diff options
Diffstat (limited to 'Dockerfile')
| -rw-r--r-- | Dockerfile | 78 |
1 files changed, 78 insertions, 0 deletions
diff --git a/Dockerfile b/Dockerfile new file mode 100644 index 0000000..c82938f --- /dev/null +++ b/Dockerfile @@ -0,0 +1,78 @@ +# Intermediate container for Knot DNS build (not persistent) +# SPDX-License-Identifier: GPL-3.0-or-later +FROM debian:11 AS knot-dns-build +ARG KNOT_DNS_VERSION=v3.1.1 + +# Build dependencies +ENV KNOT_DNS_BUILD_DEPS git-core build-essential libtool autoconf pkg-config \ + libgnutls28-dev libprotobuf-dev libprotobuf-c-dev libfstrm-dev +ENV KNOT_RESOLVER_BUILD_DEPS build-essential pkg-config bsdmainutils liblmdb-dev \ + libluajit-5.1-dev libuv1-dev libprotobuf-dev libprotobuf-c-dev \ + libfstrm-dev luajit lua-http libssl-dev libnghttp2-dev protobuf-c-compiler \ + meson +ENV BUILDENV_DEPS ${KNOT_DNS_BUILD_DEPS} ${KNOT_RESOLVER_BUILD_DEPS} +RUN apt-get update -qq && \ + apt-get -y -qqq install ${BUILDENV_DEPS} + +# Install Knot DNS from sources +RUN git clone -b $KNOT_DNS_VERSION --depth=1 https://gitlab.nic.cz/knot/knot-dns.git /tmp/knot-dns && \ + cd /tmp/knot-dns && \ + autoreconf -if && \ + ./configure --disable-static --disable-fastparser --disable-documentation \ + --disable-daemon --disable-utilities --with-lmdb=no && \ + make -j4 install && \ + ldconfig + +# Copy libknot, libdnssec, libzscanner to runtime +RUN mkdir -p /tmp/root/usr/local/include /tmp/root/usr/local/lib /tmp/root/usr/local/lib/pkgconfig && \ + cp -rt /tmp/root/usr/local/include /usr/local/include/libknot /usr/local/include/libdnssec /usr/local/include/libzscanner && \ + cp -rt /tmp/root/usr/local/lib /usr/local/lib/libknot* /usr/local/lib/libdnssec* /usr/local/lib/libzscanner* && \ + cp -rt /tmp/root/usr/local/lib/pkgconfig /usr/local/lib/pkgconfig/libknot.pc /usr/local/lib/pkgconfig/libdnssec.pc /usr/local/lib/pkgconfig/libzscanner.pc + + +# Intermediate container with runtime dependencies +FROM debian:11-slim AS runtime + +# Install runtime dependencies +ENV KNOT_DNS_RUNTIME_DEPS libgnutls30 +ENV KNOT_RESOLVER_RUNTIME_DEPS liblmdb0 luajit libluajit-5.1-2 libuv1 lua-http libnghttp2-14 +ENV KNOT_RESOLVER_RUNTIME_DEPS_HTTP lua-http lua-mmdb +ENV KNOT_RESOLVER_RUNTIME_DEPS_EXTRA lua-cqueues +ENV KNOT_RESOLVER_RUNTIME_DEPS_DNSTAP libfstrm0 libprotobuf-c1 +ENV KNOT_RESOLVER_RUNTIME_DEPS_SSL ca-certificates +ENV RUNTIME_DEPS ${KNOT_DNS_RUNTIME_DEPS} ${KNOT_RESOLVER_RUNTIME_DEPS} \ + ${KNOT_RESOLVER_RUNTIME_DEPS_HTTP} ${KNOT_RESOLVER_RUNTIME_DEPS_EXTRA} \ + ${KNOT_RESOLVER_RUNTIME_DEPS_SSL} ${KNOT_RESOLVER_RUNTIME_DEPS_DNSTAP} +RUN apt-get update -qq && \ + apt-get install -y -qqq ${RUNTIME_DEPS} && \ + apt-get clean && \ + rm -rf /var/lib/apt/lists/* + + +# Intermediate container for Knot Resolver build +FROM knot-dns-build AS build + +# Get Knot Resolver code from current directory +COPY . /tmp/knot-resolver + +# Build Knot Resolver +RUN cd /tmp/knot-resolver && \ + meson build_docker --buildtype=plain --prefix=/usr --libdir=lib -Dc_args="-O2 -fstack-protector -g" && \ + DESTDIR=/tmp/root ninja -C build_docker install && \ + cp /tmp/root/usr/share/doc/knot-resolver/examples/config.docker /tmp/root/etc/knot-resolver/kresd.conf + + +# Final container +FROM runtime +LABEL cz.knot-resolver.vendor="CZ.NIC" +LABEL maintainer="knot-resolver-users@lists.nic.cz" + +# Export DNS over UDP & TCP, DNS-over-HTTPS, DNS-over-TLS, web interface +EXPOSE 53/UDP 53/TCP 443/TCP 853/TCP 8453/TCP + +# Fetch Knot Resolver + Knot DNS libraries from build image +COPY --from=build /tmp/root/ / +RUN ldconfig + +ENTRYPOINT ["/usr/sbin/kresd"] +CMD ["-c", "/etc/knot-resolver/kresd.conf"] |