Skip to content

Instantly share code, notes, and snippets.

@joyeecheung

joyeecheung/gist:2a27e16ee47a018504b79b77257937fb Secret

Created February 23, 2025 23:58
Show Gist options
  • Save joyeecheung/2a27e16ee47a018504b79b77257937fb to your computer and use it in GitHub Desktop.
Save joyeecheung/2a27e16ee47a018504b79b77257937fb to your computer and use it in GitHub Desktop.
Download ZIP
Building node-test-commit-linux-containered locally
Raw
gistfile1.txt
FROM ubuntu:22.04
ENV LC_ALL C
ENV USER iojs
ENV JOBS 16
ENV SHELL /bin/bash
ENV HOME /home/iojs
ENV PATH /usr/lib/ccache:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin
ENV NODE_COMMON_PIPE /home/iojs/test.pipe
ENV NODE_TEST_DIR /home/iojs/tmp
ENV OSTYPE linux-gnu
ENV OSVARIANT docker
ENV DESTCPU arm64
ENV ARCH arm64
ENV DEBIAN_FRONTEND noninteractive
RUN apt-get update && apt-get install -y sudo
RUN adduser --disabled-password --gecos '' iojs
RUN usermod -aG sudo iojs
RUN echo '%sudo ALL=(ALL) NOPASSWD:ALL' > /etc/sudoers.d/90-sudo-nopasswd && \
chmod 0440 /etc/sudoers.d/90-sudo-nopasswd
RUN apt-get update && apt-get install apt-utils -y && \
apt-get dist-upgrade -y && apt-get install -y \
ccache \
g++ \
gcc \
g++-12 \
gcc-12 \
git \
openjdk-17-jre-headless \
pkg-config \
curl \
python3-pip \
python-is-python3 \
libfontconfig1 \
libtool \
automake
RUN pip3 install tap2junit==0.2.0
ENV ICU69DIR=/opt/icu-69.1 \
ICU71DIR=/opt/icu-71.1 \
ICU73DIR=/opt/icu-73.2
RUN for ICU_ENV in $(env | grep ICU..DIR); do \
ICU_PREFIX=$(echo $ICU_ENV | cut -d '=' -f 2) && \
ICU_VERSION=$(echo $ICU_PREFIX | cut -d '-' -f 2) && \
ICU_MAJOR=$(echo $ICU_VERSION | cut -d '.' -f 1) && \
ICU_MINOR=$(echo $ICU_VERSION | cut -d '.' -f 2) && \
mkdir -p /tmp/icu-$ICU_VERSION && \
cd /tmp/icu-$ICU_VERSION && \
curl -sL "https://github.com/unicode-org/icu/releases/download/release-$ICU_MAJOR-$ICU_MINOR/icu4c-${ICU_MAJOR}_$ICU_MINOR-src.tgz" | tar zxv --strip=1 && \
cd source && \
./runConfigureICU Linux --prefix=$ICU_PREFIX && \
make -j $JOBS && \
make install && \
rm -rf /tmp/icu-$ICU_VERSION; \
done
ENV OPENSSL111VER 1.1.1w
ENV OPENSSL111DIR /opt/openssl-$OPENSSL111VER
RUN mkdir -p /tmp/openssl_$OPENSSL111VER && \
cd /tmp/openssl_$OPENSSL111VER && \
curl -sL https://github.com/openssl/openssl/releases/download/OpenSSL_1_1_1w/openssl-$OPENSSL111VER.tar.gz | tar zxv --strip=1 && \
./config --prefix=$OPENSSL111DIR && \
make -j $JOBS && \
make install && \
rm -rf /tmp/openssl_$OPENSSL111VER
# OpenSSL FIPS validation occurs post-release, and not for every version.
# See https://www.openssl.org/docs/fips.html and the version documented in the
# certificate and security policy.
ENV OPENSSL30FIPSVER 3.0.8
ENV OPENSSL30FIPSDIR /opt/openssl-$OPENSSL30FIPSVER-fips
RUN mkdir -p /tmp/openssl-$OPENSSL30FIPSVER && \
cd /tmp/openssl-$OPENSSL30FIPSVER && \
curl -sL https://github.com/openssl/openssl/releases/download/openssl-$OPENSSL30FIPSVER/openssl-$OPENSSL30FIPSVER.tar.gz | tar zxv --strip=1 && \
./config --prefix=$OPENSSL30FIPSDIR enable-fips && \
make -j $JOBS && \
make install && \
rm -rf /tmp/openssl-$OPENSSL30FIPSVER
# Install the FIPS provider. Update OpenSSL config file to enable FIPS.
RUN LD_LIBRARY_PATH=$OPENSSL30FIPSDIR/lib $OPENSSL30FIPSDIR/bin/openssl fipsinstall \
-module $OPENSSL30FIPSDIR/lib/ossl-modules/fips.so -provider_name fips \
-out $OPENSSL30FIPSDIR/ssl/fipsmodule.cnf && \
sed -i -r "s|^# (.include fipsmodule.cnf)|.include $OPENSSL30FIPSDIR\/ssl\/fipsmodule.cnf|g" $OPENSSL30FIPSDIR/ssl/openssl.cnf && \
sed -i -r '/^providers = provider_sect/a alg_section = evp_properties' $OPENSSL30FIPSDIR/ssl/openssl.cnf && \
sed -i -r 's/^# (fips = fips_sect)/\1/g' $OPENSSL30FIPSDIR/ssl/openssl.cnf && \
sed -i -r 's/^# (activate = 1)/\1/g' $OPENSSL30FIPSDIR/ssl/openssl.cnf && \
echo "\n[evp_properties]\ndefault_properties = \"fips=yes\"\n" >> $OPENSSL30FIPSDIR/ssl/openssl.cnf
ENV OPENSSL30VER 3.0.14+quic
ENV OPENSSL30DIR /opt/openssl-$OPENSSL30VER
RUN mkdir -p /tmp/openssl-$OPENSSL30VER && \
cd /tmp/openssl-$OPENSSL30VER && \
git clone https://github.com/quictls/openssl.git -b openssl-$OPENSSL30VER --depth 1 && \
cd openssl && \
./config --prefix=$OPENSSL30DIR && \
make -j $JOBS && \
make install && \
rm -rf /tmp/openssl-$OPENSSL30VER
ENV OPENSSL31VER 3.1.7
ENV OPENSSL31DIR /opt/openssl-$OPENSSL31VER
RUN mkdir -p /tmp/openssl-$OPENSSL31VER && \
cd /tmp/openssl-$OPENSSL31VER && \
curl -sL https://github.com/openssl/openssl/releases/download/openssl-$OPENSSL31VER/openssl-$OPENSSL31VER.tar.gz | tar zxv --strip=1 && \
./config --prefix=$OPENSSL31DIR && \
make -j $JOBS && \
make install && \
rm -rf /tmp/openssl-$OPENSSL31VER
ENV OPENSSL32VER 3.2.3
ENV OPENSSL32DIR /opt/openssl-$OPENSSL32VER
RUN mkdir -p /tmp/openssl-$OPENSSL32VER && \
cd /tmp/openssl-$OPENSSL32VER && \
curl -sL https://github.com/openssl/openssl/releases/download/openssl-$OPENSSL32VER/openssl-$OPENSSL32VER.tar.gz | tar zxv --strip=1 && \
./config --prefix=$OPENSSL32DIR && \
make -j $JOBS && \
make install && \
rm -rf /tmp/openssl-$OPENSSL32VER
ENV ZLIBVER 1.2.13
ENV ZLIB12DIR /opt/zlib_$ZLIBVER
RUN mkdir -p /tmp/zlib_$ZLIBVER && \
cd /tmp/zlib_$ZLIBVER && \
curl -sL https://zlib.net/fossils/zlib-$ZLIBVER.tar.gz | tar zxv --strip=1 && \
./configure --prefix=$ZLIB12DIR && \
make -j $JOBS && \
make install && \
rm -rf /tmp/zlib_$ZLIBVER
RUN apt-get install -y lldb-14 vim
USER iojs
WORKDIR /home/iojs
ENV CC "gcc"
ENV CXX "g++"
RUN git clone https://github.com/nodejs/node.git
WORKDIR /home/iojs/node
ARG COMMIT=06d5701e0b2dd184b5be9932c8f5e5a759a09d1a
RUN git checkout $COMMIT
RUN git checkout -b base
ARG PRID=57107
RUN git fetch origin pull/$PRID/head:$PRID
ENV LD_LIBRARY_PATH $OPENSSL111DIR/lib/
ENV DYLD_LIBRARY_PATH $OPENSSL111DIR/lib/
ENV PATH $OPENSSL111DIR/bin/:$PATH
RUN sudo ln -s -f /usr/bin/gcc-12 /usr/bin/gcc
RUN sudo ln -s -f /usr/bin/g++-12 /usr/bin/g++
WORKDIR /home/iojs
RUN mkdir .ccache
ENV CCACHE_TEMPDIR /home/iojs/.ccache/
ENV CCACHE_DIR /home/iojs/.ccache
WORKDIR /home/iojs/node
RUN sudo apt-get install -y ninja-build
ENV CC "ccache gcc"
ENV CXX "ccache g++"
RUN ./configure --ninja --debug-node --shared-openssl --shared-openssl-includes=${OPENSSL111DIR}/include/ --shared-openssl-libpath=${OPENSSL111DIR}/lib/
RUN ninja -C out/Release
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment