| ADD alpine-minirootfs-3.22.1-x86_64.tar.gz / # buildkit |
| CMD ["/bin/sh"] |
| RUN /bin/sh -c apk add --no-cache ca-certificates openssh-client git # buildkit |
| RUN /bin/sh -c [ -e /etc/nsswitch.conf ] && grep '^hosts: files dns' /etc/nsswitch.conf # buildkit |
| RUN /bin/sh -c set -eux; addgroup -g 2375 -S docker # buildkit |
| ENV DOCKER_VERSION=28.3.3 |
| RUN /bin/sh -c set -eux; apkArch="$(apk --print-arch)"; case "$apkArch" in 'x86_64') url='https://download.docker.com/linux/static/stable/x86_64/docker-28.3.3.tgz'; ;; 'armhf') url='https://download.docker.com/linux/static/stable/armel/docker-28.3.3.tgz'; ;; 'armv7') url='https://download.docker.com/linux/static/stable/armhf/docker-28.3.3.tgz'; ;; 'aarch64') url='https://download.docker.com/linux/static/stable/aarch64/docker-28.3.3.tgz'; ;; *) echo >&2 "error: unsupported 'docker.tgz' architecture ($apkArch)"; exit 1 ;; esac; wget -O 'docker.tgz' "$url"; tar --extract --file docker.tgz --strip-components 1 --directory /usr/local/bin/ --no-same-owner 'docker/docker' ; rm docker.tgz; docker --version # buildkit |
| ENV DOCKER_BUILDX_VERSION=0.27.0 |
| RUN /bin/sh -c set -eux; apkArch="$(apk --print-arch)"; case "$apkArch" in 'x86_64') url='https://github.com/docker/buildx/releases/download/v0.27.0/buildx-v0.27.0.linux-amd64'; sha256='4f5e5a1b6dd0d6ff8476c8def7602d1eeedcb6f602e8dcd45079d352247eba06'; ;; 'armhf') url='https://github.com/docker/buildx/releases/download/v0.27.0/buildx-v0.27.0.linux-arm-v6'; sha256='216ef84b075c270ab2f0bbcf9fcedfb0175226349714a129b7806b4b3f1a460c'; ;; 'armv7') url='https://github.com/docker/buildx/releases/download/v0.27.0/buildx-v0.27.0.linux-arm-v7'; sha256='b7184384910ed1b3726f7dc340e3c644640fc5f7028c6ccdfda843cfbcb3fb67'; ;; 'aarch64') url='https://github.com/docker/buildx/releases/download/v0.27.0/buildx-v0.27.0.linux-arm64'; sha256='e3519d085710d2502c673380f763596ae0b378d0ae8976ccbb14adaed82327ef'; ;; 'ppc64le') url='https://github.com/docker/buildx/releases/download/v0.27.0/buildx-v0.27.0.linux-ppc64le'; sha256='e2bc5c418f680fa7ddb8782eea00a56725189ef672019db62b9f526d120afb08'; ;; 'riscv64') url='https://github.com/docker/buildx/releases/download/v0.27.0/buildx-v0.27.0.linux-riscv64'; sha256='e4f3b40472e3784bf5254eb399aa640205f349ee7c4839db989313d91258b7c6'; ;; 's390x') url='https://github.com/docker/buildx/releases/download/v0.27.0/buildx-v0.27.0.linux-s390x'; sha256='75c24bc03e809ead2e80840280359e3327965c6c1535d0fdc8d48cc86355eecb'; ;; *) echo >&2 "warning: unsupported 'docker-buildx' architecture ($apkArch); skipping"; exit 0 ;; esac; wget -O 'docker-buildx' "$url"; echo "$sha256 *"'docker-buildx' | sha256sum -c -; plugin='/usr/local/libexec/docker/cli-plugins/docker-buildx'; mkdir -p "$(dirname "$plugin")"; mv -vT 'docker-buildx' "$plugin"; chmod +x "$plugin"; docker buildx version # buildkit |
| ENV DOCKER_COMPOSE_VERSION=2.39.2 |
| RUN /bin/sh -c set -eux; apkArch="$(apk --print-arch)"; case "$apkArch" in 'x86_64') url='https://github.com/docker/compose/releases/download/v2.39.2/docker-compose-linux-x86_64'; sha256='a55a8cd4ef103aac282812554e531aac8df7e914a287ee81e14d695556a22902'; ;; 'armhf') url='https://github.com/docker/compose/releases/download/v2.39.2/docker-compose-linux-armv6'; sha256='a9fefb9f377d11416db7d653fac3c0ed8c61a0ef99c8e17369114b88ac48ab50'; ;; 'armv7') url='https://github.com/docker/compose/releases/download/v2.39.2/docker-compose-linux-armv7'; sha256='9d1376146e42bf964f9efa8444935bc20accdc1d72a6ea44881b8d86c9ccfda9'; ;; 'aarch64') url='https://github.com/docker/compose/releases/download/v2.39.2/docker-compose-linux-aarch64'; sha256='54488fffb60782f3c8787a48b95ed15f49f5a3a85f4105304bd46db5edd9db61'; ;; 'ppc64le') url='https://github.com/docker/compose/releases/download/v2.39.2/docker-compose-linux-ppc64le'; sha256='83a02be63cb047207a6efbd39af13d05b8d38065617764dddc3f6e5d36161d03'; ;; 'riscv64') url='https://github.com/docker/compose/releases/download/v2.39.2/docker-compose-linux-riscv64'; sha256='911f9a00366a619e15bb56fe37f6a09eddc30dc1d9f704309185fd2eec0fb3f9'; ;; 's390x') url='https://github.com/docker/compose/releases/download/v2.39.2/docker-compose-linux-s390x'; sha256='af607a5add4d6d0600bece0c6b50ce7fece516e449b17ded33be3445902edce9'; ;; *) echo >&2 "warning: unsupported 'docker-compose' architecture ($apkArch); skipping"; exit 0 ;; esac; wget -O 'docker-compose' "$url"; echo "$sha256 *"'docker-compose' | sha256sum -c -; plugin='/usr/local/libexec/docker/cli-plugins/docker-compose'; mkdir -p "$(dirname "$plugin")"; mv -vT 'docker-compose' "$plugin"; chmod +x "$plugin"; ln -sv "$plugin" /usr/local/bin/; docker-compose --version; docker compose version # buildkit |
| COPY modprobe.sh /usr/local/bin/modprobe # buildkit |
| COPY docker-entrypoint.sh /usr/local/bin/ # buildkit |
| ENV DOCKER_TLS_CERTDIR=/certs |
| RUN /bin/sh -c mkdir /certs /certs/client && chmod 1777 /certs /certs/client # buildkit |
| ENTRYPOINT ["docker-entrypoint.sh"] |
| CMD ["sh"] |
| RUN /bin/sh -c set -eux; apk add --no-cache btrfs-progs e2fsprogs e2fsprogs-extra git ip6tables iptables openssl pigz shadow-uidmap xfsprogs xz zfs ; # buildkit |
| RUN /bin/sh -c set -eux; apk add --no-cache iptables-legacy; mkdir -p /usr/local/sbin/.iptables-legacy; for f in iptables iptables-save iptables-restore ip6tables ip6tables-save ip6tables-restore ; do b="$(command -v "${f/tables/tables-legacy}")"; "$b" --version; ln -svT "$b" "/usr/local/sbin/.iptables-legacy/$f"; done; export PATH="/usr/local/sbin/.iptables-legacy:$PATH"; iptables --version | grep legacy # buildkit |
| RUN /bin/sh -c set -eux; addgroup -S dockremap; adduser -S -G dockremap dockremap; echo 'dockremap:165536:65536' >> /etc/subuid; echo 'dockremap:165536:65536' >> /etc/subgid # buildkit |
| RUN /bin/sh -c set -eux; apkArch="$(apk --print-arch)"; case "$apkArch" in 'x86_64') url='https://download.docker.com/linux/static/stable/x86_64/docker-28.3.3.tgz'; ;; 'armhf') url='https://download.docker.com/linux/static/stable/armel/docker-28.3.3.tgz'; ;; 'armv7') url='https://download.docker.com/linux/static/stable/armhf/docker-28.3.3.tgz'; ;; 'aarch64') url='https://download.docker.com/linux/static/stable/aarch64/docker-28.3.3.tgz'; ;; *) echo >&2 "error: unsupported 'docker.tgz' architecture ($apkArch)"; exit 1 ;; esac; wget -O 'docker.tgz' "$url"; tar --extract --file docker.tgz --strip-components 1 --directory /usr/local/bin/ --no-same-owner --exclude 'docker/docker' ; rm docker.tgz; dockerd --version; containerd --version; ctr --version; runc --version # buildkit |
| ENV DIND_COMMIT=8d9e3502aba39127e4d12196dae16d306f76993d |
| RUN /bin/sh -c set -eux; wget -O /usr/local/bin/dind "https://raw.githubusercontent.com/docker/docker/${DIND_COMMIT}/hack/dind"; chmod +x /usr/local/bin/dind # buildkit |
| COPY dockerd-entrypoint.sh /usr/local/bin/ # buildkit |
| VOLUME [/var/lib/docker] |
| EXPOSE map[2375/tcp:{} 2376/tcp:{}] |
| ENTRYPOINT ["dockerd-entrypoint.sh"] |
| CMD [] |
| RUN /bin/sh -c apk add nodejs build-base curl # buildkit |
| RUN /bin/sh -c curl --proto '=https' --tlsv1.2 -sSf https://sh.rustup.rs | sh -s -- --default-toolchain nightly --profile minimal -y # buildkit |
| ENV PATH=/root/.cargo/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin |
