mirror of
https://github.com/mirage/qubes-mirage-firewall.git
synced 2024-12-28 08:39:34 -05:00
21 lines
995 B
Docker
21 lines
995 B
Docker
# Pin the base image to a specific hash for maximum reproducibility.
|
|
# It will probably still work on newer images, though, unless an update
|
|
# changes some compiler optimisations (unlikely).
|
|
# fedora-35-ocaml-4.14
|
|
FROM ocaml/opam@sha256:68b7ce1fd4c992d6f3bfc9b4b0a88ee572ced52427f0547b6e4eb6194415f585
|
|
ENV PATH="${PATH}:/home/opam/.opam/4.14/bin"
|
|
|
|
# Since mirage 4.2 we must use opam version 2.1 or later
|
|
RUN sudo ln -sf /usr/bin/opam-2.1 /usr/bin/opam
|
|
|
|
# Pin last known-good version for reproducible builds.
|
|
# Remove this line (and the base image pin above) if you want to test with the
|
|
# latest versions.
|
|
RUN cd /home/opam/opam-repository && git fetch origin master && git reset --hard 0f451c34c56458ee18495a98eb35d7dcb14f519a && opam update
|
|
|
|
RUN opam install -y mirage opam-monorepo
|
|
RUN mkdir /home/opam/qubes-mirage-firewall
|
|
ADD config.ml /home/opam/qubes-mirage-firewall/config.ml
|
|
WORKDIR /home/opam/qubes-mirage-firewall
|
|
CMD opam exec -- mirage configure -t xen && make depend && make tar
|