mirror of
https://git.proxmox.com/git/libgit2
synced 2025-05-28 08:58:41 +00:00
80 lines
2.9 KiB
Plaintext
80 lines
2.9 KiB
Plaintext
FROM ubuntu:focal AS apt
|
|
RUN apt-get update && \
|
|
DEBIAN_FRONTEND=noninteractive apt-get install -y --no-install-recommends \
|
|
bzip2 \
|
|
clang-10 \
|
|
cmake \
|
|
curl \
|
|
gcc-10 \
|
|
git \
|
|
krb5-user \
|
|
libcurl4-gnutls-dev \
|
|
libgcrypt20-dev \
|
|
libkrb5-dev \
|
|
libpcre3-dev \
|
|
libssl-dev \
|
|
libz-dev \
|
|
llvm-10 \
|
|
make \
|
|
ninja-build \
|
|
openjdk-8-jre-headless \
|
|
openssh-server \
|
|
openssl \
|
|
pkgconf \
|
|
python \
|
|
sudo \
|
|
valgrind \
|
|
&& \
|
|
rm -rf /var/lib/apt/lists/* && \
|
|
mkdir /usr/local/msan
|
|
|
|
FROM apt AS mbedtls
|
|
RUN cd /tmp && \
|
|
curl --location --silent --show-error https://tls.mbed.org/download/mbedtls-2.16.2-apache.tgz | \
|
|
tar -xz && \
|
|
cd mbedtls-2.16.2 && \
|
|
scripts/config.pl unset MBEDTLS_AESNI_C && \
|
|
scripts/config.pl set MBEDTLS_MD4_C 1 && \
|
|
mkdir build build-msan && \
|
|
cd build && \
|
|
CC=clang-10 CFLAGS="-fPIC" cmake -G Ninja -DENABLE_PROGRAMS=OFF -DENABLE_TESTING=OFF -DUSE_SHARED_MBEDTLS_LIBRARY=ON -DUSE_STATIC_MBEDTLS_LIBRARY=OFF -DCMAKE_BUILD_TYPE=Debug -DCMAKE_PREFIX_PATH=/usr/local -DCMAKE_INSTALL_PREFIX=/usr/local .. && \
|
|
ninja install && \
|
|
cd ../build-msan && \
|
|
CC=clang-10 CFLAGS="-fPIC" cmake -G Ninja -DENABLE_PROGRAMS=OFF -DENABLE_TESTING=OFF -DUSE_SHARED_MBEDTLS_LIBRARY=ON -DUSE_STATIC_MBEDTLS_LIBRARY=OFF -DCMAKE_BUILD_TYPE=MemSanDbg -DCMAKE_INSTALL_PREFIX=/usr/local/msan .. && \
|
|
ninja install && \
|
|
cd .. && \
|
|
rm -rf mbedtls-2.16.2
|
|
|
|
FROM mbedtls AS libssh2
|
|
RUN cd /tmp && \
|
|
curl --insecure --location --silent --show-error https://www.libssh2.org/download/libssh2-1.8.2.tar.gz | \
|
|
tar -xz && \
|
|
cd libssh2-1.8.2 && \
|
|
mkdir build build-msan && \
|
|
cd build && \
|
|
CC=clang-10 CFLAGS="-fPIC" cmake -G Ninja -DBUILD_SHARED_LIBS=ON -DCRYPTO_BACKEND=Libgcrypt -DCMAKE_PREFIX_PATH=/usr/local -DCMAKE_INSTALL_PREFIX=/usr/local .. && \
|
|
ninja install && \
|
|
cd ../build-msan && \
|
|
CC=clang-10 CFLAGS="-fPIC -fsanitize=memory -fno-optimize-sibling-calls -fsanitize-memory-track-origins=2 -fno-omit-frame-pointer" LDFLAGS="-fsanitize=memory" cmake -G Ninja -DBUILD_SHARED_LIBS=ON -DCRYPTO_BACKEND=mbedTLS -DCMAKE_PREFIX_PATH=/usr/local/msan -DCMAKE_INSTALL_PREFIX=/usr/local/msan .. && \
|
|
ninja install && \
|
|
cd .. && \
|
|
rm -rf libssh2-1.8.2
|
|
|
|
FROM libssh2 AS valgrind
|
|
RUN cd /tmp && \
|
|
curl --insecure --location --silent --show-error https://sourceware.org/pub/valgrind/valgrind-3.15.0.tar.bz2 | \
|
|
tar -xj && \
|
|
cd valgrind-3.15.0 && \
|
|
CC=clang-10 ./configure && \
|
|
make MAKEFLAGS="-j -l$(grep -c ^processor /proc/cpuinfo)" && \
|
|
make install && \
|
|
cd .. && \
|
|
rm -rf valgrind-3.15.0
|
|
|
|
FROM valgrind AS configure
|
|
COPY entrypoint.sh /usr/local/bin/entrypoint.sh
|
|
RUN chmod a+x /usr/local/bin/entrypoint.sh
|
|
RUN mkdir /var/run/sshd
|
|
|
|
ENTRYPOINT ["/usr/local/bin/entrypoint.sh"]
|