Dockerfile.ubi.amd64

# syntax = docker/dockerfile:1.0-experimental
#
# Copyright (C) 2022 IBM Corporation.
#
# Authors:
# Frederico Araujo <frederico.araujo@ibm.com>
# Teryl Taylor <terylt@ibm.com>
#
# Licensed under the Apache License, Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
# You may obtain a copy of the License at
#
#     http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.

#-----------------------
# Usage
#-----------------------
#
# 1. Add scripts/build/rhpassword and scripts/build/rhuser and update them
#    with user/password for RHEL subscription manager
# 2. Build with Docker BuildKit:
#
#    DOCKER_BUILDKIT=1 docker build --no-cache \
#                                   --build-arg UBI_VER=8.4-206
#                                   --secret id=rhuser,src=scripts/build/rhuser \
#                                   --secret id=rhpassword,src=scripts/build/rhpassword \
#                                   --target mods \
#                                   -t ubi:mods-0.0.0 \
#                                   -f Dockerfile.ubi.amd64 .
#

ARG UBI_VER

#-----------------------
# Stage: base
#-----------------------
FROM registry.access.redhat.com/ubi9/ubi:${UBI_VER} AS base

# To enable subscription manager on ubi9
# https://access.redhat.com/discussions/5889431
ENV SMDEV_CONTAINER_OFF=1

# Install Packages
# Copy in llvm 9.0 rpms. Falco's ebpf probe fails unless compiled with llvm 7 to 12 for now.
# https://github.com/falcosecurity/libs/issues/4
COPY ./scripts/dev/rpms /build/rpms
COPY ./scripts/installUBIDependency.sh /build/install.sh

RUN --mount=type=secret,id=rhuser,dst=/secret/rhuser --mount=type=secret,id=rhpassword,dst=/secret/rhpassword \
 ( export REGISTER_USER=$(cat /secret/rhuser) && export REGISTER_PASSWORD=$(cat /secret/rhpassword) && bash /build/install.sh base ) && \
     rm -rf /build

#-----------------------
# Stage: mods
#-----------------------
FROM base AS mods

# environment and args
ARG INSTALL_PATH=/usr/local/sysflow

ENV PATH="$PATH:"${INSTALL_PATH}"/modules/bin"

ENV HOST_ROOT=/host

ENV HOME=/root

ARG MAKE_JOBS=1

ARG ARCH=x86_64

#  build modules
COPY ./modules /build/modules
COPY ./makefile.* /build/
COPY ./docker-entry-ubi.sh /usr/local/sysflow/modules/bin/
RUN  dnf -y install git && \
     cd /build/modules && \
     make INSTALL_PATH=${INSTALL_PATH} MAKE_JOBS=${MAKE_JOBS} install && \
     make clean && rm -rf /build/modules && \
     dnf -y remove git && dnf -y clean all && rm -rf /var/cache/dnf