eclair-tf-m-3.13/Dockerfile

#
# Copyright (c) 2021-2022 BUGSENG srl. All rights reserved.
# Copyright (c) 2022-2024 Arm Limited. All rights reserved.
#
# SPDX-License-Identifier: BSD-3-Clause

FROM trustedfirmware/ci-amd64-tf-m-ubuntu:bionic

ARG EclairVersion=3.13.1
ARG EclairVariant=MC23P1-l64P

ENV ECLAIR_LICENSE_SERVER eclair.trustedfirmware.org
ENV ECLAIR_LICENSE_USER unguessable

ARG SentinelVersion=8.51.1

ARG SetupDir=/tmp/eclair-${EclairVersion}-${EclairVariant}
ARG SetupFile=ECLAIR_${EclairVersion}-${EclairVariant}_Setup.run

ENV ECLAIR_TOP_DIR /opt/bugseng/eclair-${EclairVersion}
ENV DEBIAN_FRONTEND noninteractive
ENV LANG C.UTF-8

COPY ${SetupFile} /tmp

RUN apt-get update

RUN apt-get -y -q install xz-utils apt-utils socat

RUN cd /tmp && \
    chmod +x ${SetupFile} && \
    ./${SetupFile} --keep --noexec

# update license manager for k8 agents
# This is later than the version bundle in eclair
COPY  aksusbd-10.12.1.tar.gz /tmp
RUN cd /tmp && \
    tar xzf "/tmp/aksusbd-10.12.1.tar.gz" && \
    cd aksusbd-10.12.1 && \
    ./dinst && \
    cd .. && \
    rm -rf aksusbd-${SentinelVersion}

RUN cd ${SetupDir} && \
    mkdir -m 755 -p "${ECLAIR_TOP_DIR}" && \
    mv * "${ECLAIR_TOP_DIR}" && \
    cd "${ECLAIR_TOP_DIR}/.." && \
    ln -sf "$(basename "${ECLAIR_TOP_DIR}")" eclair && \
    "${ECLAIR_TOP_DIR}/bin/postinstall.sh"

RUN rm -rf ${SetupDir} && \
    rm -rf /tmp/${SetupFile}

ENV PATH ${PATH}:${ECLAIR_TOP_DIR}/../bin:${ECLAIR_TOP_DIR}/bin

RUN apt-get install -y -q sudo && \
    useradd -m eclair -s /bin/bash && \
    echo "eclair ALL=NOPASSWD: ALL" > /etc/sudoers.d/eclair


RUN rm -rf /var/hasplm/storage

RUN apt-get update && \
    apt-get -y -q --no-install-recommends install \
    device-tree-compiler \
    git \
    make \
    nano \
    openjdk-11-jre-headless \
    openssh-server \
    python3

COPY tf-*.install /tmp/
COPY setup-sshd /usr/sbin/setup-sshd
COPY entrypoint.sh /usr/sbin/entrypoint.sh

RUN bash -ex /tmp/tf-environment.install


USER eclair

COPY bin/ /opt/bugseng/bin

EXPOSE 22

ENTRYPOINT ["/usr/sbin/entrypoint.sh"]