mirror of
https://github.com/shadowsocks/shadowsocks-libev.git
synced 2026-10-22 06:53:46 +00:00
John
2a249b0bac
this means we no longer have to hardcode the password in the docker-compose file, and can treat the file as configuration rather than a secret.
54 lines
1.1 KiB
Docker
54 lines
1.1 KiB
Docker
#
|
|
# Dockerfile for shadowsocks-libev
|
|
#
|
|
|
|
FROM alpine
|
|
LABEL maintainer="kev <noreply@datageek.info>, Sah <contact@leesah.name>"
|
|
|
|
ENV SERVER_ADDR 0.0.0.0
|
|
ENV SERVER_PORT 8388
|
|
ENV PASSWORD=
|
|
ENV METHOD aes-256-gcm
|
|
ENV TIMEOUT 300
|
|
ENV DNS_ADDRS 8.8.8.8,8.8.4.4
|
|
ENV TZ UTC
|
|
ENV ARGS=
|
|
|
|
COPY . /tmp/repo
|
|
RUN set -ex \
|
|
# Build environment setup
|
|
&& apk add --no-cache --virtual .build-deps \
|
|
autoconf \
|
|
automake \
|
|
build-base \
|
|
c-ares-dev \
|
|
libcap \
|
|
libev-dev \
|
|
libtool \
|
|
libsodium-dev \
|
|
linux-headers \
|
|
mbedtls-dev \
|
|
pcre-dev \
|
|
# Build & install
|
|
&& cd /tmp/repo \
|
|
&& ./autogen.sh \
|
|
&& ./configure --prefix=/usr --disable-documentation \
|
|
&& make install \
|
|
&& ls /usr/bin/ss-* | xargs -n1 setcap cap_net_bind_service+ep \
|
|
&& apk del .build-deps \
|
|
# Runtime dependencies setup
|
|
&& apk add --no-cache \
|
|
ca-certificates \
|
|
rng-tools \
|
|
tzdata \
|
|
$(scanelf --needed --nobanner /usr/bin/ss-* \
|
|
| awk '{ gsub(/,/, "\nso:", $2); print "so:" $2 }' \
|
|
| sort -u) \
|
|
&& rm -rf /tmp/repo
|
|
|
|
USER nobody
|
|
|
|
COPY ./docker/alpine/entrypoint.sh /entrypoint.sh
|
|
|
|
CMD /entrypoint.sh
|