml for the build.
RUN mkdir -p /src/ipgrep/target /usr/local/cargo && \
    chown nobody: /src/ipgrep /src/ipgrep/target /usr/local/cargo

ENV CARGO_HOME=/usr/local/cargo

USER nobody
WORKDIR /src/ipgrep

RUN cargo --version
RUN cargo install cargo-auditable cargo-deb

# Copy prerequisites for cargo update/fetch
COPY Cargo.lock Cargo.toml /src/ipgrep/
COPY benches /src/ipgrep/benches
COPY src/lib.rs /src/ipgrep/src/lib.rs

# Update/fetch
RUN cargo update --dry-run --locked
RUN cargo fetch --locked --verbose

# Waiting on https://github.com/rust-lang/cargo/issues/2644
# Then we could do a pre-build before adding most of our sources.
#RUN GIT_VERSION=irrelevant cargo auditable build --locked --features=version-from-env \
#      --release --target x86_64-unknown-linux-musl

# Copy the rest of the source
COPY . /src/ipgrep
RUN sed -i -e 's@target/release@target/docker@;s@#USED_BY_DOCKER#@@' Cargo.toml
#RUN cargo update --dry-run --locked
#RUN cargo fetch --locked --verbose
#RUN rustup target add x86_64-unknown-linux-musl

ARG GIT_VERSION
#RUN cargo build --features=version-from-env
#RUN cargo test --features=version-from-env
#RUN cargo bench --features=version-from-env
RUN cargo auditable build --locked --features=version-from-env \
      --release --target x86_64-unknown-linux-musl
RUN test "$(echo $(ldd target/x86_64-unknown-linux-musl/release/ipgrep))" = "statically linked"

# Record build tools in build-info.json, move relevant files to target/docker/.
RUN set -u && mkdir -p target/docker/ && \
    RELEASE_DATE=$(sed -e "/^$GIT_VERSION (/"'!d;s/^[^(]*(//;s/)$//' \
      CHANGES.rst) && \
    RELEASE_EPOCH=$(TZ=UTC date -d "$RELEASE_DATE" +%s) && \
    cp -a /src/ipgrep/target/x86_64-unknown-linux-musl/release/ipgrep target/docker/ && \
    printf '%s\n' >target/docker/build-info.json \
      '{' \
      "  \"CARGO_BUILD_TARGET\": \"$CARGO_BUILD_TARGET\"," \
      "  \"RELEASE_DATE\": \"$RELEASE_DATE\"," \
      "  \"RELEASE_EPOCH\": \"$RELEASE_EPOCH\"," \
      "  \"cargo\": \"$(cargo --version --verbose | tr '\n' '|' | sed -e '$s/|$//;s/|/\\n/g')\"," \
      "  \"cargo-auditable\": \"$(cargo auditable --version --verbose | tr '\n' '|' | sed -e '$s/|$//;s/|/\\n/g')\"," \
      "  \"cargo-deb\": \"$(cargo deb --version --verbose | tr '\n' '|' | sed -e '$s/|$//;s/|/\\n/g')\"," \
      "  \"ipgrep\": \"$(./target/docker/ipgrep --version)\"," \
      "  \"rustc\": \"$(rustc --version --verbose | tr '\n' '|' | sed -e '$s/|$//;s/|/\\n/g')\"" \
      '}' && \
    cat target/docker/build-info.json && \
    if test "$(date -d "@$RELEASE_EPOCH" '+%Y-%m-%d')" != "$RELEASE_DATE" || \
            test "$RELEASE_EPOCH" = "0"; then \
        echo "invalid release date: Check '$GIT_VERSION' in CHANGES.rst" >&2; \
        exit 1; \
    fi && \
    SOURCE_DATE_EPOCH=$RELEASE_EPOCH cargo deb --no-build -o target/docker/

FROM scratch
COPY --from=builder /src/ipgrep/target/docker/* /