forked from IntersectMBO/cardano-node
-
Notifications
You must be signed in to change notification settings - Fork 1
/
Copy pathDockerfile.backbonecf
44 lines (41 loc) · 8.87 KB
/
Dockerfile.backbonecf
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
FROM debian:stable-slim as build
RUN apt-get update -y \
&& apt-get install -y tcpdump net-tools automake build-essential pkg-config libffi-dev libgmp-dev libssl-dev libtinfo-dev libsystemd-dev zlib1g-dev make g++ tmux git jq wget libncursesw5 libtool autoconf libsqlite3-dev m4 ca-certificates gcc libc6-dev curl python3 htop nload \
&& apt-get clean
RUN mkdir secp256k1-sources && cd secp256k1-sources && git clone https://github.com/bitcoin-core/secp256k1.git && cd secp256k1 && git reset --hard ac83be33d0956faf6b7f61a60ab524ef7d6a473a && ./autogen.sh && ./configure --prefix=/usr --enable-module-schnorrsig --enable-experimental && make && make check && make install
RUN git clone https://github.com/input-output-hk/libsodium && cd libsodium && git checkout $(curl -L https://github.com/input-output-hk/iohk-nix/releases/latest/download/INFO | awk '$1 == "debian.libsodium-vrf.deb" { rev = gensub(/.*-(.*)\.deb/, "\\1", "g", $2); print rev }') && ./autogen.sh && ./configure && make && make check && make install
RUN curl --proto '=https' --tlsv1.2 -sSf https://get-ghcup.haskell.org | BOOTSTRAP_HASKELL_NONINTERACTIVE=1 BOOTSTRAP_HASKELL_GHC_VERSION=8.10.7 BOOTSTRAP_HASKELL_CABAL_VERSION=3.8.1.0 BOOTSTRAP_HASKELL_INSTALL_STACK=1 BOOTSTRAP_HASKELL_INSTALL_HLS=1 BOOTSTRAP_HASKELL_ADJUST_BASHRC=P sh
ENV PATH="/root/.cabal/bin:/root/.ghcup/bin:/root/.local/bin:$PATH"
RUN git clone https://github.com/supranational/blst && cd blst && git checkout v0.3.10 && ./build.sh && echo cHJlZml4PS91c3IKZXhlY19wcmVmaXg9JHtwcmVmaXh9CmxpYmRpcj0ke2V4ZWNfcHJlZml4fS9saWIKaW5jbHVkZWRpcj0ke3ByZWZpeH0vaW5jbHVkZQoKTmFtZTogbGliYmxzdApEZXNjcmlwdGlvbjogTXVsdGlsaW5ndWFsIEJMUzEyLTM4MSBzaWduYXR1cmUgbGlicmFyeQpVUkw6IGh0dHBzOi8vZ2l0aHViLmNvbS9zdXByYW5hdGlvbmFsL2Jsc3QKVmVyc2lvbjogMC4zLjEwCkNmbGFnczogLUkke2luY2x1ZGVkaXJ9CkxpYnM6IC1MJHtsaWJkaXJ9IC1sYmxzdA== | base64 --decode >> libblst.pc && cp libblst.pc /usr/lib/pkgconfig/ && cp bindings/blst_aux.h bindings/blst.h bindings/blst.hpp /usr/include/ && cp libblst.a /usr/lib && chmod u=rw,go=r /usr/lib/libblst.a && chmod u=rw,go=r /usr/lib/pkgconfig/libblst.pc && chmod u=rw,go=r /usr/include/blst.h && chmod u=rw,go=r /usr/include/blst.hpp && chmod u=rw,go=r /usr/include/blst_aux.h
ENV LD_LIBRARY_PATH="/usr/local/lib:$LD_LIBRARY_PATH" \
PKG_CONFIG_PATH="/usr/local/lib/pkgconfig:$PKG_CONFIG_PATH"
RUN echo "Building tags/$VERSION..."
RUN echo tags/$VERSION > /CARDANO_BRANCH
COPY . .
RUN cabal update \
&& cabal configure --with-compiler=ghc-8.10.7 \
&& echo "package cardano-crypto-praos" >> cabal.project.local \
&& echo " flags: -external-libsodium-vrf" >> cabal.project.local \
&& cabal build all \
&& mkdir -p /root/.local/bin/ \
&& cp -p dist-newstyle/build/x86_64-linux/ghc-8.10.7/cardano-node-*/x/cardano-node/build/cardano-node/cardano-node /root/.local/bin/
FROM debian:stable-slim
COPY --from=build /root/.local/bin/ /bin/
COPY --from=build /usr/local/lib/ /lib/
RUN apt-get update && apt-get install git -y
RUN apt-get install -y automake build-essential pkg-config libffi-dev libgmp-dev libssl-dev libtinfo-dev libsystemd-dev zlib1g-dev make g++ tmux git jq wget libncursesw5 libtool autoconf libsqlite3-dev m4 ca-certificates gcc libc6-dev
RUN mkdir secp256k1-sources && cd secp256k1-sources && git clone https://github.com/bitcoin-core/secp256k1.git && cd secp256k1 && git reset --hard ac83be33d0956faf6b7f61a60ab524ef7d6a473a && ./autogen.sh && ./configure --prefix=/usr --enable-module-schnorrsig --enable-experimental && make && make check && make install
RUN groupadd -g 1001 cardano
RUN useradd -rm -d /home/cardano -s /bin/bash -g 1001 -G sudo -u 1001 cardano
RUN mkdir -p /home/cardano/data/db
RUN mkdir -p /home/cardano/logs
RUN mkdir /home/cardano/ipc
RUN cd /home/cardano && git clone https://github.com/input-output-hk/cardano-configurations
RUN echo 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 | base64 --decode > /home/cardano/cardano-configurations/network/mainnet/cardano-node/config.json
RUN cd /home/cardano/cardano-configurations/network/mainnet/cardano-node/ && wget https://book.world.dev.cardano.org/environments/mainnet/topology-p2p.json && mv topology-p2p.json topology.json
RUN chown -R 1001:1001 /home/cardano/ipc
RUN chown -R 1001:1001 /home/cardano/data
RUN chown -R 1001:1001 /home/cardano/cardano-configurations
USER 1001:1001
WORKDIR /home/cardano
ENTRYPOINT cardano-node run --database-path /home/cardano/data/db --topology "$TOPOLOGY_LOCATION" --socket-path /home/cardano/ipc/node.socket --host-addr "$PUBLIC_IP" --port "$PORT" --host-ipv6-addr "$PUBLIC_IPV6 --config /home/cardano/cardano-configurations/network/"$NETWORK"/cardano-node/config.json +RTS -N14 -A16m -M25000.000000M -H20856M -I0.020 -Iw1200 -RTS