mirror of
https://github.com/serai-dex/serai.git
synced 2024-11-17 01:17:36 +00:00
57 lines
1.9 KiB
Docker
57 lines
1.9 KiB
Docker
# Configure Environment
|
|
FROM alpine:latest as builder
|
|
|
|
ENV BITCOIN_VERSION=25.1
|
|
|
|
WORKDIR /home/bitcoin
|
|
|
|
RUN apk --no-cache add git gnupg
|
|
|
|
# Download Bitcoin
|
|
RUN wget https://bitcoincore.org/bin/bitcoin-core-${BITCOIN_VERSION}/bitcoin-${BITCOIN_VERSION}-x86_64-linux-gnu.tar.gz \
|
|
&& wget https://bitcoincore.org/bin/bitcoin-core-${BITCOIN_VERSION}/SHA256SUMS \
|
|
&& wget https://bitcoincore.org/bin/bitcoin-core-${BITCOIN_VERSION}/SHA256SUMS.asc
|
|
|
|
# Verify all sigs and check for a valid signature from laanwj -- 71A3
|
|
RUN git clone https://github.com/bitcoin-core/guix.sigs && \
|
|
cd guix.sigs/builder-keys && \
|
|
find . -iname '*.gpg' -exec gpg --import {} \; && \
|
|
gpg --verify --status-fd 1 --verify ../../SHA256SUMS.asc ../../SHA256SUMS | grep "^\[GNUPG:\] VALIDSIG.*71A3B16735405025D447E8F274810B012346C9A6"
|
|
|
|
RUN grep bitcoin-${BITCOIN_VERSION}-x86_64-linux-gnu.tar.gz SHA256SUMS | sha256sum -c
|
|
|
|
# Prepare Image
|
|
RUN tar xzvf bitcoin-${BITCOIN_VERSION}-x86_64-linux-gnu.tar.gz
|
|
RUN mv bitcoin-${BITCOIN_VERSION}/bin/bitcoind .
|
|
|
|
# Also build mimalloc
|
|
FROM debian:bookworm-slim as mimalloc
|
|
|
|
RUN apt update && apt upgrade -y && apt install -y gcc g++ make cmake git
|
|
RUN git clone https://github.com/microsoft/mimalloc && \
|
|
cd mimalloc && \
|
|
mkdir -p out/secure && \
|
|
cd out/secure && \
|
|
cmake -DMI_SECURE=ON ../.. && \
|
|
make && \
|
|
cp ./libmimalloc-secure.so ../../../libmimalloc.so
|
|
|
|
# Build the actual image
|
|
FROM debian:bookworm-slim as image
|
|
|
|
COPY --from=mimalloc libmimalloc.so /usr/lib
|
|
RUN echo "/usr/lib/libmimalloc.so" >> /etc/ld.so.preload
|
|
|
|
# Upgrade packages
|
|
RUN apt update && apt upgrade -y && apt autoremove -y && apt clean
|
|
|
|
# Switch to a non-root user
|
|
RUN useradd --system --create-home --shell /sbin/nologin bitcoin
|
|
USER bitcoin
|
|
WORKDIR /home/bitcoin
|
|
|
|
COPY --from=builder --chown=bitcoin /home/bitcoin/bitcoind /bin
|
|
COPY ./scripts /scripts
|
|
|
|
EXPOSE 8332 8333 18332 18333 18443 18444
|
|
# VOLUME ["/home/bitcoin/.bitcoin"]
|