cae0ab9c5c
55752a2e2ef fix(toxav): pass video bit rate as kbit Previously we unintentionally made it Mbit. 7e573280a75 docs(toxav): fix docs of toxav.h - fix units to be more readable - use width before height consistently - video -> audio typo 5f88a084e8c fix: friend_connections leak on allocation failure clean up when it only contains connections in the NONE state 6d27a1ae178 fix: wrong comment for closelist ce4f29e8036 cleanup: Fix all `-Wsign-compare` warnings. 4d4251c397f chore: lower cirrus ci timeout drastically 40676284507 fix: events leak that can occur if allocation fails rare in practice, found by fuzzing 9610ac31c5f fix: Return an error instead of crashing on nullptr args in NGC. a57c2c8f956 refactor: Make ToxAV independent of toxcore internals. 5752fc29f86 refactor: Make tox-bootstrapd use bool instead of int df675786eb2 chore: Add release-drafter github action. 03fd7a69dcf chore: Use toktok's cmp instead of upstream. 350c0ba1205 cleanup: Sort apk/apt install commands in Dockerfiles. 8c1bda502cb chore(deps): bump golang.org/x/net ddb9d3210da chore: Upgrade to FreeBSD 14.1 in cirrus build. e9076f45bd3 chore(cmake): set options changes as cache and with force git-subtree-dir: external/toxcore/c-toxcore git-subtree-split: 55752a2e2ef894bfa6d7a2a21a0278e3f2bede7d
94 lines
3.5 KiB
Docker
94 lines
3.5 KiB
Docker
###########################################################
|
|
# Builder image: we compile the code here (static build)
|
|
FROM alpine:3.19.0 AS build
|
|
|
|
RUN ["apk", "--no-cache", "add",\
|
|
"clang",\
|
|
"cmake",\
|
|
"libconfig-dev",\
|
|
"libconfig-static",\
|
|
"libsodium-dev",\
|
|
"libsodium-static",\
|
|
"linux-headers",\
|
|
"musl-dev",\
|
|
"ninja",\
|
|
"python3"]
|
|
|
|
WORKDIR /src/c-toxcore
|
|
|
|
# Very selectively add files to the image, because we may have random stuff
|
|
# lying around. In particular, we don't need to rebuild the docker image when
|
|
# toxav changes or the Dockerfile changes down from the build.
|
|
COPY cmake cmake
|
|
COPY other/bootstrap_daemon/bash-completion other/bootstrap_daemon/bash-completion
|
|
COPY other/bootstrap_daemon/src other/bootstrap_daemon/src
|
|
COPY other/bootstrap_node_packets.[ch] other/
|
|
COPY other/DHT_bootstrap.c other/
|
|
COPY other/pkgconfig other/pkgconfig
|
|
COPY other/rpm other/rpm
|
|
COPY testing/misc_tools.[ch] testing/
|
|
COPY toxcore toxcore
|
|
COPY toxencryptsave toxencryptsave
|
|
COPY third_party third_party
|
|
COPY CMakeLists.txt so.version ./
|
|
COPY other/bootstrap_daemon/CMakeLists.txt other/bootstrap_daemon/CMakeLists.txt
|
|
COPY testing/CMakeLists.txt testing/CMakeLists.txt
|
|
|
|
RUN CC=clang cmake -B_build -H. \
|
|
-GNinja \
|
|
-DCMAKE_C_FLAGS="-DTCP_SERVER_USE_EPOLL -fsanitize=alignment,return,returns-nonnull-attribute,vla-bound,unreachable,float-cast-overflow,null -fsanitize-trap=all -fstack-protector-all" \
|
|
-DCMAKE_UNITY_BUILD=ON \
|
|
-DCMAKE_BUILD_TYPE=Release \
|
|
-DFULLY_STATIC=ON \
|
|
-DMIN_LOGGER_LEVEL=DEBUG \
|
|
-DBUILD_TOXAV=OFF \
|
|
-DBOOTSTRAP_DAEMON=ON && \
|
|
cmake --build _build --target install
|
|
|
|
# Verify checksum from dev-built binary, so we can be sure Docker Hub doesn't
|
|
# mess with your binaries.
|
|
COPY other/bootstrap_daemon/docker/tox-bootstrapd.sha256 other/bootstrap_daemon/docker/
|
|
ARG CHECK=sha256sum
|
|
RUN SHA256="$("$CHECK" /usr/local/bin/tox-bootstrapd)" && \
|
|
("$CHECK" -c other/bootstrap_daemon/docker/tox-bootstrapd.sha256 || \
|
|
(echo "::error file=other/bootstrap_daemon/docker/tox-bootstrapd.sha256,line=1::$SHA256" && \
|
|
false))
|
|
|
|
# Remove all the example bootstrap nodes from the config file.
|
|
COPY other/bootstrap_daemon/tox-bootstrapd.conf other/bootstrap_daemon/
|
|
# hadolint ignore=SC2086,SC2154
|
|
RUN ["sed", "-i", "/^bootstrap_nodes = /,$d", "other/bootstrap_daemon/tox-bootstrapd.conf"]
|
|
|
|
# Add bootstrap nodes from https://nodes.tox.chat/.
|
|
COPY other/bootstrap_daemon/docker/get-nodes.py other/bootstrap_daemon/docker/
|
|
RUN ["other/bootstrap_daemon/docker/get-nodes.py", "other/bootstrap_daemon/tox-bootstrapd.conf"]
|
|
|
|
###########################################################
|
|
# Final image build: this is what runs the bootstrap node
|
|
FROM debian:bookworm-slim
|
|
|
|
COPY --from=build /usr/local/bin/tox-bootstrapd /usr/local/bin/
|
|
COPY --from=build /src/c-toxcore/other/bootstrap_daemon/tox-bootstrapd.conf /etc/tox-bootstrapd.conf
|
|
RUN useradd --home-dir /var/lib/tox-bootstrapd --create-home \
|
|
--system --shell /sbin/nologin \
|
|
--comment "Account to run the Tox DHT bootstrap daemon" \
|
|
--user-group tox-bootstrapd && \
|
|
chmod 644 /etc/tox-bootstrapd.conf && \
|
|
chmod 700 /var/lib/tox-bootstrapd
|
|
|
|
WORKDIR /var/lib/tox-bootstrapd
|
|
|
|
USER tox-bootstrapd
|
|
|
|
# Smoke-test: make sure the binary actually starts up.
|
|
# hadolint ignore=DL4006
|
|
RUN script /usr/local/bin/tox-bootstrapd --help | grep "Usage"
|
|
|
|
ENTRYPOINT ["/usr/local/bin/tox-bootstrapd",\
|
|
"--config", "/etc/tox-bootstrapd.conf",\
|
|
"--log-backend", "stdout",\
|
|
"--foreground"\
|
|
]
|
|
|
|
EXPOSE 443/tcp 3389/tcp 33445/tcp 33445/udp
|