curl-http3-deb/Dockerfile at main · compscidr/curl-http3-deb · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
FROM ubuntu:26.04 as prereqs
# based on the ngtcp2 version at https://curl.se/docs/http3.html
LABEL maintainer="ernstjason1@gmail.com"

RUN apt-get update && DEBIAN_FRONTEND=noninteractive apt-get install -y --no-install-recommends \
    wget \
    ca-certificates \
    xz-utils \
    checkinstall \
    fakeroot \
    git \
    cmake \
    make \
    g++ \
    gcc \
    automake \
    libtool \
    pkg-config \
    rsync \
    && apt-get clean \
    && update-ca-certificates

# openssl
FROM prereqs as build
WORKDIR /usr/src/
RUN git clone --depth 1 -b openssl-3.0.0+quic https://github.com/quictls/openssl || \
    git -c http.sslverify=false clone --depth 1 -b openssl-3.0.0+quic https://github.com/quictls/openssl
WORKDIR /usr/src/openssl
RUN ./config enable-tls1_3 --prefix=/usr/local/ssl --openssldir=/usr/local/ssl
RUN make
# Use DESTDIR to stage OpenSSL installation then let checkinstall monitor a simple copy
RUN mkdir -p /tmp/openssl-install
RUN make DESTDIR=/tmp/openssl-install install
RUN fakeroot checkinstall --addso=yes -D --install=yes -y --pkgname=openssl --pkgversion=$(git branch | sed -n 's/* openssl-//p')-jammy \
    --pkglicense="See upstream" --pakdir=/ --maintainer="Jason Ernst" --nodoc --backup=no \
    sh -c 'cd /tmp/openssl-install && tar -cf - . | tar -xf - -C / 2>/dev/null || true'
RUN ldconfig

# nghttp3
WORKDIR /usr/src/
RUN git clone --recursive https://github.com/ngtcp2/nghttp3 || \
    git -c http.sslverify=false clone --recursive https://github.com/ngtcp2/nghttp3
WORKDIR /usr/src/nghttp3
RUN autoreconf -fi -I /usr/share/aclocal/ # https://github.com/nghttp2/nghttp2/issues/620#issuecomment-244531257
RUN ./configure --prefix=/usr/local/nghttp3 --enable-lib-only
RUN make
# Use DESTDIR staging approach for nghttp3
RUN mkdir -p /tmp/nghttp3-install
RUN make DESTDIR=/tmp/nghttp3-install install
RUN fakeroot checkinstall --addso=yes -D --install=yes -y --pkgname=nghttp3 --pkgversion=$(git describe --tags | cut -c2-)-jammy \
    --pkglicense="See upstream" --pakdir=/ --maintainer="Jason Ernst" --nodoc --backup=no \
    sh -c 'cd /tmp/nghttp3-install && tar -cf - . | tar -xf - -C / 2>/dev/null || true'
RUN ldconfig

# ngtcp2
WORKDIR /usr/src/
RUN git clone https://github.com/ngtcp2/ngtcp2 || \
    git -c http.sslverify=false clone https://github.com/ngtcp2/ngtcp2
WORKDIR /usr/src/ngtcp2
RUN autoreconf -fi
RUN ./configure PKG_CONFIG_PATH=/usr/local/ssl/lib64/pkgconfig:/usr/local/nghttp3/lib/pkgconfig \
    LDFLAGS="-Wl,-rpath,/usr/local/ssl/lib64" --prefix=/usr/local/ngtcp2 --enable-lib-only
RUN make
# Use DESTDIR staging approach for ngtcp2
RUN mkdir -p /tmp/ngtcp2-install
RUN make DESTDIR=/tmp/ngtcp2-install install
RUN fakeroot checkinstall --addso=yes -D --install=yes -y --pkgname=ngtcp2 --pkgversion=$(git describe --tags --always | cut -c2-)-jammy \
    --pkglicense="See upstream" --pakdir=/ --maintainer="Jason Ernst" --nodoc --backup=no --requires="openssl,nghttp3" \
    sh -c 'cd /tmp/ngtcp2-install && tar -cf - . | tar -xf - -C / 2>/dev/null || true'
RUN ldconfig

# curl with quic
WORKDIR /usr/src/
RUN git clone https://github.com/curl/curl || \
    git -c http.sslverify=false clone https://github.com/curl/curl
WORKDIR /usr/src/curl
RUN autoreconf -fi
RUN LDFLAGS="-Wl,-rpath,/usr/local/ssl/lib64" \
    ./configure PKG_CONFIG_PATH=/usr/local/ssl/lib64/pkgconfig:/usr/local/nghttp3/lib/pkgconfig:/usr/local/ngtcp2/lib/pkgconfig \
    --prefix=/usr/local \
    --with-openssl=/usr/local/ssl \
    --with-nghttp3=/usr/local/nghttp3 --with-ngtcp2=/usr/local/ngtcp2 \
    --without-libpsl
RUN make
# Use DESTDIR staging approach for curl
RUN mkdir -p /tmp/curl-install
RUN make DESTDIR=/tmp/curl-install install
RUN fakeroot checkinstall --addso=yes -D --install=yes -y --pkgname=curl --pkgversion=$(git describe --tags | sed -n 's/curl-//p' | tr _ -)-jammy \
    --pkglicense="See upstream" --pakdir=/ --maintainer="Jason Ernst" --nodoc --backup=no --requires="openssl,nghttp3,ngtcp2" \
    sh -c 'cd /tmp/curl-install && tar -cf - . | tar -xf - -C / 2>/dev/null || true'
RUN ldconfig
RUN ls -la /

# final image with curl for dockerhub
FROM ubuntu:26.04 as curl
RUN apt-get update && DEBIAN_FRONTEND=noninteractive apt-get install -y --no-install-recommends \
    ca-certificates \
    && apt-get clean
COPY --from=build /*.deb /
RUN dpkg -i /*openssl*.deb && dpkg -i /*nghttp3*.deb && dpkg -i /*ngtcp2*.deb && dpkg -i /*curl*.deb
RUN ldconfig
ENTRYPOINT ["/usr/local/bin/curl"]

# just a step that publishes the deb files to gemfury
FROM ubuntu:26.04 as deploy
RUN apt-get update && DEBIAN_FRONTEND=noninteractive apt-get install -y --no-install-recommends \
    ca-certificates curl \
    && apt-get clean
COPY --from=build /*.deb /
RUN ls -la /
ARG GFKEY_PUSH
RUN test -n "${GFKEY_PUSH}" || (>&2 echo "GFKEY_PUSH build arg not set" && false)
RUN for f in /*.deb; do curl -F package=@/$f https://${GFKEY_PUSH}@push.fury.io/compscidr/; done