Dockerfile.dapper

FROM docker:29.7.2-cli@sha256:000bb62ff495f986c9f5578eb67cc2cb98b91138eda81d7762d5371eb8a497fe AS snapshot-ca-certificates

FROM ubuntu:26.04@sha256:2260313b31c8c011cd2eebe728008efac1b3982be73eb71348ea2648d2c0e09b

COPY --from=snapshot-ca-certificates /etc/ssl/certs/ca-certificates.crt /etc/ssl/certs/ca-certificates.crt
COPY package/ubuntu-apt.lock /licenses/ubuntu-apt.lock

ARG DAPPER_HOST_ARCH=amd64
ARG GO_VERSION=1.27.0
ARG GO_SHA256_amd64=675c26c449cbb18fc24b74650de1eabbae6e16f64326fd85a283fb3b58280685
ARG GO_SHA256_arm=e337ecd9c321377c0d8832690c2cb10463447c0bd0e65e2e3413dfff63a3435b

ENV DEBIAN_FRONTEND=noninteractive
ENV HOST_ARCH=${DAPPER_HOST_ARCH} \
    ARCH=${DAPPER_HOST_ARCH} \
    GOLANG_ARCH_amd64=amd64 \
    GOLANG_ARCH_arm=armv6l \
    GOLANG_ARCH=GOLANG_ARCH_${DAPPER_HOST_ARCH} \
    GO_SHA256=GO_SHA256_${DAPPER_HOST_ARCH} \
    GOPATH=/go \
    PATH=/go/bin:/usr/local/go/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin \
    SHELL=/bin/bash \
    GO111MODULE=on \
    GOTOOLCHAIN=local

SHELL ["/bin/bash", "-o", "pipefail", "-c"]

RUN set -eux; \
    . /licenses/ubuntu-apt.lock; \
    find /etc/apt -type f \( -name '*.list' -o -name '*.sources' \) -exec sed -i \
        -e 's|http://security.ubuntu.com/ubuntu|https://security.ubuntu.com/ubuntu|g' \
        -e 's|http://archive.ubuntu.com/ubuntu|https://archive.ubuntu.com/ubuntu|g' {} +; \
    printf 'Acquire::Retries "5";\nAcquire::http::Timeout "30";\nAcquire::https::Timeout "30";\nAcquire::http::Pipeline-Depth "0";\nAcquire::https::CaInfo "/etc/ssl/certs/ca-certificates.crt";\nAcquire::AllowInsecureRepositories "false";\nAPT::Get::AllowUnauthenticated "false";\n' > /etc/apt/apt.conf.d/80pasturestack-retries; \
    apt-get --snapshot "${UBUNTU_APT_SNAPSHOT}" update; \
    apt-get --snapshot "${UBUNTU_APT_SNAPSHOT}" install -y --no-install-recommends \
        bash="${UBUNTU_APT_BASH_VERSION}" \
        busybox-static="${UBUNTU_APT_BUSYBOX_STATIC_VERSION}" \
        ca-certificates="${UBUNTU_APT_CA_CERTIFICATES_VERSION}" \
        containerd="${UBUNTU_APT_CONTAINERD_VERSION}" \
        curl="${UBUNTU_APT_CURL_VERSION}" \
        docker.io="${UBUNTU_APT_DOCKER_IO_VERSION}" \
        file="${UBUNTU_APT_FILE_VERSION}" \
        gcc="${UBUNTU_APT_GCC_VERSION}" \
        git="${UBUNTU_APT_GIT_VERSION}" \
        iproute2="${UBUNTU_APT_IPROUTE2_VERSION}" \
        iptables="${UBUNTU_APT_IPTABLES_VERSION}" \
        libc6-dev="${UBUNTU_APT_LIBC6_DEV_VERSION}" \
        linux-libc-dev="${UBUNTU_APT_LINUX_LIBC_DEV_VERSION}" \
        make="${UBUNTU_APT_MAKE_VERSION}" \
        runc="${UBUNTU_APT_RUNC_VERSION}" \
        tar="${UBUNTU_APT_TAR_VERSION}" \
        xz-utils="${UBUNTU_APT_XZ_UTILS_VERSION}"; \
    { \
        printf 'snapshot\t%s\n' "${UBUNTU_APT_SNAPSHOT}"; \
        dpkg-query -W -f='${binary:Package}\t${Version}\n' | LC_ALL=C sort; \
    } > /licenses/DAPPER-UBUNTU-APT-PACKAGES.tsv; \
    curl -fsSL --retry 5 --retry-all-errors --retry-delay 2 --connect-timeout 10 --max-time 300 \
        -o /tmp/go.tgz "https://go.dev/dl/go${GO_VERSION}.linux-${!GOLANG_ARCH}.tar.gz"; \
    echo "${!GO_SHA256}  /tmp/go.tgz" | sha256sum -c -; \
    tar -C /usr/local -xzf /tmp/go.tgz; \
    rm -f /tmp/go.tgz; \
    mkdir -p /go/bin /go/src; \
    go version | grep -F "go${GO_VERSION} linux/"; \
    docker --version; \
    dockerd --version; \
    containerd --version; \
    runc --version; \
    apt-get clean; \
    rm -rf /var/lib/apt/lists/*; \
    rm -f /usr/bin/pebble; \
    rm -f /bin/sh; \
    ln -s /bin/bash /bin/sh

RUN git config --system --add safe.directory '*'

ENV DAPPER_SOURCE=/go/src/github.com/PastureStack/host-api \
    DAPPER_OUTPUT="./dist ./bin" \
    DAPPER_RUN_ARGS="--privileged --cgroupns=host" \
    GOFLAGS=-mod=vendor

WORKDIR ${DAPPER_SOURCE}

VOLUME "/var/lib/docker"
ENTRYPOINT ["./scripts/entry"]
CMD ["ci"]