ADD alpine-minirootfs-3.21.2-aarch64.tar.gz / # buildkit

CMD ["/bin/sh"]

RUN /bin/sh -c apk add --no-cache ca-certificates openssh-client git # buildkit

RUN /bin/sh -c [ -e /etc/nsswitch.conf ] && grep '^hosts: files dns' /etc/nsswitch.conf # buildkit

RUN /bin/sh -c set -eux; addgroup -g 2375 -S docker # buildkit

ENV DOCKER_VERSION=27.4.1

RUN /bin/sh -c set -eux; apkArch="$(apk --print-arch)"; case "$apkArch" in 'x86_64') url='https://download.docker.com/linux/static/stable/x86_64/docker-27.4.1.tgz'; ;; 'armhf') url='https://download.docker.com/linux/static/stable/armel/docker-27.4.1.tgz'; ;; 'armv7') url='https://download.docker.com/linux/static/stable/armhf/docker-27.4.1.tgz'; ;; 'aarch64') url='https://download.docker.com/linux/static/stable/aarch64/docker-27.4.1.tgz'; ;; *) echo >&2 "error: unsupported 'docker.tgz' architecture ($apkArch)"; exit 1 ;; esac; wget -O 'docker.tgz' "$url"; tar --extract --file docker.tgz --strip-components 1 --directory /usr/local/bin/ --no-same-owner 'docker/docker' ; rm docker.tgz; docker --version # buildkit

ENV DOCKER_BUILDX_VERSION=0.19.3

RUN /bin/sh -c set -eux; apkArch="$(apk --print-arch)"; case "$apkArch" in 'x86_64') url='https://github.com/docker/buildx/releases/download/v0.19.3/buildx-v0.19.3.linux-amd64'; sha256='32ed111e941e385c2fb8261eba06a4056915718fd606f8278834ac1931d261a2'; ;; 'armhf') url='https://github.com/docker/buildx/releases/download/v0.19.3/buildx-v0.19.3.linux-arm-v6'; sha256='744352489292ab1439e4b4facfd49f81cbe25e71e205908bd9ec44618759739c'; ;; 'armv7') url='https://github.com/docker/buildx/releases/download/v0.19.3/buildx-v0.19.3.linux-arm-v7'; sha256='5a83e1663b595147ac0225d876fc77e3b441e62dac7a59523ba7003eb6733b8b'; ;; 'aarch64') url='https://github.com/docker/buildx/releases/download/v0.19.3/buildx-v0.19.3.linux-arm64'; sha256='138b587399b27bb61945a36d67866177b85dea1155101a2be63c7ab715f18a2e'; ;; 'ppc64le') url='https://github.com/docker/buildx/releases/download/v0.19.3/buildx-v0.19.3.linux-ppc64le'; sha256='b9eb337b16a75ad45ff846134d34599169bc6dfdb168fb51303fc6b08ed9f31e'; ;; 'riscv64') url='https://github.com/docker/buildx/releases/download/v0.19.3/buildx-v0.19.3.linux-riscv64'; sha256='de8151fe6ced7118f2d680e1d1e7c5cb00496ca0e8b0f8b261450c6636d86978'; ;; 's390x') url='https://github.com/docker/buildx/releases/download/v0.19.3/buildx-v0.19.3.linux-s390x'; sha256='422a9a0250d52dfdd6b78c8152fbf9df41993be4c7add93438c22122ff6c7da8'; ;; *) echo >&2 "warning: unsupported 'docker-buildx' architecture ($apkArch); skipping"; exit 0 ;; esac; wget -O 'docker-buildx' "$url"; echo "$sha256 *"'docker-buildx' | sha256sum -c -; plugin='/usr/local/libexec/docker/cli-plugins/docker-buildx'; mkdir -p "$(dirname "$plugin")"; mv -vT 'docker-buildx' "$plugin"; chmod +x "$plugin"; docker buildx version # buildkit

ENV DOCKER_COMPOSE_VERSION=2.32.2

RUN /bin/sh -c set -eux; apkArch="$(apk --print-arch)"; case "$apkArch" in 'x86_64') url='https://github.com/docker/compose/releases/download/v2.32.2/docker-compose-linux-x86_64'; sha256='e746a42f33113ca1057a72adff5f07d584b38c94dd7cc8368f6a30c276367710'; ;; 'armhf') url='https://github.com/docker/compose/releases/download/v2.32.2/docker-compose-linux-armv6'; sha256='7a527b3c21d2e9f1f98cef3b37ad2fcb84f410dfcd67916e6fad78123155d216'; ;; 'armv7') url='https://github.com/docker/compose/releases/download/v2.32.2/docker-compose-linux-armv7'; sha256='556710d309f248fffbfab835c1142e32ea9dd0b1ccfbdbeea2624db0f35c68a6'; ;; 'aarch64') url='https://github.com/docker/compose/releases/download/v2.32.2/docker-compose-linux-aarch64'; sha256='c5b795b304410d46a754ecacfee36bf1f341e3bcd562a882525115e09ed90d6c'; ;; 'ppc64le') url='https://github.com/docker/compose/releases/download/v2.32.2/docker-compose-linux-ppc64le'; sha256='4eb2cac95680923c50bd1b1248e460cafe99ebaa063e394dd5178bc4065e0efa'; ;; 'riscv64') url='https://github.com/docker/compose/releases/download/v2.32.2/docker-compose-linux-riscv64'; sha256='d007f7dd93ea364d1e341e53308691f61cebb86a45b63d002157c22cba80510d'; ;; 's390x') url='https://github.com/docker/compose/releases/download/v2.32.2/docker-compose-linux-s390x'; sha256='b91db23ea592c81162bb92b042873569cbe1e381400ad45447521cfa984bc184'; ;; *) echo >&2 "warning: unsupported 'docker-compose' architecture ($apkArch); skipping"; exit 0 ;; esac; wget -O 'docker-compose' "$url"; echo "$sha256 *"'docker-compose' | sha256sum -c -; plugin='/usr/local/libexec/docker/cli-plugins/docker-compose'; mkdir -p "$(dirname "$plugin")"; mv -vT 'docker-compose' "$plugin"; chmod +x "$plugin"; ln -sv "$plugin" /usr/local/bin/; docker-compose --version; docker compose version # buildkit

COPY modprobe.sh /usr/local/bin/modprobe # buildkit

COPY docker-entrypoint.sh /usr/local/bin/ # buildkit

ENV DOCKER_TLS_CERTDIR=/certs

RUN /bin/sh -c mkdir /certs /certs/client && chmod 1777 /certs /certs/client # buildkit

ENTRYPOINT ["docker-entrypoint.sh"]

CMD ["sh"]

RUN /bin/sh -c set -eux; apk add --no-cache btrfs-progs e2fsprogs e2fsprogs-extra git ip6tables iptables openssl pigz shadow-uidmap xfsprogs xz zfs ; # buildkit

RUN /bin/sh -c set -eux; apk add --no-cache iptables-legacy; mkdir -p /usr/local/sbin/.iptables-legacy; for f in iptables iptables-save iptables-restore ip6tables ip6tables-save ip6tables-restore ; do b="$(command -v "${f/tables/tables-legacy}")"; "$b" --version; ln -svT "$b" "/usr/local/sbin/.iptables-legacy/$f"; done; export PATH="/usr/local/sbin/.iptables-legacy:$PATH"; iptables --version | grep legacy # buildkit

RUN /bin/sh -c set -eux; addgroup -S dockremap; adduser -S -G dockremap dockremap; echo 'dockremap:165536:65536' >> /etc/subuid; echo 'dockremap:165536:65536' >> /etc/subgid # buildkit

RUN /bin/sh -c set -eux; apkArch="$(apk --print-arch)"; case "$apkArch" in 'x86_64') url='https://download.docker.com/linux/static/stable/x86_64/docker-27.4.1.tgz'; ;; 'armhf') url='https://download.docker.com/linux/static/stable/armel/docker-27.4.1.tgz'; ;; 'armv7') url='https://download.docker.com/linux/static/stable/armhf/docker-27.4.1.tgz'; ;; 'aarch64') url='https://download.docker.com/linux/static/stable/aarch64/docker-27.4.1.tgz'; ;; *) echo >&2 "error: unsupported 'docker.tgz' architecture ($apkArch)"; exit 1 ;; esac; wget -O 'docker.tgz' "$url"; tar --extract --file docker.tgz --strip-components 1 --directory /usr/local/bin/ --no-same-owner --exclude 'docker/docker' ; rm docker.tgz; dockerd --version; containerd --version; ctr --version; runc --version # buildkit

ENV DIND_COMMIT=65cfcc28ab37cb75e1560e4b4738719c07c6618e

RUN /bin/sh -c set -eux; wget -O /usr/local/bin/dind "https://raw.githubusercontent.com/docker/docker/${DIND_COMMIT}/hack/dind"; chmod +x /usr/local/bin/dind # buildkit

COPY dockerd-entrypoint.sh /usr/local/bin/ # buildkit

VOLUME [/var/lib/docker]

EXPOSE map[2375/tcp:{} 2376/tcp:{}]

ENTRYPOINT ["dockerd-entrypoint.sh"]

CMD []

RUN /bin/sh -c apk add --no-cache iproute2 fuse-overlayfs # buildkit

RUN /bin/sh -c mkdir /run/user && chmod 1777 /run/user # buildkit

RUN /bin/sh -c set -eux; adduser -h /home/rootless -g 'Rootless' -D -u 1000 rootless; echo 'rootless:100000:65536' >> /etc/subuid; echo 'rootless:100000:65536' >> /etc/subgid # buildkit

RUN /bin/sh -c set -eux; apkArch="$(apk --print-arch)"; case "$apkArch" in 'x86_64') url='https://download.docker.com/linux/static/stable/x86_64/docker-rootless-extras-27.4.1.tgz'; ;; 'aarch64') url='https://download.docker.com/linux/static/stable/aarch64/docker-rootless-extras-27.4.1.tgz'; ;; *) echo >&2 "error: unsupported 'rootless.tgz' architecture ($apkArch)"; exit 1 ;; esac; wget -O 'rootless.tgz' "$url"; tar --extract --file rootless.tgz --strip-components 1 --directory /usr/local/bin/ 'docker-rootless-extras/rootlesskit' 'docker-rootless-extras/rootlesskit-docker-proxy' 'docker-rootless-extras/vpnkit' ; rm rootless.tgz; rootlesskit --version; vpnkit --version # buildkit

RUN /bin/sh -c set -eux; mkdir -p /home/rootless/.local/share/docker; chown -R rootless:rootless /home/rootless/.local/share/docker # buildkit

VOLUME [/home/rootless/.local/share/docker]

USER rootless