mirror of
https://github.com/simplex-chat/simplex-chat.git
synced 2026-10-01 17:18:44 +00:00
122 lines
4.5 KiB
Docker
122 lines
4.5 KiB
Docker
# syntax=docker/dockerfile:1
|
|
|
|
# The runtime glibc must be the same or newer.
|
|
ARG UBUNTU_LIBS=22.04
|
|
ARG GHC=9.6.3
|
|
ARG CABAL=3.10.2.0
|
|
ARG NODE=24
|
|
|
|
# --------------------------------------------------------------------------- #
|
|
# libsimplex
|
|
# --------------------------------------------------------------------------- #
|
|
FROM ubuntu:${UBUNTU_LIBS} AS libsimplex
|
|
|
|
ARG GHC
|
|
ARG CABAL
|
|
ENV DEBIAN_FRONTEND=noninteractive
|
|
|
|
RUN apt-get update && apt-get install -y --no-install-recommends \
|
|
build-essential ca-certificates curl git libgmp3-dev libnuma-dev \
|
|
libsqlite3-dev libssl-dev llvm patchelf pkg-config zlib1g-dev && \
|
|
rm -rf /var/lib/apt/lists/*
|
|
|
|
ENV BOOTSTRAP_HASKELL_NONINTERACTIVE=1 \
|
|
BOOTSTRAP_HASKELL_GHC_VERSION=${GHC} \
|
|
BOOTSTRAP_HASKELL_CABAL_VERSION=${CABAL} \
|
|
BOOTSTRAP_HASKELL_INSTALL_NO_STACK=true \
|
|
BOOTSTRAP_HASKELL_INSTALL_NO_STACK_HOOK=true
|
|
RUN curl --proto '=https' --tlsv1.2 -sSf https://get-ghcup.haskell.org | sh
|
|
ENV PATH="/root/.ghcup/bin:/root/.cabal/bin:$PATH"
|
|
ENV CABAL_DIR=/root/.cabal
|
|
|
|
WORKDIR /src
|
|
COPY cabal.project simplex-chat.cabal README.md PRIVACY.md ./
|
|
COPY scripts/cabal.project.local.linux ./cabal.project.local
|
|
# The build script checks the export lists in these.
|
|
COPY libsimplex.dll.def flake.nix ./
|
|
COPY scripts/desktop ./scripts/desktop
|
|
COPY src ./src
|
|
|
|
# VLC is only for the desktop app.
|
|
RUN sed -i '/prepare-vlc-linux.sh/d' scripts/desktop/build-lib-linux.sh
|
|
|
|
# Other versions' build trees are removed: the script's simplex-chat-* glob
|
|
# fails with "cd: too many arguments" when the cache holds more than one.
|
|
RUN --mount=type=cache,target=/root/.cabal \
|
|
--mount=type=cache,target=/src/dist-newstyle \
|
|
set -eu; \
|
|
ver=$(sed -n 's/^version: *//p' simplex-chat.cabal | tr -d '[:space:]'); \
|
|
build_dir=dist-newstyle/build/$(uname -m)-linux/ghc-${GHC}/simplex-chat-$ver/build; \
|
|
find dist-newstyle/build -maxdepth 3 -type d -name 'simplex-chat-*' \
|
|
! -path "*/simplex-chat-$ver" -exec rm -rf {} + 2>/dev/null || true; \
|
|
cabal update; \
|
|
scripts/desktop/build-lib-linux.sh sqlite; \
|
|
mkdir -p /libs; \
|
|
cp "$build_dir"/libsimplex.so "$build_dir"/deps/* /libs/
|
|
|
|
# --------------------------------------------------------------------------- #
|
|
# build
|
|
# --------------------------------------------------------------------------- #
|
|
FROM node:${NODE}-bookworm-slim AS build
|
|
|
|
ENV DEBIAN_FRONTEND=noninteractive
|
|
|
|
RUN apt-get update && apt-get install -y --no-install-recommends \
|
|
build-essential python3 && \
|
|
rm -rf /var/lib/apt/lists/*
|
|
|
|
COPY --from=libsimplex /libs /opt/simplex/libs
|
|
# Without it, npm re-running the library's preinstall downloads the released libs.
|
|
ENV SIMPLEX_LIBS_DIR=/opt/simplex/libs
|
|
|
|
WORKDIR /src
|
|
COPY packages/simplex-chat-client/types/typescript packages/simplex-chat-client/types/typescript
|
|
RUN cd packages/simplex-chat-client/types/typescript && \
|
|
npm install --no-audit --no-fund && \
|
|
npx tsc
|
|
|
|
COPY packages/simplex-chat-nodejs packages/simplex-chat-nodejs
|
|
RUN cd packages/simplex-chat-nodejs && \
|
|
npm install --no-audit --no-fund && \
|
|
npm install --no-save --no-audit --no-fund ../simplex-chat-client/types/typescript && \
|
|
npx tsc && \
|
|
cp src/simplex.* dist/
|
|
|
|
WORKDIR /src/apps/simplex-calculator-bot
|
|
# No package-lock.json, so no npm ci.
|
|
COPY apps/simplex-calculator-bot/package.json ./
|
|
RUN npm install --no-audit --no-fund
|
|
RUN npm install --no-save --no-audit --no-fund \
|
|
/src/packages/simplex-chat-nodejs \
|
|
/src/packages/simplex-chat-client/types/typescript
|
|
|
|
# calculatorBot.test.ts needs network and tests/fixtures/tls.
|
|
COPY apps/simplex-calculator-bot ./
|
|
RUN npm run build && npx vitest run calculator.test.ts
|
|
|
|
# --------------------------------------------------------------------------- #
|
|
# runtime
|
|
# --------------------------------------------------------------------------- #
|
|
FROM node:${NODE}-bookworm-slim AS runtime
|
|
|
|
ENV DEBIAN_FRONTEND=noninteractive
|
|
|
|
RUN apt-get update && apt-get install -y --no-install-recommends \
|
|
ca-certificates dumb-init libffi8 libgmp10 libssl3 zlib1g && \
|
|
rm -rf /var/lib/apt/lists/*
|
|
|
|
COPY --from=build --chown=node:node /src /src
|
|
|
|
# A named volume takes this ownership; a bind mount must be owned by uid 1000.
|
|
RUN mkdir -p /src/apps/simplex-calculator-bot/data && \
|
|
chown node:node /src/apps/simplex-calculator-bot/data && \
|
|
chmod 0700 /src/apps/simplex-calculator-bot/data
|
|
|
|
USER node
|
|
WORKDIR /src/apps/simplex-calculator-bot
|
|
|
|
ENV NODE_ENV=production
|
|
|
|
# node as PID 1 ignores SIGTERM.
|
|
ENTRYPOINT ["dumb-init", "--", "node", "dist/index.js"]
|