mirror of
https://github.com/docker/docker-agent.git
synced 2026-11-04 10:02:15 +00:00
Sayt-0
28c294f8d5
Alpine 3.23 ships clang 21, which emits -Woverriding-deployment-version when the target triple carries the legacy "10.16" Big Sur alias that xx v1.9.0 still uses for darwin/arm64. runtime/cgo compiles with -Wall -Werror, so the warning breaks the release build: clang: error: overriding deployment version from '10.16' to '11.0' Exporting MACOSX_VERSION_MIN=11.0 makes xx emit a canonical triple. xx fixed its default upstream in tonistiigi/xx@203eae866b but no tagged release contains it yet.
117 lines
4.4 KiB
Docker
117 lines
4.4 KiB
Docker
# syntax=docker/dockerfile:1
|
|
|
|
ARG GO_VERSION="1.26.5"
|
|
ARG ALPINE_VERSION="3.23"
|
|
ARG XX_VERSION="1.9.0"
|
|
|
|
# xx is a helper for cross-compilation
|
|
FROM --platform=$BUILDPLATFORM tonistiigi/xx:${XX_VERSION} AS xx
|
|
|
|
# osxcross contains the MacOSX cross toolchain for xx
|
|
FROM crazymax/osxcross:15.5-debian AS osxcross
|
|
|
|
FROM --platform=$BUILDPLATFORM golang:${GO_VERSION}-alpine${ALPINE_VERSION} AS builder-base
|
|
COPY --from=xx / /
|
|
RUN apk add --no-cache clang zig
|
|
WORKDIR /src
|
|
RUN --mount=type=cache,target=/go/pkg/mod \
|
|
--mount=type=bind,source=go.mod,target=go.mod \
|
|
--mount=type=bind,source=go.sum,target=go.sum \
|
|
go mod download
|
|
ENV CGO_ENABLED=1
|
|
|
|
FROM builder-base AS builder-linux
|
|
ARG TARGETPLATFORM
|
|
ARG TARGETOS
|
|
ARG TARGETARCH
|
|
RUN --mount=type=cache,target=/var/cache/apk,id=apk-$TARGETPLATFORM,sharing=locked \
|
|
xx-apk add musl-dev
|
|
COPY . ./
|
|
ARG GIT_TAG
|
|
ARG GIT_COMMIT
|
|
RUN --mount=type=cache,target=/root/.cache/go-build,id=go-build-$TARGETPLATFORM \
|
|
--mount=type=cache,target=/go/pkg/mod <<EOT
|
|
set -ex
|
|
test "$TARGETOS" = "linux"
|
|
export XX_GO_PREFER_C_COMPILER=zig
|
|
xx-go build -trimpath -tags no_audio -ldflags "-s -w -linkmode=external -X 'github.com/docker/docker-agent/pkg/version.Version=$GIT_TAG' -X 'github.com/docker/docker-agent/pkg/version.Commit=$GIT_COMMIT'" -o /binaries/docker-agent-$TARGETOS-$TARGETARCH .
|
|
xx-verify --static /binaries/docker-agent-$TARGETOS-$TARGETARCH
|
|
EOT
|
|
|
|
FROM builder-base AS builder-cross
|
|
ARG TARGETPLATFORM
|
|
ARG TARGETOS
|
|
ARG TARGETARCH
|
|
RUN --mount=type=cache,target=/var/cache/apk,id=apk-$TARGETPLATFORM,sharing=locked \
|
|
xx-apk add musl-dev
|
|
COPY . ./
|
|
ARG GIT_TAG
|
|
ARG GIT_COMMIT
|
|
RUN --mount=type=bind,from=osxcross,src=/osxsdk,target=/xx-sdk \
|
|
--mount=type=cache,target=/root/.cache/go-build,id=go-build-$TARGETPLATFORM \
|
|
--mount=type=cache,target=/go/pkg/mod <<EOT
|
|
set -ex
|
|
if [ "$TARGETOS" != "darwin" ]; then
|
|
export XX_GO_PREFER_C_COMPILER=zig
|
|
else
|
|
# clang 21 (alpine 3.23) rejects xx's default "10.16" Big Sur alias with
|
|
# -Werror,-Woverriding-deployment-version when targeting arm64.
|
|
export MACOSX_VERSION_MIN=11.0
|
|
fi
|
|
xx-go build -trimpath -tags no_audio -ldflags "-s -w -linkmode=external -X 'github.com/docker/docker-agent/pkg/version.Version=$GIT_TAG' -X 'github.com/docker/docker-agent/pkg/version.Commit=$GIT_COMMIT'" -o /binaries/docker-agent-$TARGETOS-$TARGETARCH .
|
|
xx-verify --static /binaries/docker-agent-$TARGETOS-$TARGETARCH
|
|
if [ "$TARGETOS" = "windows" ]; then
|
|
mv /binaries/docker-agent-$TARGETOS-$TARGETARCH /binaries/docker-agent-$TARGETOS-$TARGETARCH.exe
|
|
fi
|
|
EOT
|
|
|
|
FROM scratch AS local
|
|
ARG TARGETOS TARGETARCH
|
|
COPY --from=builder-cross /binaries/docker-agent-$TARGETOS-$TARGETARCH* docker-agent
|
|
|
|
FROM scratch AS cross
|
|
COPY --from=builder-cross /binaries .
|
|
|
|
# Sandbox template for docker/sandboxes, pushed as
|
|
# docker/docker-agent-sbx-templates: layers the binary built above onto the
|
|
# sandboxes shell-docker base.
|
|
FROM docker/sandbox-templates:shell-docker AS template
|
|
ARG TARGETOS TARGETARCH
|
|
USER root
|
|
RUN <<EOF
|
|
set -euxo pipefail
|
|
apt-get update
|
|
apt-get install -yy --no-install-recommends vim tmux
|
|
apt-get clean
|
|
rm -rf /var/lib/apt/lists/*
|
|
EOF
|
|
USER agent
|
|
# All mcp-gateway releases are prereleases, so "releases/latest" doesn't resolve;
|
|
# fetch the newest tag from the API instead.
|
|
RUN <<EOF
|
|
set -euxo pipefail
|
|
TAG=$(curl -fsSL "https://api.github.com/repos/docker/mcp-gateway/releases?per_page=1" | grep -o '"tag_name": *"[^"]*"' | cut -d '"' -f4)
|
|
mkdir -p ~/.docker/cli-plugins
|
|
curl -fsSL "https://github.com/docker/mcp-gateway/releases/download/${TAG}/docker-mcp-${TARGETOS}-${TARGETARCH}.tar.gz" | tar -C ~/.docker/cli-plugins -xz
|
|
EOF
|
|
ENV DOCKER_AGENT_NO_TOUR=1 \
|
|
DOCKER_AGENT_HIDE_TELEMETRY_BANNER=1 \
|
|
COLORTERM=truecolor \
|
|
LANG=en_US.UTF-8
|
|
COPY --from=builder-linux --chmod=0755 /binaries/docker-agent-$TARGETOS-$TARGETARCH /usr/local/bin/docker-agent
|
|
LABEL com.docker.sandboxes.flavor="docker-agent-docker"
|
|
CMD [ "docker-agent" ]
|
|
|
|
FROM alpine:${ALPINE_VERSION}
|
|
RUN apk add --no-cache ca-certificates docker-cli && \
|
|
addgroup -S docker-agent && adduser -S -G docker-agent docker-agent && \
|
|
mkdir /data /work && chmod 777 /data /work
|
|
ARG TARGETOS TARGETARCH
|
|
ENV DOCKER_MCP_IN_CONTAINER=1
|
|
ENV TERM=xterm-256color
|
|
COPY --from=docker/mcp-gateway:v2 /docker-mcp /usr/local/lib/docker/cli-plugins/
|
|
COPY --from=builder-linux /binaries/docker-agent-$TARGETOS-$TARGETARCH /docker-agent
|
|
USER docker-agent
|
|
WORKDIR /work
|
|
ENTRYPOINT ["/docker-agent"]
|