126 lines
4.0 KiB
Docker
126 lines
4.0 KiB
Docker
# Alpine-based MUSL static binary builder for caching_relay
|
|
# Produces a truly portable binary with zero runtime dependencies.
|
|
# Adapted from c-relay's Dockerfile.alpine-musl.
|
|
|
|
ARG DEBUG_BUILD=false
|
|
|
|
FROM alpine:3.19 AS builder
|
|
|
|
ARG DEBUG_BUILD=false
|
|
|
|
# Install build dependencies
|
|
RUN apk add --no-cache \
|
|
build-base \
|
|
musl-dev \
|
|
git \
|
|
cmake \
|
|
pkgconfig \
|
|
autoconf \
|
|
automake \
|
|
libtool \
|
|
openssl-dev \
|
|
openssl-libs-static \
|
|
zlib-dev \
|
|
zlib-static \
|
|
curl-dev \
|
|
curl-static \
|
|
sqlite-dev \
|
|
linux-headers \
|
|
wget \
|
|
bash
|
|
|
|
WORKDIR /build
|
|
|
|
# Build libsecp256k1 static
|
|
RUN cd /tmp && \
|
|
git clone https://github.com/bitcoin-core/secp256k1.git && \
|
|
cd secp256k1 && \
|
|
./autogen.sh && \
|
|
./configure --enable-static --disable-shared --prefix=/usr \
|
|
CFLAGS="-fPIC" && \
|
|
make -j$(nproc) && \
|
|
make install && \
|
|
rm -rf /tmp/secp256k1
|
|
|
|
# Build libwebsockets static with minimal features
|
|
RUN cd /tmp && \
|
|
git clone --depth 1 --branch v4.3.3 https://github.com/warmcat/libwebsockets.git && \
|
|
cd libwebsockets && \
|
|
mkdir build && cd build && \
|
|
cmake .. \
|
|
-DLWS_WITH_STATIC=ON \
|
|
-DLWS_WITH_SHARED=OFF \
|
|
-DLWS_WITH_SSL=ON \
|
|
-DLWS_WITHOUT_TESTAPPS=ON \
|
|
-DLWS_WITHOUT_TEST_SERVER=ON \
|
|
-DLWS_WITHOUT_TEST_CLIENT=ON \
|
|
-DLWS_WITHOUT_TEST_PING=ON \
|
|
-DLWS_WITH_HTTP2=OFF \
|
|
-DLWS_WITH_LIBUV=OFF \
|
|
-DLWS_WITH_LIBEVENT=OFF \
|
|
-DLWS_IPV6=ON \
|
|
-DCMAKE_BUILD_TYPE=Release \
|
|
-DCMAKE_INSTALL_PREFIX=/usr \
|
|
-DCMAKE_C_FLAGS="-fPIC" && \
|
|
make -j$(nproc) && \
|
|
make install && \
|
|
rm -rf /tmp/libwebsockets
|
|
|
|
# Copy nostr_core_lib source (sibling project)
|
|
COPY nostr_core_lib /build/nostr_core_lib/
|
|
|
|
# Build nostr_core_lib with the NIPs needed by the relay pool + signer:
|
|
# 1 (basic), 6 (keys), 19 (npub bech32), 4 (legacy encryption, signer dep),
|
|
# 42 (auth, relay pool dep), 44 (modern encryption, signer dep)
|
|
RUN cd nostr_core_lib && \
|
|
chmod +x build.sh && \
|
|
sed -i 's/CFLAGS="-Wall -Wextra -std=c99 -fPIC -O2"/CFLAGS="-U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=0 -Wall -Wextra -std=c99 -fPIC -O2"/' build.sh && \
|
|
rm -f *.o *.a 2>/dev/null || true && \
|
|
./build.sh --nips=1,4,6,19,42,44 && \
|
|
if [ -f libnostr_core_arm64.a ]; then \
|
|
cp libnostr_core_arm64.a libnostr_core.a; \
|
|
elif [ -f libnostr_core_x64.a ]; then \
|
|
cp libnostr_core_x64.a libnostr_core.a; \
|
|
else \
|
|
echo "ERROR: No supported nostr_core static library produced"; \
|
|
ls -la *.a 2>/dev/null || true; \
|
|
exit 1; \
|
|
fi
|
|
|
|
# Copy caching_relay source LAST (only this layer rebuilds on source changes)
|
|
COPY src/ /build/src/
|
|
|
|
# Build caching_relay with full static linking.
|
|
# No sqlite (the daemon doesn't use it), no c_utils (not needed).
|
|
RUN if [ "$DEBUG_BUILD" = "true" ]; then \
|
|
CFLAGS="-g -O2 -DDEBUG -fno-omit-frame-pointer"; \
|
|
STRIP_CMD="echo 'Keeping debug symbols'"; \
|
|
else \
|
|
CFLAGS="-O2"; \
|
|
STRIP_CMD="strip /build/caching_relay_static"; \
|
|
fi && \
|
|
gcc -static $CFLAGS -Wall -Wextra -std=c99 \
|
|
-U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=0 \
|
|
-I. -Isrc -Inostr_core_lib -Inostr_core_lib/nostr_core \
|
|
-Inostr_core_lib/cjson -Inostr_core_lib/nostr_websocket \
|
|
src/main.c src/debug.c src/jsonc_strip.c src/config.c src/state.c \
|
|
src/follow_graph.c src/relay_sink.c src/live_subscriber.c \
|
|
src/backfill.c src/relay_discovery.c \
|
|
-o /build/caching_relay_static \
|
|
nostr_core_lib/libnostr_core.a \
|
|
-lwebsockets -lssl -lcrypto -lsecp256k1 \
|
|
-lcurl -lz -lpthread -lm -ldl && \
|
|
eval "$STRIP_CMD"
|
|
|
|
# Verify it's truly static
|
|
RUN echo "=== Binary Information ===" && \
|
|
file /build/caching_relay_static && \
|
|
ls -lh /build/caching_relay_static && \
|
|
echo "=== Checking for dynamic dependencies ===" && \
|
|
(ldd /build/caching_relay_static 2>&1 || echo "Binary is static") && \
|
|
echo "=== Build complete ==="
|
|
|
|
# Output stage - just the binary
|
|
FROM scratch AS output
|
|
COPY --from=builder /build/caching_relay_static /caching_relay_static
|