# Use Debian 16.04 as the base for our Rust musl toolchain, because of # https://github.com/rust-lang/rust/issues/34978 (as of Rust 1.11). FROM ubuntu:16.04 # The Rust toolchain to use when building our image. Set by `hooks/build`. ARG TOOLCHAIN=stable # Make sure we have basic dev tools for building C libraries. Our goal # here is to support the musl-libc builds and Cargo builds needed for a # large selection of the most popular crates. # # We also set up a `rust` user by default, in whose account we'll install # the Rust toolchain. This user has sudo privileges if you need to install # any more software. RUN apt-get update && \ apt-get install -y \ build-essential \ cmake \ curl \ file \ git \ musl-dev \ musl-tools \ libpq-dev \ libsqlite-dev \ libssl-dev \ pkgconf \ sudo \ xutils-dev \ gcc-4.7-multilib-arm-linux-gnueabihf \ && \ apt-get clean && rm -rf /var/lib/apt/lists/* && \ useradd rust --user-group --create-home --shell /bin/bash --groups sudo # Allow sudo without a password. ADD sudoers /etc/sudoers.d/nopasswd # Run all further code as user `rust`, and create our working directories # as the appropriate user. USER rust RUN mkdir -p /home/rust/libs /home/rust/src # Set up our path with all our binary directories, including those for the # musl-gcc toolchain and for our Rust toolchain. ENV PATH=/home/rust/.cargo/bin:/usr/local/musl/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin # Install our Rust toolchain and the `musl` target. We patch the # command-line we pass to the installer so that it won't attempt to # interact with the user or fool around with TTYs. We also set the default # `--target` to musl so that our users don't need to keep overriding it # manually. RUN curl https://sh.rustup.rs -sSf | \ sh -s -- -y --default-toolchain $TOOLCHAIN && \ rustup target add x86_64-unknown-linux-musl && \ rustup target add armv7-unknown-linux-gnueabihf ADD cargo-config.toml /home/rust/.cargo/config # Set up a `git credentials` helper for using GH_USER and GH_TOKEN to access # private repositories if desired. ADD git-credential-ghtoken /usr/local/bin RUN git config --global credential.https://github.com.helper ghtoken # Build a static library version of OpenSSL using musl-libc. This is # needed by the popular Rust `hyper` crate. RUN echo "Building OpenSSL" && \ cd /tmp && \ OPENSSL_VERSION=1.0.2l && \ curl -LO "https://www.openssl.org/source/openssl-$OPENSSL_VERSION.tar.gz" && \ tar xvzf "openssl-$OPENSSL_VERSION.tar.gz" && cd "openssl-$OPENSSL_VERSION" && \ env CC=musl-gcc ./Configure no-shared no-zlib -fPIC --prefix=/usr/local/musl linux-x86_64 && \ env C_INCLUDE_PATH=/usr/local/musl/include/ make depend && \ make && sudo make install && \ \ echo "Building zlib" && \ cd /tmp && \ ZLIB_VERSION=1.2.11 && \ curl -LO "http://zlib.net/zlib-$ZLIB_VERSION.tar.gz" && \ tar xzf "zlib-$ZLIB_VERSION.tar.gz" && cd "zlib-$ZLIB_VERSION" && \ CC=musl-gcc ./configure --static --prefix=/usr/local/musl && \ make && sudo make install && \ \ echo "Building libpq" && \ cd /tmp && \ POSTGRESQL_VERSION=9.6.5 && \ curl -LO "https://ftp.postgresql.org/pub/source/v$POSTGRESQL_VERSION/postgresql-$POSTGRESQL_VERSION.tar.gz" && \ tar xzf "postgresql-$POSTGRESQL_VERSION.tar.gz" && cd "postgresql-$POSTGRESQL_VERSION" && \ CC=musl-gcc CPPFLAGS=-I/usr/local/musl/include LDFLAGS=-L/usr/local/musl/lib ./configure --with-openssl --without-readline --prefix=/usr/local/musl && \ cd src/interfaces/libpq && make all-static-lib && sudo make install-lib-static && \ cd ../../bin/pg_config && make && sudo make install && \ \ rm -r /tmp/* ENV OPENSSL_DIR=/usr/local/musl/ \ OPENSSL_INCLUDE_DIR=/usr/local/musl/include/ \ DEP_OPENSSL_INCLUDE=/usr/local/musl/include/ \ OPENSSL_LIB_DIR=/usr/local/musl/lib/ \ OPENSSL_STATIC=1 \ PQ_LIB_STATIC_X86_64_UNKNOWN_LINUX_MUSL=1 \ PG_CONFIG_X86_64_UNKNOWN_LINUX_GNU=/usr/bin/pg_config \ PKG_CONFIG_ALLOW_CROSS=true \ PKG_CONFIG_ALL_STATIC=true # (Please feel free to submit pull requests for musl-libc builds of other C # libraries needed by the most popular and common Rust crates, to avoid # everybody needing to build them manually.) # Expect our source code to live in /home/rust/src. We'll run the build as # user `rust`, which will be uid 1000, gid 1000 outside the container. WORKDIR /home/rust/src