github/open62541
7
0
Fork 0
mirror of https://github.com/open62541/open62541.git synced 2025-06-03 04:00:21 +00:00
Code Issues Packages Projects Releases Wiki Activity

Create multi-stage Dockerfile to minimize final Docker image size (#4722)

Browse Source
This commit is contained in:
Gabor Gyimesi 2021-11-17 16:58:36 +01:00 committed by GitHub
parent efd8929c04
commit da71b04979
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
2 changed files with 55 additions and 22 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

10
.dockerignore
View File

@ -1,2 +1,8 @@
Dockerfile
/build/*
.github
.azure-pipelines
.dockerignore
.travis*
appveyor.yml
docker
build
TinyDockerfile

67
docker/Dockerfile
View File

@ -1,36 +1,63 @@
FROM alpine:3.10
# Build Stage (1/2)
FROM alpine:3.13.6 AS build
RUN apk add --no-cache cmake gcc git g++ musl-dev mbedtls-dev python3 py3-pip make && rm -rf /var/cache/apk/*
ADD . /opt/open62541
COPY . /opt/open62541
# Get all the git tags to make sure we detect the correct version with git describe
WORKDIR /opt/open62541
RUN git remote add github-upstream https://github.com/open62541/open62541.git
RUN git fetch -f --tags github-upstream
RUN git remote add github-upstream https://github.com/open62541/open62541.git && \
git fetch -f --tags github-upstream
# Ignore error here. This always fails on Docker Cloud. It's fine there because the submodule is alread initialized. See also:
# https://stackoverflow.com/questions/58690455/how-to-correctly-initialize-git-submodules-in-dockerfile-for-docker-cloud
RUN git submodule update --init --recursive || true
WORKDIR /opt/open62541/build
RUN cmake -DBUILD_SHARED_LIBS=ON \
-DCMAKE_BUILD_TYPE=Debug \
-DUA_BUILD_EXAMPLES=ON \
# Hardening needs to be disabled, otherwise the docker build takes too long and travis fails
-DUA_ENABLE_HARDENING=OFF \
-DUA_ENABLE_ENCRYPTION=MBEDTLS \
-DUA_ENABLE_SUBSCRIPTIONS=ON \
-DUA_ENABLE_SUBSCRIPTIONS_EVENTS=ON \
-DUA_NAMESPACE_ZERO=FULL \
/opt/open62541
RUN make -j
RUN make install
-DCMAKE_BUILD_TYPE=Release \
-DUA_BUILD_EXAMPLES=ON \
# Hardening needs to be disabled, otherwise the docker build takes too long and travis fails
-DUA_ENABLE_HARDENING=OFF \
-DUA_ENABLE_ENCRYPTION=MBEDTLS \
-DUA_ENABLE_SUBSCRIPTIONS=ON \
-DUA_ENABLE_SUBSCRIPTIONS_EVENTS=ON \
-DUA_NAMESPACE_ZERO=FULL \
/opt/open62541 && \
make -j && \
make install
WORKDIR /opt/open62541
# Generate certificates
RUN apk add --no-cache python3-dev linux-headers openssl && rm -rf /var/cache/apk/*
RUN pip3 install --no-cache-dir netifaces==0.10.9
RUN mkdir -p /opt/open62541/pki/created
RUN python3 /opt/open62541/tools/certs/create_self-signed.py /opt/open62541/pki/created
RUN apk add --no-cache python3-dev linux-headers openssl && rm -rf /var/cache/apk/* && \
pip3 install --no-cache-dir netifaces==0.10.9 && \
mkdir -p /opt/open62541/pki/created && \
python3 /opt/open62541/tools/certs/create_self-signed.py /opt/open62541/pki/created
# Final Stage (2/2)
FROM alpine:3.13.6 AS server
RUN apk add --no-cache mbedtls
RUN --mount=src=/,dst=/artifacts,from=build \
mkdir -p /opt/open62541/pki \
&& mkdir -p /usr/local/lib64/cmake/open62541 \
&& mkdir -p /usr/local/lib64/pkgconfig \
&& mkdir -p /usr/local/share/open62541/tools \
&& mkdir -p /usr/local/include/open62541 \
&& mkdir -p /usr/local/bin \
&& cp -r /artifacts/opt/open62541/pki/created /opt/open62541/pki/created \
&& cp -r /artifacts/opt/open62541/build/bin/examples /opt/open62541 \
&& cp -r /artifacts/usr/local/lib64/libopen62541* /usr/local/lib64/ \
&& cp -r /artifacts/usr/local/lib64/cmake/open62541/ /usr/local/lib64/cmake/open62541/ \
&& cp -r /artifacts/usr/local/lib64/pkgconfig/open62541.pc /usr/local/lib64/pkgconfig/open62541.pc \
&& cp -r /artifacts/usr/local/share/open62541/tools/certs /usr/local/share/open62541/tools/certs \
&& cp -r /artifacts/usr/local/include/open62541/ /usr/local/include/open62541/ \
&& cp /artifacts/usr/local/include/ms_stdint.h /usr/local/include/ms_stdint.h \
&& cp /artifacts/usr/local/include/ziptree.h /usr/local/include/ziptree.h \
&& cp /artifacts/usr/local/include/aa_tree.h /usr/local/include/aa_tree.h \
&& cp /artifacts/usr/local/bin/ua_server_ctt.exe /usr/local/bin/ua_server_ctt.exe \
&& cp /artifacts/usr/local/bin/ua_client /usr/local/bin/ua_client
ENV LD_LIBRARY_PATH=/usr/local/lib64/
EXPOSE 4840
CMD ["/opt/open62541/build/bin/examples/server_ctt" , "/opt/open62541/pki/created/server_cert.der", "/opt/open62541/pki/created/server_key.der", "--enableUnencrypted", "--enableAnonymous"]
CMD ["/opt/open62541/examples/server_ctt" , "/opt/open62541/pki/created/server_cert.der", "/opt/open62541/pki/created/server_key.der", "--enableUnencrypted", "--enableAnonymous"]