lobo/aws-sdk-for-zig
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects 1 Releases Wiki Activity
0bafc185c8
aws-sdk-for-zig/Dockerfile

111 lines
4.5 KiB
Docker
Raw Normal View History

switch openssl->aws-lc This switch moves to a full AWS stack and a core ssl library with smaller security attack surface. It increases final binary size by 3MB which may be largely avoided by tweaking the aws-lc build commands at the expense of some performance. Note aws-lc will likely be the primarily supported ssl library by the AWS c runtime libs moving forward, and thus this also allows us to move to more recent versions of the dependant libraries. We still require a custom fork of aws-c-cal until PR 89 is merged
2021-04-29 23:27:23 +00:00
# We are looking for a static build, so we need to be on a musl system
# Zig uses clang, so for best compatibility, everything should be built
# using that compiler
# Establish a base container with build tools common to most projects
first thing that actually works
2021-04-27 18:24:01 +00:00
FROM alpine:3.13 AS base
# gcc gets us libgcc.a, even though the build should be using clang
RUN apk add --no-cache clang git cmake make lld musl-dev gcc && \
rm /usr/bin/ld && \
ln -s /usr/bin/ld.lld /usr/bin/ld && rm /usr/bin/gcc # just to be sure
FROM base AS common
RUN git clone --depth 1 -b v0.5.2 https://github.com/awslabs/aws-c-common && \
mkdir aws-c-common-build && cd aws-c-common-build && \
cmake ../aws-c-common && \
make -j12 && make test && make install
RUN tar -czf aws-c-common-clang.tgz /usr/local/*
switch openssl->aws-lc This switch moves to a full AWS stack and a core ssl library with smaller security attack surface. It increases final binary size by 3MB which may be largely avoided by tweaking the aws-lc build commands at the expense of some performance. Note aws-lc will likely be the primarily supported ssl library by the AWS c runtime libs moving forward, and thus this also allows us to move to more recent versions of the dependant libraries. We still require a custom fork of aws-c-cal until PR 89 is merged
2021-04-29 23:27:23 +00:00
# The only tags currently on the repo are from 9/2020 and don't install
# anything, so we'll use current head of main branch (d60b60e)
FROM base AS awslc
RUN apk add --no-cache perl go g++ linux-headers && rm /usr/bin/g++ && rm /usr/bin/c++ && \
git clone --depth 1000 https://github.com/awslabs/aws-lc && cd aws-lc && \
git reset d60b60e --hard && cd .. && \
cmake -S aws-lc -B aws-lc/build -DCMAKE_BUILD_TYPE=RelWithDebInfo -DCMAKE_PREFIX_PATH=/usr/local -DCMAKE_INSTALL_PREFIX=/usr/local && \
cmake --build aws-lc/build --config RelWithDebInfo --target install
first thing that actually works
2021-04-27 18:24:01 +00:00
switch openssl->aws-lc This switch moves to a full AWS stack and a core ssl library with smaller security attack surface. It increases final binary size by 3MB which may be largely avoided by tweaking the aws-lc build commands at the expense of some performance. Note aws-lc will likely be the primarily supported ssl library by the AWS c runtime libs moving forward, and thus this also allows us to move to more recent versions of the dependant libraries. We still require a custom fork of aws-c-cal until PR 89 is merged
2021-04-29 23:27:23 +00:00
RUN tar -czf aws-lc-clang.tgz /usr/local/*
first thing that actually works
2021-04-27 18:24:01 +00:00
FROM base AS s2n
switch openssl->aws-lc This switch moves to a full AWS stack and a core ssl library with smaller security attack surface. It increases final binary size by 3MB which may be largely avoided by tweaking the aws-lc build commands at the expense of some performance. Note aws-lc will likely be the primarily supported ssl library by the AWS c runtime libs moving forward, and thus this also allows us to move to more recent versions of the dependant libraries. We still require a custom fork of aws-c-cal until PR 89 is merged
2021-04-29 23:27:23 +00:00
ENV S2N_LIBCRYPTO=awslc
COPY --from=awslc /aws-lc-clang.tgz /
RUN git clone --depth 1 -b v1.0.5 https://github.com/aws/s2n-tls && \
tar -xzf aws-lc-clang.tgz && \
first thing that actually works
2021-04-27 18:24:01 +00:00
mkdir s2n-build && cd s2n-build && \
switch openssl->aws-lc This switch moves to a full AWS stack and a core ssl library with smaller security attack surface. It increases final binary size by 3MB which may be largely avoided by tweaking the aws-lc build commands at the expense of some performance. Note aws-lc will likely be the primarily supported ssl library by the AWS c runtime libs moving forward, and thus this also allows us to move to more recent versions of the dependant libraries. We still require a custom fork of aws-c-cal until PR 89 is merged
2021-04-29 23:27:23 +00:00
cmake ../s2n-tls && \
first thing that actually works
2021-04-27 18:24:01 +00:00
make -j12 && make install
RUN tar -czf s2n-clang.tgz /usr/local/*
FROM base AS cal
switch openssl->aws-lc This switch moves to a full AWS stack and a core ssl library with smaller security attack surface. It increases final binary size by 3MB which may be largely avoided by tweaking the aws-lc build commands at the expense of some performance. Note aws-lc will likely be the primarily supported ssl library by the AWS c runtime libs moving forward, and thus this also allows us to move to more recent versions of the dependant libraries. We still require a custom fork of aws-c-cal until PR 89 is merged
2021-04-29 23:27:23 +00:00
COPY --from=awslc /aws-lc-clang.tgz /
first thing that actually works
2021-04-27 18:24:01 +00:00
COPY --from=common /aws-c-common-clang.tgz /
switch openssl->aws-lc This switch moves to a full AWS stack and a core ssl library with smaller security attack surface. It increases final binary size by 3MB which may be largely avoided by tweaking the aws-lc build commands at the expense of some performance. Note aws-lc will likely be the primarily supported ssl library by the AWS c runtime libs moving forward, and thus this also allows us to move to more recent versions of the dependant libraries. We still require a custom fork of aws-c-cal until PR 89 is merged
2021-04-29 23:27:23 +00:00
# RUN git clone --depth 1 -b v0.5.5 https://github.com/awslabs/aws-c-cal && \
RUN git clone --depth 1 -b static-musl-builds https://github.com/elerch/aws-c-cal && \
first thing that actually works
2021-04-27 18:24:01 +00:00
tar -xzf aws-c-common-clang.tgz && \
switch openssl->aws-lc This switch moves to a full AWS stack and a core ssl library with smaller security attack surface. It increases final binary size by 3MB which may be largely avoided by tweaking the aws-lc build commands at the expense of some performance. Note aws-lc will likely be the primarily supported ssl library by the AWS c runtime libs moving forward, and thus this also allows us to move to more recent versions of the dependant libraries. We still require a custom fork of aws-c-cal until PR 89 is merged
2021-04-29 23:27:23 +00:00
tar -xzf aws-lc-clang.tgz && \
first thing that actually works
2021-04-27 18:24:01 +00:00
mkdir cal-build && cd cal-build && \
cmake -DCMAKE_MODULE_PATH=/usr/local/lib64/cmake ../aws-c-cal && \
make -j12 && make install
# No make test:
# 40 - ecdsa_p384_test_key_gen_export (Failed)
RUN tar -czf aws-c-cal-clang.tgz /usr/local/*
FROM base AS compression
COPY --from=common /aws-c-common-clang.tgz /
RUN git clone --depth 1 -b v0.2.10 https://github.com/awslabs/aws-c-compression && \
tar -xzf aws-c-common-clang.tgz && \
mkdir compression-build && cd compression-build && \
cmake -DCMAKE_MODULE_PATH=/usr/local/lib64/cmake ../aws-c-compression && \
make -j12 && make test && make install
RUN tar -czf aws-c-compression-clang.tgz /usr/local/*
FROM base AS io
# Cal includes common and openssl
COPY --from=cal /aws-c-cal-clang.tgz /
COPY --from=s2n /s2n-clang.tgz /
RUN git clone --depth 1 -b v0.9.1 https://github.com/awslabs/aws-c-io && \
tar -xzf s2n-clang.tgz && \
tar -xzf aws-c-cal-clang.tgz && \
mkdir io-build && cd io-build && \
cmake -DCMAKE_MODULE_PATH=/usr/local/lib64/cmake ../aws-c-io && \
make -j12 && make install
RUN tar -czf aws-c-io-clang.tgz /usr/local/*
FROM base AS http
# Cal includes common and openssl
# 2 test failures on musl - both "download medium file"
COPY --from=io /aws-c-io-clang.tgz /
COPY --from=compression /aws-c-compression-clang.tgz /
# RUN git clone --depth 1 -b v0.5.19 https://github.com/awslabs/aws-c-http && \
RUN git clone --depth 1 -b v0.6.1 https://github.com/awslabs/aws-c-http && \
tar -xzf aws-c-io-clang.tgz && \
tar -xzf aws-c-compression-clang.tgz && \
mkdir http-build && cd http-build && \
cmake -DCMAKE_MODULE_PATH=/usr/local/lib64/cmake ../aws-c-http && \
make -j12 && make install
RUN tar -czf aws-c-http-clang.tgz /usr/local/*
FROM base AS auth
# http should have all other dependencies
COPY --from=http /aws-c-http-clang.tgz /
RUN git clone --depth 1 -b v0.5.0 https://github.com/awslabs/aws-c-auth && \
tar -xzf aws-c-http-clang.tgz && \
mkdir auth-build && cd auth-build && \
cmake -DCMAKE_MODULE_PATH=/usr/local/lib64/cmake ../aws-c-auth && \
make -j12 && make install # chunked_signing_test fails
RUN tar -czf aws-c-auth-clang.tgz /usr/local/*
FROM alpine:3.13 as final
COPY --from=auth /aws-c-auth-clang.tgz /
ADD https://ziglang.org/download/0.7.1/zig-linux-x86_64-0.7.1.tar.xz /
RUN tar -xzf /aws-c-auth-clang.tgz && mkdir /src && tar -C /usr/local -xf zig-linux* && \
ln -s /usr/local/zig-linux*/zig /usr/local/bin/zig
Reference in New Issue Copy Permalink