thodg/libgit2/ci/docker/focal

• Show log

  Commit

• Hash : b140e22e
  Author :
  Date : 2021-08-08T11:07:43
  

  ci: remove the docker entrypoint Omitting an entrypoint.sh to configure the container and instead depending on docker primitives allows us to be more portable. (If a distribution uses a different mechanism for adding users, we need not have multiple entrypoint.sh files or invariants within it; instead we can configure that in the dockerfile itself along with all the other distribution specific components.)

Download

• ci/docker/focal

• ARG BASE=ubuntu:focal
  FROM ${BASE} AS apt
  RUN apt-get update && \
      DEBIAN_FRONTEND=noninteractive apt-get install -y --no-install-recommends \
          bzip2 \
          clang-10 \
          cmake \
          curl \
          gcc-10 \
          git \
          krb5-user \
          libcurl4-gnutls-dev \
          libgcrypt20-dev \
          libkrb5-dev \
          libpcre3-dev \
          libssl-dev \
          libz-dev \
          llvm-10 \
          make \
          ninja-build \
          openjdk-8-jre-headless \
          openssh-server \
          openssl \
          pkgconf \
          python \
          sudo \
          valgrind \
          && \
      rm -rf /var/lib/apt/lists/* && \
      mkdir /usr/local/msan
  
  FROM apt AS mbedtls
  RUN cd /tmp && \
      curl --location --silent --show-error https://tls.mbed.org/download/mbedtls-2.16.2-apache.tgz | \
          tar -xz && \
      cd mbedtls-2.16.2 && \
      scripts/config.pl unset MBEDTLS_AESNI_C && \
      scripts/config.pl set MBEDTLS_MD4_C 1 && \
      mkdir build build-msan && \
      cd build && \
      CC=clang-10 CFLAGS="-fPIC" cmake -G Ninja -DENABLE_PROGRAMS=OFF -DENABLE_TESTING=OFF -DUSE_SHARED_MBEDTLS_LIBRARY=ON -DUSE_STATIC_MBEDTLS_LIBRARY=OFF -DCMAKE_BUILD_TYPE=Debug -DCMAKE_PREFIX_PATH=/usr/local -DCMAKE_INSTALL_PREFIX=/usr/local .. && \
      ninja install && \
      cd ../build-msan && \
      CC=clang-10 CFLAGS="-fPIC" cmake -G Ninja -DENABLE_PROGRAMS=OFF -DENABLE_TESTING=OFF -DUSE_SHARED_MBEDTLS_LIBRARY=ON -DUSE_STATIC_MBEDTLS_LIBRARY=OFF -DCMAKE_BUILD_TYPE=MemSanDbg -DCMAKE_INSTALL_PREFIX=/usr/local/msan .. && \
      ninja install && \
      cd .. && \
      rm -rf mbedtls-2.16.2
  
  FROM mbedtls AS libssh2
  RUN cd /tmp && \
      curl --insecure --location --silent --show-error https://www.libssh2.org/download/libssh2-1.9.0.tar.gz | \
          tar -xz && \
      cd libssh2-1.9.0 && \
      mkdir build build-msan && \
      cd build && \
      CC=clang-10 CFLAGS="-fPIC" cmake -G Ninja -DBUILD_SHARED_LIBS=ON -DCRYPTO_BACKEND=Libgcrypt -DCMAKE_PREFIX_PATH=/usr/local -DCMAKE_INSTALL_PREFIX=/usr/local .. && \
      ninja install && \
      cd ../build-msan && \
      CC=clang-10 CFLAGS="-fPIC -fsanitize=memory -fno-optimize-sibling-calls -fsanitize-memory-track-origins=2 -fno-omit-frame-pointer" LDFLAGS="-fsanitize=memory" cmake -G Ninja -DBUILD_SHARED_LIBS=ON -DCRYPTO_BACKEND=mbedTLS -DCMAKE_PREFIX_PATH=/usr/local/msan -DCMAKE_INSTALL_PREFIX=/usr/local/msan .. && \
      ninja install && \
      cd .. && \
      rm -rf libssh2-1.9.0
  
  FROM libssh2 AS valgrind
  RUN cd /tmp && \
      curl --insecure --location --silent --show-error https://sourceware.org/pub/valgrind/valgrind-3.15.0.tar.bz2 | \
          tar -xj && \
      cd valgrind-3.15.0 && \
      CC=clang-10 ./configure && \
      make MAKEFLAGS="-j -l$(grep -c ^processor /proc/cpuinfo)" && \
      make install && \
      cd .. && \
      rm -rf valgrind-3.15.0
  
  FROM valgrind AS adduser
  RUN useradd --shell /bin/bash libgit2 --create-home
  
  FROM adduser AS configure
  RUN mkdir /var/run/sshd
  

Download