2023-08-15 21:10:34 +00:00
|
|
|
FROM rockylinux:8.8
|
|
|
|
|
|
|
|
|
|
# Purpose: This image is designed for HIRS ci testing on Rocky Linux
|
2023-08-16 13:45:30 +00:00
|
|
|
# Date Modified: 8/16/23
|
2023-08-15 21:10:34 +00:00
|
|
|
# Notes:
|
|
|
|
|
# * This image installs java, installs project dependencies, and runs gradlew to download gradlew
|
|
|
|
|
# dependencies. This saves time during a docker run. This also means the image should be
|
|
|
|
|
# re-built and re-posted to github each time the following occurs:
|
|
|
|
|
# 1) add/update a dependency
|
|
|
|
|
# 2) update gradle
|
|
|
|
|
# If not re-built, the docker run will still work, but will take longer as it downloads updates
|
|
|
|
|
# * Steps to login to registry, build image, tag image with ghcr.io registry, and push to registry:
|
|
|
|
|
# $ cat pat.txt | docker login ghcr.io -u iadgovuser## --password-stdin
|
|
|
|
|
# Note: pat requires permissions "upload packages from GitHub Package Registry" and possibly "repo"
|
|
|
|
|
# $ docker build . -f Dockerfile.rocky88ci -t hirs-rocky8-ci:latest
|
|
|
|
|
# Note: may need to use --no-cache when building, if 'git clone HIRS' or 'gradlew' is cached
|
|
|
|
|
# (bc need any updated dependencies)
|
|
|
|
|
# $ docker image tag hirs-rocky8-ci:latest ghcr.io/nsacyber/hirs/hirs-rocky8-ci:latest
|
|
|
|
|
# $ docker push ghcr.io/nsacyber/hirs/hirs-rocky8-ci:latest
|
|
|
|
|
|
|
|
|
|
# Update package installer
|
|
|
|
|
RUN dnf -y update
|
|
|
|
|
|
|
|
|
|
# Install Java 17
|
|
|
|
|
RUN dnf -y install java-17-openjdk-devel
|
|
|
|
|
|
|
|
|
|
# Ports needed for system-level tests
|
|
|
|
|
EXPOSE 8080
|
|
|
|
|
EXPOSE 8443
|
|
|
|
|
|
|
|
|
|
# Install HIRS dependencies
|
2023-09-18 15:22:43 +00:00
|
|
|
RUN dnf -y install mariadb-server initscripts firewalld policycoreutils net-tools git protobuf-compiler cronie && dnf clean all
|
2023-08-15 21:10:34 +00:00
|
|
|
# maybe: libtool cmake make gcc-c++ sudo vim wget openssl openssl-devel protobuf tpm2-tools libcurl-devel libssh-devel
|
2023-09-18 15:22:43 +00:00
|
|
|
# prob not: rpmdevtools tpm2-tss-devel tpm2-abrmd protobuf-devel python36 log4cplus-devel re2-devel tpm2-tss-devel tpm2-abrmd-devel
|
2023-08-15 21:10:34 +00:00
|
|
|
|
|
|
|
|
# Install PACCOR for Device Info Gathering
|
|
|
|
|
# RUN mkdir paccor && pushd paccor && wget https://github.com/nsacyber/paccor/releases/download/v1.1.4r6/paccor-1.1.4-6.noarch.rpm && yum -y install paccor-*.rpm && popd
|
|
|
|
|
|
|
|
|
|
# Install TPM Emulator for Provisioning
|
|
|
|
|
# RUN mkdir ibmtpm && pushd ibmtpm && wget --no-check-certificate https://downloads.sourceforge.net/project/ibmswtpm2/ibmtpm1332.tar.gz && tar -zxvf ibmtpm1332.tar.gz && cd src && make -j5 && popd
|
|
|
|
|
|
|
|
|
|
# Install Microsoft dotnet and rpm package tool
|
|
|
|
|
# RUN wget https://dot.net/v1/dotnet-install.sh
|
|
|
|
|
# RUN sh dotnet-install.sh --os linux --channel LTS
|
|
|
|
|
# ENV PATH="/root/.dotnet:${PATH}"
|
|
|
|
|
# RUN wget https://packages.microsoft.com/rhel/8/prod/packages-microsoft-prod.rpm
|
|
|
|
|
# RUN dnf -y install packages-microsoft-prod.rpm
|
|
|
|
|
# RUN dnf makecache
|
|
|
|
|
# RUN dnf -y install dotnet-sdk-6.0
|
|
|
|
|
# RUN dotnet tool install --global dotnet-rpm
|
|
|
|
|
|
|
|
|
|
# Checkout HIRS main branch and run gradlew to install gradlew dependencies, then delete HIRS
|
|
|
|
|
# Use '--depth=1' so as to not download the history of all commits
|
|
|
|
|
RUN git clone -b main --depth=1 https://github.com/nsacyber/HIRS.git /hirsTemp
|
|
|
|
|
WORKDIR "/hirsTemp"
|
|
|
|
|
RUN /bin/bash -c './gradlew clean build'
|
|
|
|
|
WORKDIR "/"
|
|
|
|
|
RUN rm -rf /hirsTemp
|
