# Multistage docker build, requires docker 17.05 # builder stage FROM ubuntu:16.04 as builder RUN set -ex && \ apt-get update && \ apt-get --no-install-recommends --yes install \ ca-certificates \ cmake \ g++ \ make \ pkg-config \ graphviz \ doxygen \ git \ curl \ libtool-bin \ autoconf \ automake \ bzip2 \ xsltproc \ gperf \ unzip WORKDIR /usr/local ENV CFLAGS='-fPIC' ENV CXXFLAGS='-fPIC' #Cmake ARG CMAKE_VERSION=3.14.6 ARG CMAKE_VERSION_DOT=v3.14 ARG CMAKE_HASH=4e8ea11cabe459308671b476469eace1622e770317a15951d7b55a82ccaaccb9 RUN set -ex \ && curl -s -O https://cmake.org/files/${CMAKE_VERSION_DOT}/cmake-${CMAKE_VERSION}.tar.gz \ && echo "${CMAKE_HASH} cmake-${CMAKE_VERSION}.tar.gz" | sha256sum -c \ && tar -xzf cmake-${CMAKE_VERSION}.tar.gz \ && cd cmake-${CMAKE_VERSION} \ && ./configure \ && make \ && make install ## Boost ARG BOOST_VERSION=1_70_0 ARG BOOST_VERSION_DOT=1.70.0 ARG BOOST_HASH=430ae8354789de4fd19ee52f3b1f739e1fba576f0aded0897c3c2bc00fb38778 RUN set -ex \ && curl -s -L -o boost_${BOOST_VERSION}.tar.bz2 https://downloads.sourceforge.net/project/boost/boost/${BOOST_VERSION_DOT}/boost_${BOOST_VERSION}.tar.bz2 \ && echo "${BOOST_HASH} boost_${BOOST_VERSION}.tar.bz2" | sha256sum -c \ && tar -xvf boost_${BOOST_VERSION}.tar.bz2 \ && cd boost_${BOOST_VERSION} \ && ./bootstrap.sh \ && ./b2 --build-type=minimal link=static runtime-link=static --with-chrono --with-date_time --with-filesystem --with-program_options --with-regex --with-serialization --with-system --with-thread --with-locale threading=multi threadapi=pthread cflags="$CFLAGS" cxxflags="$CXXFLAGS" stage ENV BOOST_ROOT /usr/local/boost_${BOOST_VERSION} # OpenSSL ARG OPENSSL_VERSION=1.1.1i ARG OPENSSL_HASH=e8be6a35fe41d10603c3cc635e93289ed00bf34b79671a3a4de64fcee00d5242 RUN set -ex \ && curl -s -O https://www.openssl.org/source/openssl-${OPENSSL_VERSION}.tar.gz \ && echo "${OPENSSL_HASH} openssl-${OPENSSL_VERSION}.tar.gz" | sha256sum -c \ && tar -xzf openssl-${OPENSSL_VERSION}.tar.gz \ && cd openssl-${OPENSSL_VERSION} \ && ./Configure linux-x86_64 no-shared --static "$CFLAGS" \ && make build_generated \ && make libcrypto.a \ && make install ENV OPENSSL_ROOT_DIR=/usr/local/openssl-${OPENSSL_VERSION} # ZMQ ARG ZMQ_VERSION=v4.3.2 ARG ZMQ_HASH=a84ffa12b2eb3569ced199660bac5ad128bff1f0 RUN set -ex \ && git clone https://github.com/zeromq/libzmq.git -b ${ZMQ_VERSION} \ && cd libzmq \ && test `git rev-parse HEAD` = ${ZMQ_HASH} || exit 1 \ && ./autogen.sh \ && ./configure --enable-static --disable-shared \ && make \ && make install \ && ldconfig # zmq.hpp ARG CPPZMQ_VERSION=v4.4.1 ARG CPPZMQ_HASH=f5b36e563598d48fcc0d82e589d3596afef945ae RUN set -ex \ && git clone https://github.com/zeromq/cppzmq.git -b ${CPPZMQ_VERSION} \ && cd cppzmq \ && test `git rev-parse HEAD` = ${CPPZMQ_HASH} || exit 1 \ && mv *.hpp /usr/local/include # Readline ARG READLINE_VERSION=8.0 ARG READLINE_HASH=e339f51971478d369f8a053a330a190781acb9864cf4c541060f12078948e461 RUN set -ex \ && curl -s -O https://ftp.gnu.org/gnu/readline/readline-${READLINE_VERSION}.tar.gz \ && echo "${READLINE_HASH} readline-${READLINE_VERSION}.tar.gz" | sha256sum -c \ && tar -xzf readline-${READLINE_VERSION}.tar.gz \ && cd readline-${READLINE_VERSION} \ && ./configure \ && make \ && make install # Sodium ARG SODIUM_VERSION=1.0.18 ARG SODIUM_HASH=4f5e89fa84ce1d178a6765b8b46f2b6f91216677 RUN set -ex \ && git clone https://github.com/jedisct1/libsodium.git -b ${SODIUM_VERSION} \ && cd libsodium \ && test `git rev-parse HEAD` = ${SODIUM_HASH} || exit 1 \ && ./autogen.sh \ && ./configure \ && make \ && make check \ && make install # Udev ARG UDEV_VERSION=v3.2.8 ARG UDEV_HASH=d69f3f28348123ab7fa0ebac63ec2fd16800c5e0 RUN set -ex \ && git clone https://github.com/gentoo/eudev -b ${UDEV_VERSION} \ && cd eudev \ && test `git rev-parse HEAD` = ${UDEV_HASH} || exit 1 \ && ./autogen.sh \ && ./configure --disable-gudev --disable-introspection --disable-hwdb --disable-manpages --disable-shared \ && make \ && make install # Libusb ARG USB_VERSION=v1.0.22 ARG USB_HASH=0034b2afdcdb1614e78edaa2a9e22d5936aeae5d RUN set -ex \ && git clone https://github.com/libusb/libusb.git -b ${USB_VERSION} \ && cd libusb \ && test `git rev-parse HEAD` = ${USB_HASH} || exit 1 \ && ./autogen.sh \ && ./configure --disable-shared \ && make \ && make install # Hidapi ARG HIDAPI_VERSION=hidapi-0.8.0-rc1 ARG HIDAPI_HASH=40cf516139b5b61e30d9403a48db23d8f915f52c RUN set -ex \ && git clone https://github.com/signal11/hidapi -b ${HIDAPI_VERSION} \ && cd hidapi \ && test `git rev-parse HEAD` = ${HIDAPI_HASH} || exit 1 \ && ./bootstrap \ && ./configure --enable-static --disable-shared \ && make \ && make install # Protobuf ARG PROTOBUF_VERSION=v3.7.1 ARG PROTOBUF_HASH=6973c3a5041636c1d8dc5f7f6c8c1f3c15bc63d6 RUN set -ex \ && git clone https://github.com/protocolbuffers/protobuf -b ${PROTOBUF_VERSION} \ && cd protobuf \ && test `git rev-parse HEAD` = ${PROTOBUF_HASH} || exit 1 \ && git submodule update --init --recursive \ && ./autogen.sh \ && ./configure --enable-static --disable-shared \ && make \ && make install \ && ldconfig WORKDIR /src COPY . . ENV USE_SINGLE_BUILDDIR=1 ARG NPROC RUN set -ex && \ git submodule init && git submodule update && \ rm -rf build && \ if [ -z "$NPROC" ] ; \ then make -j$(nproc) release-static ; \ else make -j$NPROC release-static ; \ fi # runtime stage FROM ubuntu:16.04 RUN set -ex && \ apt-get update && \ apt-get --no-install-recommends --yes install ca-certificates && \ apt-get clean && \ rm -rf /var/lib/apt COPY --from=builder /src/build/release/bin /usr/local/bin/ # Create monero user RUN adduser --system --group --disabled-password monero && \ mkdir -p /wallet /home/monero/.bitmonero && \ chown -R monero:monero /home/monero/.bitmonero && \ chown -R monero:monero /wallet # Contains the blockchain VOLUME /home/monero/.bitmonero # Generate your wallet via accessing the container and run: # cd /wallet # monero-wallet-cli VOLUME /wallet EXPOSE 18080 EXPOSE 18081 # switch to user monero USER monero ENTRYPOINT ["monerod", "--p2p-bind-ip=0.0.0.0", "--p2p-bind-port=18080", "--rpc-bind-ip=0.0.0.0", "--rpc-bind-port=18081", "--non-interactive", "--confirm-external-bind"]