busybox/Dockerfile

89 lines
2.8 KiB
Docker
Raw Normal View History

2017-05-11 21:15:10 +00:00
FROM debian:jessie-slim as builder
2017-05-10 20:55:40 +00:00
2017-05-11 21:15:10 +00:00
ARG ARCH=x86_64
ARG DEBIAN_FRONTEND=noninteractive
2017-05-10 20:55:40 +00:00
2017-08-02 21:02:14 +00:00
ARG GLIBC_VER=2.26
ARG BUSYB_VER=1.27.1
2017-05-12 00:30:49 +00:00
ARG SU_EXEC_VER=v0.2
2017-08-02 21:02:14 +00:00
ARG TINI_VER=v0.15.0
2017-05-12 00:30:49 +00:00
ARG PREFIX=/output
WORKDIR $PREFIX
2017-05-11 09:36:22 +00:00
#Set up our dependencies, configure the output filesystem a bit
2017-05-11 21:15:10 +00:00
RUN apt-get update -qy && \
apt-get install -qy curl build-essential gawk linux-libc-dev && \
mkdir -p bin dev etc home lib proc root sbin tmp usr/bin usr/sbin usr/lib var && \
2017-05-22 16:27:07 +00:00
# This is probably only relevant on 64bit systems?
ln -sv lib lib64
2017-05-12 00:30:49 +00:00
# Pull busybox and some other utilities
RUN curl -L https://busybox.net/downloads/binaries/${BUSYB_VER}-defconfig-multiarch/busybox-${ARCH} > bin/busybox && \
curl -L https://github.com/javabean/su-exec/releases/download/${SU_EXEC_VER}/su-exec.amd64 > sbin/su-exec && \
2017-05-12 13:07:18 +00:00
curl -L https://github.com/krallin/tini/releases/download/${TINI_VER}/tini-amd64 > sbin/tini && \
chmod +x bin/busybox sbin/su-exec sbin/tini && \
2017-05-22 16:27:07 +00:00
# "Install" busybox, creating symlinks to all binaries it provides
bin/busybox --list-full | xargs -i ln -s /bin/busybox "${PREFIX}/{}"
2017-05-11 23:34:57 +00:00
2017-05-10 20:55:40 +00:00
WORKDIR /tmp
ARG CFLAGS="-Os -pipe -fstack-protector-strong"
ARG LDFLAGS="-Wl,-O1,--sort-common -Wl,-s"
# Download and build glibc from source
RUN curl -L https://ftp.gnu.org/gnu/glibc/glibc-${GLIBC_VER}.tar.xz | tar xJ && \
mkdir -p glibc-build && cd glibc-build && \
\
echo "slibdir=/lib" >> configparms && \
echo "rtlddir=/lib" >> configparms && \
echo "sbindir=/bin" >> configparms && \
echo "rootsbindir=/bin" >> configparms && \
\
2017-05-22 16:27:07 +00:00
# Fix debian lib path weirdness
rm -rf /usr/include/${ARCH}-linux-gnu/c++ && \
ln -s /usr/include/${ARCH}-linux-gnu/* /usr/include && \
2017-05-22 16:27:07 +00:00
\
../glibc-${GLIBC_VER}/configure \
--prefix="$(pwd)/root" \
--libdir="$(pwd)/root/lib" \
--libexecdir=/lib \
--with-headers=/usr/include \
--enable-add-ons \
--enable-obsolete-rpc \
--enable-kernel=3.10.0 \
--enable-bind-now \
--disable-profile \
--enable-stackguard-randomization \
--enable-stack-protector=strong \
--enable-lock-elision \
--enable-multi-arch \
--disable-werror && \
make && make install_root=$(pwd)/out install
# Copy glibc libs & generate ld cache
RUN cp -d glibc-build/out/lib/*.so "${PREFIX}/lib" && \
echo '/usr/lib' > "${PREFIX}/etc/ld.so.conf" && \
ldconfig -r "${PREFIX}"
2017-05-22 17:09:32 +00:00
WORKDIR $PREFIX
# Add default skeleton configuration files
RUN for f in passwd shadow group profile; do \
curl -sSL -O . "https://git.busybox.net/buildroot/plain/system/skeleton/etc/$f"; \
done && \
\
# Copy /etc/localtime to output
ln -vL /etc/localtime etc/
2017-05-22 17:09:32 +00:00
2017-05-11 21:15:10 +00:00
# =============
FROM scratch
2017-05-10 20:55:40 +00:00
WORKDIR /
2017-05-11 23:34:57 +00:00
COPY --from=builder /output/ /
RUN mkdir -p /tmp && \
chmod 1777 /tmp
2017-05-11 21:15:10 +00:00
CMD ["sh"]