mirror of
https://github.com/mirage/qubes-mirage-firewall.git
synced 2024-10-01 01:05:39 -04:00
b114e569f2
This adds support for HVM and disposable domains. Also, update the suggested RAM allocation slightly as 20 MB can be too small with lots of VMs.
23 lines
1.2 KiB
Docker
23 lines
1.2 KiB
Docker
# Pin the base image to a specific hash for maximum reproducibility.
|
|
# It will probably still work on newer images, though, unless Debian 8
|
|
# changes some compiler optimisations (unlikely).
|
|
#FROM ocaml/opam:debian-8_ocaml-4.04.2
|
|
FROM ocaml/opam@sha256:17143ad95a2e944758fd9de6ee831e9af98367455cd273b17139c38dcb032f09
|
|
|
|
# Pin last known-good version for reproducible builds.
|
|
# Remove this line (and the base image pin above) if you want to test with the
|
|
# latest versions.
|
|
RUN cd opam-repository && git reset --hard 26fc7c2d5eb5041b7348e28e8300d376a1c31a62 && opam update
|
|
|
|
RUN sudo apt-get install -y m4 libxen-dev
|
|
# TODO: remove this once the new versions are released (smr>2.0.1 and mnx>1.7.1)
|
|
RUN opam pin add -yn --dev netchannel
|
|
RUN opam pin add -yn --dev shared-memory-ring
|
|
RUN opam install -y vchan xen-gnt mirage-xen-ocaml mirage-xen-minios io-page mirage-xen mirage mirage-nat mirage-qubes
|
|
RUN mkdir /home/opam/qubes-mirage-firewall
|
|
ADD config.ml /home/opam/qubes-mirage-firewall/config.ml
|
|
WORKDIR /home/opam/qubes-mirage-firewall
|
|
RUN opam config exec -- mirage configure -t xen && make depend
|
|
CMD opam config exec -- mirage configure -t xen && \
|
|
opam config exec -- make tar
|