hardened_malloc/Dockerfile
titanz c0b49046a0
Some checks failed
Build / Build & push new image (push) Successful in 11m30s
Build / Scan current image with Trivy (push) Failing after 46s
Build / Scan current image with Grype (push) Failing after 1m8s
Hardened Malloc 2025040400
2025-04-30 15:55:32 +02:00

25 lines
745 B
Docker

ARG VERSION=2025040400
FROM alpine:latest
LABEL maintainer="Lukas Raub titanz@pm.me"
ARG VERSION
ARG CONFIG_NATIVE=false
ARG VARIANT=default
WORKDIR /root/hardened_malloc
ADD --keep-git-dir=true https://github.com/GrapheneOS/hardened_malloc.git#${VERSION} .
RUN apk -U upgrade \
&& apk --no-cache add build-base git gnupg openssh-keygen \
&& rm -rf /var/cache/apk/* \
&& wget -q https://grapheneos.org/allowed_signers -O grapheneos_allowed_signers
RUN --network=none \
git config gpg.ssh.allowedSignersFile grapheneos_allowed_signers \
&& git verify-tag $(git describe --tags) \
&& make CONFIG_NATIVE=${CONFIG_NATIVE} VARIANT=${VARIANT} \
&& mkdir -p /install \
&& mv out/libhardened_malloc.so /install