1 # our chosen base image
2 FROM debian:11-slim AS builder
4 ENV NO_LUA_JIT="s390x arm64"
6 # TODO: make sure /source looks roughly the same from git or tar
8 # Reusable layer for base update
9 RUN apt-get update && apt-get -y dist-upgrade && apt-get clean
11 # devscripts gives us mk-build-deps (and a lot of other stuff)
12 RUN apt-get update && apt-get -y dist-upgrade && apt-get install -y --no-install-recommends devscripts equivs git && apt-get clean
14 COPY builder-support /source/builder-support
16 # TODO: control file is not in tarballs at all right now
17 RUN mk-build-deps -i -t 'apt-get -y -o Debug::pkgProblemResolver=yes --no-install-recommends' /source/builder-support/debian/dnsdist/debian-buster/control && \
20 COPY pdns /source/pdns
21 COPY build-aux /source/build-aux
24 COPY builder/helpers/set-configure-ac-version.sh /usr/local/bin
25 COPY .git /source/.git
27 # build and install (TODO: before we hit this line, rearrange /source structure if we are coming from a tarball)
28 WORKDIR /source/pdns/dnsdistdist
31 ENV MAKEFLAGS ${MAKEFLAGS:--j2}
33 ARG DOCKER_FAKE_RELEASE=NO
34 ENV DOCKER_FAKE_RELEASE ${DOCKER_FAKE_RELEASE}
36 RUN touch dnsdist.1 # avoid having to install pandoc and venv
38 RUN if [ "${DOCKER_FAKE_RELEASE}" = "YES" ]; then \
39 BUILDER_VERSION="$(IS_RELEASE=YES BUILDER_MODULES=dnsdist ./builder-support/gen-version | sed 's/\([0-9]\+\.[0-9]\+\.[0-9]\+\(\(alpha|beta|rc\)\d\+\)\)?.*/\1/')" set-configure-ac-version.sh;\
41 BUILDER_MODULES=dnsdist autoreconf -vfi
44 LUAVER=$([ -z "${NO_LUA_JIT##*$(dpkg --print-architecture)*}" ] && echo 'lua5.3' || echo 'luajit') && \
46 --with-lua=${LUAVER} \
48 --sysconfdir=/etc/dnsdist \
49 --enable-option-checking=fatal \
51 --enable-dns-over-tls \
52 --enable-dns-over-https \
55 make $MAKEFLAGS install DESTDIR=/build && make clean && \
56 strip /build/usr/local/bin/*
57 RUN cd /tmp && mkdir /build/tmp/ && mkdir debian && \
58 echo 'Source: docker-deps-for-pdns' > debian/control && \
59 dpkg-shlibdeps /build/usr/local/bin/dnsdist && \
60 sed 's/^shlibs:Depends=/Depends: /' debian/substvars >> debian/control && \
61 equivs-build debian/control && \
62 dpkg-deb -I equivs-dummy_1.0_all.deb && cp equivs-dummy_1.0_all.deb /build/tmp/
68 # Reusable layer for base update - Should be cached from builder
69 RUN apt-get update && apt-get -y dist-upgrade && apt-get clean
71 # - python3 and jinja2 (for startup script)
72 # - python3-atomicwrites (for backend management)
73 # - tini (for signal management)
74 # - ca-certificates (for verifying downstream DoH/DoT certificates)
75 RUN apt-get install -y python3 python3-jinja2 python3-atomicwrites tini libcap2-bin ca-certificates && apt-get clean
78 COPY --from=builder /build /
79 RUN chmod 1777 /tmp # FIXME: better not use /build/tmp for equivs at all
81 # Ensure dependencies are present
82 RUN apt-get install -y /tmp/equivs-dummy_1.0_all.deb && apt-get clean
85 RUN mkdir -p /etc/dnsdist/conf.d /etc/dnsdist/templates.d
86 COPY dockerdata/dnsdist.conf /etc/dnsdist/
89 COPY dockerdata/startup.py /usr/local/bin/dnsdist-startup
91 # Work with pdns user - not root
92 RUN adduser --system --disabled-password --disabled-login --no-create-home --group pdns --uid 953
93 RUN chown pdns:pdns /etc/dnsdist/conf.d /etc/dnsdist/templates.d
99 # Default console port
101 # Default webserver port
106 COPY dockerdata/dnsdist-resolver.lua /etc/dnsdist/
107 COPY dockerdata/dnsdist-resolver.py /usr/local/bin/dnsdist-resolver
109 ENTRYPOINT ["/usr/bin/tini", "--", "/usr/local/bin/dnsdist-startup"]