mirror of
https://github.com/google/nsjail.git
synced 2026-08-30 18:41:30 -07:00
bc30a1a335
Updates Dockerfile to use a more recent base image. Uses a slim Debian image and uses build stages. This results in 80% size reduction of the final image while still having a somewhat reasonable environment.
36 lines
656 B
Docker
36 lines
656 B
Docker
FROM debian:bookworm-slim AS base
|
|
|
|
# Install run-time dependencies in base image
|
|
RUN apt-get -y update && apt-get install -y \
|
|
libc6 \
|
|
libstdc++6 \
|
|
libprotobuf32 \
|
|
libnl-route-3-200
|
|
|
|
FROM base AS build
|
|
|
|
# Install build dependencies only in builder image
|
|
RUN apt-get install -y \
|
|
autoconf \
|
|
bison \
|
|
flex \
|
|
gcc \
|
|
g++ \
|
|
git \
|
|
libprotobuf-dev \
|
|
libnl-route-3-dev \
|
|
libtool \
|
|
make \
|
|
pkg-config \
|
|
protobuf-compiler
|
|
|
|
COPY . /nsjail
|
|
|
|
RUN cd /nsjail && make clean && make
|
|
|
|
FROM base AS run
|
|
|
|
# Copy over build result and trim image
|
|
RUN rm -rf /var/lib/apt/lists/*
|
|
COPY --from=build /nsjail/nsjail /bin
|