2017-01-31 04:26:57 -05:00
|
|
|
# Pin the base image to a specific hash for maximum reproducibility.
|
2020-10-26 11:19:30 -04:00
|
|
|
# It will probably still work on newer images, though, unless an update
|
2017-01-31 04:26:57 -05:00
|
|
|
# changes some compiler optimisations (unlikely).
|
2022-08-29 05:31:44 -04:00
|
|
|
# fedora-35-ocaml-4.14
|
2022-08-09 08:16:16 -04:00
|
|
|
FROM ocaml/opam@sha256:68b7ce1fd4c992d6f3bfc9b4b0a88ee572ced52427f0547b6e4eb6194415f585
|
|
|
|
ENV PATH="${PATH}:/home/opam/.opam/4.14/bin"
|
|
|
|
|
|
|
|
# Since mirage 4.2 we must use opam version 2.1 or later
|
2022-08-29 05:31:44 -04:00
|
|
|
RUN sudo ln -sf /usr/bin/opam-2.1 /usr/bin/opam
|
2017-01-28 08:44:21 -05:00
|
|
|
|
|
|
|
# Pin last known-good version for reproducible builds.
|
2017-01-31 04:26:57 -05:00
|
|
|
# Remove this line (and the base image pin above) if you want to test with the
|
|
|
|
# latest versions.
|
2022-11-11 09:12:30 -05:00
|
|
|
RUN cd /home/opam/opam-repository && git fetch origin master && git reset --hard 685eb4efcebfa671660e55d76dea017f00fed4d9 && opam update
|
2017-01-28 08:44:21 -05:00
|
|
|
|
2022-11-11 09:59:06 -05:00
|
|
|
RUN opam install -y mirage opam-monorepo ocaml-solo5
|
2017-01-09 11:45:16 -05:00
|
|
|
RUN mkdir /home/opam/qubes-mirage-firewall
|
|
|
|
ADD config.ml /home/opam/qubes-mirage-firewall/config.ml
|
|
|
|
WORKDIR /home/opam/qubes-mirage-firewall
|
2022-08-11 07:17:44 -04:00
|
|
|
CMD opam exec -- mirage configure -t xen && make depend && make tar
|