| ADD alpine-minirootfs-3.21.0-x86_64.tar.gz / # buildkit |
| CMD ["/bin/sh"] |
| RUN /bin/sh -c apk add --no-cache ca-certificates openssh-client git # buildkit |
| RUN /bin/sh -c [ -e /etc/nsswitch.conf ] && grep '^hosts: files dns' /etc/nsswitch.conf # buildkit |
| RUN /bin/sh -c set -eux; addgroup -g 2375 -S docker # buildkit |
| ENV DOCKER_VERSION=27.4.0 |
| RUN /bin/sh -c set -eux; apkArch="$(apk --print-arch)"; case "$apkArch" in 'x86_64') url='https://download.docker.com/linux/static/stable/x86_64/docker-27.4.0.tgz'; ;; 'armhf') url='https://download.docker.com/linux/static/stable/armel/docker-27.4.0.tgz'; ;; 'armv7') url='https://download.docker.com/linux/static/stable/armhf/docker-27.4.0.tgz'; ;; 'aarch64') url='https://download.docker.com/linux/static/stable/aarch64/docker-27.4.0.tgz'; ;; *) echo >&2 "error: unsupported 'docker.tgz' architecture ($apkArch)"; exit 1 ;; esac; wget -O 'docker.tgz' "$url"; tar --extract --file docker.tgz --strip-components 1 --directory /usr/local/bin/ --no-same-owner 'docker/docker' ; rm docker.tgz; docker --version # buildkit |
| ENV DOCKER_BUILDX_VERSION=0.19.2 |
| RUN /bin/sh -c set -eux; apkArch="$(apk --print-arch)"; case "$apkArch" in 'x86_64') url='https://github.com/docker/buildx/releases/download/v0.19.2/buildx-v0.19.2.linux-amd64'; sha256='a5ff61c0b6d2c8ee20964a9d6dac7a7a6383c4a4a0ee8d354e983917578306ea'; ;; 'armhf') url='https://github.com/docker/buildx/releases/download/v0.19.2/buildx-v0.19.2.linux-arm-v6'; sha256='1b94a6747c55098c1200a4544521d854720b621685d0078d43128e0911d17cf0'; ;; 'armv7') url='https://github.com/docker/buildx/releases/download/v0.19.2/buildx-v0.19.2.linux-arm-v7'; sha256='a446237ace8919415fcb8599c47f2bc786436b910450d0546d15936788aeb3a7'; ;; 'aarch64') url='https://github.com/docker/buildx/releases/download/v0.19.2/buildx-v0.19.2.linux-arm64'; sha256='bd54f0e28c29789da1679bad2dd94c1923786ccd2cd80dd3a0a1d560a6baf10c'; ;; 'ppc64le') url='https://github.com/docker/buildx/releases/download/v0.19.2/buildx-v0.19.2.linux-ppc64le'; sha256='8312065303b9ff436d64e15b296951ce50b2e064b91d93befea19f09dc22115c'; ;; 'riscv64') url='https://github.com/docker/buildx/releases/download/v0.19.2/buildx-v0.19.2.linux-riscv64'; sha256='9b226b369830eca078a6af7105aa7ee167e39f3a21e30d25f95eb433cdb3de92'; ;; 's390x') url='https://github.com/docker/buildx/releases/download/v0.19.2/buildx-v0.19.2.linux-s390x'; sha256='47572102e1888571da13804fcaed8294e1af33c576103b4dd9263288c0b6935d'; ;; *) echo >&2 "warning: unsupported 'docker-buildx' architecture ($apkArch); skipping"; exit 0 ;; esac; wget -O 'docker-buildx' "$url"; echo "$sha256 *"'docker-buildx' | sha256sum -c -; plugin='/usr/local/libexec/docker/cli-plugins/docker-buildx'; mkdir -p "$(dirname "$plugin")"; mv -vT 'docker-buildx' "$plugin"; chmod +x "$plugin"; docker buildx version # buildkit |
| ENV DOCKER_COMPOSE_VERSION=2.32.0 |
| RUN /bin/sh -c set -eux; apkArch="$(apk --print-arch)"; case "$apkArch" in 'x86_64') url='https://github.com/docker/compose/releases/download/v2.32.0/docker-compose-linux-x86_64'; sha256='c204bc7058fb881b2a39175df5c3596f6b08ef9e358d7236df7cc781f74695bd'; ;; 'armhf') url='https://github.com/docker/compose/releases/download/v2.32.0/docker-compose-linux-armv6'; sha256='d72e2d4b8ab71fa4b0132b451f43267aaca980c4ee9cb670ae6f83fa101747e7'; ;; 'armv7') url='https://github.com/docker/compose/releases/download/v2.32.0/docker-compose-linux-armv7'; sha256='9e6b63bd2b863c4564fa61c18f2515f0130a8800f12a35c2836fdd6a044ff222'; ;; 'aarch64') url='https://github.com/docker/compose/releases/download/v2.32.0/docker-compose-linux-aarch64'; sha256='0bb65b36b32750a876cfdd5720e811ba1b70cb9eca72536fdf4ac7949fbc20e1'; ;; 'ppc64le') url='https://github.com/docker/compose/releases/download/v2.32.0/docker-compose-linux-ppc64le'; sha256='5e05371a1b0f3bb4e9785aa9957c98bff625aab675a59e5ae6c75e7e7ec41027'; ;; 'riscv64') url='https://github.com/docker/compose/releases/download/v2.32.0/docker-compose-linux-riscv64'; sha256='726362c280a764de1249927857e51bb9f1321a0c4d5192dc0a5e2134ac29a999'; ;; 's390x') url='https://github.com/docker/compose/releases/download/v2.32.0/docker-compose-linux-s390x'; sha256='d9c117c743131c3addc933d71d6ee5cbf70951ce34c43b765a7d57c80ef58429'; ;; *) echo >&2 "warning: unsupported 'docker-compose' architecture ($apkArch); skipping"; exit 0 ;; esac; wget -O 'docker-compose' "$url"; echo "$sha256 *"'docker-compose' | sha256sum -c -; plugin='/usr/local/libexec/docker/cli-plugins/docker-compose'; mkdir -p "$(dirname "$plugin")"; mv -vT 'docker-compose' "$plugin"; chmod +x "$plugin"; ln -sv "$plugin" /usr/local/bin/; docker-compose --version; docker compose version # buildkit |
| COPY modprobe.sh /usr/local/bin/modprobe # buildkit |
| COPY docker-entrypoint.sh /usr/local/bin/ # buildkit |
| ENV DOCKER_TLS_CERTDIR=/certs |
| RUN /bin/sh -c mkdir /certs /certs/client && chmod 1777 /certs /certs/client # buildkit |
| ENTRYPOINT ["docker-entrypoint.sh"] |
| CMD ["sh"] |
| RUN /bin/sh -c set -eux; apk add --no-cache btrfs-progs e2fsprogs e2fsprogs-extra git ip6tables iptables openssl pigz shadow-uidmap xfsprogs xz zfs ; # buildkit |
| RUN /bin/sh -c set -eux; apk add --no-cache iptables-legacy; mkdir -p /usr/local/sbin/.iptables-legacy; for f in iptables iptables-save iptables-restore ip6tables ip6tables-save ip6tables-restore ; do b="$(command -v "${f/tables/tables-legacy}")"; "$b" --version; ln -svT "$b" "/usr/local/sbin/.iptables-legacy/$f"; done; export PATH="/usr/local/sbin/.iptables-legacy:$PATH"; iptables --version | grep legacy # buildkit |
| RUN /bin/sh -c set -eux; addgroup -S dockremap; adduser -S -G dockremap dockremap; echo 'dockremap:165536:65536' >> /etc/subuid; echo 'dockremap:165536:65536' >> /etc/subgid # buildkit |
| RUN /bin/sh -c set -eux; apkArch="$(apk --print-arch)"; case "$apkArch" in 'x86_64') url='https://download.docker.com/linux/static/stable/x86_64/docker-27.4.0.tgz'; ;; 'armhf') url='https://download.docker.com/linux/static/stable/armel/docker-27.4.0.tgz'; ;; 'armv7') url='https://download.docker.com/linux/static/stable/armhf/docker-27.4.0.tgz'; ;; 'aarch64') url='https://download.docker.com/linux/static/stable/aarch64/docker-27.4.0.tgz'; ;; *) echo >&2 "error: unsupported 'docker.tgz' architecture ($apkArch)"; exit 1 ;; esac; wget -O 'docker.tgz' "$url"; tar --extract --file docker.tgz --strip-components 1 --directory /usr/local/bin/ --no-same-owner --exclude 'docker/docker' ; rm docker.tgz; dockerd --version; containerd --version; ctr --version; runc --version # buildkit |
| ENV DIND_COMMIT=65cfcc28ab37cb75e1560e4b4738719c07c6618e |
| RUN /bin/sh -c set -eux; wget -O /usr/local/bin/dind "https://raw.githubusercontent.com/docker/docker/${DIND_COMMIT}/hack/dind"; chmod +x /usr/local/bin/dind # buildkit |
| COPY dockerd-entrypoint.sh /usr/local/bin/ # buildkit |
| VOLUME [/var/lib/docker] |
| EXPOSE map[2375/tcp:{} 2376/tcp:{}] |
| ENTRYPOINT ["dockerd-entrypoint.sh"] |
| CMD [] |
| RUN /bin/sh -c apk add --no-cache bash nodejs npm # buildkit |
| RUN /bin/sh -c mkdir /etc/docker # buildkit |
| RUN /bin/sh -c echo '"registry-mirrors": ["https://docker-cache.neshweb.net"]' >> /etc/docker/daemon.json # buildkit |
| ENTRYPOINT ["dockerd-entrypoint.sh"] |
| CMD [] |
