2017-01-31 04:26:57 -05:00
|
|
|
# Pin the base image to a specific hash for maximum reproducibility.
|
2018-11-03 13:25:40 -04:00
|
|
|
# It will probably still work on newer images, though, unless Debian
|
2017-01-31 04:26:57 -05:00
|
|
|
# changes some compiler optimisations (unlikely).
|
2019-02-01 04:25:29 -05:00
|
|
|
#FROM ocaml/opam2:debian-9-ocaml-4.07
|
2019-06-15 07:48:01 -04:00
|
|
|
FROM ocaml/opam2@sha256:74fb6e30a95e1569db755b3c061970a8270dfc281c4e69bffe2cf9905d356b38
|
2017-01-28 08:44:21 -05:00
|
|
|
|
|
|
|
|
# Pin last known-good version for reproducible builds.
|
2017-01-31 04:26:57 -05:00
|
|
|
# Remove this line (and the base image pin above) if you want to test with the
|
|
|
|
|
# latest versions.
|
2019-06-15 07:48:01 -04:00
|
|
|
RUN git fetch origin && git reset --hard d28fedaa8a077a429bd7bd79cbc19eb90e01c040 && opam update
|
2017-01-28 08:44:21 -05:00
|
|
|
|
2018-11-03 13:25:40 -04:00
|
|
|
RUN sudo apt-get install -y m4 libxen-dev pkg-config
|
2019-04-16 13:05:08 -04:00
|
|
|
RUN opam install -y vchan mirage-xen-ocaml mirage-xen-minios io-page mirage-xen mirage mirage-nat mirage-qubes
|
2017-01-09 11:45:16 -05:00
|
|
|
RUN mkdir /home/opam/qubes-mirage-firewall
|
|
|
|
|
ADD config.ml /home/opam/qubes-mirage-firewall/config.ml
|
|
|
|
|
WORKDIR /home/opam/qubes-mirage-firewall
|
2017-03-05 11:31:04 -05:00
|
|
|
RUN opam config exec -- mirage configure -t xen && make depend
|
|
|
|
|
CMD opam config exec -- mirage configure -t xen && \
|
2017-01-09 11:45:16 -05:00
|
|
|
opam config exec -- make tar
|
