-
Notifications
You must be signed in to change notification settings - Fork 1
Expand file tree
/
Copy pathDockerfile
More file actions
107 lines (96 loc) · 3.11 KB
/
Copy pathDockerfile
File metadata and controls
107 lines (96 loc) · 3.11 KB
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
# Adapted from https://github.com/docker-library/python
FROM alpine:latest as builder
# ensure local python is preferred over distribution python
ENV PATH /usr/local/bin:$PATH
ENV GPG_KEY CBC547978A3964D14B9AB36A6AF053F07D9DC8D2
ENV PYTHON_VERSION 2.3.7
COPY mvl.asc /tmp/mvl.asc
# install ca-certificates so that HTTPS works consistently
# other runtime dependencies for Python are installed later
RUN set -ex \
&& apk update \
&& apk add --no-cache ca-certificates \
&& apk add --no-cache --virtual .fetch-deps \
gnupg \
tar \
bzip2 \
\
&& wget -O python.tar.bz2 "https://www.python.org/ftp/python/${PYTHON_VERSION%%[a-z]*}/Python-$PYTHON_VERSION.tar.bz2" \
&& wget -O python.tar.bz2.asc "https://www.python.org/ftp/python/${PYTHON_VERSION%%[a-z]*}/Python-$PYTHON_VERSION.tar.bz2.asc" \
&& export GNUPGHOME="$(mktemp -d)" \
#&& (gpg --batch --keyserver ha.pool.sks-keyservers.net --recv-keys "$GPG_KEY" \
# || gpg --batch --keyserver pgp.mit.edu --recv-keys "$GPG_KEY" \
# || gpg --batch --keyserver keyserver.pgp.com --recv-keys "$GPG_KEY" ) \
&& gpg --batch --import /tmp/mvl.asc \
&& gpg --batch --verify python.tar.bz2.asc python.tar.bz2 \
&& { command -v gpgconf > /dev/null && gpgconf --kill all || :; } \
&& rm -rf "$GNUPGHOME" python.tar.bz2.asc \
&& mkdir -p /usr/src/python \
&& tar -xjC /usr/src/python --strip-components=1 -f python.tar.bz2 \
&& rm python.tar.bz2 \
\
&& apk add --no-cache --virtual .build-deps \
bzip2-dev \
coreutils \
dpkg-dev dpkg \
expat-dev \
findutils \
gcc \
gdbm-dev \
libc-dev \
libffi-dev \
libnsl-dev \
libressl-dev \
libtirpc-dev \
linux-headers \
make \
ncurses-dev \
patch \
pax-utils \
readline-dev \
readline \
sqlite-dev \
tcl-dev \
tk \
tk-dev \
zlib-dev
COPY posix_close_py256.patch /tmp/posix_close.patch
COPY no_nis_py237.patch /tmp/no_nis.patch
RUN set -ex \
&& cd /usr/src/python \
&& patch -p1 < /tmp/posix_close.patch \
&& patch -p1 < /tmp/no_nis.patch \
&& gnuArch="$(dpkg-architecture --query DEB_BUILD_GNU_TYPE)" \
&& ./configure \
--build="$gnuArch" \
--enable-shared \
--enable-unicode=ucs4 \
--with-system-expat \
--with-system-ffi \
--without-cxx \
&& make -j "$(nproc)" \
# set thread stack size to 1MB so we don't segfault before we hit sys.getrecursionlimit()
# https://github.com/alpinelinux/aports/commit/2026e1259422d4e0cf92391ca2d3844356c649d0
EXTRA_CFLAGS="-DTHREAD_STACK_SIZE=0x100000" \
&& make install \
\
&& find /usr/local -type f -executable -not \( -name '*tkinter*' \) -exec scanelf --needed --nobanner --format '%n#p' '{}' ';' \
| tr ',' '\n' \
| sort -u \
| awk 'system("[ -e /usr/local/lib/" $1 " ]") == 0 { next } { print "so:" $1 }' \
| xargs -rt apk add --no-cache --virtual .python-rundeps \
&& find /usr/local -depth \
\( \
\( -type f -a \( -name '*.pyc' -o -name '*.pyo' \) \) \
\) -exec rm -rf '{}' + \
\
&& python -V
FROM alpine:latest
# ensure local python is preferred over distribution python
ENV PATH /usr/local/bin:$PATH
RUN set -ex \
&& apk update \
&& apk add --no-cache ca-certificates \
readline
COPY --from=builder /usr/local /usr/local/
CMD ["python"]