Update Dockerfile for Bitcoin Core Build

- Change base image from debian:bullseye-slim to debian:bookworm-slim.
- Introduce BITCOIN_VERSION as an ARG for flexible version specification.
- Update build steps to use CMake instead of autotools, reflecting changes in the Bitcoin build process.
- Install additional dependencies: cmake and libsqlite3-dev during the build stage.
- Modify final image dependencies to use libssl3 and add libevent-extra-2.1-7.
- Correct paths for bitcoind and bitcoin-cli to reflect the new CMake build structure.
- Create a non-root 'bitcoin' user for running the container, improving security.
- Set the user to 'bitcoin' for container runtime.
- Keep volumes and work directory setup for Bitcoin data and configurations.

Signed-off-by: Artem Barger <artem@bargr.net>

Author: C0rWin

Dockerfile

@@ -1,8 +1,11 @@
 # Stage 1: Build bitcoin core
-FROM debian:bullseye-slim AS builder
+FROM debian:bookworm-slim AS builder
+
+ARG BITCOIN_VERSION=v29.0
 
 RUN apt-get update && apt-get install -y \
     automake \
+    cmake \
     autotools-dev \
     build-essential \
     git \
@@ -19,41 +22,49 @@ RUN apt-get update && apt-get install -y \
     libevent-dev \
     libdb++-dev \
     bsdmainutils \
+    libsqlite3-dev \
     && rm -rf /var/lib/apt/lists/*
 
 WORKDIR /bitcoin
 RUN git clone https://github.com/bitcoin/bitcoin.git . \
-    && git checkout v25.1 \
-    && ./autogen.sh \
-    && ./configure --disable-wallet --without-gui --without-miniupnpc \
-    && make -j$(nproc) \
-    && strip src/bitcoin-cli
+    && git checkout -b ${BITCOIN_VERSION} ${BITCOIN_VERSION} \
+    && cmake -B build \
+    && cmake --build build -j$(nproc)  
 
 # Stage 2: Final image
-FROM debian:bullseye-slim
+FROM debian:bookworm-slim
 
 RUN apt-get update && apt-get install -y \
     libboost-system1.74.0 \
     libboost-filesystem1.74.0 \
     libboost-chrono1.74.0 \
     libboost-program-options1.74.0 \
     libboost-thread1.74.0 \
-    libssl1.1 \
+    libssl3 \
     libevent-2.1-7 \
+    libevent-extra-2.1-7 \
     libevent-pthreads-2.1-7 \
     iproute2 \
     iptables \
+    libsqlite3-0 \
     && rm -rf /var/lib/apt/lists/*
 
-COPY --from=builder /bitcoin/src/bitcoind /usr/local/bin/
-COPY --from=builder /bitcoin/src/bitcoin-cli /usr/local/bin/
+COPY --from=builder /bitcoin/build/bin/bitcoind /usr/local/bin/
+COPY --from=builder /bitcoin/build/bin/bitcoin-cli /usr/local/bin/
 
 RUN mkdir -p /bitcoin
 
+# Create bitcoin user and group
+RUN groupadd -r bitcoin && \
+    useradd -r -g bitcoin -s /sbin/nologin -c "Bitcoin node user" bitcoin && \
+    chown -R bitcoin:bitcoin /bitcoin
+
 VOLUME ["/bitcoin"]
 WORKDIR /bitcoin
 
 # Expose RPC ports
 EXPOSE 8332 8333
 
+USER bitcoin
+
 ENTRYPOINT ["bitcoind", "-datadir=/bitcoin/.bitcoin", "-conf=/bitcoin/bitcoin.conf", "-rpcbind=0.0.0.0", "-daemon=0"]