67 lines
3.7 KiB
Docker
67 lines
3.7 KiB
Docker
# musl fully-static 构建 mond（monerod 换名）：手编 5 个静态库 + patch CMakeLists + static-pie。
|
||
# 为何 musl 而非 glibc：musl 的 getaddrinfo 自包含，全静态可跨发行版运行；glibc 静态会因 NSS
|
||
# 运行时 dlopen 失败（DNS error: resource busy or locked）。详见 CLAUDE.md。
|
||
# 产物为 static-pie（Alpine gcc 默认 PIE），零外部依赖，可在 glibc/musl 任意发行版直接运行。
|
||
|
||
# ---- Stage 1: 静态依赖库（版本固定 → Docker 层缓存，源码不变不重编）----
|
||
FROM alpine:3.23 AS deps
|
||
RUN apk add --no-cache g++ gcc make cmake git linux-headers autoconf automake libtool \
|
||
pkgconf perl wget tar xz bzip2 file flex bison boost-static boost-dev rapidjson-dev
|
||
ENV CFLAGS="-fPIC -O2" CXXFLAGS="-fPIC -O2"
|
||
WORKDIR /deps
|
||
|
||
# OpenSSL 3.0.16（Alpine 仓库只有 .so，须源码编静态）
|
||
RUN wget -q https://github.com/openssl/openssl/releases/download/openssl-3.0.16/openssl-3.0.16.tar.gz && \
|
||
tar xf openssl-3.0.16.tar.gz && cd openssl-3.0.16 && \
|
||
if [ "$(uname -m)" = aarch64 ]; then OSSL_T=linux-aarch64; else OSSL_T=linux-x86_64; fi && \
|
||
./Configure no-shared no-tests --prefix=/usr --libdir=lib $OSSL_T && \
|
||
make -j"$(nproc)" && make install_sw && cd / && rm -rf /deps/openssl-3.0.16*
|
||
|
||
# libsodium 1.0.20
|
||
RUN wget -q https://download.libsodium.org/libsodium/releases/libsodium-1.0.20.tar.gz && \
|
||
tar xf libsodium-1.0.20.tar.gz && cd libsodium-1.0.20 && \
|
||
./configure --enable-static --disable-shared --prefix=/usr && \
|
||
make -j"$(nproc)" && make install && cd / && rm -rf /deps/libsodium-1.0.20*
|
||
|
||
# libzmq 4.3.5
|
||
RUN wget -q https://github.com/zeromq/libzmq/releases/download/v4.3.5/zeromq-4.3.5.tar.gz && \
|
||
tar xf zeromq-4.3.5.tar.gz && cd zeromq-4.3.5 && \
|
||
./configure --enable-static --disable-shared --prefix=/usr --without-docs --enable-drafts=no && \
|
||
make -j"$(nproc)" && make install && cd / && rm -rf /deps/zeromq-4.3.5*
|
||
|
||
# expat 2.6.4
|
||
RUN wget -q https://github.com/libexpat/libexpat/releases/download/R_2_6_4/expat-2.6.4.tar.bz2 && \
|
||
tar xf expat-2.6.4.tar.bz2 && cd expat-2.6.4 && \
|
||
./configure --enable-static --disable-shared --prefix=/usr && \
|
||
make -j"$(nproc)" && make install && cd / && rm -rf /deps/expat-2.6.4*
|
||
|
||
# unbound 1.22.0（DNSSEC；release archive 需 flex/bison 现生成 lexer）
|
||
RUN wget -q https://github.com/NLnetLabs/unbound/archive/refs/tags/release-1.22.0.tar.gz -O unbound.tar.gz && \
|
||
tar xf unbound.tar.gz && cd unbound-release-1.22.0 && \
|
||
./configure --disable-shared --enable-static --prefix=/usr --with-libexpat=/usr --with-ssl=/usr \
|
||
--with-libevent=no --without-pythonmodule --without-pyunbound --with-libunbound-only --with-pic && \
|
||
make -j"$(nproc)" && make install && cd / && rm -rf /deps/unbound*
|
||
|
||
# ---- Stage 2: 换名 + patch + 编译 mond ----
|
||
FROM deps AS build
|
||
ARG MONERO_VERSION
|
||
ARG TARGETARCH
|
||
WORKDIR /src
|
||
RUN git clone --recursive --branch "${MONERO_VERSION}" --depth 1 --shallow-submodules \
|
||
https://github.com/monero-project/monero.git monero
|
||
WORKDIR /src/monero
|
||
# init.sh：monero→mond 换名 + musl fully-static patch（去 -pie、STATIC_FLAGS 改 -static）
|
||
COPY ./init.sh ./init.sh
|
||
RUN sh ./init.sh
|
||
RUN if [ "$TARGETARCH" = "arm64" ]; then MARCH=armv8-a; MTAG=linux-armv8; \
|
||
else MARCH=x86-64; MTAG=linux-x64; fi && \
|
||
cmake -S . -B build/release -DSTATIC=ON -DSTACK_TRACE=OFF -DBUILD_64=ON \
|
||
-DCMAKE_BUILD_TYPE=Release -DARCH="$MARCH" -DBUILD_TAG="$MTAG" -DUSE_DEVICE_TREZOR=OFF && \
|
||
make -j"$(nproc)" -C build/release daemon && \
|
||
mkdir -p /output && cp build/release/bin/mond /output/mond
|
||
|
||
# ---- Stage 3: 导出（保持 ci.yaml 期望的 linux_<arch>/mond 布局）----
|
||
FROM scratch
|
||
ARG TARGETARCH
|
||
COPY --from=build /output/mond /linux_${TARGETARCH}/mond
|