[dockerfile] Add dockerfile for anolis8.8
This commit is contained in:
Zheng, Qi
volcano
parent
0b0fed947c
commit
c2ae7bdd99
200
tools/docker/Dockerfile.anolis8.8
Normal file
200
tools/docker/Dockerfile.anolis8.8
Normal file
@ -0,0 +1,200 @@
|
|||||||
|
#Notice:Anolis is not an official supported distribution now. Take your own risk to use it.
|
||||||
|
FROM alpine:3.11 AS alpine
|
||||||
|
|
||||||
|
RUN apk update && \
|
||||||
|
apk --no-cache add openjdk11 openjdk8 --repository=http://dl-cdn.alpinelinux.org/alpine/edge/community
|
||||||
|
|
||||||
|
FROM openanolis/anolisos:8.8
|
||||||
|
|
||||||
|
LABEL maintainer="Qi Zheng <huaiqing.zq@antgroup.com>"
|
||||||
|
|
||||||
|
#The default shell for the RUN instruction is ["/bin/sh", "-c"], which sometimes cause unexpected error
|
||||||
|
#for example "source a_file". Use bash as default shell instead.
|
||||||
|
SHELL ["/bin/bash", "-c"]
|
||||||
|
|
||||||
|
RUN yum install -y epel-release && \
|
||||||
|
yum install -y --nogpgcheck \
|
||||||
|
epel-release \
|
||||||
|
astyle \
|
||||||
|
autoconf \
|
||||||
|
automake \
|
||||||
|
bison \
|
||||||
|
bzip2 \
|
||||||
|
boost-devel \
|
||||||
|
ca-certificates \
|
||||||
|
cmake \
|
||||||
|
curl \
|
||||||
|
curl-devel \
|
||||||
|
createrepo \
|
||||||
|
expect \
|
||||||
|
expat \
|
||||||
|
expat-devel \
|
||||||
|
gettext \
|
||||||
|
file \
|
||||||
|
fuse-devel \
|
||||||
|
fuse-libs \
|
||||||
|
gawk \
|
||||||
|
gcc \
|
||||||
|
gcc-c++ \
|
||||||
|
glibc-headers \
|
||||||
|
gdb \
|
||||||
|
git-core \
|
||||||
|
gmp-devel \
|
||||||
|
golang \
|
||||||
|
jq \
|
||||||
|
libmpc-devel \
|
||||||
|
libxml2-devel \
|
||||||
|
libtool \
|
||||||
|
pkgconfig \
|
||||||
|
kmod \
|
||||||
|
make \
|
||||||
|
ocaml \
|
||||||
|
ocaml-ocamlbuild \
|
||||||
|
openssl \
|
||||||
|
openssl-devel \
|
||||||
|
patch \
|
||||||
|
python3 \
|
||||||
|
sudo \
|
||||||
|
uuid-devel \
|
||||||
|
vim \
|
||||||
|
wget \
|
||||||
|
yum-utils \
|
||||||
|
rpm-build \
|
||||||
|
git \
|
||||||
|
protobuf-devel \
|
||||||
|
protobuf-lite-devel \
|
||||||
|
protobuf-c-devel \
|
||||||
|
rsync && \
|
||||||
|
yum groupinstall -y 'Development Tools' && \
|
||||||
|
yum clean all && \
|
||||||
|
alternatives --set python /usr/bin/python3
|
||||||
|
|
||||||
|
# Install Rust
|
||||||
|
ENV PATH="/root/.cargo/bin:$PATH"
|
||||||
|
ENV OCCLUM_RUST_VERSION=nightly-2022-02-23
|
||||||
|
RUN curl https://sh.rustup.rs -sSf | \
|
||||||
|
sh -s -- --default-toolchain ${OCCLUM_RUST_VERSION} -y && \
|
||||||
|
rm -rf /root/.cargo/registry && rm -rf /root/.cargo/git && \
|
||||||
|
cargo -V
|
||||||
|
|
||||||
|
# Anolis8.4 use GCC 8.4.1 as default toolchain
|
||||||
|
# Do not generate debug info package
|
||||||
|
RUN echo "%debug_package %{nil}" >> ~/.rpmmacros && \
|
||||||
|
echo "check_certificate = off" >> ~/.wgetrc
|
||||||
|
|
||||||
|
# Build and install SGX SDK
|
||||||
|
# Build PSW rpms and install
|
||||||
|
WORKDIR /tmp
|
||||||
|
RUN git clone -b sgx_2.17.1_for_occlum https://github.com/occlum/linux-sgx.git && \
|
||||||
|
cd linux-sgx && \
|
||||||
|
make preparation && \
|
||||||
|
./compile_and_install.sh no_mitigation USE_OPT_LIBS=3 && \
|
||||||
|
source /opt/intel/sgxsdk/environment && \
|
||||||
|
make rpm_local_repo && \
|
||||||
|
cp -rf linux/installer/rpm/sgx_rpm_local_repo /tmp/ && \
|
||||||
|
rm -rf /tmp/linux-sgx && \
|
||||||
|
mkdir -p /tmp/linux-sgx/linux/installer/rpm && \
|
||||||
|
mv /tmp/sgx_rpm_local_repo /tmp/linux-sgx/linux/installer/rpm/ && \
|
||||||
|
cd linux/installer/rpm/sgx_rpm_local_repo && \
|
||||||
|
rpm -ivh --nodeps libsgx-ae-pce*.rpm \
|
||||||
|
libsgx-headers*.rpm \
|
||||||
|
libsgx-ae-qe3*.rpm \
|
||||||
|
libsgx-ae-qve*.rpm \
|
||||||
|
libsgx-enclave-common*.rpm \
|
||||||
|
libsgx-quote-ex*.rpm \
|
||||||
|
libsgx-urts*.rpm \
|
||||||
|
libsgx-qe3-logic*.rpm \
|
||||||
|
libsgx-pce-logic*.rpm \
|
||||||
|
libsgx-dcap-quote-verify*.rpm \
|
||||||
|
libsgx-dcap-ql*.rpm \
|
||||||
|
libsgx-dcap-ql-dev*.rpm \
|
||||||
|
libsgx-dcap-default-qpl*.rpm \
|
||||||
|
libsgx-dcap-default-qpl-dev*.rpm \
|
||||||
|
libsgx-dcap-quote-verify-dev*.rpm \
|
||||||
|
libsgx-uae-service*.rpm \
|
||||||
|
libsgx-epid*.rpm \
|
||||||
|
libsgx-launch*.rpm \
|
||||||
|
libsgx-ae-le-*.rpm \
|
||||||
|
libsgx-ae-id-enclave*.rpm \
|
||||||
|
libsgx-aesm-launch-plugin-*.rpm \
|
||||||
|
sgx-aesm-service*.rpm
|
||||||
|
|
||||||
|
# Install cpuid tool for tests
|
||||||
|
WORKDIR /tmp
|
||||||
|
RUN wget http://www.etallen.com/cpuid/cpuid-20200211.x86_64.tar.gz && \
|
||||||
|
tar -xf ./cpuid-20200211.x86_64.tar.gz && \
|
||||||
|
cp ./cpuid-20200211/cpuid /usr/bin/ && \
|
||||||
|
rm -rf /tmp/cpuid-20200211*
|
||||||
|
|
||||||
|
# Download the Occlum source
|
||||||
|
ARG OCCLUM_BRANCH
|
||||||
|
WORKDIR /root
|
||||||
|
RUN git clone -b $OCCLUM_BRANCH https://github.com/occlum/occlum && \
|
||||||
|
cp -r /root/occlum/tools/toolchains/* /tmp/ && mkdir -p /opt/occlum/ && \
|
||||||
|
cp /root/occlum/tools/docker/start_aesm.sh /opt/occlum/
|
||||||
|
|
||||||
|
# Install Occlum toolchain
|
||||||
|
WORKDIR /tmp
|
||||||
|
RUN cd musl-gcc && ./build.sh && ./install_zlib.sh && rm -rf /tmp/musl-gcc
|
||||||
|
ENV PATH="/opt/occlum/build/bin:/usr/local/occlum/bin:$PATH"
|
||||||
|
|
||||||
|
# Install glibc
|
||||||
|
WORKDIR /tmp
|
||||||
|
RUN cd glibc && ./build.sh && rm -rf /tmp/glibc
|
||||||
|
|
||||||
|
# Install Occlum Golang toolchain
|
||||||
|
WORKDIR /tmp
|
||||||
|
RUN cd golang && ./build.sh && rm -rf /tmp/golang
|
||||||
|
ENV PATH="/opt/occlum/toolchains/golang/bin:$PATH"
|
||||||
|
|
||||||
|
# Install Occlum Rust toolchain
|
||||||
|
WORKDIR /tmp
|
||||||
|
RUN cd rust && ./build.sh && rm -rf /tmp/rust
|
||||||
|
ENV PATH="/opt/occlum/toolchains/rust/bin:$PATH"
|
||||||
|
ENV LD_LIBRARY_PATH="/opt/intel/sgxsdk/sdk_libs"
|
||||||
|
|
||||||
|
# Install Occlum bash
|
||||||
|
WORKDIR /tmp
|
||||||
|
RUN cd bash && ./build.sh && rm -rf /tmp/bash
|
||||||
|
|
||||||
|
# Install Occlum busybox
|
||||||
|
WORKDIR /tmp
|
||||||
|
RUN cd busybox && ./build.sh && rm -rf /tmp/busybox
|
||||||
|
|
||||||
|
# Install Occlum Java toolchain (JDK 11)
|
||||||
|
ARG JDK11_PATH=/opt/occlum/toolchains/jvm/java-11-openjdk
|
||||||
|
COPY --from=alpine /usr/lib/jvm/java-11-openjdk $JDK11_PATH
|
||||||
|
RUN rm $JDK11_PATH/lib/security/cacerts
|
||||||
|
COPY --from=alpine /etc/ssl/certs/java/cacerts $JDK11_PATH/lib/security/cacerts
|
||||||
|
WORKDIR /tmp
|
||||||
|
RUN cd java && ./install_dragonwell.sh && rm -rf /tmp/java
|
||||||
|
ENV PATH="/opt/occlum/toolchains/jvm/bin:$PATH"
|
||||||
|
|
||||||
|
# Install OpenJDK 8
|
||||||
|
ARG JDK8_PATH=/opt/occlum/toolchains/jvm/java-1.8-openjdk
|
||||||
|
COPY --from=alpine /usr/lib/jvm/java-1.8-openjdk $JDK8_PATH
|
||||||
|
RUN rm $JDK8_PATH/jre/lib/security/cacerts
|
||||||
|
COPY --from=alpine /etc/ssl/certs/java/cacerts $JDK8_PATH/jre/lib/security/cacerts
|
||||||
|
|
||||||
|
# Build and install Occlum
|
||||||
|
WORKDIR /root
|
||||||
|
RUN cd occlum && \
|
||||||
|
source /opt/intel/sgxsdk/environment && \
|
||||||
|
make submodule && \
|
||||||
|
OCCLUM_RELEASE_BUILD=1 make install && \
|
||||||
|
cp -r demos /root/demos && \
|
||||||
|
rm -rf /root/occlum
|
||||||
|
|
||||||
|
# Clean up
|
||||||
|
RUN rm -rf /tmp/*
|
||||||
|
|
||||||
|
# Start AESM service automatically
|
||||||
|
#
|
||||||
|
# To do so, we add the script to ~/.bashrc. We cannot use systemd to run AESM
|
||||||
|
# as a "real" service since the pid 1 is not systemd in Docker. So we start
|
||||||
|
# up AESM service when an user login with an interactive shell.
|
||||||
|
RUN mkdir -p /var/run/aesmd && \
|
||||||
|
echo '/opt/occlum/start_aesm.sh' >> /root/.bashrc && \
|
||||||
|
echo 'source /opt/intel/sgxsdk/environment' >> /root/.bashrc
|
||||||
|
|
||||||
|
WORKDIR /root
|
||||||
@ -50,7 +50,7 @@ function check_item_in_list() {
|
|||||||
[[ $list =~ (^|[[:space:]])$item($|[[:space:]]) ]]
|
[[ $list =~ (^|[[:space:]])$item($|[[:space:]]) ]]
|
||||||
}
|
}
|
||||||
|
|
||||||
check_item_in_list "$os_name" "ubuntu18.04 ubuntu20.04 centos8.2 aliyunlinux3 anolis8.4" || report_error
|
check_item_in_list "$os_name" "ubuntu18.04 ubuntu20.04 centos8.2 aliyunlinux3 anolis8.4 anolis8.8" || report_error
|
||||||
|
|
||||||
cd "$script_dir/.."
|
cd "$script_dir/.."
|
||||||
docker build -f "$script_dir/Dockerfile.$os_name" -t "occlum/occlum:$occlum_label-$os_name" --build-arg OCCLUM_BRANCH=$occlum_branch .
|
docker build -f "$script_dir/Dockerfile.$os_name" -t "occlum/occlum:$occlum_label-$os_name" --build-arg OCCLUM_BRANCH=$occlum_branch .
|
||||||
|
|||||||
Loading…
Reference in New Issue
Block a user