mirror of
https://github.com/CHN-beta/nixpkgs.git
synced 2026-01-11 18:32:23 +08:00
a4cc05972f
https://github.com/moby/moby/milestone/203?closed=1 Upstream did not tag a new release for docker/cli, and there are no new commits in the 25.0 branch:43987fca48...25.0 https://github.com/moby/moby/compare/v25.0.11...v25.0.12 (cherry picked from commitff6b64f296)
427 lines
13 KiB
Nix
427 lines
13 KiB
Nix
{ lib, callPackage }:
|
|
|
|
rec {
|
|
dockerGen =
|
|
{
|
|
version,
|
|
cliRev,
|
|
cliHash,
|
|
mobyRev,
|
|
mobyHash,
|
|
runcRev,
|
|
runcHash,
|
|
containerdRev,
|
|
containerdHash,
|
|
tiniRev,
|
|
tiniHash,
|
|
buildxSupport ? true,
|
|
composeSupport ? true,
|
|
sbomSupport ? false,
|
|
initSupport ? false,
|
|
# package dependencies
|
|
stdenv,
|
|
fetchFromGitHub,
|
|
fetchpatch,
|
|
buildGoModule,
|
|
makeWrapper,
|
|
installShellFiles,
|
|
pkg-config,
|
|
glibc,
|
|
go-md2man,
|
|
go,
|
|
containerd,
|
|
runc,
|
|
tini,
|
|
libtool,
|
|
bash,
|
|
sqlite,
|
|
iproute2,
|
|
docker-buildx,
|
|
docker-compose,
|
|
docker-sbom,
|
|
docker-init,
|
|
iptables,
|
|
e2fsprogs,
|
|
xz,
|
|
util-linux,
|
|
xfsprogs,
|
|
gitMinimal,
|
|
procps,
|
|
rootlesskit,
|
|
slirp4netns,
|
|
fuse-overlayfs,
|
|
nixosTests,
|
|
clientOnly ? !stdenv.hostPlatform.isLinux,
|
|
symlinkJoin,
|
|
withSystemd ? lib.meta.availableOn stdenv.hostPlatform systemd,
|
|
systemd,
|
|
withBtrfs ? stdenv.hostPlatform.isLinux,
|
|
btrfs-progs,
|
|
withLvm ? stdenv.hostPlatform.isLinux,
|
|
lvm2,
|
|
withSeccomp ? stdenv.hostPlatform.isLinux,
|
|
libseccomp,
|
|
knownVulnerabilities ? [ ],
|
|
}:
|
|
let
|
|
docker-meta = {
|
|
license = lib.licenses.asl20;
|
|
maintainers = with lib.maintainers; [
|
|
offline
|
|
vdemeester
|
|
periklis
|
|
teutat3s
|
|
];
|
|
};
|
|
|
|
docker-runc = runc.overrideAttrs {
|
|
pname = "docker-runc";
|
|
inherit version;
|
|
|
|
src = fetchFromGitHub {
|
|
owner = "opencontainers";
|
|
repo = "runc";
|
|
rev = runcRev;
|
|
hash = runcHash;
|
|
};
|
|
|
|
preBuild = ''
|
|
substituteInPlace Makefile --replace-warn "/bin/bash" "${stdenv.shell}"
|
|
'';
|
|
|
|
# docker/runc already include these patches / are not applicable
|
|
patches = [ ];
|
|
};
|
|
|
|
docker-containerd = containerd.overrideAttrs (oldAttrs: {
|
|
pname = "docker-containerd";
|
|
inherit version;
|
|
|
|
# We only need binaries
|
|
outputs = [ "out" ];
|
|
|
|
src = fetchFromGitHub {
|
|
owner = "containerd";
|
|
repo = "containerd";
|
|
rev = containerdRev;
|
|
hash = containerdHash;
|
|
};
|
|
|
|
buildInputs = oldAttrs.buildInputs ++ lib.optionals withSeccomp [ libseccomp ];
|
|
|
|
# See above
|
|
installTargets = "install";
|
|
});
|
|
|
|
docker-tini = tini.overrideAttrs {
|
|
pname = "docker-init";
|
|
inherit version;
|
|
|
|
src = fetchFromGitHub {
|
|
owner = "krallin";
|
|
repo = "tini";
|
|
rev = tiniRev;
|
|
hash = tiniHash;
|
|
};
|
|
|
|
# Do not remove static from make files as we want a static binary
|
|
postPatch = "";
|
|
|
|
buildInputs = [
|
|
glibc
|
|
glibc.static
|
|
];
|
|
|
|
env.NIX_CFLAGS_COMPILE = "-DMINIMAL=ON";
|
|
};
|
|
|
|
moby-src = fetchFromGitHub {
|
|
owner = "moby";
|
|
repo = "moby";
|
|
rev = mobyRev;
|
|
hash = mobyHash;
|
|
};
|
|
|
|
moby = buildGoModule (
|
|
lib.optionalAttrs stdenv.hostPlatform.isLinux rec {
|
|
pname = "moby";
|
|
inherit version;
|
|
|
|
src = moby-src;
|
|
|
|
vendorHash = null;
|
|
|
|
nativeBuildInputs = [
|
|
makeWrapper
|
|
pkg-config
|
|
go-md2man
|
|
go
|
|
libtool
|
|
installShellFiles
|
|
];
|
|
buildInputs = [
|
|
sqlite
|
|
]
|
|
++ lib.optional withLvm lvm2
|
|
++ lib.optional withBtrfs btrfs-progs
|
|
++ lib.optional withSystemd systemd
|
|
++ lib.optional withSeccomp libseccomp;
|
|
|
|
extraPath = lib.optionals stdenv.hostPlatform.isLinux (
|
|
lib.makeBinPath [
|
|
iproute2
|
|
iptables
|
|
e2fsprogs
|
|
xz
|
|
xfsprogs
|
|
procps
|
|
util-linux
|
|
gitMinimal
|
|
]
|
|
);
|
|
|
|
extraUserPath = lib.optionals (stdenv.hostPlatform.isLinux && !clientOnly) (
|
|
lib.makeBinPath [
|
|
rootlesskit
|
|
slirp4netns
|
|
fuse-overlayfs
|
|
]
|
|
);
|
|
|
|
postPatch = ''
|
|
patchShebangs hack/make.sh hack/make/ hack/with-go-mod.sh
|
|
'';
|
|
|
|
buildPhase = ''
|
|
export GOCACHE="$TMPDIR/go-cache"
|
|
# build engine
|
|
export AUTO_GOPATH=1
|
|
export DOCKER_GITCOMMIT="${cliRev}"
|
|
export VERSION="${version}"
|
|
./hack/make.sh dynbinary
|
|
'';
|
|
|
|
installPhase = ''
|
|
install -Dm755 ./bundles/dynbinary-daemon/dockerd $out/libexec/docker/dockerd
|
|
install -Dm755 ./bundles/dynbinary-daemon/docker-proxy $out/libexec/docker/docker-proxy
|
|
|
|
makeWrapper $out/libexec/docker/dockerd $out/bin/dockerd \
|
|
--prefix PATH : "$out/libexec/docker:$extraPath"
|
|
|
|
ln -s ${docker-containerd}/bin/containerd $out/libexec/docker/containerd
|
|
ln -s ${docker-containerd}/bin/containerd-shim $out/libexec/docker/containerd-shim
|
|
ln -s ${docker-runc}/bin/runc $out/libexec/docker/runc
|
|
ln -s ${docker-tini}/bin/tini-static $out/libexec/docker/docker-init
|
|
|
|
# systemd
|
|
install -Dm644 ./contrib/init/systemd/docker.service $out/etc/systemd/system/docker.service
|
|
substituteInPlace $out/etc/systemd/system/docker.service --replace-fail /usr/bin/dockerd $out/bin/dockerd
|
|
install -Dm644 ./contrib/init/systemd/docker.socket $out/etc/systemd/system/docker.socket
|
|
|
|
# rootless Docker
|
|
install -Dm755 ./contrib/dockerd-rootless.sh $out/libexec/docker/dockerd-rootless.sh
|
|
makeWrapper $out/libexec/docker/dockerd-rootless.sh $out/bin/dockerd-rootless \
|
|
--prefix PATH : "$out/libexec/docker:$extraPath:$extraUserPath"
|
|
'';
|
|
|
|
DOCKER_BUILDTAGS =
|
|
lib.optional withSystemd "journald"
|
|
++ lib.optional (!withBtrfs) "exclude_graphdriver_btrfs"
|
|
++ lib.optional (!withLvm) "exclude_graphdriver_devicemapper"
|
|
++ lib.optional withSeccomp "seccomp";
|
|
|
|
meta = docker-meta // {
|
|
homepage = "https://mobyproject.org/";
|
|
description = "A collaborative project for the container ecosystem to assemble container-based systems.";
|
|
};
|
|
}
|
|
);
|
|
|
|
plugins =
|
|
lib.optional buildxSupport docker-buildx
|
|
++ lib.optional composeSupport docker-compose
|
|
++ lib.optional sbomSupport docker-sbom
|
|
++ lib.optional initSupport docker-init;
|
|
pluginsRef = symlinkJoin {
|
|
name = "docker-plugins";
|
|
paths = plugins;
|
|
};
|
|
in
|
|
buildGoModule (
|
|
lib.optionalAttrs (!clientOnly) {
|
|
# allow overrides of docker components
|
|
# TODO: move packages out of the let...in into top-level to allow proper overrides
|
|
inherit
|
|
docker-runc
|
|
docker-containerd
|
|
docker-tini
|
|
moby
|
|
;
|
|
}
|
|
// rec {
|
|
pname = "docker";
|
|
inherit version;
|
|
|
|
src = fetchFromGitHub {
|
|
owner = "docker";
|
|
repo = "cli";
|
|
rev = cliRev;
|
|
hash = cliHash;
|
|
};
|
|
|
|
vendorHash = null;
|
|
|
|
nativeBuildInputs = [
|
|
makeWrapper
|
|
pkg-config
|
|
go-md2man
|
|
go
|
|
libtool
|
|
installShellFiles
|
|
];
|
|
|
|
buildInputs =
|
|
plugins
|
|
++ lib.optionals (stdenv.hostPlatform.isLinux) [
|
|
glibc
|
|
glibc.static
|
|
];
|
|
|
|
postPatch = ''
|
|
patchShebangs man scripts/build/
|
|
substituteInPlace ./scripts/build/.variables --replace-fail "set -eu" ""
|
|
''
|
|
+ lib.optionalString (plugins != [ ]) ''
|
|
substituteInPlace ./cli-plugins/manager/manager_unix.go --replace-fail /usr/libexec/docker/cli-plugins \
|
|
"${pluginsRef}/libexec/docker/cli-plugins"
|
|
'';
|
|
|
|
# Keep eyes on BUILDTIME format - https://github.com/docker/cli/blob/${version}/scripts/build/.variables
|
|
buildPhase = ''
|
|
export GOCACHE="$TMPDIR/go-cache"
|
|
|
|
# Mimic AUTO_GOPATH
|
|
mkdir -p .gopath/src/github.com/docker/
|
|
ln -sf $PWD .gopath/src/github.com/docker/cli
|
|
export GOPATH="$PWD/.gopath:$GOPATH"
|
|
export GITCOMMIT="${cliRev}"
|
|
export VERSION="${version}"
|
|
export BUILDTIME="1970-01-01T00:00:00Z"
|
|
make dynbinary
|
|
|
|
'';
|
|
|
|
outputs = [ "out" ];
|
|
|
|
installPhase = ''
|
|
runHook preInstall
|
|
|
|
install -Dm755 ./build/docker $out/libexec/docker/docker
|
|
|
|
makeWrapper $out/libexec/docker/docker $out/bin/docker \
|
|
--prefix PATH : "$out/libexec/docker:$extraPath"
|
|
''
|
|
+ lib.optionalString (!clientOnly) ''
|
|
# symlink docker daemon to docker cli derivation
|
|
ln -s ${moby}/bin/dockerd $out/bin/dockerd
|
|
ln -s ${moby}/bin/dockerd-rootless $out/bin/dockerd-rootless
|
|
|
|
# systemd
|
|
mkdir -p $out/etc/systemd/system
|
|
ln -s ${moby}/etc/systemd/system/docker.service $out/etc/systemd/system/docker.service
|
|
ln -s ${moby}/etc/systemd/system/docker.socket $out/etc/systemd/system/docker.socket
|
|
''
|
|
# Required to avoid breaking cross builds
|
|
+ lib.optionalString (stdenv.buildPlatform.canExecute stdenv.hostPlatform) ''
|
|
# completion (cli)
|
|
installShellCompletion --cmd docker \
|
|
--bash <($out/bin/docker completion bash) \
|
|
--fish <($out/bin/docker completion fish) \
|
|
--zsh <($out/bin/docker completion zsh)
|
|
''
|
|
+ ''
|
|
runHook postInstall
|
|
'';
|
|
|
|
passthru = {
|
|
# Exposed for tarsum build on non-linux systems (build-support/docker/default.nix)
|
|
inherit moby-src;
|
|
tests = lib.optionalAttrs (!clientOnly) { inherit (nixosTests) docker; };
|
|
};
|
|
|
|
meta = docker-meta // {
|
|
homepage = "https://www.docker.com/";
|
|
description = "Open source project to pack, ship and run any application as a lightweight container";
|
|
longDescription = ''
|
|
Docker is a platform designed to help developers build, share, and run modern applications.
|
|
|
|
To enable the docker daemon on NixOS, set the `virtualisation.docker.enable` option to `true`.
|
|
'';
|
|
mainProgram = "docker";
|
|
inherit knownVulnerabilities;
|
|
};
|
|
}
|
|
);
|
|
|
|
# Get revisions from
|
|
# https://github.com/moby/moby/tree/${version}/hack/dockerfile/install/*
|
|
docker_25 = callPackage dockerGen rec {
|
|
version = "25.0.12";
|
|
# Upstream forgot to tag release
|
|
# https://github.com/docker/cli/issues/5789
|
|
cliRev = "43987fca488a535d810c429f75743d8c7b63bf4f";
|
|
cliHash = "sha256-OwufdfuUPbPtgqfPeiKrQVkOOacU2g4ommHb770gV40=";
|
|
mobyRev = "v${version}";
|
|
mobyHash = "sha256-EBOdbFP6UBK1uhXi1IzcPxYihHikuzzwMvv2NHsksYk=";
|
|
runcRev = "v1.2.5";
|
|
runcHash = "sha256-J/QmOZxYnMPpzm87HhPTkYdt+fN+yeSUu2sv6aUeTY4=";
|
|
containerdRev = "v1.7.27";
|
|
containerdHash = "sha256-H94EHnfW2Z59KcHcbfJn+BipyZiNUvHe50G5EXbrIps=";
|
|
tiniRev = "v0.19.0";
|
|
tiniHash = "sha256-ZDKu/8yE5G0RYFJdhgmCdN3obJNyRWv6K/Gd17zc1sI=";
|
|
};
|
|
|
|
docker_26 = callPackage dockerGen rec {
|
|
version = "26.1.5";
|
|
cliRev = "v${version}";
|
|
cliHash = "sha256-UlN+Uc0YHhLyu14h5oDBXP4K9y2tYKPOIPTGZCe4PVY=";
|
|
mobyRev = "v${version}";
|
|
mobyHash = "sha256-6Hx7GnA7P6HqDlnGoc+HpPHSl69XezwAEGbvWYUVQlE=";
|
|
runcRev = "v1.1.12";
|
|
runcHash = "sha256-N77CU5XiGYIdwQNPFyluXjseTeaYuNJ//OsEUS0g/v0=";
|
|
containerdRev = "v1.7.18";
|
|
containerdHash = "sha256-IlK5IwniaBhqMgxQzV8btQcbdJkNEQeUMoh6aOsBOHQ=";
|
|
tiniRev = "v0.19.0";
|
|
tiniHash = "sha256-ZDKu/8yE5G0RYFJdhgmCdN3obJNyRWv6K/Gd17zc1sI=";
|
|
};
|
|
|
|
docker_27 = callPackage dockerGen rec {
|
|
version = "27.5.1";
|
|
cliRev = "v${version}";
|
|
cliHash = "sha256-7laxRfssh2aGfJeZI0PsJ/MCiy2npigSmCa1SUlWY4s=";
|
|
mobyRev = "v${version}";
|
|
mobyHash = "sha256-q+VCJZ93jvPJQE0xn89prH/6spsarVY3VUEmgwyMxU4=";
|
|
runcRev = "v1.2.4";
|
|
runcHash = "sha256-LdYCMxdqDP7rKo6Ek/B1DE6QvUFrltbSJVggkVkXQZo=";
|
|
containerdRev = "v1.7.25";
|
|
containerdHash = "sha256-T0F5bwxSCqa4Czs/W01NaAlJJFvgrzkBC1y/r+muivA=";
|
|
tiniRev = "v0.19.0";
|
|
tiniHash = "sha256-ZDKu/8yE5G0RYFJdhgmCdN3obJNyRWv6K/Gd17zc1sI=";
|
|
};
|
|
|
|
docker_28 = callPackage dockerGen rec {
|
|
version = "28.3.3";
|
|
cliRev = "v${version}";
|
|
cliHash = "sha256-+nYpd9VGzzMPcBUfGM7V9MkrslYHDSUlE0vhTqDGc1s=";
|
|
mobyRev = "v${version}";
|
|
mobyHash = "sha256-3SWjoF4sXVuYxnENq5n6ZzPJx6BQXnyP8VXTQaaUSFA=";
|
|
runcRev = "v1.2.6";
|
|
runcHash = "sha256-XMN+YKdQOQeOLLwvdrC6Si2iAIyyHD5RgZbrOHrQE/g=";
|
|
containerdRev = "v1.7.27";
|
|
containerdHash = "sha256-H94EHnfW2Z59KcHcbfJn+BipyZiNUvHe50G5EXbrIps=";
|
|
tiniRev = "v0.19.0";
|
|
tiniHash = "sha256-ZDKu/8yE5G0RYFJdhgmCdN3obJNyRWv6K/Gd17zc1sI=";
|
|
};
|
|
|
|
}
|