Squashed 'external/toxcore/c-toxcore/' content from commit 67badf69

git-subtree-dir: external/toxcore/c-toxcore
git-subtree-split: 67badf69416a74e74f6d7eb51dd96f37282b8455

other/bootstrap_daemon/docker/Dockerfile

@@ -0,0 +1,90 @@
+###########################################################
+# Builder image: we compile the code here (static build)
+FROM alpine:3.15.0 AS build
+
+RUN ["apk", "--no-cache", "add",\
+ "build-base",\
+ "cmake",\
+ "linux-headers",\
+ "libconfig-dev",\
+ "libconfig-static",\
+ "libsodium-dev",\
+ "libsodium-static",\
+ "ninja",\
+ "python3"\
+]
+
+WORKDIR /src/c-toxcore
+
+# Very selectively add files to the image, because we may have random stuff
+# lying around. In particular, we don't need to rebuild the docker image when
+# toxav changes or the Dockerfile changes down from the build.
+COPY cmake cmake
+COPY other/bootstrap_daemon/bash-completion other/bootstrap_daemon/bash-completion
+COPY other/bootstrap_daemon/src other/bootstrap_daemon/src
+COPY other/bootstrap_node_packets.[ch] other/
+COPY other/DHT_bootstrap.c other/
+COPY other/pkgconfig other/pkgconfig
+COPY other/rpm other/rpm
+COPY testing/misc_tools.[ch] testing/
+COPY toxcore toxcore
+COPY toxencryptsave toxencryptsave
+COPY third_party third_party
+COPY CMakeLists.txt so.version ./
+COPY other/bootstrap_daemon/CMakeLists.txt other/bootstrap_daemon/CMakeLists.txt
+COPY testing/CMakeLists.txt testing/CMakeLists.txt
+
+RUN cmake -B_build -H. \
+      -GNinja \
+      -DCMAKE_C_FLAGS="-DTCP_SERVER_USE_EPOLL -fstack-protector-all -fisolate-erroneous-paths-attribute" \
+      -DCMAKE_UNITY_BUILD=ON \
+      -DCMAKE_BUILD_TYPE=Release \
+      -DFULLY_STATIC=ON \
+      -DMIN_LOGGER_LEVEL=DEBUG \
+      -DBUILD_TOXAV=OFF \
+      -DBOOTSTRAP_DAEMON=ON && \
+    cmake --build _build --target install
+
+# Verify checksum from dev-built binary, so we can be sure Docker Hub doesn't
+# mess with your binaries.
+COPY other/bootstrap_daemon/docker/tox-bootstrapd.sha256 other/bootstrap_daemon/docker/
+RUN sha256sum /usr/local/bin/tox-bootstrapd && \
+    sha256sum -c other/bootstrap_daemon/docker/tox-bootstrapd.sha256
+
+# Remove all the example bootstrap nodes from the config file.
+COPY other/bootstrap_daemon/tox-bootstrapd.conf other/bootstrap_daemon/
+# hadolint ignore=SC2086,SC2154
+RUN ["sed", "-i", "/^bootstrap_nodes = /,$d", "other/bootstrap_daemon/tox-bootstrapd.conf"]
+
+# Add bootstrap nodes from https://nodes.tox.chat/.
+COPY other/bootstrap_daemon/docker/get-nodes.py other/bootstrap_daemon/docker/
+RUN ["other/bootstrap_daemon/docker/get-nodes.py", "other/bootstrap_daemon/tox-bootstrapd.conf"]
+
+###########################################################
+# Final image build: this is what runs the bootstrap node
+FROM debian:bullseye-slim
+
+COPY --from=build /usr/local/bin/tox-bootstrapd /usr/local/bin/
+COPY --from=build /src/c-toxcore/other/bootstrap_daemon/tox-bootstrapd.conf /etc/tox-bootstrapd.conf
+RUN useradd --home-dir /var/lib/tox-bootstrapd --create-home \
+      --system --shell /sbin/nologin \
+      --comment "Account to run the Tox DHT bootstrap daemon" \
+      --user-group tox-bootstrapd && \
+    chmod 644 /etc/tox-bootstrapd.conf && \
+    chmod 700 /var/lib/tox-bootstrapd
+
+WORKDIR /var/lib/tox-bootstrapd
+
+USER tox-bootstrapd
+
+# Smoke-test: make sure the binary actually starts up.
+# hadolint ignore=DL4006
+RUN script /usr/local/bin/tox-bootstrapd --help | grep "Usage"
+
+ENTRYPOINT ["/usr/local/bin/tox-bootstrapd",\
+ "--config", "/etc/tox-bootstrapd.conf",\
+ "--log-backend", "stdout",\
+ "--foreground"\
+]
+
+EXPOSE 443/tcp 3389/tcp 33445/tcp 33445/udp