.circleci/Dockerfile

   1 FROM debian:9
   2
   3
   4 # Configuration version history
   5 # v1.0   - Initial version by Etienne Champetier
   6 # v1.0.1 - Run as non-root, add unzip, xz-utils
   7 # v1.0.2 - Add bzr
   8 # v1.0.3 - Verify usign signatures
   9
  10 RUN apt update && apt install -y \
  11 build-essential \
  12 bzr \
  13 curl \
  14 jq \
  15 gawk \
  16 gettext \
  17 git \
  18 libncurses5-dev \
  19 libssl-dev \
  20 python \
  21 signify-openbsd \
  22 subversion \
  23 time \
  24 unzip \
  25 wget \
  26 xz-utils \
  27 zlib1g-dev \
  28 && rm -rf /var/lib/apt/lists/*
  29
  30 RUN useradd -c "OpenWrt Builder" -m -d /home/build -s /bin/bash build
  31 USER build
  32 ENV HOME /home/build
  33
  34 # LEDE Build System (LEDE GnuPG key for unattended build jobs)
  35 RUN curl 'https://git.openwrt.org/?p=keyring.git;a=blob_plain;f=gpg/626471F1.asc' | gpg --import \
  36  && echo '54CC74307A2C6DC9CE618269CD84BCED626471F1:6:' | gpg --import-ownertrust
  37
  38 # LEDE Release Builder (17.01 "Reboot" Signing Key)
  39 RUN curl 'https://git.openwrt.org/?p=keyring.git;a=blob_plain;f=gpg/D52BBB6B.asc' | gpg --import \
  40  && echo 'B09BE781AE8A0CD4702FDCD3833C6010D52BBB6B:6:' | gpg --import-ownertrust
  41
  42 # OpenWrt Release Builder (18.06 Signing Key)
  43 RUN curl 'https://git.openwrt.org/?p=keyring.git;a=blob_plain;f=gpg/17E1CE16.asc' | gpg --import \
  44  && echo '6768C55E79B032D77A28DA5F0F20257417E1CE16:6:' | gpg --import-ownertrust
  45
  46 # LEDE Build System (LEDE usign key for unattended build jobs)
  47 RUN curl 'https://git.openwrt.org/?p=keyring.git;a=blob_plain;f=usign/b5043e70f9a75cde' --create-dirs \
  48  -o /home/build/usign/b5043e70f9a75cde