blob: b737df420928a4ccf38527aaf300282f6653dea1 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
|
# Auto generated from tcwg-base/Dockerfile.in. Do not edit.
FROM linaro/base-arm64-ubuntu:trusty
RUN (url="http://ports.ubuntu.com/ubuntu-ports/"; \
ubuntu=trusty; \
for i in $ubuntu $ubuntu-updates $ubuntu-backports $ubuntu-security; do \
for j in deb deb-src; do \
echo "$j $url $i main restricted universe multiverse"; \
done; \
echo; \
done) > /etc/apt/sources.list \
&& apt-get update \
&& DEBIAN_FRONTEND=noninteractive apt-get dist-upgrade -y \
&& DEBIAN_FRONTEND=noninteractive apt-get install -y devscripts \
&& DEBIAN_FRONTEND=noninteractive apt-get install -y --no-install-recommends \
alien \
autoconf \
autogen \
automake \
bc \
bind9-host \
bison \
bsd-mailx \
build-essential \
byacc \
ccache \
ccrypt \
chrpath \
clang \
cmake \
debhelper \
dejagnu \
dh-autoreconf \
dh-translations \
distro-info-data \
emacs \
fakeroot \
flex \
gawk \
gdb \
gdbserver \
git \
git-review \
groff \
less \
libexpat1-dev \
libgmp-dev \
liblzma-dev \
libmpc-dev \
libmpfr-dev \
libncurses5-dev \
libpython2.7-dev \
libreadline-dev \
libssl-dev \
libtcnative-1 \
libtool \
linux-tools-generic \
lzop \
make \
net-tools \
netcat \
ninja-build \
openjdk-7-jdk \
openssh-server \
python-dev \
postfix \
psmisc \
pxz \
qemu-system-arm \
qemu-user \
rsync \
subversion \
sudo \
tclsh \
texinfo \
texlive-fonts-recommended \
texlive-latex-recommended \
time \
valgrind \
vim \
python-virtualenv \
wget \
xz-utils \
zip \
zlib1g-dev \
&& apt-get clean \
&& rm -rf \
/var/lib/apt/lists/* \
/tmp/* \
/var/tmp/*
RUN install -D -p -m0755 /usr/share/doc/git/contrib/workdir/git-new-workdir /usr/local/bin/git-new-workdir \
&& sed -i -e 's:^session *required *pam_loginuid.so:# session required pam_loginuid.so:' /etc/pam.d/sshd \
&& mkdir -p /var/run/sshd \
&& sed -i \
-e "/.*MaxStartups.*/d" \
-e "/.*MaxSessions.*/d" /etc/ssh/sshd_config \
&& echo "MaxStartups 256" >> /etc/ssh/sshd_config \
&& echo "MaxSessions 256" >> /etc/ssh/sshd_config
COPY postfix-main.cf.in /etc/postfix/main.cf
COPY postfix-sasl_password.in /etc/postfix/sasl_password
RUN chown root:root /etc/postfix/sasl_password \
&& chmod 600 /etc/postfix/sasl_password
# Add ninja with support for memory-threshold job limitation.
# It's installed with ".bin" extension and containers then
# make wrappers around it in /usr/local/bin/ninja as needed.
RUN git clone -b master https://github.com/maxim-kuvyrkov/ninja.git \
&& cd ninja \
&& ./configure.py --bootstrap && ./ninja all && ./ninja_test \
&& mv ninja /usr/local/bin/ninja.bin \
&& cd .. \
&& rm -rf ninja
COPY home-data/ /home-data/
COPY new-user.sh /usr/local/bin/
RUN \
while read line; do \
new-user.sh --group $(echo "$line" | cut -d: -f 1,3); \
done </home-data/group
# We use ssh multiplexing, which creates sockets in /tmp. Overlayfs,
# which docker is using, can't host sockets, so we use a scratch mount
# for /tmp. This requires that we add --rm option to "docker run"
# invocations (e.g., mark "Remove volumes" checkbox in docker plugin) to
# cleanup host directories used for the scratch mounts.
VOLUME /tmp
EXPOSE 22
CMD ["/usr/sbin/sshd", "-D"]
# checksum: 8e27f9af3198d0de8cea0cc95b24af3e
|
