|
| 1 | +ARG RUBY_BASE=ruby:2 |
| 2 | +FROM $RUBY_BASE |
| 3 | + |
| 4 | + |
| 5 | +ENV LANG C.UTF-8 |
| 6 | + |
| 7 | +RUN groupadd --gid 1000 node \ |
| 8 | + && useradd --uid 1000 --gid node --shell /bin/bash --create-home node |
| 9 | + |
| 10 | +ARG KEYS |
| 11 | +ENV KEYS ${KEYS} |
| 12 | + |
| 13 | +RUN mkdir ~/.gnupg |
| 14 | +RUN chmod 700 ~/.gnupg |
| 15 | +RUN echo "disable-ipv6" >> ~/.gnupg/dirmngr.conf |
| 16 | + |
| 17 | +# gpg keys listed at https://github.com/nodejs/node#release-team |
| 18 | +RUN set -ex \ |
| 19 | + && for key in ${KEYS}; \ |
| 20 | + do \ |
| 21 | + echo "$key"; \ |
| 22 | + gpg --no-tty --keyserver pool.sks-keyservers.net --recv-keys "$key"; \ |
| 23 | + done |
| 24 | + |
| 25 | +ARG NODE_MAJOR=11 |
| 26 | +ENV NODE_MAJOR ${NODE_MAJOR} |
| 27 | + |
| 28 | +RUN NODE_VERSION=$(curl -SL "https://nodejs.org/dist/index.tab" \ |
| 29 | + | grep "^v$NODE_MAJOR" \ |
| 30 | + | head -n 1 | awk '{ print substr($1,2) }') \ |
| 31 | + && ARCH= && dpkgArch="$(dpkg --print-architecture)" \ |
| 32 | + && case "${dpkgArch##*-}" in \ |
| 33 | + amd64) ARCH='x64';; \ |
| 34 | + ppc64el) ARCH='ppc64le';; \ |
| 35 | + s390x) ARCH='s390x';; \ |
| 36 | + arm64) ARCH='arm64';; \ |
| 37 | + armhf) ARCH='armv7l';; \ |
| 38 | + i386) ARCH='x86';; \ |
| 39 | + *) echo "unsupported architecture"; exit 1 ;; \ |
| 40 | + esac \ |
| 41 | + && curl -SLO "https://nodejs.org/dist/v$NODE_VERSION/node-v$NODE_VERSION-linux-$ARCH.tar.xz" \ |
| 42 | + && curl -SLO --compressed "https://nodejs.org/dist/v$NODE_VERSION/SHASUMS256.txt.asc" \ |
| 43 | + && gpg --batch --decrypt --output SHASUMS256.txt SHASUMS256.txt.asc \ |
| 44 | + && grep " node-v$NODE_VERSION-linux-$ARCH.tar.xz\$" SHASUMS256.txt | sha256sum -c - \ |
| 45 | + && tar -xJf "node-v$NODE_VERSION-linux-$ARCH.tar.xz" -C /usr/local --strip-components=1 --no-same-owner \ |
| 46 | + && rm "node-v$NODE_VERSION-linux-$ARCH.tar.xz" SHASUMS256.txt.asc SHASUMS256.txt \ |
| 47 | + && ln -s /usr/local/bin/node /usr/local/bin/nodejs |
| 48 | + |
| 49 | +RUN curl -sS https://dl.yarnpkg.com/debian/pubkey.gpg | gpg --import |
| 50 | +RUN YARN_VERSION=$(curl -sSL --compressed https://yarnpkg.com/latest-version) \ |
| 51 | + set -ex \ |
| 52 | + && curl -fSLO --compressed "https://yarnpkg.com/downloads/$YARN_VERSION/yarn-v$YARN_VERSION.tar.gz" \ |
| 53 | + && curl -fSLO --compressed "https://yarnpkg.com/downloads/$YARN_VERSION/yarn-v$YARN_VERSION.tar.gz.asc" \ |
| 54 | + && gpg --batch --verify yarn-v$YARN_VERSION.tar.gz.asc yarn-v$YARN_VERSION.tar.gz \ |
| 55 | + && mkdir -p /opt \ |
| 56 | + && tar -xzf yarn-v$YARN_VERSION.tar.gz -C /opt/ \ |
| 57 | + && ln -s /opt/yarn-v$YARN_VERSION/bin/yarn /usr/local/bin/yarn \ |
| 58 | + && ln -s /opt/yarn-v$YARN_VERSION/bin/yarnpkg /usr/local/bin/yarnpkg \ |
| 59 | + && rm yarn-v$YARN_VERSION.tar.gz.asc yarn-v$YARN_VERSION.tar.gz |
| 60 | + |
| 61 | +CMD ruby -v && echo -n "node " && node -v && echo -n "yarn " && yarn -v && ls -la /usr/local/bin |
0 commit comments