81 lines
2.7 KiB
Docker
81 lines
2.7 KiB
Docker
|
FROM ubuntu:latest
|
||
|
|
|
||
|
|
# Don't bother us for selections during install
|
||
|
|
ENV DEBIAN_FRONTEND="noninteractive"
|
||
|
|
|
||
|
|
# We work off /opt, the *nix way
|
||
|
|
WORKDIR /opt/
|
||
|
|
|
||
|
|
# need to figure out if arm64/arm64 32bit multilib/arm
|
||
|
|
COPY piframefleet/arch_detect.sh /opt/
|
||
|
|
|
||
|
|
# Install and base setup all the things
|
||
|
|
RUN apt update && apt upgrade -y && \
|
||
|
|
apt install -y python3 curl jq bash unzip nano git && \
|
||
|
|
ARCH=$(/opt/arch_detect.sh); \
|
||
|
|
echo "**** Detected arch: $ARCH ****" && \
|
||
|
|
S6_RELEASE=$(curl -sX GET "https://api.github.com/repos/just-containers/s6-overlay/tags" \
|
||
|
|
| jq -r .[0].name); \
|
||
|
|
echo "**** s6-overlay release: ${S6_RELEASE} ****" && \
|
||
|
|
echo "**** Installing s6-overlay ****" && \
|
||
|
|
curl -L https://github.com/just-containers/s6-overlay/releases/latest/download/s6-overlay-${ARCH}.tar.gz \
|
||
|
|
-o /opt/s6-overlay.tar.gz && \
|
||
|
|
tar xzf /opt/s6-overlay.tar.gz -C / --exclude="./bin" && \
|
||
|
|
tar xzf /opt/s6-overlay.tar.gz -C /usr ./bin && \
|
||
|
|
echo "**** wireguard ****" && \
|
||
|
|
apt install -y build-essential ifupdown net-tools iproute2 iptables iputils-ping libc6 libelf-dev pkg-config && \
|
||
|
|
WIREGUARD_RELEASE=$(curl -sX GET "https://api.github.com/repos/WireGuard/wireguard-tools/tags" \
|
||
|
|
| jq -r .[0].name); \
|
||
|
|
git clone https://git.zx2c4.com/wireguard-tools /opt/wireguard-tools && \
|
||
|
|
cd /opt/wireguard-tools && \
|
||
|
|
git checkout "${WIREGUARD_RELEASE}" && \
|
||
|
|
make -C src -j$(nproc) && \
|
||
|
|
make -C src install && \
|
||
|
|
cd /opt && \
|
||
|
|
echo "**** syncthing ****" && \
|
||
|
|
curl -s https://syncthing.net/release-key.txt | apt-key add - && \
|
||
|
|
echo "deb https://apt.syncthing.net/ syncthing stable" | tee /etc/apt/sources.list.d/syncthing.list && \
|
||
|
|
apt update && apt install -y syncthing && \
|
||
|
|
echo "**** rclone ****" && \
|
||
|
|
curl https://rclone.org/install.sh | bash && \
|
||
|
|
echo "**** filebrowser ****" && \
|
||
|
|
curl -fsSL https://filebrowser.org/get.sh | bash && \
|
||
|
|
echo "**** ansible ****" && \
|
||
|
|
apt install -y python3-apt sshpass ansible ansible-lint ansible-doc && \
|
||
|
|
echo "**** cleanup ****" && \
|
||
|
|
rm /opt/arch_detect.sh && \
|
||
|
|
rm /opt/s6-overlay.tar.gz && \
|
||
|
|
rm -rf /opt/wireguard-tools && \
|
||
|
|
apt remove --purge -y build-essential pkg-config libelf-dev unzip && \
|
||
|
|
apt autoremove --purge -y && \
|
||
|
|
rm -rf /var/lib/apt/lists/*
|
||
|
|
|
||
|
|
# Copy the s6 related 'stuff' to the container
|
||
|
|
ADD /piframefleet/root/ /
|
||
|
|
|
||
|
|
# Ansible related 'stuff'
|
||
|
|
VOLUME /opt/ansible
|
||
|
|
|
||
|
|
# Wireguard related 'stuff'
|
||
|
|
ENV ENABLE_WIREGUARD=false
|
||
|
|
EXPOSE 51820/udp
|
||
|
|
VOLUME /lib/modules
|
||
|
|
VOLUME /opt/wireguard
|
||
|
|
|
||
|
|
# SyncThing related 'stuff'
|
||
|
|
ENV ENABLE_SYNCTHING=false
|
||
|
|
EXPOSE 8384/tcp
|
||
|
|
EXPOSE 22000/tcp
|
||
|
|
VOLUME /opt/syncthing
|
||
|
|
|
||
|
|
# FileBrowser related 'stuff'
|
||
|
|
ENV ENABLE_FILEBROWSER=false
|
||
|
|
EXPOSE 9191/tcp
|
||
|
|
VOLUME /opt/filebrowser
|
||
|
|
|
||
|
|
# General 'stuff'
|
||
|
|
VOLUME /opt/pictures
|
||
|
|
|
||
|
|
# Run s6-overlay as the init so we get services and similar
|
||
|
|
ENTRYPOINT [ "/init" ]
|