Add Dockerfile.
This commit is contained in:
61
Dockerfile
Normal file
61
Dockerfile
Normal file
@@ -0,0 +1,61 @@
|
||||
# Build the build base environment
|
||||
FROM debian:sid as base
|
||||
COPY . /tmp/.build/sshwifty
|
||||
RUN set -ex && \
|
||||
cd / && \
|
||||
ls -l /tmp/.build/sshwifty && \
|
||||
echo "res=0; for i in \$(seq 0 36); do \$@; res=\$?; [ \$res -eq 0 ] && exit \$res || sleep 10; done; exit \$res" > /try.sh && chmod +x /try.sh && \
|
||||
echo "cpid=\"\"; ret=0; i=0; for c in \"\$@\"; do ( (((((eval \$c; echo \$? >&3) | sed \"s/^/|-(\$i) /\" >&4) 2>&1 | sed \"s/^/|-(\$i)!/\" >&2) 3>&1) | (read xs; exit \$xs)) 4>&1) & ppid=\$!; cpid=\"\$cpid \$ppid\"; echo \"+ Child \$i (PID \$ppid): \$c ...\"; i=\$((i+1)); done; for c in \$cpid; do wait \$c; cret=\$?; [ \$cret -eq 0 ] && continue; echo \"* Child PID \$c has failed.\" >&2; ret=\$cret; done; exit \$ret" > /child.sh && chmod +x /child.sh && \
|
||||
export PATH=$PATH:/ && \
|
||||
echo "apt-get update && apt-get install npm golang-go git -y" > /install.sh && chmod +x /install.sh && \
|
||||
([ -z "$HTTP_PROXY" ] || (echo "Acquire::http::Proxy \"$HTTP_PROXY\";" >> /etc/apt/apt.conf)) && \
|
||||
([ -z "$HTTPS_PROXY" ] || (echo "Acquire::https::Proxy \"$HTTPS_PROXY\";" >> /etc/apt/apt.conf)) && \
|
||||
try.sh install.sh && rm /install.sh
|
||||
|
||||
# Build the base environment for application libraries
|
||||
FROM base as libbase
|
||||
RUN set -ex && \
|
||||
cd / && \
|
||||
export PATH=$PATH:/ && \
|
||||
([ -z "$HTTP_PROXY" ] || (git config --global http.proxy "$HTTP_PROXY" && npm config set proxy "$HTTP_PROXY")) && \
|
||||
([ -z "$HTTPS_PROXY" ] || (git config --global https.proxy "$HTTPS_PROXY" && npm config set https-proxy "$HTTPS_PROXY")) && \
|
||||
child.sh \
|
||||
"cd /tmp/.build/sshwifty && try.sh npm install" \
|
||||
"cd /tmp/.build/sshwifty && try.sh go mod download"
|
||||
|
||||
# Main building environment
|
||||
FROM libbase as builder
|
||||
RUN set -ex && \
|
||||
cd / && \
|
||||
export PATH=$PATH:/ && \
|
||||
([ -z "$HTTP_PROXY" ] || (git config --global http.proxy "$HTTP_PROXY" && npm config set proxy "$HTTP_PROXY")) && \
|
||||
([ -z "$HTTPS_PROXY" ] || (git config --global https.proxy "$HTTPS_PROXY" && npm config set https-proxy "$HTTPS_PROXY")) && \
|
||||
(cd /tmp/.build/sshwifty && try.sh npm run build && mv ./sshwifty /)
|
||||
|
||||
# Build the final image for running
|
||||
FROM alpine:latest
|
||||
ENV SSHWIFTY_HOSTNAME= \
|
||||
SSHWIFTY_SHAREDKEY= \
|
||||
SSHWIFTY_SOCKS5= \
|
||||
SSHWIFTY_SOCKS5_USER= \
|
||||
SSHWIFTY_SOCKS5_PASSWORD= \
|
||||
SSHWIFTY_LISTENINTERFACE=0.0.0.0 \
|
||||
SSHWIFTY_LISTENPORT=8182 \
|
||||
SSHWIFTY_INITIALTIMEOUT=0 \
|
||||
SSHWIFTY_READTIMEOUT=0 \
|
||||
SSHWIFTY_WRITETIMEOUT=0 \
|
||||
SSHWIFTY_HEARTBEATTIMEOUT=0 \
|
||||
SSHWIFTY_READDELAY=0 \
|
||||
SSHWIFTY_WRITEELAY=0 \
|
||||
SSHWIFTY_TLSCERTIFICATEFILE= \
|
||||
SSHWIFTY_TLSCERTIFICATEKEYFILE= \
|
||||
SSHWIFTY_DOCKER_TLSCERT= \
|
||||
SSHWIFTY_DOCKER_TLSCERTKEY=
|
||||
COPY --from=builder /sshwifty /
|
||||
RUN set -ex && \
|
||||
adduser -D "sshwifty" && \
|
||||
chmod +x /sshwifty && \
|
||||
echo "#!/bin/sh" > /sshwifty.sh && echo >> /sshwifty.sh && echo "([ -z \"\$SSHWIFTY_DOCKER_TLSCERT\" ] || echo \"\$SSHWIFTY_DOCKER_TLSCERT\" > /cert); ([ -z \"\$SSHWIFTY_DOCKER_TLSCERTKEY\" ] || echo \"\$SSHWIFTY_DOCKER_TLSCERTKEY\" > /certkey); if [ -f \"/cert\" ] && [ -f \"/certkey\" ]; then su - sshwifty -c \"\$(export) && SSHWIFTY_TLSCERTIFICATEFILE=/cert SSHWIFTY_TLSCERTIFICATEKEYFILE=/certkey /sshwifty\"; else su - sshwifty -c \"\$(export) && /sshwifty\"; fi;" >> /sshwifty.sh && chmod +x /sshwifty.sh
|
||||
EXPOSE 8182
|
||||
ENTRYPOINT [ "/sshwifty.sh" ]
|
||||
CMD []
|
||||
17
README.md
17
README.md
@@ -33,6 +33,23 @@ $ docker run --detach \
|
||||
niruix/sshwifty:latest
|
||||
```
|
||||
|
||||
If you want to use TLS (HTTPS) with the Docker image and don't want to setup
|
||||
volumes, you can use `SSHWIFTY_DOCKER_TLSCERT` and `SSHWIFTY_DOCKER_TLSCERTKEY`
|
||||
environment variables when starting the container:
|
||||
|
||||
```
|
||||
$ docker run --detach \
|
||||
--restart=always \
|
||||
--publish 8182:8182 \
|
||||
--env SSHWIFTY_DOCKER_TLSCERT="$(cat /path/to/domain.crt)"
|
||||
--env SSHWIFTY_DOCKER_TLSCERTKEY="$(cat /path/to/domain.key)"
|
||||
--name sshwifty \
|
||||
niruix/sshwifty:latest
|
||||
```
|
||||
|
||||
`/path/to/domain.crt` and `/path/to/domain.key` must be valid TLS certificate
|
||||
and key file located on the machine which the `docker run` command is executed.
|
||||
|
||||
[Docker]: https://www.docker.com
|
||||
|
||||
### Compile from source code (Recommanded if you're a developer)
|
||||
|
||||
Reference in New Issue
Block a user