bionic-amd64-tf-m-build/Dockerfile

FROM ubuntu:bionic

ARG TOOLS_DIR=/home/buildslave/tools

ENV ARMLMD_LICENSE_FILE=27000@ci.trustedfirmware.org
ENV DEBIAN_FRONTEND=noninteractive
ENV PATH=$TOOLS_DIR/bin:${PATH}
ENV PLANTUML_JAR_PATH=/usr/share/plantuml/plantuml.jar
ENV PKG_DEPS="\
    bison \
    build-essential \
    curl \
    default-jre \
    device-tree-compiler \
    doxygen \
    exuberant-ctags \
    flex \
    g++-multilib \
    gcc-multilib \
    git \
    graphviz \
    jq \
    lcov \
    libffi-dev \
    libssl-dev \
    libxml-libxml-perl \
    openjdk-8-jdk \
    openssh-server \
    perl \
    python \
    python-psutil \
    python3 \
    python3-crypto \
    python3-dev \
    python3-psutil \
    python3-pyasn1 \
    srecord \
    sudo \
    tree \
    unzip \
    virtualenv \
    wget \
    zip \
"

# Can be overriden at build time
ARG BUILDSLAVE_PASSWORD=buildslave
ARG VERSION=3.28

COPY requirements_*.txt /opt/
COPY jenkins-slave /usr/local/bin/jenkins-slave
COPY setup-sshd /usr/sbin/setup-sshd

RUN set -e ;\
    apt update -q=2 ;\
    apt dist-upgrade -q=2 --yes ;\
    apt install -q=2 --yes --no-install-recommends ${PKG_DEPS} ;\
    curl -s https://packagecloud.io/install/repositories/github/git-lfs/script.deb.sh | bash ;\
    apt update -q=2 ;\
    apt install -q=2 --yes --no-install-recommends git-lfs ;\
    # Install Python requirements
    curl -s https://bootstrap.pypa.io/get-pip.py -o /tmp/get-pip.py ;\
    python2 /tmp/get-pip.py ;\
    pip2 install --no-cache-dir -r /opt/requirements_python2.txt ;\
    python3 /tmp/get-pip.py ;\
    pip3 install --no-cache-dir -r /opt/requirements_python3.txt ;\
    # Set Python 3 as default
    ln -s -f /usr/bin/python3 /usr/bin/python ;\
    # Setup buildslave user for Jenkins
    useradd -m -s /bin/bash buildslave ;\
    echo "buildslave:$BUILDSLAVE_PASSWORD" | chpasswd ;\
    echo 'buildslave ALL = NOPASSWD: ALL' > /etc/sudoers.d/jenkins ;\
    chmod 0440 /etc/sudoers.d/jenkins ;\
    mkdir -p /var/run/sshd /home/buildslave/tools ;\
    # Install cppcheck
    wget -q http://github.com/danmar/cppcheck/releases/download/1.81/cppcheck-1.81.tar.gz -O /tmp/cppcheck.tar.gz ;\
    tar -xf /tmp/cppcheck.tar.gz -C /opt ;\
    (cd /opt/cppcheck-*; make CFGDIR=/opt/cppcheck-1.81/cfg; make install; make clean) ;\
    # Install PlantUML
    curl --create-dirs -fsSLo ${PLANTUML_JAR_PATH} https://repo1.maven.org/maven2/net/sourceforge/plantuml/plantuml/1.2019.6/plantuml-1.2019.6.jar ;\
    # Install Jenkins remoting
    curl --create-dirs -fsSLo /usr/share/jenkins/slave.jar https://repo.jenkins-ci.org/public/org/jenkins-ci/main/remoting/${VERSION}/remoting-${VERSION}.jar ;\
    # Install CMake
    curl --create-dirs -fsSLo /tmp/cmake-Linux-x86_64.tar.gz https://cmake.org/files/v3.15/cmake-3.15.0-Linux-x86_64.tar.gz ;\
    tar -xf /tmp/cmake-Linux-x86_64.tar.gz -C /home/buildslave/tools --strip-components=1 ;\
    # Fix permissions
    chmod 0755 /usr/share/jenkins ;\
    chmod 0644 /usr/share/jenkins/slave.jar ;\
    chmod 0755 /usr/local/bin/jenkins-slave ;\
    chown -R buildslave:buildslave /home/buildslave/tools /usr/share/plantuml ;\
    # Cleanup
    apt clean ;\
    rm -rf /var/lib/apt/lists/* /tmp/* /var/tmp/*

## Latest toolchains, available in $PATH. There can be newer versions of toolchains at
## upstream projects but these are latest for the docker image

### Install GNU toolchain (arm-none-eabi)
ARG GNU_GCC_ARM_VERSION="7-2018-q2-update"
ARG GNU_GCC_ARM_TAR="gcc-arm-none-eabi-${GNU_GCC_ARM_VERSION}-linux.tar.bz2"
ARG GNU_GCC_ARM_URL='https://developer.arm.com/-/media/Files/downloads/gnu-rm/7-2018q2/gcc-arm-none-eabi-7-2018-q2-update-linux.tar.bz2\
?revision=bc2c96c0-14b5-4bb4-9f18-bceb4050fee7?product=GNU%20Arm%20Embedded%20Toolchain%20Downloads,64-bit,,Linux,7-2018-q2-update'

RUN curl --create-dirs -fsSLo /tmp/${GNU_GCC_ARM_TAR} ${GNU_GCC_ARM_URL} ;\
    tar -xf /tmp/${GNU_GCC_ARM_TAR} -C ${TOOLS_DIR} --strip-components=1 ;\
    rm /tmp/${GNU_GCC_ARM_TAR}

### Install GNU toolchain (aarch64-none-elf)
ARG GNU_GCC_AARCH64_VERSION="9.2-2019.12"
ARG GNU_GCC_AARCH64_TAR="gcc-arm-${GNU_GCC_AARCH64_VERSION}-x86_64-aarch64-none-elf.tar.xz"
ARG GNU_GCC_AARCH64_URL="https://developer.arm.com/-/media/Files/downloads/gnu-a/$GNU_GCC_AARCH64_VERSION/binrel/${GNU_GCC_AARCH64_TAR}"

RUN curl --create-dirs -fsSLo /tmp/${GNU_GCC_AARCH64_TAR} ${GNU_GCC_AARCH64_URL} ;\
    tar -Jxf /tmp/${GNU_GCC_AARCH64_TAR} -C ${TOOLS_DIR} --strip-components=1 ;\
    rm /tmp/${GNU_GCC_AARCH64_TAR}

### Install Arm Clang (armclang)
ARG ARM_CLANG_VERSION="6.13"
ARG ARM_CLANG_TAR="DS500-BN-00026-r5p0-15rel0.tgz"
ARG ARM_CLANG_URL="https://developer.arm.com/-/media/Files/downloads/compiler/DS500-BN-00026-r5p0-15rel0.tgz\
?revision=6a961cf7-1d9a-4664-900b-11d20552dbc7?product=Download%20Arm%20Compiler,64-bit,,Linux,6.13"
ARG ARM_CLANG_INSTALL_DIR="${TOOLS_DIR}/armclang"

RUN curl --create-dirs -fsSLo /tmp/${ARM_CLANG_TAR} ${ARM_CLANG_URL} ;\
    mkdir -p ${ARM_CLANG_INSTALL_DIR} ;\
    tar -xzf /tmp/${ARM_CLANG_TAR} -C ${ARM_CLANG_INSTALL_DIR} ;\
    ${ARM_CLANG_INSTALL_DIR}/install_x86_64.sh \
           --no-interactive \
           --i-agree-to-the-contained-eula \
           -d ${TOOLS_DIR} ;\
    rm -rf ${ARM_CLANG_INSTALL_DIR} /tmp/${ARM_CLANG_TAR}

EXPOSE 22
ENTRYPOINT ["/usr/sbin/setup-sshd"]