1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
|
ARG ALPINE_VERSION=3.22
FROM alpine:$ALPINE_VERSION AS builder
# Install development stuff
RUN apk --no-cache upgrade -a && \
apk --no-cache add patch cmake ccache make ninja g++ pkgconf pcsc-lite-dev binutils-gold eudev-libs perl python3 linux-headers
# Use optional remote ccache
# redis://YOUR_SERVER:6379
ARG CCACHE_REMOTE_STORAGE=""
ENV CCACHE_REMOTE_STORAGE=$CCACHE_REMOTE_STORAGE CCACHE_REMOTE_ONLY=true CCACHE_RESHARE=true CCACHE_DIR=/build/ccache
# Build Libraries
COPY cmake/Helper.cmake cmake/DVCS.cmake cmake/Messages.cmake libs /src/libs/
RUN cmake /src/libs/ -B /build/libs \
-DCONTAINER_SDK=ON \
-DCMAKE_BUILD_TYPE=Release \
-DDESTINATION_DIR=/app \
-DCMAKE_CXX_COMPILER_LAUNCHER=ccache && \
cmake --build /build/libs && \
ccache -s -vv && rm -rf /build
# Build AusweisApp
COPY docs/ /src/ausweisapp/docs/
COPY CMakeLists.txt /src/ausweisapp/
COPY cmake/ /src/ausweisapp/cmake/
COPY resources/ /src/ausweisapp/resources/
COPY src/ /src/ausweisapp/src/
RUN cmake /src/ausweisapp -B /build/app \
-DCONTAINER_SDK=ON \
-DCMAKE_BUILD_TYPE=MinSizeRel \
-DCMAKE_CXX_COMPILER_LAUNCHER=ccache \
-DCMAKE_INSTALL_RPATH_USE_LINK_PATH=ON \
-DCMAKE_INSTALL_PREFIX=/app \
-GNinja && \
cmake --build /build/app && cmake --install /build/app && \
ccache -s -vv && rm -rf /build
RUN strip /app/bin/AusweisApp && \
find /app/lib/ -type f -not -name "*.so*" -delete && \
find /app/ -type f -name "*.so*" -exec strip {} + && \
find /app/ -type d -empty -delete
FROM alpine:$ALPINE_VERSION
# Copy to image
COPY --from=builder /app/plugins /app/plugins
COPY --from=builder /app/lib /app/lib
COPY --from=builder /app/share /app/share
COPY --from=builder /app/bin/AusweisApp /app/bin/AusweisApp
RUN apk --no-cache upgrade -a && \
apk --no-cache add tini libstdc++ pcsc-lite-libs eudev-libs doas && \
echo 'permit nopass :wheel' > /etc/doas.d/wheel.conf && \
adduser ausweisapp -G wheel -s /bin/sh -D && \
mkdir -p /home/ausweisapp/.config && chown ausweisapp: /home/ausweisapp/.config && \
ln -s /app/bin/* /usr/local/bin && \
ln -s /app/share/* /usr/local/share
USER ausweisapp
VOLUME ["/home/ausweisapp/.config"]
ENTRYPOINT ["/sbin/tini", "--"]
EXPOSE 24727
CMD ["AusweisApp", "--address", "0.0.0.0", "--no-logfile"]
|
