mirror of
https://github.com/kanidm/kanidm.git
synced 2025-02-23 12:37:00 +01:00
89 lines
2.6 KiB
Docker
89 lines
2.6 KiB
Docker
# This builds the kanidm CLI tools
|
|
ARG BASE_IMAGE=opensuse/tumbleweed:latest
|
|
# ARG BASE_IMAGE=opensuse/leap:15.5
|
|
|
|
FROM ${BASE_IMAGE} AS repos
|
|
ADD ../scripts/zypper_fixing.sh /zypper_fixing.sh
|
|
RUN --mount=type=cache,id=zypp,target=/var/cache/zypp /zypper_fixing.sh
|
|
|
|
FROM repos AS builder
|
|
ARG KANIDM_FEATURES
|
|
ARG KANIDM_BUILD_PROFILE
|
|
ARG KANIDM_BUILD_OPTIONS=""
|
|
|
|
# Set the build profile
|
|
ENV KANIDM_BUILD_PROFILE=${KANIDM_BUILD_PROFILE:-container_generic}
|
|
ENV RUSTFLAGS="-Clinker=clang -Clink-arg=-fuse-ld=/usr/bin/ld.mold"
|
|
|
|
RUN \
|
|
--mount=type=cache,id=zypp,target=/var/cache/zypp \
|
|
zypper install -y --no-recommends \
|
|
sccache \
|
|
cargo \
|
|
clang \
|
|
make \
|
|
automake \
|
|
autoconf \
|
|
libopenssl-3-devel \
|
|
pam-devel \
|
|
libudev-devel \
|
|
sqlite3-devel \
|
|
rsync \
|
|
mold
|
|
|
|
COPY . /usr/src/kanidm
|
|
|
|
WORKDIR /usr/src/kanidm/
|
|
|
|
# build the CLI
|
|
RUN \
|
|
--mount=type=cache,id=cargo,target=/cargo \
|
|
--mount=type=cache,id=sccache,target=/sccache \
|
|
export CARGO_HOME=/cargo; \
|
|
export SCCACHE_DIR=/sccache; \
|
|
export RUSTC_WRAPPER=/usr/bin/sccache; \
|
|
export CC="/usr/bin/clang"; \
|
|
cargo build -p kanidm_tools ${KANIDM_BUILD_OPTIONS} \
|
|
--target-dir="/usr/src/kanidm/target/" \
|
|
--features="${KANIDM_FEATURES}" \
|
|
--release && \
|
|
cargo build -p kanidm-ipa-sync ${KANIDM_BUILD_OPTIONS} \
|
|
--target-dir="/usr/src/kanidm/target/" \
|
|
--features="${KANIDM_FEATURES}" \
|
|
--release && \
|
|
cargo build -p kanidm-ldap-sync ${KANIDM_BUILD_OPTIONS} \
|
|
--target-dir="/usr/src/kanidm/target/" \
|
|
--features="${KANIDM_FEATURES}" \
|
|
--release && \
|
|
cargo install \
|
|
--git https://github.com/kanidm/webauthn-rs.git \
|
|
--rev 5f4db4172f8e22aedc68c282d177e98db2b1892f \
|
|
--force fido-mds-tool \
|
|
--target-dir="/usr/src/kanidm/target/" && \
|
|
sccache -s
|
|
|
|
# == Construct the tools container
|
|
FROM repos
|
|
|
|
ENV RUST_BACKTRACE 1
|
|
|
|
RUN \
|
|
--mount=type=cache,id=zypp,target=/var/cache/zypp \
|
|
zypper install -y \
|
|
timezone \
|
|
openssl-3
|
|
|
|
COPY --from=builder /usr/src/kanidm/target/release/kanidm /sbin/
|
|
COPY --from=builder /usr/src/kanidm/target/release/kanidm-ipa-sync /sbin/
|
|
COPY --from=builder /usr/src/kanidm/target/release/kanidm-ldap-sync /sbin/
|
|
COPY --from=builder /usr/src/kanidm/target/release/fido-mds-tool /sbin/
|
|
RUN chmod +x /sbin/kanidm
|
|
RUN chmod +x /sbin/kanidm-ipa-sync
|
|
RUN chmod +x /sbin/kanidm-ldap-sync
|
|
RUN chmod +x /sbin/fido-mds-tool
|
|
|
|
RUN mkdir /etc/kanidm && \
|
|
touch /etc/kanidm/config
|
|
|
|
CMD [ "/sbin/kanidm", "-h" ]
|