mirror of
https://github.com/vmware-tanzu/velero.git
synced 2026-08-16 12:16:06 +00:00
chlins
5a615ad580
Pin architecture-specific SHA-256 checksums for kubebuilder, protoc, and GoReleaser before installation. Signed-off-by: chlins <chlins.zhang@gmail.com>
122 lines
6.0 KiB
Docker
122 lines
6.0 KiB
Docker
# Copyright 2018, 2019, 2020 the Velero contributors.
|
|
#
|
|
# Licensed under the Apache License, Version 2.0 (the "License");
|
|
# you may not use this file except in compliance with the License.
|
|
# You may obtain a copy of the License at
|
|
#
|
|
# http://www.apache.org/licenses/LICENSE-2.0
|
|
#
|
|
# Unless required by applicable law or agreed to in writing, software
|
|
# distributed under the License is distributed on an "AS IS" BASIS,
|
|
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
# See the License for the specific language governing permissions and
|
|
# limitations under the License.
|
|
|
|
FROM --platform=$TARGETPLATFORM golang:1.26-trixie
|
|
|
|
ARG GOPROXY
|
|
ARG PROTOC_GEN_GO_VERSION
|
|
ARG GOIMPORTS_VERSION
|
|
|
|
ENV GO111MODULE=on
|
|
# Use a proxy for go modules to reduce the likelihood of various hosts being down and breaking the build
|
|
ENV GOPROXY=${GOPROXY}
|
|
|
|
# kubebuilder test bundle is separated from kubebuilder. Need to setup it for CI test.
|
|
# Using setup-envtest to download envtest binaries
|
|
RUN go install sigs.k8s.io/controller-runtime/tools/setup-envtest@v0.0.0-20260305094418-8122a6266696 && \
|
|
mkdir -p /usr/local/kubebuilder/bin && \
|
|
ENVTEST_ASSETS_DIR=$(setup-envtest use 1.33.0 --bin-dir /usr/local/kubebuilder/bin -p path) && \
|
|
cp -r ${ENVTEST_ASSETS_DIR}/* /usr/local/kubebuilder/bin/
|
|
|
|
RUN set -eux; \
|
|
ARCH="$(go env GOARCH)"; \
|
|
case "$ARCH" in \
|
|
amd64) KUBEBUILDER_SHA256="102bb0f586dcb50951aded67856483a2ee114057c56475b3cda6051a12832a72" ;; \
|
|
arm64) KUBEBUILDER_SHA256="0a340ea925c801aa71344becdefce96eda6fa0bc92352b9c7bcb36a4f8c56314" ;; \
|
|
ppc64le) KUBEBUILDER_SHA256="74473d094908caad852a77088f64bb64eb4c79497f6695eb5e9e8bc4bacd9409" ;; \
|
|
*) echo "Unsupported kubebuilder architecture: $ARCH" >&2; exit 1 ;; \
|
|
esac; \
|
|
FILE="kubebuilder_linux_$ARCH"; \
|
|
wget --quiet "https://github.com/kubernetes-sigs/kubebuilder/releases/download/v3.2.0/$FILE"; \
|
|
echo "$KUBEBUILDER_SHA256 $FILE" | sha256sum -c -; \
|
|
mv "$FILE" /usr/local/kubebuilder/bin/kubebuilder; \
|
|
chmod +x /usr/local/kubebuilder/bin/kubebuilder
|
|
|
|
# get controller-tools
|
|
RUN go install sigs.k8s.io/controller-tools/cmd/controller-gen@v0.16.5
|
|
|
|
# get goimports, version derived from go.mod's golang.org/x/tools requirement
|
|
# (see https://github.com/velero-io/velero/issues/10023)
|
|
RUN go install golang.org/x/tools/cmd/goimports@${GOIMPORTS_VERSION}
|
|
|
|
# get protoc compiler and golang plugin
|
|
WORKDIR /root
|
|
RUN apt-get update && apt-get install -y unzip
|
|
# protobuf uses bazel cpunames except following
|
|
# if cpu == "systemz":
|
|
# cpu = "s390_64"
|
|
# elif cpu == "aarch64":
|
|
# cpu = "aarch_64"
|
|
# elif cpu == "ppc64":
|
|
# cpu = "ppcle_64"
|
|
# snippet from: https://github.com/protocolbuffers/protobuf/blob/d445953603e66eb8992a39b4e10fcafec8501f24/protobuf_release.bzl#L18-L24
|
|
# cpu names: https://github.com/bazelbuild/platforms/blob/main/cpu/BUILD
|
|
RUN set -eux; \
|
|
GOARCH="$(go env GOARCH)"; \
|
|
case "$GOARCH" in \
|
|
amd64) ARCH="x86_64"; PROTOC_SHA256="78ab9c3288919bdaa6cfcec6127a04813cf8a0ce406afa625e48e816abee2878" ;; \
|
|
386) ARCH="x86_32"; PROTOC_SHA256="cc1c6e31a9b333c3e6d026aac5fdc1f7d70c6cd8851631505188ca9826acee5a" ;; \
|
|
arm64) ARCH="aarch_64"; PROTOC_SHA256="07683afc764e4efa3fa969d5f049fbc2bdfc6b4e7786a0b233413ac0d8753f6b" ;; \
|
|
ppc64|ppc64le) ARCH="ppcle_64"; PROTOC_SHA256="cea283337101ed08ff6c76a98461b1d871bac21f41dc1dabdfddaa5d99df9339" ;; \
|
|
s390x) ARCH="s390_64"; PROTOC_SHA256="8a13ec6518585f7664d58f929417c9e6d0c4aeedf3bcdd854aeafceb5ef0a389" ;; \
|
|
*) echo "Unsupported protoc architecture: $GOARCH" >&2; exit 1 ;; \
|
|
esac; \
|
|
echo "ARCH=$ARCH"; \
|
|
FILE="protoc-25.2-linux-$ARCH.zip"; \
|
|
wget --quiet "https://github.com/protocolbuffers/protobuf/releases/download/v25.2/$FILE"; \
|
|
echo "$PROTOC_SHA256 $FILE" | sha256sum -c -; \
|
|
unzip "$FILE"; \
|
|
rm "$FILE"; \
|
|
mv bin/protoc /usr/bin/protoc; \
|
|
mv include/google /usr/include; \
|
|
chmod a+x /usr/include/google; \
|
|
chmod a+x /usr/include/google/protobuf; \
|
|
chmod a+r -R /usr/include/google; \
|
|
chmod +x /usr/bin/protoc
|
|
RUN go install google.golang.org/protobuf/cmd/protoc-gen-go@${PROTOC_GEN_GO_VERSION} \
|
|
&& go install google.golang.org/grpc/cmd/protoc-gen-go-grpc@v1.3.0
|
|
|
|
# get goreleaser
|
|
# goreleaser name template per arch is basically goarch except for amd64 and 386 https://github.com/goreleaser/goreleaser/blob/ec8819a95c5527fae65e5cb41673f5bbc3245fda/.goreleaser.yaml#L167C1-L173C42
|
|
# {{- .ProjectName }}_
|
|
# {{- title .Os }}_
|
|
# {{- if eq .Arch "amd64" }}x86_64
|
|
# {{- else if eq .Arch "386" }}i386
|
|
# {{- else }}{{ .Arch }}{{ end }}
|
|
# {{- if .Arm }}v{{ .Arm }}{{ end -}}
|
|
RUN set -eux; \
|
|
GOARCH="$(go env GOARCH)"; \
|
|
case "$GOARCH" in \
|
|
amd64) ARCH="x86_64"; GORELEASER_SHA256="cfbdf12e3ea20e4c3a209d07311f43c2e0baf20d5cce09bcdc232567e0f34307" ;; \
|
|
386) ARCH="i386"; GORELEASER_SHA256="21c236575cccd29588182b570b4ffe83ad8fb96cd3b13b2af79feafd8ae37b1b" ;; \
|
|
arm64) ARCH="arm64"; GORELEASER_SHA256="2b984e2932b24be0d638c7dab7357a59d86eb79ca7fee1afd31be5ebb1847cbb" ;; \
|
|
arm) ARCH="armv7"; GORELEASER_SHA256="6db2899885be19f123b36192a42dcfb3bb2b3e1009fec7277517969e96d8a7c6" ;; \
|
|
ppc64|ppc64le) ARCH="ppc64"; GORELEASER_SHA256="76d060ebb8d48e76fde45983f87040fe3ac0ca37c5ace4648a956959b81bfdf0" ;; \
|
|
*) echo "Unsupported goreleaser architecture: $GOARCH" >&2; exit 1 ;; \
|
|
esac; \
|
|
FILE="goreleaser_Linux_$ARCH.tar.gz"; \
|
|
wget --quiet "https://github.com/goreleaser/goreleaser/releases/download/v1.26.2/$FILE"; \
|
|
echo "$GORELEASER_SHA256 $FILE" | sha256sum -c -; \
|
|
tar xvf "$FILE"; \
|
|
mv goreleaser /usr/bin/goreleaser; \
|
|
chmod +x /usr/bin/goreleaser
|
|
|
|
# get golangci-lint
|
|
# Use "go install" so the download goes through GOPROXY instead of the GitHub
|
|
# release API/CDN, which has been returning intermittent/persistent HTTP 504s.
|
|
RUN go install github.com/golangci/golangci-lint/v2/cmd/golangci-lint@v2.5.0
|
|
|
|
# Fix the "dubious ownership" issue from git when running goreleaser.sh
|
|
RUN echo "[safe] \n\t directory = *" > /.gitconfig
|