310 lines
8.0 KiB
Docker

# syntax=docker/dockerfile:1
FROM node:12-buster as wwwstage
ARG KASMWEB_RELEASE="master"
RUN \
echo "**** build clientside ****" && \
export QT_QPA_PLATFORM=offscreen && \
export QT_QPA_FONTDIR=/usr/share/fonts && \
mkdir /src && \
cd /src && \
wget https://github.com/kasmtech/noVNC/tarball/${KASMWEB_RELEASE} -O - \
| tar --strip-components=1 -xz && \
npm install && \
npm run-script build
RUN \
echo "**** organize output ****" && \
mkdir /build-out && \
cd /src && \
rm -rf node_modules/ && \
cp -R ./* /build-out/ && \
cd /build-out && \
rm *.md && \
rm AUTHORS && \
cp index.html vnc.html
FROM ghcr.io/linuxserver/baseimage-arch:latest as buildstage
ARG KASMVNC_RELEASE="master"
COPY --from=wwwstage /build-out /www
RUN \
echo "**** install build deps ****" && \
pacman -Sy --noconfirm \
autoconf \
automake \
base-devel \
cmake \
git \
libdrm \
libepoxy \
libjpeg-turbo \
libpciaccess \
libtool \
libwebp \
libx11 \
libxau \
libxcb \
libxcursor \
libxcvt \
libxdmcp \
libxext \
libxfont2 \
libxkbfile \
libxrandr \
libxshmfence \
libxtst \
mesa \
mesa-libgl \
meson \
patch \
pixman \
wget \
xcb-util \
xcb-util-image \
xcb-util-keysyms \
xcb-util-renderutil \
xcb-util-wm \
xkeyboard-config \
xorg-font-util \
xorgproto \
xorg-server \
xorg-util-macros \
xorg-xinit \
xorg-xkbcomp \
xtrans && \
echo "**** build kasmvnc ****" && \
git clone https://github.com/kasmtech/KasmVNC.git src && \
cd /src && \
git checkout -f release/${KASMVNC_release} && \
sed -i \
-e '/find_package(FLTK/s@^@#@' \
-e '/add_subdirectory(tests/s@^@#@' \
CMakeLists.txt && \
cmake \
-DCMAKE_BUILD_TYPE=RelWithDebInfo \
-DBUILD_VIEWER:BOOL=OFF \
-DENABLE_GNUTLS:BOOL=OFF \
. && \
make -j4 && \
echo "**** build xorg ****" && \
XORG_VER="1.20.14" && \
XORG_PATCH=$(echo "$XORG_VER" | grep -Po '^\d.\d+' | sed 's#\.##') && \
wget --no-check-certificate \
-O /tmp/xorg-server-${XORG_VER}.tar.gz \
"https://www.x.org/archive/individual/xserver/xorg-server-${XORG_VER}.tar.gz" && \
tar --strip-components=1 \
-C unix/xserver \
-xf /tmp/xorg-server-${XORG_VER}.tar.gz && \
cd unix/xserver && \
patch -Np1 -i ../xserver${XORG_PATCH}.patch && \
patch -s -p0 < ../CVE-2022-2320-v1.20.patch && \
autoreconf -i && \
./configure --prefix=/opt/kasmweb \
--with-xkb-path=/usr/share/X11/xkb \
--with-xkb-output=/var/lib/xkb \
--with-xkb-bin-directory=/usr/bin \
--with-default-font-path="/usr/share/fonts/X11/misc,/usr/share/fonts/X11/cyrillic,/usr/share/fonts/X11/100dpi/:unscaled,/usr/share/fonts/X11/75dpi/:unscaled,/usr/share/fonts/X11/Type1,/usr/share/fonts/X11/100dpi,/usr/share/fonts/X11/75dpi,built-ins" \
--with-sha1=libcrypto \
--without-dtrace \
--disable-dri \
--disable-static \
--disable-xinerama \
--disable-xvfb \
--disable-xnest \
--disable-xorg \
--disable-dmx \
--disable-xwin \
--disable-xephyr \
--disable-kdrive \
--disable-config-hal \
--disable-config-udev \
--disable-dri2 \
--enable-glx \
--disable-xwayland \
--enable-dri3 && \
find . -name "Makefile" -exec sed -i 's/-Werror=array-bounds//g' {} \; && \
make -j4 && \
echo "**** generate final output ****" && \
cd /src && \
mkdir -p xorg.build/bin && \
cd xorg.build/bin/ && \
ln -s /src/unix/xserver/hw/vnc/Xvnc Xvnc && \
cd .. && \
mkdir -p man/man1 && \
touch man/man1/Xserver.1 && \
cp /src/unix/xserver/hw/vnc/Xvnc.man man/man1/Xvnc.1 && \
mkdir lib && \
cd lib && \
ln -s /usr/lib64/dri dri && \
cd /src && \
mkdir -p builder/www && \
cp -ax /www/* builder/www/ && \
cp builder/www/index.html builder/www/vnc.html && \
make servertarball && \
mkdir /build-out && \
tar xzf \
kasmvnc-Linux*.tar.gz \
-C /build-out/ && \
rm -Rf /build-out/usr/local/share/man
# nodejs builder
FROM ghcr.io/linuxserver/baseimage-arch:latest as nodebuilder
ARG KCLIENT_RELEASE
RUN \
echo "**** install build deps ****" && \
pacman -Sy --noconfirm \
base-devel \
curl \
libpulse \
nodejs \
npm \
python3
RUN \
echo "**** grab source ****" && \
mkdir -p /kclient && \
if [ -z ${KCLIENT_RELEASE+x} ]; then \
KCLIENT_RELEASE=$(curl -sX GET "https://api.github.com/repos/linuxserver/kclient/releases/latest" \
| awk '/tag_name/{print $4;exit}' FS='[""]'); \
fi && \
curl -o \
/tmp/kclient.tar.gz -L \
"https://github.com/linuxserver/kclient/archive/${KCLIENT_RELEASE}.tar.gz" && \
tar xf \
/tmp/kclient.tar.gz -C \
/kclient/ --strip-components=1
RUN \
echo "**** install node modules ****" && \
cd /kclient && \
npm install && \
rm -f package-lock.json
# runtime stage
FROM ghcr.io/linuxserver/baseimage-arch:latest
# set version label
ARG BUILD_DATE
ARG VERSION
ARG KASMWEB_RELEASE="develop"
LABEL build_version="Linuxserver.io version:- ${VERSION} Build-date:- ${BUILD_DATE}"
LABEL maintainer="thelamer"
# env
ENV DISPLAY=:1 \
PERL5LIB=/usr/local/bin \
GOMP_WAIT_POLICY=PASSIVE \
GOMP_SPINCOUNT=0 \
HOME=/config \
NVIDIA_DRIVER_CAPABILITIES=${NVIDIA_DRIVER_CAPABILITIES:+$NVIDIA_DRIVER_CAPABILITIES,}graphics,compat32,utility
# copy over build output
COPY --from=nodebuilder /kclient /kclient
COPY --from=buildstage /build-out/ /
RUN \
echo "**** install deps ****" && \
pacman -Sy --noconfirm --needed \
amdvlk \
base-devel \
ffmpeg \
git \
inetutils \
libjpeg-turbo \
libva-mesa-driver \
libwebp \
libxfont2 \
libxshmfence \
mesa \
mesa-libgl \
nginx \
nodejs \
noto-fonts \
openbox \
openssh \
pciutils \
perl-list-moreutils \
perl-switch \
perl-try-tiny \
perl-yaml-tiny \
pixman \
pulseaudio \
python3 \
python-pyxdg \
sudo \
vulkan-intel \
vulkan-radeon \
xf86-video-amdgpu \
xf86-video-ati \
xf86-video-intel \
xf86-video-nouveau \
xf86-video-qxl \
xkeyboard-config \
xorg-setxkbmap \
xorg-xauth \
xorg-xkbcomp \
xterm && \
echo "**** user perms ****" && \
useradd \
-u 1000 -U \
-d /home/kasm-user \
-s /bin/bash kasm-user && \
usermod -G users kasm-user && \
echo "kasm-user:kasm" | chpasswd && \
mkdir -p /home/kasm-user && \
chown 1000:1000 /home/kasm-user && \
mkdir -p /var/run/pulse && \
chown 1000:root /var/run/pulse && \
echo "abc:abc" | chpasswd && \
usermod -s /bin/bash abc && \
echo 'abc ALL=(ALL) NOPASSWD:ALL' > /etc/sudoers.d/abc && \
echo 'kasm-user ALL=(ALL) NOPASSWD:ALL' > /etc/sudoers.d/kasm-user && \
echo "allowed_users=anybody" > /etc/X11/Xwrapper.config && \
echo "**** build perl-hash-merge-simple ****" && \
cd /tmp && \
git clone https://aur.archlinux.org/perl-hash-merge-simple.git && \
chown -R abc:abc perl-hash-merge-simple && \
cd perl-hash-merge-simple && \
sudo -u abc makepkg -sAci --skipinteg --noconfirm --needed && \
echo "**** filesystem setup ****" && \
ln -s /usr/local/share/kasmvnc /usr/share/kasmvnc && \
ln -s /usr/local/etc/kasmvnc /etc/kasmvnc && \
ln -s /usr/local/lib/kasmvnc /usr/lib/kasmvncserver && \
echo "**** openbox tweaks ****" && \
sed -i \
's/NLIMC/NLMC/g' \
/etc/xdg/openbox/rc.xml && \
echo "**** kasm support ****" && \
mkdir -p /kasmbins && \
curl -s https://kasm-ci.s3.amazonaws.com/kasmbins-amd64-${KASMWEB_RELEASE}.tar.gz \
| tar xzvf - -C /kasmbins/ && \
chmod +x /kasmbins/* && \
chown -R 1000:1000 /kasmbins && \
echo "**** configure locale and nginx ****" && \
echo "en_US.UTF-8 UTF-8" > /etc/locale.gen && \
locale-gen && \
sed -i '$d' /etc/nginx/nginx.conf && \
echo "include /etc/nginx/conf.d/*;}" >> /etc/nginx/nginx.conf && \
mkdir -p /etc/nginx/conf.d && \
echo "**** cleanup ****" && \
pacman -Rsn --noconfirm \
git \
$(pacman -Qdtq) && \
rm -rf \
/tmp/* \
/var/cache/pacman/pkg/* \
/var/lib/pacman/sync/*
# add local files
COPY /root /
# ports and volumes
EXPOSE 3000 3001
VOLUME /config