2017-01-31 04:26:57 -05:00
|
|
|
# Pin the base image to a specific hash for maximum reproducibility.
|
2020-10-26 11:19:30 -04:00
|
|
|
# It will probably still work on newer images, though, unless an update
|
2017-01-31 04:26:57 -05:00
|
|
|
# changes some compiler optimisations (unlikely).
|
2023-11-07 07:47:12 -05:00
|
|
|
# bookworm-slim taken from https://hub.docker.com/_/debian/tags?page=1&name=bookworm-slim
|
|
|
|
|
FROM debian@sha256:ea5ad531efe1ac11ff69395d032909baf423b8b88e9aade07e11b40b2e5a1338
|
2023-11-09 08:41:16 -05:00
|
|
|
# install remove default packages repository
|
2023-11-07 07:47:12 -05:00
|
|
|
RUN rm /etc/apt/sources.list.d/debian.sources
|
2023-04-18 05:46:45 -04:00
|
|
|
# and set the package source to a specific release too
|
2023-11-07 07:47:12 -05:00
|
|
|
# taken from https://snapshot.debian.org/archive/debian
|
|
|
|
|
RUN printf "deb [check-valid-until=no] http://snapshot.debian.org/archive/debian/20231107T084929Z bookworm main\n" > /etc/apt/sources.list
|
|
|
|
|
# taken from https://snapshot.debian.org/archive/debian-security/
|
|
|
|
|
RUN printf "deb [check-valid-until=no] http://snapshot.debian.org/archive/debian-security/20231108T004541Z bookworm-security main\n" >> /etc/apt/sources.list
|
2022-08-09 08:16:16 -04:00
|
|
|
|
2023-04-18 05:46:45 -04:00
|
|
|
RUN apt update && apt install --no-install-recommends --no-install-suggests -y wget ca-certificates git patch unzip bzip2 make gcc g++ libc-dev
|
2023-07-05 11:06:00 -04:00
|
|
|
RUN wget -O /usr/bin/opam https://github.com/ocaml/opam/releases/download/2.1.5/opam-2.1.5-i686-linux && chmod 755 /usr/bin/opam
|
2023-11-09 08:41:16 -05:00
|
|
|
# taken from https://raw.githubusercontent.com/ocaml/opam/master/shell/install.sh
|
|
|
|
|
RUN test `sha512sum /usr/bin/opam | cut -d' ' -f1` = \
|
|
|
|
|
"38802b3079eeceb27aab3465bfd0f9f05a710dccf9487eb35fa2c02fbaf9a0659e1447aa19dd36df9cd01f760229de28c523c08c1c86a3aa3f5e25dbe7b551dd" || exit
|
2017-01-28 08:44:21 -05:00
|
|
|
|
2022-11-13 06:22:59 -05:00
|
|
|
ENV OPAMROOT=/tmp
|
|
|
|
|
ENV OPAMCONFIRMLEVEL=unsafe-yes
|
2017-01-28 08:44:21 -05:00
|
|
|
# Pin last known-good version for reproducible builds.
|
2017-01-31 04:26:57 -05:00
|
|
|
# Remove this line (and the base image pin above) if you want to test with the
|
|
|
|
|
# latest versions.
|
2023-11-07 07:47:12 -05:00
|
|
|
# taken from https://github.com/ocaml/opam-repository
|
|
|
|
|
RUN opam init --disable-sandboxing -a --bare https://github.com/ocaml/opam-repository.git#d1a8bf040fbb2c81ddb2612f1a49a471a06083dc
|
2023-04-18 05:46:45 -04:00
|
|
|
RUN opam switch create myswitch 4.14.1
|
2022-11-13 06:22:59 -05:00
|
|
|
RUN opam exec -- opam install -y mirage opam-monorepo ocaml-solo5
|
|
|
|
|
RUN mkdir /tmp/orb-build
|
|
|
|
|
ADD config.ml /tmp/orb-build/config.ml
|
|
|
|
|
WORKDIR /tmp/orb-build
|
2023-11-08 04:20:59 -05:00
|
|
|
CMD opam exec -- sh -exc 'mirage configure -t xen --extra-repos=\
|
|
|
|
|
opam-overlays:https://github.com/dune-universe/opam-overlays.git#91a371754a2c9f4febbb6c7bb039649ad49a3c13,\
|
|
|
|
|
mirage-overlays:https://github.com/dune-universe/mirage-opam-overlays.git#05f1c1823d891ce4d8adab91f5db3ac51d86dc0b \
|
|
|
|
|
--allocation-policy=best-fit && make depend && make tar'
|
