bionic-amd64-tf-m-build/Dockerfile

FROM ubuntu:bionic

ARG TOOLS_DIR=/home/buildslave/tools

ENV ARMLMD_LICENSE_FILE=27000@ci.trustedfirmware.org
ENV DEBIAN_FRONTEND=noninteractive
ENV PATH=$TOOLS_DIR/bin:${PATH}
ENV PLANTUML_JAR_PATH=/usr/share/plantuml/plantuml.jar
ENV PKG_DEPS="\
    bison \
    build-essential \
    clang-tools-6.0 \
    curl \
    default-jre \
    device-tree-compiler \
    doxygen \
    exuberant-ctags \
    flex \
    g++-multilib \
    gcc-multilib \
    git \
    graphviz \
    jq \
    lcov \
    libffi-dev \
    libssl-dev \
    libxml-libxml-perl \
    openjdk-8-jdk \
    openssh-server \
    perl \
    python \
    python-psutil \
    python3 \
    python3-crypto \
    python3-dev \
    python3-psutil \
    python3-pyasn1 \
    srecord \
    sudo \
    tree \
    unzip \
    virtualenv \
    wget \
    zip \
"

# Can be overriden at build time
ARG BUILDSLAVE_PASSWORD=buildslave
ARG VERSION=3.28

COPY requirements_*.txt /opt/
COPY jenkins-slave /usr/local/bin/jenkins-slave
COPY setup-sshd /usr/sbin/setup-sshd

RUN set -e \
    && apt update -q=2 \
    && apt dist-upgrade -q=2 --yes \
    && apt install -q=2 --yes --no-install-recommends ${PKG_DEPS} \
    && curl -s https://packagecloud.io/install/repositories/github/git-lfs/script.deb.sh | bash \
    && apt update -q=2 \
    && apt install -q=2 --yes --no-install-recommends git-lfs \
    && curl -s https://bootstrap.pypa.io/get-pip.py -o /tmp/get-pip.py \
    && python2 /tmp/get-pip.py \
    && pip2 install --no-cache-dir -r /opt/requirements_python2.txt \
    && python3 /tmp/get-pip.py \
    && pip3 install --no-cache-dir -r /opt/requirements_python3.txt \
    && ln -s -f /usr/bin/python3 /usr/bin/python \
    && useradd -m -s /bin/bash buildslave \
    && echo "buildslave:$BUILDSLAVE_PASSWORD" | chpasswd \
    && echo 'buildslave ALL = NOPASSWD: ALL' > /etc/sudoers.d/jenkins \
    && chmod 0440 /etc/sudoers.d/jenkins \
    && mkdir -p /var/run/sshd /home/buildslave/tools \
    && wget -q http://github.com/danmar/cppcheck/releases/download/1.81/cppcheck-1.81.tar.gz -O /tmp/cppcheck.tar.gz \
    && tar -xf /tmp/cppcheck.tar.gz -C /opt \
    && (cd /opt/cppcheck-*; make CFGDIR=/opt/cppcheck-1.81/cfg; make install; make clean) \
    && curl --create-dirs -fsSLo ${PLANTUML_JAR_PATH} https://repo1.maven.org/maven2/net/sourceforge/plantuml/plantuml/1.2019.6/plantuml-1.2019.6.jar \
    && curl --create-dirs -fsSLo /usr/share/jenkins/slave.jar https://repo.jenkins-ci.org/public/org/jenkins-ci/main/remoting/${VERSION}/remoting-${VERSION}.jar \
    && curl --create-dirs -fsSLo /tmp/cmake-Linux-x86_64.tar.gz https://cmake.org/files/v3.15/cmake-3.15.0-Linux-x86_64.tar.gz \
    && tar -xf /tmp/cmake-Linux-x86_64.tar.gz -C /home/buildslave/tools --strip-components=1 \
    && chmod 0755 /usr/share/jenkins \
    && chmod 0644 /usr/share/jenkins/slave.jar \
    && chmod 0755 /usr/local/bin/jenkins-slave \
    && chown -R buildslave:buildslave /home/buildslave/tools /usr/share/plantuml \
    && apt clean \
    && rm -rf /var/lib/apt/lists/* /tmp/* /var/tmp/*

## Latest toolchains, available in $PATH. There can be newer versions of toolchains at
## upstream projects but these are latest for the docker image

### Install GNU toolchain (arm-none-eabi)
ARG GNU_GCC_ARM_VERSION="7-2018-q2-update"
ARG GNU_GCC_ARM_TAR="gcc-arm-none-eabi-${GNU_GCC_ARM_VERSION}-linux.tar.bz2"
ARG GNU_GCC_ARM_URL='https://developer.arm.com/-/media/Files/downloads/gnu-rm/7-2018q2/gcc-arm-none-eabi-7-2018-q2-update-linux.tar.bz2\
?revision=bc2c96c0-14b5-4bb4-9f18-bceb4050fee7?product=GNU%20Arm%20Embedded%20Toolchain%20Downloads,64-bit,,Linux,7-2018-q2-update'

RUN curl --create-dirs -fsSLo /tmp/${GNU_GCC_ARM_TAR} ${GNU_GCC_ARM_URL} \
    && tar -xf /tmp/${GNU_GCC_ARM_TAR} -C ${TOOLS_DIR} --strip-components=1 \
    && rm /tmp/${GNU_GCC_ARM_TAR}

### Install GNU toolchain (aarch64-none-elf)
ARG GNU_GCC_AARCH64_VERSION="9.2-2019.12"
ARG GNU_GCC_AARCH64_TAR="gcc-arm-${GNU_GCC_AARCH64_VERSION}-x86_64-aarch64-none-elf.tar.xz"
ARG GNU_GCC_AARCH64_URL="https://developer.arm.com/-/media/Files/downloads/gnu-a/$GNU_GCC_AARCH64_VERSION/binrel/${GNU_GCC_AARCH64_TAR}"

RUN curl --create-dirs -fsSLo /tmp/${GNU_GCC_AARCH64_TAR} ${GNU_GCC_AARCH64_URL} \
    && tar -Jxf /tmp/${GNU_GCC_AARCH64_TAR} -C ${TOOLS_DIR} --strip-components=1 \
    && rm /tmp/${GNU_GCC_AARCH64_TAR}

### Install Arm Clang (armclang)
ARG ARM_CLANG_VERSION="6.13"
ARG ARM_CLANG_TAR="DS500-BN-00026-r5p0-15rel0.tgz"
ARG ARM_CLANG_URL="https://developer.arm.com/-/media/Files/downloads/compiler/DS500-BN-00026-r5p0-15rel0.tgz\
?revision=6a961cf7-1d9a-4664-900b-11d20552dbc7?product=Download%20Arm%20Compiler,64-bit,,Linux,6.13"
ARG ARM_CLANG_INSTALL_DIR="${TOOLS_DIR}/armclang"

RUN curl --create-dirs -fsSLo /tmp/${ARM_CLANG_TAR} ${ARM_CLANG_URL} \
    && mkdir -p ${ARM_CLANG_INSTALL_DIR} \
    && tar -xzf /tmp/${ARM_CLANG_TAR} -C ${ARM_CLANG_INSTALL_DIR} \
    && ${ARM_CLANG_INSTALL_DIR}/install_x86_64.sh \
            --no-interactive \
            --i-agree-to-the-contained-eula \
            -d ${TOOLS_DIR} \
    && rm -rf ${ARM_CLANG_INSTALL_DIR} /tmp/${ARM_CLANG_TAR}

ARG LINARO_VERSION=19.06
RUN mkdir -p nfs/downloads/linaro/${LINARO_VERSION} \
    && cd nfs/downloads/linaro/${LINARO_VERSION} \
    && wget -q -c -m -A .zip -np -nd https://releases.linaro.org/members/arm/platforms/${LINARO_VERSION}/ \
    && for file in *.zip; do unzip -q ${file} -d $(basename ${file} .zip); done

EXPOSE 22
ENTRYPOINT ["/usr/sbin/setup-sshd"]