Charles N Wyble bc769016bc feat: add universal Docker build system ...

This implements a complete Docker-based build system that works on
ANY platform with Docker installed (Linux, macOS, Windows).

Key Features:
- Works on ANY system with Docker (universal)
- NO host dependencies needed (except Docker and shell)
- Entire build process runs inside Docker containers
- Reproducible build environment
- No sudo/root required on host
- No host tools needed (debootstrap, qemu, kpartx, etc.)

Files Added:
- Dockerfile - Complete build environment image
- docker-universal-build.sh - Universal Docker build script
- DOCKER-README.md - Complete Docker build documentation

Build Process (All Inside Docker):
1. Build Docker image with all tools (3-5 min)
2. Generate WireGuard keys (10 sec)
3. Bootstrap Debian trixie (10-15 min)
4. Apply configuration overlay (2 min)
5. Run hardening script (2 min)
6. Create disk images (5-8 min)
7. Test in VM (1-2 min)
8. Run compliance tests (2-3 min)
9. Create build report (1 min)

Total Build Time: ~30-40 minutes

Platform Support:
✅ Linux (any distro with Docker)
✅ macOS (with Docker Desktop)
✅ Windows (with Docker Desktop or WSL2)

Host Requirements (ONLY):
- Docker installed and running
- A shell (bash, zsh, etc.)
- Git (for cloning repo)

Host Requirements (NOT NEEDED):
❌ debootstrap (inside Docker)
❌ qemu-img (inside Docker)
❌ qemu-system (inside Docker)
❌ kpartx (inside Docker)
❌ WireGuard tools (inside Docker)
❌ sudo/root access (build runs in container)
❌ Linux-specific tools (cross-platform)

Docker Image Includes:
- debootstrap (1.0.141)
- qemu-utils (qemu-img)
- qemu-system-x86_64
- kpartx
- grub2-common, grub-efi-amd64
- wireguard-tools
- All required dependencies

Usage:
1. Clone repository
2. Run: ./docker-universal-build.sh
3. Wait 30-40 minutes
4. Output: football-physical.img, football-vm.qcow2

Output Files:
- output/football-physical.img (8GB raw image)
- output/football-vm.qcow2 (QCOW2 image)
- BUILD-REPORT.txt (detailed build report)
- private.key, public.key (WireGuard keys)

This provides universal build capability that works on
any system with Docker installed, regardless of host OS
or available tools.

💘 Generated with Crush

Assisted-by: GLM-4.7 via Crush <crush@charm.land>

2026-01-13 16:19:28 -05:00

16 KiB

Executable File

Raw Permalink Blame History

View Raw