Dockerfile-linux.template

{{
	include "shared"
	;
	def is_slim:
		env.variant
		| startswith("slim-")
	;
	def lib_pypy:
		if is_3 and minor >= 8 then
			"/opt/pypy/lib/pypy" + env.version
		else
			"/opt/pypy/lib_pypy"
		end
	;
	def cmd:
		if is_3 then
			"pypy3"
		else
			"pypy"
		end
-}}
{{ if is_slim then ( -}}
FROM debian:{{ env.variant | ltrimstr("slim-") }}-slim

RUN set -eux; \
	apt-get update; \
	apt-get install -y --no-install-recommends ca-certificates; \
	rm -rf /var/lib/apt/lists/*
{{ ) else ( -}}
FROM buildpack-deps:{{ env.variant }}
{{ if is_3 then ( -}}

# runtime dependencies
RUN set -eux; \
	apt-get update; \
	apt-get install -y --no-install-recommends \
		tcl \
		tk \
	; \
	rm -rf /var/lib/apt/lists/*
{{ ) else "" end -}}
{{ ) end -}}

# http://bugs.python.org/issue19846
# > At the moment, setting "LANG=C" on a Linux system *fundamentally breaks Python 3*, and that's not OK.
ENV LANG C.UTF-8

# ensure local {{ cmd }} is preferred over distribution {{ cmd }}
ENV PATH /opt/pypy/bin:$PATH

# Python {{ .python.version }}
ENV PYPY_VERSION {{ .version }}

RUN set -eux; \
	\
	dpkgArch="$(dpkg --print-architecture)"; \
	case "${dpkgArch##*-}" in \
{{
	[
		.arches | to_entries[]
		| select(.key | index("-") | not)
		| .key as $bashbrewArch
		| (
			{
				arm32v5: "armel",
				arm32v7: "armhf",
				arm64v8: "arm64",
				mips64le: "mips64el",
				ppc64le: "ppc64el",
			}
			| .[$bashbrewArch] // $bashbrewArch
		) as $dpkgArch
		| .value
		| (
-}}
		{{ $dpkgArch | @sh }}) \
			url={{ .url | @sh }}; \
			sha256={{ .sha256 | @sh }}; \
			;; \
{{
		)
	] | add
-}}
		*) echo >&2 "error: current architecture ($dpkgArch) does not have a corresponding PyPy $PYPY_VERSION binary release"; exit 1 ;; \
	esac; \
	\
	savedAptMark="$(apt-mark showmanual)"; \
	apt-get update; \
	apt-get install -y --no-install-recommends \
{{ if is_slim then ( -}}
		bzip2 \
		wget \
{{ ) else "" end -}}
# sometimes "{{ cmd }}" (or associated .so files) has dynamic links to different system libraries
# we install them here, and then use "ldd" further down to only keep what we actually need (which might even differ per architecture)
{{
	{
		"pypy": [
			"libfreetype6",
			empty
		],
		"pypy3": [
			"libfontconfig1",
			empty
		],
	}[cmd] | map(
-}}
		{{ . }} \
{{ ) | add -}}
	; \
	\
	wget -O pypy.tar.bz2 "$url" --progress=dot:giga; \
	echo "$sha256 *pypy.tar.bz2" | sha256sum --check --strict -; \
	mkdir /opt/pypy; \
	tar -xjC /opt/pypy --strip-components=1 -f pypy.tar.bz2; \
	find /opt/pypy/lib* -depth -type d -a \( -name test -o -name tests \) -exec rm -rf '{}' +; \
	rm pypy.tar.bz2; \
	\
# delete a few (sometimes) problematic bundled libraries
	rm -v /opt/pypy/lib/libtk*.so /opt/pypy/lib/libz.so*; \
	\
	ln -sv {{ "/opt/pypy/bin/" + cmd | @sh }} /usr/local/bin/; \
	\
# smoke test
	{{ cmd }} --version; \
	\
{{ if is_3 then ( -}}
# rebuild several cffi modules for compatibility
	cd {{ lib_pypy }}; \
{{
	[
		{
			file: "_gdbm_build.py",
			deps: "libgdbm-dev",
		},
		{
			comment: "https://github.com/docker-library/pypy/issues/24#issuecomment-409408657",
			file: "_ssl_build.py",
			deps: "libssl-dev",
		},
		{
			comment: "https://github.com/docker-library/pypy/issues/42",
			file: "_lzma_build.py",
			deps: "liblzma-dev",
		},
		{
			comment: "https://github.com/docker-library/pypy/issues/68",
			file: "_sqlite3_build.py",
			deps: "libsqlite3-dev",
		},
		{
			file: "_tkinter/tklib_build.py",
			deps: "tk-dev",
		},
		empty # trailing comma hack
	] | map(
-}}
	if [ -f {{ .file }} ]; then \
{{ if .comment then ( -}}
# {{ .comment }}
{{ ) else "" end -}}
{{
	(
		if is_slim then
			"gcc libc6-dev " + .deps
		elif .deps == "tk-dev" then
			.deps
		else "" end
	) as $install
	| if $install != "" then
( -}}
		apt-get install -y --no-install-recommends {{ $install }}; \
{{ ) else "" end -}}
		{{ cmd }} {{ .file }}; \
	fi; \
{{ ) | join("") -}}
# TODO rebuild other cffi modules here too? (other _*_build.py files; see https://github.com/pypy/pypy/blob/0f013f041fff7fb9a23b22dae8437e82beb6a279/lib_pypy/pypy_tools/build_cffi_imports.py#L25-L40)
	\
{{ ) else "" end -}}
	apt-mark auto '.*' > /dev/null; \
	[ -z "$savedAptMark" ] || apt-mark manual $savedAptMark > /dev/null; \
	export shellPid="$$"; \
	find /opt/pypy -type f -executable -exec ldd '{}' ';' \
{{ if is_slim or (is_3 | not) then ( -}}
		| grep -vE 'lib(tcl|tk|X[a-z]*)[0-9]*[.]' \
{{ ) else "" end -}}
		| awk '/not found/ { print >> "/dev/stderr"; system("kill -9 -$shellPid") } /=>/ { so = $(NF-1); if (index(so, "/usr/local/") == 1 || index(so, "/opt/pypy/") == 1) { next }; gsub("^/(usr/)?", "", so); printf "*%s\n", so }' \
		| sort -u \
		| xargs -rt dpkg-query --search \
# https://manpages.debian.org/bookworm/dpkg/dpkg-query.1.en.html#S (we ignore diversions and it'll be really unusual for more than one package to provide any given .so file)
		| awk 'sub(":$", "", $1) { print $1 }' \
		| sort -u \
		| xargs -r apt-mark manual \
	; \
	apt-get purge -y --auto-remove -o APT::AutoRemove::RecommendsImportant=false; \
	rm -rf /var/lib/apt/lists/*; \
# smoke test again, to be sure
	{{ cmd }} --version; \
	\
	{{ cmd }} -m ensurepip --default-pip; \
	pip --version; \
{{ if is_3 and minor >= 12 then "" else ( -}}
# https://github.com/docker-library/python/issues/952
# https://github.com/docker-library/python/issues/1023
	pip install --disable-pip-version-check --no-cache-dir --no-compile 'wheel<0.46'; \
{{ ) end -}}
	\
	find /opt/pypy -depth \
		\( \
			\( -type d -a \( -name test -o -name tests \) \) \
			-o \
			\( -type f -a \( -name '*.pyc' -o -name '*.pyo' \) \) \
		\) -exec rm -rf '{}' +

CMD {{ [ cmd ] | @json }}