Dockerfile

# syntax=docker/dockerfile:experimental

# Use this configuration to build CENO
# with a root user inside of the build container.

FROM registry.gitlab.com/equalitie/ouinet:android

WORKDIR /usr/local/src/ouifennec
# Required by some task in Fennec bootstrap.
ENV SHELL /bin/bash

RUN \
  # Bootstrapping below installs the latest version of Rust,
  # which may break the build,
  # so pin one that we know works.
  # See <https://bugzilla.mozilla.org/show_bug.cgi?id=1585099>.
  wget -q -O- https://sh.rustup.rs | sh -s -- -y && \
  ~/.cargo/bin/rustup update && \
  ~/.cargo/bin/rustup toolchain install 1.61.0 && \
  ~/.cargo/bin/rustup default 1.61.0
RUN \
  # Enable ARMv7 Android target,
  # see <https://bugzilla.mozilla.org/show_bug.cgi?id=1384231>.
  # Also note that `ensure_rust_targets` during bootstrap below
  # adds target `thumbv7neon-linux-androideabi` instead of this one for Rust >= 1.33.
  # That one might work for us, but it still needs testing.
  ~/.cargo/bin/rustup target add armv7-linux-androideabi

RUN \
  apt-get update && apt-get install -y \
    ccache gosu ninja-build unionfs-fuse libnotify-bin python3-distutils python3-pip && \
  rm -rf /var/lib/apt/lists/*
# Install replacements for private packages
# and tell bootstrap to avoid installing them from Mozilla servers.
ENV MOZBUILD_CENO_ENV y
RUN \
  echo "deb http://deb.debian.org/debian buster-backports main" > /etc/apt/sources.list.d/buster-backports.list && \
  apt-get update && apt-get install -y \
    npm \
    # The version of Clang/LLVM provided by Mozilla is available from Buster Backports.
    clang-8 lld-8 llvm-8 cbindgen \
    clang-tidy-8 \
    nasm \
    # This is only needed for the x86_64 build, used for testing.
    yasm \
    && \
  rm -rf /var/lib/apt/lists/*
RUN SCCTMP=$(mktemp -d) && cd $SCCTMP && \
  wget -O sccache.tar.gz "https://github.com/mozilla/sccache/releases/download/v0.3.0/sccache-v0.3.0-x86_64-unknown-linux-musl.tar.gz" && \
  tar -xf sccache.tar.gz && \
  install sccache-*/sccache /usr/local/bin/ && \
  cd && rm -rf $SCCTMP
# Fake the locations of some packages which
# configuration stubbornly expects in the state directory as private.
RUN \
  mkdir -p ~/.mozbuild
# CENO v2: remove sym link addition, it breaks mach bootstrap step that uses rm tree
# && cd ~/.mozbuild
#  ln -s /usr/lib/llvm-8 clang

# CENO v2: mount was read only, but newest mach bootstrap tries to write to it and fails
# TODO: changed to "rw" for now until we figure out if "ro" is really needed?
RUN --mount=type=bind,target=/usr/local/src/ouifennec,rw \
  apt-get update && \
  cd gecko-dev && \
  # This would need to be invoked twice if we hadn't installed Rust above,
  # so that `gecko-dev/python/mozboot/mozboot/base.py::ensure_rust_targets` gets called.
  # It won't normally due to logic being such:
  # `have_rust ? ensure_rust_targets() : install_rust()`
  # (note no ensure targets in second branch).
  ./mach --no-interactive bootstrap --application-choice="GeckoView/Firefox for Android" && \
  # Remove downloaded archives which have already been unpacked.
  rm -rf ~/.mozbuild/mozboot/ && \
  # Fix some broken permissions in Android SDK tools (and maybe others).
  # Not really needed here, but it may come in handy for non-root users.
  chmod -R go+rX ~/.mozbuild/ && \
  rm -rf /var/lib/apt/lists/*

# Move all dot directories that will be receiving reusable data during the build
# into a single directory (with symbolic links from the expected locations),
# so that the directory can be bind-mounted outside
# and data reused between different runs.
# Please note that the bind-mounted directory
# should already contain the subdirectories listed below.
RUN \
  cd ~ && \
  mkdir -p .android .ccache .gradle .cache && \
  mv .android .cache/_android && ln -s .cache/_android .android && \
  mv .ccache  .cache/_ccache  && ln -s .cache/_ccache  .ccache && \
  mv .gradle  .cache/_gradle  && ln -s .cache/_gradle  .gradle