79 lines
2.8 KiB
Docker
79 lines
2.8 KiB
Docker
# Copyright 2023 Foster Hangdaan
|
|
#
|
|
# Licensed under the Apache License, Version 2.0 (the "License");
|
|
# you may not use this file except in compliance with the License.
|
|
# You may obtain a copy of the License at
|
|
#
|
|
# http://www.apache.org/licenses/LICENSE-2.0
|
|
#
|
|
# Unless required by applicable law or agreed to in writing, software
|
|
# distributed under the License is distributed on an "AS IS" BASIS,
|
|
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
# See the License for the specific language governing permissions and
|
|
# limitations under the License.
|
|
|
|
|
|
# Download, verify and unpack stage
|
|
FROM docker.io/library/ubuntu:22.04 as downloader
|
|
|
|
RUN apt-get update -y \
|
|
&& DEBIAN_FRONTEND=noninteractive apt-get install -y curl gnupg git \
|
|
&& apt-get clean
|
|
|
|
WORKDIR /bitcoin
|
|
|
|
ARG TARGETPLATFORM
|
|
ENV BITCOIN_VERSION=27.1
|
|
|
|
RUN set -ex \
|
|
&& if [ "${TARGETPLATFORM}" = "linux/amd64" ]; then export TARGETPLATFORM=x86_64-linux-gnu; fi \
|
|
&& if [ "${TARGETPLATFORM}" = "linux/arm64" ]; then export TARGETPLATFORM=aarch64-linux-gnu; fi \
|
|
&& if [ "${TARGETPLATFORM}" = "linux/arm/v7" ]; then export TARGETPLATFORM=arm-linux-gnueabihf; fi \
|
|
&& git clone https://github.com/bitcoin-core/guix.sigs.git \
|
|
&& gpg --import guix.sigs/builder-keys/* \
|
|
&& curl --show-error --remote-name --location https://bitcoincore.org/bin/bitcoin-core-${BITCOIN_VERSION}/bitcoin-${BITCOIN_VERSION}-${TARGETPLATFORM}.tar.gz \
|
|
&& curl --show-error --remote-name --location https://bitcoincore.org/bin/bitcoin-core-${BITCOIN_VERSION}/SHA256SUMS \
|
|
&& curl --show-error --remote-name --location https://bitcoincore.org/bin/bitcoin-core-${BITCOIN_VERSION}/SHA256SUMS.asc \
|
|
&& gpg --verify SHA256SUMS.asc SHA256SUMS \
|
|
&& grep " bitcoin-${BITCOIN_VERSION}-${TARGETPLATFORM}.tar.gz" SHA256SUMS | sha256sum --check - \
|
|
&& mkdir ./tmp \
|
|
&& tar -xzf bitcoin-${BITCOIN_VERSION}-${TARGETPLATFORM}.tar.gz -C ./tmp --strip-components 1
|
|
|
|
|
|
# Runtime stage
|
|
FROM docker.io/library/ubuntu:22.04
|
|
|
|
LABEL maintainer="Foster Hangdaan <foster@hangdaan.email>"
|
|
|
|
RUN set -ex && \
|
|
apt-get update && \
|
|
DEBIAN_FRONTEND=noninteractive apt-get --no-install-recommends --yes install ca-certificates && \
|
|
apt-get clean && \
|
|
rm -rf /var/lib/apt
|
|
|
|
COPY --from=downloader /bitcoin/tmp/bin/bitcoind /bitcoin/tmp/bin/bitcoin-cli /usr/local/bin/
|
|
|
|
RUN adduser --system --group --disabled-password bitcoin && \
|
|
mkdir -p /home/bitcoin/.bitcoin
|
|
|
|
# Expose volume containing all `bitcoind` data
|
|
VOLUME /home/bitcoin/.bitcoin/
|
|
|
|
# REST interface
|
|
EXPOSE 8080
|
|
|
|
# P2P network (mainnet, testnet & regnet respectively)
|
|
EXPOSE 8333 18333 18444
|
|
|
|
# RPC interface (mainnet, testnet & regnet respectively)
|
|
EXPOSE 8332 18332 18443
|
|
|
|
# ZMQ ports (for transactions & blocks respectively)
|
|
EXPOSE 28332 28333
|
|
|
|
# Switch to bitcoin user
|
|
USER bitcoin
|
|
|
|
ENTRYPOINT ["bitcoind"]
|
|
CMD ["-zmqpubrawblock=tcp://0.0.0.0:28332", "-zmqpubrawtx=tcp://0.0.0.0:28333"]
|