ADD alpine-minirootfs-3.21.3-x86_64.tar.gz / # buildkit

CMD ["/bin/sh"]

RUN /bin/sh -c apk add --no-cache ca-certificates openssh-client git # buildkit

RUN /bin/sh -c [ -e /etc/nsswitch.conf ] && grep '^hosts: files dns' /etc/nsswitch.conf # buildkit

RUN /bin/sh -c set -eux; addgroup -g 2375 -S docker # buildkit

ENV DOCKER_VERSION=28.0.1

RUN /bin/sh -c set -eux; apkArch="$(apk --print-arch)"; case "$apkArch" in 'x86_64') url='https://download.docker.com/linux/static/stable/x86_64/docker-28.0.1.tgz'; ;; 'armhf') url='https://download.docker.com/linux/static/stable/armel/docker-28.0.1.tgz'; ;; 'armv7') url='https://download.docker.com/linux/static/stable/armhf/docker-28.0.1.tgz'; ;; 'aarch64') url='https://download.docker.com/linux/static/stable/aarch64/docker-28.0.1.tgz'; ;; *) echo >&2 "error: unsupported 'docker.tgz' architecture ($apkArch)"; exit 1 ;; esac; wget -O 'docker.tgz' "$url"; tar --extract --file docker.tgz --strip-components 1 --directory /usr/local/bin/ --no-same-owner 'docker/docker' ; rm docker.tgz; docker --version # buildkit

ENV DOCKER_BUILDX_VERSION=0.21.2

RUN /bin/sh -c set -eux; apkArch="$(apk --print-arch)"; case "$apkArch" in 'x86_64') url='https://github.com/docker/buildx/releases/download/v0.21.2/buildx-v0.21.2.linux-amd64'; sha256='b13bee81c3db12a4be7d0b9d042b64d0dd9ed116f7674dfac0ffdf2a71acfe3d'; ;; 'armhf') url='https://github.com/docker/buildx/releases/download/v0.21.2/buildx-v0.21.2.linux-arm-v6'; sha256='70dabedf4afe192e23a00c0bfe6ecda000545059abfce339f72f45b41f4fbb45'; ;; 'armv7') url='https://github.com/docker/buildx/releases/download/v0.21.2/buildx-v0.21.2.linux-arm-v7'; sha256='c41700549bbf783e861cfe0c918aa152ece87cac099a260995b3822e75e3838b'; ;; 'aarch64') url='https://github.com/docker/buildx/releases/download/v0.21.2/buildx-v0.21.2.linux-arm64'; sha256='7e21e62eae3243e476411c9bbe93b8ee59b5d62ddf075c527d168174c3ab3a04'; ;; 'ppc64le') url='https://github.com/docker/buildx/releases/download/v0.21.2/buildx-v0.21.2.linux-ppc64le'; sha256='c817caec1e697484e8375d0fda499407e9081c8952db62edf702ccbb5d93187c'; ;; 'riscv64') url='https://github.com/docker/buildx/releases/download/v0.21.2/buildx-v0.21.2.linux-riscv64'; sha256='cdac31a493fc19fab46962bbbb4fdec6d14c1549c1b5cacafc7eb5d60fe11b75'; ;; 's390x') url='https://github.com/docker/buildx/releases/download/v0.21.2/buildx-v0.21.2.linux-s390x'; sha256='bd89f667a10870a9ce11e60a1028a2fa0395c85f27ba0faaf8d338771fb65416'; ;; *) echo >&2 "warning: unsupported 'docker-buildx' architecture ($apkArch); skipping"; exit 0 ;; esac; wget -O 'docker-buildx' "$url"; echo "$sha256 *"'docker-buildx' | sha256sum -c -; plugin='/usr/local/libexec/docker/cli-plugins/docker-buildx'; mkdir -p "$(dirname "$plugin")"; mv -vT 'docker-buildx' "$plugin"; chmod +x "$plugin"; docker buildx version # buildkit

ENV DOCKER_COMPOSE_VERSION=2.34.0

RUN /bin/sh -c set -eux; apkArch="$(apk --print-arch)"; case "$apkArch" in 'x86_64') url='https://github.com/docker/compose/releases/download/v2.34.0/docker-compose-linux-x86_64'; sha256='94a416c6f2836a0a1ba5eb3feb00f2e700a9d98311f062c4c61494ccbf3cd457'; ;; 'armhf') url='https://github.com/docker/compose/releases/download/v2.34.0/docker-compose-linux-armv6'; sha256='f581de955d332f10323ff98dc3faf4b13f7ba9c5372dac3b389ad28f8dc85b1e'; ;; 'armv7') url='https://github.com/docker/compose/releases/download/v2.34.0/docker-compose-linux-armv7'; sha256='9080c489047880546b0269b74d0750d94ef604fe4a3c11b2e5dfad436b1e4fa6'; ;; 'aarch64') url='https://github.com/docker/compose/releases/download/v2.34.0/docker-compose-linux-aarch64'; sha256='cd1ef5eda1119edb9314c0224bac97cee14a9c31909a0f7aa0ddfe266e08adaa'; ;; 'ppc64le') url='https://github.com/docker/compose/releases/download/v2.34.0/docker-compose-linux-ppc64le'; sha256='ec2c9e4083ce1bd6b3c30ddd30002bc5d9c83b4749a20e853ea73e1e14ad7b9c'; ;; 'riscv64') url='https://github.com/docker/compose/releases/download/v2.34.0/docker-compose-linux-riscv64'; sha256='5d3bf73eb9fa9f7576ba8f2bc2f231b684b453b747dc55b6cadde7566c34f6dc'; ;; 's390x') url='https://github.com/docker/compose/releases/download/v2.34.0/docker-compose-linux-s390x'; sha256='558955aebe0f5965bd5e9449415a746905a7f4c58f8642946e576becf1745376'; ;; *) echo >&2 "warning: unsupported 'docker-compose' architecture ($apkArch); skipping"; exit 0 ;; esac; wget -O 'docker-compose' "$url"; echo "$sha256 *"'docker-compose' | sha256sum -c -; plugin='/usr/local/libexec/docker/cli-plugins/docker-compose'; mkdir -p "$(dirname "$plugin")"; mv -vT 'docker-compose' "$plugin"; chmod +x "$plugin"; ln -sv "$plugin" /usr/local/bin/; docker-compose --version; docker compose version # buildkit

COPY modprobe.sh /usr/local/bin/modprobe # buildkit

COPY docker-entrypoint.sh /usr/local/bin/ # buildkit

ENV DOCKER_TLS_CERTDIR=/certs

RUN /bin/sh -c mkdir /certs /certs/client && chmod 1777 /certs /certs/client # buildkit

ENTRYPOINT ["docker-entrypoint.sh"]

CMD ["sh"]

RUN /bin/sh -c set -eux; apk add --no-cache btrfs-progs e2fsprogs e2fsprogs-extra git ip6tables iptables openssl pigz shadow-uidmap xfsprogs xz zfs ; # buildkit

RUN /bin/sh -c set -eux; apk add --no-cache iptables-legacy; mkdir -p /usr/local/sbin/.iptables-legacy; for f in iptables iptables-save iptables-restore ip6tables ip6tables-save ip6tables-restore ; do b="$(command -v "${f/tables/tables-legacy}")"; "$b" --version; ln -svT "$b" "/usr/local/sbin/.iptables-legacy/$f"; done; export PATH="/usr/local/sbin/.iptables-legacy:$PATH"; iptables --version | grep legacy # buildkit

RUN /bin/sh -c set -eux; addgroup -S dockremap; adduser -S -G dockremap dockremap; echo 'dockremap:165536:65536' >> /etc/subuid; echo 'dockremap:165536:65536' >> /etc/subgid # buildkit

RUN /bin/sh -c set -eux; apkArch="$(apk --print-arch)"; case "$apkArch" in 'x86_64') url='https://download.docker.com/linux/static/stable/x86_64/docker-28.0.1.tgz'; ;; 'armhf') url='https://download.docker.com/linux/static/stable/armel/docker-28.0.1.tgz'; ;; 'armv7') url='https://download.docker.com/linux/static/stable/armhf/docker-28.0.1.tgz'; ;; 'aarch64') url='https://download.docker.com/linux/static/stable/aarch64/docker-28.0.1.tgz'; ;; *) echo >&2 "error: unsupported 'docker.tgz' architecture ($apkArch)"; exit 1 ;; esac; wget -O 'docker.tgz' "$url"; tar --extract --file docker.tgz --strip-components 1 --directory /usr/local/bin/ --no-same-owner --exclude 'docker/docker' ; rm docker.tgz; dockerd --version; containerd --version; ctr --version; runc --version # buildkit

ENV DIND_COMMIT=c43aa0b6aa7c88343f0951ba9a39c69aa51c54ef

RUN /bin/sh -c set -eux; wget -O /usr/local/bin/dind "https://raw.githubusercontent.com/docker/docker/${DIND_COMMIT}/hack/dind"; chmod +x /usr/local/bin/dind # buildkit

COPY dockerd-entrypoint.sh /usr/local/bin/ # buildkit

VOLUME [/var/lib/docker]

EXPOSE map[2375/tcp:{} 2376/tcp:{}]

ENTRYPOINT ["dockerd-entrypoint.sh"]

CMD []

/bin/sh -c #(nop) LABEL maintainer=phithon <root@leavesongs.com>