mirror of
https://github.com/yuzu-emu/mbedtls.git
synced 2024-11-24 01:35:40 +01:00
1e14827beb
As a result, the copyright of contributors other than Arm is now acknowledged, and the years of publishing are no longer tracked in the source files. Also remove the now-redundant lines declaring that the files are part of MbedTLS. This commit was generated using the following script: # ======================== #!/bin/sh # Find files find '(' -path './.git' -o -path './3rdparty' ')' -prune -o -type f -print | xargs sed -bi ' # Replace copyright attribution line s/Copyright.*Arm.*/Copyright The Mbed TLS Contributors/I # Remove redundant declaration and the preceding line $!N /This file is part of Mbed TLS/Id P D ' # ======================== Signed-off-by: Bence Szépkúti <bence.szepkuti@arm.com>
167 lines
5.6 KiB
Docker
167 lines
5.6 KiB
Docker
# Dockerfile
|
|
#
|
|
# Purpose
|
|
# -------
|
|
# Defines a Docker container suitable to build and run all tests (all.sh),
|
|
# except for those that use a proprietary toolchain.
|
|
|
|
# Copyright The Mbed TLS Contributors
|
|
# SPDX-License-Identifier: Apache-2.0
|
|
#
|
|
# Licensed under the Apache License, Version 2.0 (the "License"); you may
|
|
# not use this file except in compliance with the License.
|
|
# You may obtain a copy of the License at
|
|
#
|
|
# http://www.apache.org/licenses/LICENSE-2.0
|
|
#
|
|
# Unless required by applicable law or agreed to in writing, software
|
|
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
|
|
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
# See the License for the specific language governing permissions and
|
|
# limitations under the License.
|
|
ARG MAKEFLAGS_PARALLEL=""
|
|
ARG MY_REGISTRY=
|
|
|
|
FROM ${MY_REGISTRY}ubuntu:bionic
|
|
|
|
|
|
ENV DEBIAN_FRONTEND noninteractive
|
|
|
|
RUN apt-get update \
|
|
&& apt-get -y install software-properties-common \
|
|
&& rm -rf /var/lib/apt/lists
|
|
|
|
RUN add-apt-repository -y ppa:team-gcc-arm-embedded/ppa
|
|
|
|
RUN apt-get update \
|
|
&& apt-get -y install \
|
|
# mbedtls build/test dependencies
|
|
build-essential \
|
|
clang \
|
|
cmake \
|
|
doxygen \
|
|
gcc-arm-none-eabi \
|
|
gcc-mingw-w64-i686 \
|
|
gcc-multilib \
|
|
g++-multilib \
|
|
gdb \
|
|
git \
|
|
graphviz \
|
|
lsof \
|
|
python \
|
|
python3-pip \
|
|
python3 \
|
|
pylint3 \
|
|
valgrind \
|
|
wget \
|
|
# libnettle build dependencies
|
|
libgmp-dev \
|
|
m4 \
|
|
pkg-config \
|
|
&& rm -rf /var/lib/apt/lists/*
|
|
|
|
# Build a static, legacy openssl from sources with sslv3 enabled
|
|
# Based on https://gist.github.com/bmaupin/8caca3a1e8c3c5686141 (build-openssl.sh)
|
|
# Note: openssl-1.0.2 and earlier has known build issues with parallel make.
|
|
RUN cd /tmp \
|
|
&& wget https://www.openssl.org/source/old/1.0.1/openssl-1.0.1j.tar.gz -qO- | tar xz \
|
|
&& cd openssl-1.0.1j \
|
|
&& ./config --openssldir=/usr/local/openssl-1.0.1j no-shared \
|
|
&& (make ${MAKEFLAGS_PARALLEL} || make -j 1) \
|
|
&& make install_sw \
|
|
&& rm -rf /tmp/openssl*
|
|
ENV OPENSSL_LEGACY=/usr/local/openssl-1.0.1j/bin/openssl
|
|
|
|
# Build OPENSSL as 1.0.2g
|
|
RUN cd /tmp \
|
|
&& wget https://www.openssl.org/source/old/1.0.2/openssl-1.0.2g.tar.gz -qO- | tar xz \
|
|
&& cd openssl-1.0.2g \
|
|
&& ./config --openssldir=/usr/local/openssl-1.0.2g no-shared \
|
|
&& (make ${MAKEFLAGS_PARALLEL} || make -j 1) \
|
|
&& make install_sw \
|
|
&& rm -rf /tmp/openssl*
|
|
ENV OPENSSL=/usr/local/openssl-1.0.2g/bin/openssl
|
|
|
|
# Build a new openssl binary for ARIA/CHACHA20 support
|
|
# Based on https://gist.github.com/bmaupin/8caca3a1e8c3c5686141 (build-openssl.sh)
|
|
RUN cd /tmp \
|
|
&& wget https://www.openssl.org/source/openssl-1.1.1a.tar.gz -qO- | tar xz \
|
|
&& cd openssl-1.1.1a \
|
|
&& ./config --prefix=/usr/local/openssl-1.1.1a -Wl,--enable-new-dtags,-rpath,'${LIBRPATH}' no-shared \
|
|
&& make ${MAKEFLAGS_PARALLEL} \
|
|
&& make install_sw \
|
|
&& rm -rf /tmp/openssl*
|
|
ENV OPENSSL_NEXT=/usr/local/openssl-1.1.1a/bin/openssl
|
|
|
|
# Build libnettle 2.7.1 (needed by legacy gnutls)
|
|
RUN cd /tmp \
|
|
&& wget https://ftp.gnu.org/gnu/nettle/nettle-2.7.1.tar.gz -qO- | tar xz \
|
|
&& cd nettle-2.7.1 \
|
|
&& ./configure --disable-documentation \
|
|
&& make ${MAKEFLAGS_PARALLEL} \
|
|
&& make install \
|
|
&& /sbin/ldconfig \
|
|
&& rm -rf /tmp/nettle*
|
|
|
|
# Build legacy gnutls (3.3.8)
|
|
RUN cd /tmp \
|
|
&& wget https://www.gnupg.org/ftp/gcrypt/gnutls/v3.3/gnutls-3.3.8.tar.xz -qO- | tar xJ \
|
|
&& cd gnutls-3.3.8 \
|
|
&& ./configure --prefix=/usr/local/gnutls-3.3.8 --exec_prefix=/usr/local/gnutls-3.3.8 --disable-shared --disable-guile --disable-doc \
|
|
&& make ${MAKEFLAGS_PARALLEL} \
|
|
&& make install \
|
|
&& rm -rf /tmp/gnutls*
|
|
ENV GNUTLS_LEGACY_CLI=/usr/local/gnutls-3.3.8/bin/gnutls-cli
|
|
ENV GNUTLS_LEGACY_SERV=/usr/local/gnutls-3.3.8/bin/gnutls-serv
|
|
|
|
# Build libnettle 3.1 (needed by gnutls)
|
|
RUN cd /tmp \
|
|
&& wget https://ftp.gnu.org/gnu/nettle/nettle-3.1.tar.gz -qO- | tar xz \
|
|
&& cd nettle-3.1 \
|
|
&& ./configure --disable-documentation \
|
|
&& make ${MAKEFLAGS_PARALLEL} \
|
|
&& make install \
|
|
&& /sbin/ldconfig \
|
|
&& rm -rf /tmp/nettle*
|
|
|
|
# Build gnutls (3.4.10)
|
|
RUN cd /tmp \
|
|
&& wget https://www.gnupg.org/ftp/gcrypt/gnutls/v3.4/gnutls-3.4.10.tar.xz -qO- | tar xJ \
|
|
&& cd gnutls-3.4.10 \
|
|
&& ./configure --prefix=/usr/local/gnutls-3.4.10 --exec_prefix=/usr/local/gnutls-3.4.10 \
|
|
--with-included-libtasn1 --without-p11-kit \
|
|
--disable-shared --disable-guile --disable-doc \
|
|
&& make ${MAKEFLAGS_PARALLEL} \
|
|
&& make install \
|
|
&& rm -rf /tmp/gnutls*
|
|
ENV GNUTLS_CLI=/usr/local/gnutls-3.4.10/bin/gnutls-cli
|
|
ENV GNUTLS_SERV=/usr/local/gnutls-3.4.10/bin/gnutls-serv
|
|
|
|
# Build libnettle 3.4 (needed by gnutls next)
|
|
RUN cd /tmp \
|
|
&& wget https://ftp.gnu.org/gnu/nettle/nettle-3.4.1.tar.gz -qO- | tar xz \
|
|
&& cd nettle-3.4.1 \
|
|
&& ./configure --disable-documentation \
|
|
&& make ${MAKEFLAGS_PARALLEL} \
|
|
&& make install \
|
|
&& /sbin/ldconfig \
|
|
&& rm -rf /tmp/nettle*
|
|
|
|
# Build gnutls next (3.6.5)
|
|
RUN cd /tmp \
|
|
&& wget https://www.gnupg.org/ftp/gcrypt/gnutls/v3.6/gnutls-3.6.5.tar.xz -qO- | tar xJ \
|
|
&& cd gnutls-3.6.5 \
|
|
&& ./configure --prefix=/usr/local/gnutls-3.6.5 --exec_prefix=/usr/local/gnutls-3.6.5 \
|
|
--with-included-libtasn1 --with-included-unistring --without-p11-kit \
|
|
--disable-shared --disable-guile --disable-doc \
|
|
&& make ${MAKEFLAGS_PARALLEL} \
|
|
&& make install \
|
|
&& rm -rf /tmp/gnutls*
|
|
|
|
ENV GNUTLS_NEXT_CLI=/usr/local/gnutls-3.6.5/bin/gnutls-cli
|
|
ENV GNUTLS_NEXT_SERV=/usr/local/gnutls-3.6.5/bin/gnutls-serv
|
|
|
|
RUN pip3 install --no-cache-dir \
|
|
mbed-host-tests \
|
|
mock
|