FROM fedora:37@sha256:3f987b7657e944cf87a129cc262982d4f80e38bd98f7db313ccaf90ca7069dd2 as build RUN dnf -y update && \ dnf -y install @development-tools pkg-config iproute iputils wget git jq openssl-devel cryptsetup-libs cryptsetup-devel && \ dnf clean all # Install Go ARG GO_VER=1.20.2 RUN wget -q https://go.dev/dl/go${GO_VER}.linux-amd64.tar.gz && \ tar -C /usr/local -xzf go${GO_VER}.linux-amd64.tar.gz && \ rm go${GO_VER}.linux-amd64.tar.gz ENV PATH ${PATH}:/usr/local/go/bin # Download go dependencies WORKDIR /constellation/ # Necessary to make `go mod download all` work while having a local replace rule in the root-go.mod. COPY operators/constellation-node-operator/api/go.mod ./operators/constellation-node-operator/api/go.mod COPY operators/constellation-node-operator/api/go.sum ./operators/constellation-node-operator/api/go.sum COPY go.mod ./ COPY go.sum ./ RUN go mod download all # Copy Repo COPY . /constellation RUN rm -rf ./hack/ FROM build AS build-bootstrapper WORKDIR /constellation/bootstrapper/ ARG PROJECT_VERSION RUN --mount=type=cache,target=/root/.cache/go-build go build -o bootstrapper -tags=disable_tpm_simulator -buildvcs=false -ldflags "-s -w -buildid='' -X github.com/edgelesssys/constellation/v2/internal/constants.versionInfo=${PROJECT_VERSION}" ./cmd/bootstrapper/ FROM build AS build-disk-mapper WORKDIR /constellation/disk-mapper/ ARG PROJECT_VERSION RUN --mount=type=cache,target=/root/.cache/go-build go build -o disk-mapper -ldflags "-s -w -buildid='' -X github.com/edgelesssys/constellation/v2/internal/constants.versionInfo=${PROJECT_VERSION}" ./cmd/ FROM build AS build-upgrade-agent WORKDIR /constellation/upgrade-agent/ ARG PROJECT_VERSION RUN --mount=type=cache,target=/root/.cache/go-build go build -o upgrade-agent -ldflags "-s -w -buildid='' -X github.com/edgelesssys/constellation/v2/internal/constants.versionInfo=${PROJECT_VERSION}" ./cmd/ FROM build AS build-measurement-reader WORKDIR /constellation/measurement-reader/ RUN --mount=type=cache,target=/root/.cache/go-build go build -o measurement-reader -ldflags "-s -w -buildid=''" ./cmd/ FROM scratch AS bootstrapper COPY --from=build-bootstrapper /constellation/bootstrapper/bootstrapper / FROM scratch AS disk-mapper COPY --from=build-disk-mapper /constellation/disk-mapper/disk-mapper / FROM scratch AS upgrade-agent COPY --from=build-upgrade-agent /constellation/upgrade-agent/upgrade-agent / FROM scratch AS measurement-reader COPY --from=build-measurement-reader /constellation/measurement-reader/measurement-reader /