# Copyright (C) 2018 VyOS maintainers and contributors
#
# This program is free software; you can redistribute it and/or modify
# in order to easy exprort images built to "external" world
# it under the terms of the GNU General Public License version 2 or later as
# published by the Free Software Foundation.
#
# This program is distributed in the hope that it will be useful,
# but WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
# GNU General Public License for more details.
#
# You should have received a copy of the GNU General Public License
# along with this program. If not, see .
# Must be run with --privileged flag, recommended to run the container with a
# volume mapped in order to easy export images
FROM multiarch/debian-debootstrap:armhf-jessie-slim
LABEL authors="VyOS Maintainers "
ENV DEBIAN_FRONTEND noninteractive
COPY no--check-valid-until /etc/apt/apt.conf.d/
RUN echo "deb http://deb.debian.org/debian jessie main" \
> /etc/apt/sources.list \
&& echo "deb http://security.debian.org/debian-security jessie/updates main" \
>> /etc/apt/sources.list
# Standard shell should be bash not dash
RUN echo "dash dash/sh boolean false" | debconf-set-selections && \
dpkg-reconfigure dash
RUN apt-get update && apt-get install -y \
dialog \
apt-utils \
locales
RUN echo "en_US.UTF-8 UTF-8" > /etc/locale.gen && locale-gen
ENV LANG en_US.utf8
RUN apt-get update && apt-get install -y \
vim \
git \
curl \
make \
sudo \
mc \
pbuilder \
devscripts \
squashfs-tools \
autoconf \
automake \
dpkg-dev \
genisoimage \
lsb-release \
fakechroot \
libtool \
libapt-pkg-dev \
parted \
kpartx \
quilt \
python3-lxml \
python3-setuptools \
python3-nose \
python3-coverage \
python3-sphinx \
python3-pystache \
pkg-config \
debhelper \
jq
#
# Setup Debian Jessie Backports repository
#
COPY no--check-valid-until /etc/apt/apt.conf.d/
RUN echo "deb http://archive.debian.org/debian/ jessie-backports main" \
> /etc/apt/sources.list.d/jessie-backports.list
RUN apt-get update && apt-get install -y -t jessie-backports \
python3-git \
python3-pip
RUN echo "deb http://deb.debian.org/debian buster main" \
> /etc/apt/sources.list.d/buster.list
RUN apt-get update && apt-get install -y \
golang \
gosu
RUN rm -f /etc/apt/sources.list.d/buster.list
# Package needed for mdns-repeater
RUN apt-get update && apt-get install -y -t jessie-backports \
dh-systemd
#
# Remove Debian Jessie Backports repository
#
RUN rm -f /etc/apt/sources.list.d/jessie-backports.list \
/etc/apt/apt.conf.d/no--check-valid-until
#
# Building libvyosconf requires a full configured OPAM/OCaml setup
#
RUN apt-get update && apt-get install -y \
libffi-dev \
libpcre3-dev
RUN curl https://raw.githubusercontent.com/ocaml/opam/2.0.2/shell/install.sh --output /tmp/opam_install.sh && \
sed -i 's/read BINDIR/BINDIR=""/' /tmp/opam_install.sh && sh /tmp/opam_install.sh && \
opam init --root=/opt/opam --comp=4.07.0 --disable-sandboxing
RUN eval $(opam env --root=/opt/opam --set-root) && \
opam install -y \
oasis
RUN eval $(opam env --root=/opt/opam --set-root) && opam install -y \
fileutils \
lwt \
lwt_ppx \
lwt_log \
ocplib-endian \
ounit \
pcre \
ppx_deriving_yojson \
sha \
toml \
xml-light \
batteries \
ocaml-protoc \
ctypes-foreign \
menhir
RUN eval $(opam env --root=/opt/opam --set-root) && opam install -y \
ctypes
# Build VyConf which is required to build libvyosconfig
RUN eval $(opam env --root=/opt/opam --set-root) && \
opam pin add vyconf https://github.com/vyos/vyconf.git#51d79a3f -y
# Build libvyosconfig
RUN eval $(opam env --root=/opt/opam --set-root) && \
git clone https://github.com/vyos/libvyosconfig.git && \
cd libvyosconfig && git checkout 9a80a5d3 && \
dpkg-buildpackage -uc -us -tc -b && \
dpkg -i ../libvyosconfig0_*_armhf.deb
# Packages needed for vyatta-cfg
RUN apt-get update && apt-get install -y \
libglib2.0-dev \
libperl-dev \
libboost-filesystem-dev
# Packages needed for vyatta-iproute
RUN apt-get update && apt-get install -y \
libatm1-dev \
libdb-dev \
iptables-dev
# Packages needed for vyatta-webgui
RUN apt-get update && apt-get install -y \
libexpat1-dev \
subversion
# Packages needed for pmacct
RUN apt-get update && apt-get install -y \
libpcap-dev \
libpq-dev \
libmysqlclient-dev \
libgeoip-dev \
librabbitmq-dev \
libjansson-dev \
librdkafka-dev \
libnetfilter-log-dev
# Pavkages needed for wireguard
RUN apt-get update && apt-get install -y \
libmnl-dev
# Packages needed for kernel
RUN apt-get update && apt-get install -y \
kernel-package \
libncurses5-dev \
flex \
bison \
libelf-dev
# Packages needed for vyos-accel-ppp
RUN apt-get update && apt-get install -y \
cdbs \
cmake \
liblua5.1-dev
# Prerequisites for building rtrlib
# see http://docs.frrouting.org/projects/dev-guide/en/latest/building-frr-for-debian8.html
RUN apt-get update && apt-get install -y \
doxygen \
libssh-dev \
libssl-dev
# Build rtrlib release 0.6.3
RUN export RTRLIB_VERSION="0.6.3" && \
wget -P /tmp https://github.com/rtrlib/rtrlib/archive/v${RTRLIB_VERSION}.tar.gz && \
tar xf /tmp/v${RTRLIB_VERSION}.tar.gz -C /tmp && \
cd /tmp/rtrlib-${RTRLIB_VERSION} && dpkg-buildpackage -uc -us -tc -b && \
dpkg -i ../librtr*_armhf.deb ../librtr*_all.deb
#
# Setup VyOS Debian repository
#
COPY vyos-dev.key /tmp/vyos-dev.key
RUN apt-key add /tmp/vyos-dev.key
RUN echo "deb http://dev.packages.vyos.net/repositories/current/debian/ current main" \
> /etc/apt/sources.list.d/vyos.list
# Packages needed to build frr itself
# libyang-dev packages are hsoted on dev.packages.vyos.net see
# https://github.com/FRRouting/frr/blob/master/doc/developer/building-libyang.rst
# for more info
RUN apt-get update && apt-get install -y \
libyang-dev \
libyang0.16 \
chrpath \
install-info \
libjson-c-dev \
libpython3-dev \
python3-dev \
python3-pytest \
texinfo
#
# Cleanup VyOS Debian Repository
#
RUN rm -f /etc/apt/sources.list.d/vyos.list
# Packages needed for conntrack-tools
RUN apt-get update && apt-get install -y \
libnetfilter-conntrack-dev \
libnetfilter-cthelper0-dev \
libnetfilter-cttimeout-dev \
libnetfilter-queue-dev
# Packages needed for hvinfo
RUN apt-get update && apt-get install -y \
gnat \
gprbuild
# Packages needed for vyos-1x
RUN apt-get update && apt-get install -y \
whois
# Packages needed for ipaddrcheck
RUN apt-get update && apt-get install -y \
check
# As there is no Debian Jessie/Stretch package for libcidr available but this
# is required for ipaddrcheck we have to build it from source
RUN git clone https://github.com/wikimedia/analytics-libcidr.git && \
cd analytics-libcidr && \
git checkout 026c611d90a1 && \
dpkg-buildpackage -uc -us -tc -b && \
dpkg -i ../libcidr*.deb
# Packages needed for lldpd
RUN apt-get update && apt-get install -y \
libbsd-dev \
libevent-dev
# Packages needed for vyatta-quagga
RUN apt-get update && apt-get install -y \
libpam-dev \
libcap-dev \
libsnmp-dev \
gawk
# Packages needed for vyos-strongswan
RUN apt-get update && apt-get install -y \
libkrb5-dev \
libssl-dev \
libxml2-dev \
systemd \
libcurl4-openssl-dev \
libgcrypt20-dev \
libgmp3-dev \
libldap2-dev \
libsqlite3-dev \
dh-apparmor \
gperf \
libsystemd-dev \
python3-stdeb \
python-setuptools
# Packages needed for vyos-opennhrp
RUN apt-get update && apt-get install -y \
libc-ares-dev
# Packages needed for ddclient
RUN apt-get update && apt-get install -y \
xmlto
# Packages needed for keepalived
RUN apt-get update && apt-get install -y \
libnl-3-200 \
libnl-3-dev \
libnl-nf-3-200 \
libnl-nf-3-dev \
libipset-dev \
libnl-genl-3-200 \
libnl-genl-3-dev \
libpopt-dev
# Packages needed for net-snmp
RUN apt-get update && apt-get install -y \
python-all \
python2.7-dev \
libmysqld-dev
# Update live-build
RUN echo 'deb http://ftp.debian.org/debian stretch main' | tee -a /etc/apt/sources.list.d/stretch.list && \
apt-get update && apt-get install -y -t stretch \
live-build && \
rm -f /etc/apt/sources.list.d/stretch.list && \
apt-get update && \
rm -rf /var/lib/apt/lists/*
# Install packer
RUN export LATEST="$(curl -s https://checkpoint-api.hashicorp.com/v1/check/packer | \
jq -r -M '.current_version')"; \
echo "url https://releases.hashicorp.com/packer/"$LATEST"/packer_"$LATEST"_linux_arm.zip" |\
curl -K- | gzip -d > /usr/bin/packer && \
chmod +x /usr/bin/packer
# Allow password-less 'sudo' for all users in group 'sudo'
RUN sed "s/^%sudo.*/%sudo\tALL=(ALL) NOPASSWD:ALL/g" -i /etc/sudoers && \
chmod a+s /usr/sbin/useradd /usr/sbin/groupadd /usr/sbin/gosu /usr/sbin/usermod
# Ensure sure all users have access to our OCAM installation
RUN echo "$(opam env --root=/opt/opam --set-root)" >> /etc/skel/.bashrc
# Cleanup
RUN rm -rf /tmp/*
COPY entrypoint.sh /usr/local/bin/entrypoint.sh
ENTRYPOINT ["/usr/local/bin/entrypoint.sh"]