qubes-mirage-firewall/Dockerfile

# Pin the base image to a specific hash for maximum reproducibility.
# It will probably still work on newer images, though, unless Debian 8
# changes some compiler optimisations (unlikely).
#FROM ocaml/opam:debian-8_ocaml-4.04.2
FROM ocaml/opam@sha256:17143ad95a2e944758fd9de6ee831e9af98367455cd273b17139c38dcb032f09

# Pin last known-good version for reproducible builds.
# Remove this line (and the base image pin above) if you want to test with the
# latest versions.
RUN cd opam-repository && git fetch origin && git reset --hard eb49e10ee78f36c660a1f57aea45f7a6ed932460 && opam update

RUN sudo apt-get install -y m4 libxen-dev
RUN opam install -y vchan xen-gnt mirage-xen-ocaml mirage-xen-minios io-page mirage-xen mirage mirage-nat mirage-qubes
RUN mkdir /home/opam/qubes-mirage-firewall
ADD config.ml /home/opam/qubes-mirage-firewall/config.ml
WORKDIR /home/opam/qubes-mirage-firewall
RUN opam config exec -- mirage configure -t xen && make depend
CMD opam config exec -- mirage configure -t xen && \
    opam config exec -- make tar
Pin Docker base image to a specific hash Requested by Joanna Rutkowska. 2017-01-31 04:26:57 -05:00			`# Pin the base image to a specific hash for maximum reproducibility.`
			`# It will probably still work on newer images, though, unless Debian 8`
			`# changes some compiler optimisations (unlikely).`
Use released mirage-nat 1.0 2017-10-15 09:35:03 -04:00			`#FROM ocaml/opam:debian-8_ocaml-4.04.2`
Use Git master for shared-memory-ring and netchannel This adds support for HVM and disposable domains. Also, update the suggested RAM allocation slightly as 20 MB can be too small with lots of VMs. 2017-11-09 10:20:55 -05:00			`FROM ocaml/opam@sha256:17143ad95a2e944758fd9de6ee831e9af98367455cd273b17139c38dcb032f09`
Fix opam-repository commit for reproducible builds Also, display the actual and expected SHA hashes after building. 2017-01-28 08:44:21 -05:00
			`# Pin last known-good version for reproducible builds.`
Pin Docker base image to a specific hash Requested by Joanna Rutkowska. 2017-01-31 04:26:57 -05:00			`# Remove this line (and the base image pin above) if you want to test with the`
			`# latest versions.`
Update to newly released version of netchannel 2017-12-16 07:37:42 -05:00			`RUN cd opam-repository && git fetch origin && git reset --hard eb49e10ee78f36c660a1f57aea45f7a6ed932460 && opam update`
Fix opam-repository commit for reproducible builds Also, display the actual and expected SHA hashes after building. 2017-01-28 08:44:21 -05:00
Add option to build with Docker 2017-01-09 11:45:16 -05:00			`RUN sudo apt-get install -y m4 libxen-dev`
Use Git master for shared-memory-ring and netchannel This adds support for HVM and disposable domains. Also, update the suggested RAM allocation slightly as 20 MB can be too small with lots of VMs. 2017-11-09 10:20:55 -05:00			`RUN opam install -y vchan xen-gnt mirage-xen-ocaml mirage-xen-minios io-page mirage-xen mirage mirage-nat mirage-qubes`
Add option to build with Docker 2017-01-09 11:45:16 -05:00			`RUN mkdir /home/opam/qubes-mirage-firewall`
			`ADD config.ml /home/opam/qubes-mirage-firewall/config.ml`
			`WORKDIR /home/opam/qubes-mirage-firewall`
Update to new mirage-nat API 2017-03-05 11:31:04 -05:00			`RUN opam config exec -- mirage configure -t xen && make depend`
			`CMD opam config exec -- mirage configure -t xen && \`
Add option to build with Docker 2017-01-09 11:45:16 -05:00			`opam config exec -- make tar`