-
Notifications
You must be signed in to change notification settings - Fork 0
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
- Loading branch information
Showing
4 changed files
with
25 additions
and
285 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file was deleted.
Oops, something went wrong.
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
|
|
@@ -7,24 +7,12 @@ ARG ALPINE_VERSION="3.20" | |
| # Builder | ||
| # -------------------------------------------------------- | ||
|
|
||
| FROM golang:${GO_VERSION}-alpine${ALPINE_VERSION} AS builder | ||
| FROM golang:${GO_VERSION}-alpine${ALPINE_VERSION} AS release | ||
|
|
||
| # Always set by buildkit | ||
| ARG TARGETPLATFORM | ||
| ARG TARGETARCH | ||
| ARG TARGETOS | ||
| ARG XIOND_BINARY | ||
|
|
||
| # needed in makefile | ||
| ARG COMMIT | ||
| ARG VERSION | ||
|
|
||
| # Consume Args to env | ||
| ENV COMMIT=${COMMIT} \ | ||
| VERSION=${VERSION} \ | ||
| GOOS=${TARGETOS} \ | ||
| GOARCH=${TARGETARCH} \ | ||
| XIOND_BINARY=${XIOND_BINARY} | ||
|
|
||
| # Install dependencies | ||
| RUN set -eux; \ | ||
|
|
@@ -36,142 +24,22 @@ RUN set -eux; \ | |
| git | ||
|
|
||
| # Set the workdir | ||
| WORKDIR /go/src/github.com/burnt-labs/xion | ||
| WORKDIR /go/src/cosmossdk.io/tools/cosmovisor | ||
|
|
||
| # Download go dependencies | ||
| COPY go.mod go.sum ./ | ||
| # install cosmovisor | ||
| RUN --mount=type=cache,target=/root/.cache/go-build \ | ||
| --mount=type=cache,target=/root/pkg/mod \ | ||
| set -eux; \ | ||
| go install cosmossdk.io/tools/cosmovisor/cmd/[email protected]; \ | ||
| go mod download | ||
| go install cosmossdk.io/tools/cosmovisor/cmd/[email protected]; | ||
|
|
||
| # Cosmwasm - Download correct libwasmvm version | ||
| RUN set -eux; \ | ||
| WASMVM_REPO="github.com/CosmWasm/wasmvm"; \ | ||
| WASMVM_MOD_VERSION="$(grep ${WASMVM_REPO} go.mod | cut -d ' ' -f 1)"; \ | ||
| WASMVM_VERSION="$(go list -m ${WASMVM_MOD_VERSION} | cut -d ' ' -f 2)"; \ | ||
| [ ${TARGETPLATFORM} = "linux/amd64" ] && LIBWASM="libwasmvm_muslc.x86_64.a"; \ | ||
| [ ${TARGETPLATFORM} = "linux/arm64" ] && LIBWASM="libwasmvm_muslc.aarch64.a"; \ | ||
| [ ${TARGETOS} = "darwin" ] && LIBWASM="libwasmvmstatic_darwin.a"; \ | ||
| [ -z "$LIBWASM" ] && echo "Arch ${TARGETARCH} not recognized" && exit 1; \ | ||
| wget "https://${WASMVM_REPO}/releases/download/${WASMVM_VERSION}/${LIBWASM}" -O "/lib/${LIBWASM}"; \ | ||
| # verify checksum | ||
| EXPECTED=$(wget -q "https://${WASMVM_REPO}/releases/download/${WASMVM_VERSION}/checksums.txt" -O- | grep "${LIBWASM}" | awk '{print $1}'); \ | ||
| sha256sum "/lib/${LIBWASM}" | grep "${EXPECTED}"; \ | ||
| cp /lib/${LIBWASM} /lib/libwasmvm_muslc.a; | ||
|
|
||
| # Copy local files | ||
| COPY . . | ||
|
|
||
| # Build xiond binary | ||
| RUN --mount=type=cache,target=/root/.cache/go-build \ | ||
| --mount=type=cache,target=/root/pkg/mod \ | ||
| if [ -e "${XIOND_BINARY:-}" ]; then \ | ||
| cp "${XIOND_BINARY}" /go/bin/xiond; \ | ||
| else \ | ||
| export CGO_ENABLED=1 LINK_STATICALLY=true BUILD_TAGS=muslc; \ | ||
| make test-version; \ | ||
| make install; \ | ||
| fi | ||
|
|
||
| # -------------------------------------------------------- | ||
| # Heighliner | ||
| # -------------------------------------------------------- | ||
|
|
||
| # Build final image from scratch | ||
| FROM scratch AS heighliner | ||
|
|
||
| WORKDIR /bin | ||
| ENV PATH=/bin | ||
|
|
||
| # Install busybox | ||
| COPY --from=busybox:1.36-musl /bin/busybox /bin/busybox | ||
|
|
||
| # users and group | ||
| COPY --from=busybox:1.36-musl /etc/passwd /etc/group /etc/ | ||
|
|
||
| # Install trusted CA certificates | ||
| COPY --from=builder /etc/ssl/cert.pem /etc/ssl/cert.pem | ||
|
|
||
| # Install xiond | ||
| COPY --from=builder /go/bin/xiond /bin/xiond | ||
|
|
||
| # Install jq | ||
| COPY --from=ghcr.io/strangelove-ventures/infra-toolkit:v0.1.4 /usr/local/bin/jq /bin/jq | ||
|
|
||
| # link shell | ||
| RUN ["busybox", "ln", "/bin/busybox", "sh"] | ||
|
|
||
| # Add hard links for read-only utils | ||
| # Will then only have one copy of the busybox minimal binary file with all utils pointing to the same underlying inode | ||
| RUN set -eux; \ | ||
| for bin in \ | ||
| cat \ | ||
| date \ | ||
| df \ | ||
| du \ | ||
| env \ | ||
| grep \ | ||
| head \ | ||
| less \ | ||
| ls \ | ||
| md5sum \ | ||
| pwd \ | ||
| sha1sum \ | ||
| sha256sum \ | ||
| sha3sum \ | ||
| sha512sum \ | ||
| sleep \ | ||
| stty \ | ||
| tail \ | ||
| tar \ | ||
| tee \ | ||
| tr \ | ||
| watch \ | ||
| which \ | ||
| ; do busybox ln /bin/busybox $bin; \ | ||
| for LIBWASM in "libwasmvm_muslc.x86_64.a" "libwasmvm_muslc.aarch64.a" "libwasmvmstatic_darwin.a"; \ | ||
| wget "https://${WASMVM_REPO}/releases/download/${WASMVM_VERSION}/${LIBWASM}" -O "/lib/${LIBWASM}"; \ | ||
| # verify checksum | ||
| EXPECTED=$(wget -q "https://${WASMVM_REPO}/releases/download/${WASMVM_VERSION}/checksums.txt" -O- | grep "${LIBWASM}" | awk '{print $1}'); \ | ||
| sha256sum "/lib/${LIBWASM}" | grep "${EXPECTED}"; \ | ||
| done; | ||
|
|
||
| RUN set -eux; \ | ||
| busybox mkdir -p /tmp /home/heighliner; \ | ||
| busybox addgroup --gid 1025 -S heighliner; \ | ||
| busybox adduser --uid 1025 -h /home/heighliner -S heighliner -G heighliner; \ | ||
| busybox chown 1025:1025 /tmp /home/heighliner; \ | ||
| busybox unlink busybox; | ||
|
|
||
| WORKDIR /home/heighliner | ||
| USER heighliner | ||
|
|
||
| # -------------------------------------------------------- | ||
| # Runner | ||
| # -------------------------------------------------------- | ||
|
|
||
| FROM alpine:${ALPINE_VERSION} AS release | ||
| COPY --from=builder /go/bin/xiond /usr/bin/xiond | ||
| COPY --from=builder /go/bin/cosmovisor /usr/bin/cosmovisor | ||
|
|
||
| # api | ||
| EXPOSE 1317 | ||
| # grpc | ||
| EXPOSE 9090 | ||
| # p2p | ||
| EXPOSE 26656 | ||
| # rpc | ||
| EXPOSE 26657 | ||
| # prometheus | ||
| EXPOSE 26660 | ||
|
|
||
| RUN set -euxo pipefail; \ | ||
| apk add --no-cache bash openssl curl htop jq lz4 tini; \ | ||
| addgroup --gid 1000 -S xiond; \ | ||
| adduser --uid 1000 -S xiond \ | ||
| --disabled-password \ | ||
| --gecos xiond \ | ||
| --ingroup xiond; \ | ||
| mkdir -p /home/xiond; \ | ||
| chown -R xiond:xiond /home/xiond | ||
|
|
||
| USER xiond:xiond | ||
| WORKDIR /home/xiond/.xiond | ||
| CMD ["/usr/bin/xiond"] | ||