Dockerfile

# global args
ARG __BUILD_DIR__="/build"
ARG MEMCACHED_VERSION="1.6.15"



FROM fscm/centos:stream-9 as build

ARG __BUILD_DIR__
ARG __WORK_DIR__="/work"
ARG MEMCACHED_VERSION
ARG __USER__="root"
ARG __SOURCE_DIR__="${__WORK_DIR__}/src"

ENV \
  LANG="C.utf8" \
  LC_ALL="C.utf8"

USER "${__USER__}"

COPY "LICENSE" "files/" "${__WORK_DIR__}"/

WORKDIR "${__WORK_DIR__}"

SHELL ["/bin/bash", "-o", "pipefail", "-c"]

RUN \
# build env
    echo '--> setting build env' && \
    set +h && \
    export __NPROC__="$(getconf _NPROCESSORS_ONLN || echo 1)" && \
    #export DCACHE_LINESIZE="$(getconf LEVEL1_DCACHE_LINESIZE || echo 64)" && \
    export DCACHE_LINESIZE="64" && \
    export __KARCH__="$(case `arch` in x86_64*) echo x86;; aarch64) echo arm64;; esac)" && \
    export __MARCH__="$(case `arch` in x86_64*) echo x86-64;; aarch64) echo armv8-a;; esac)" && \
    export MAKEFLAGS="--silent --no-print-directory --jobs ${__NPROC__}" && \
    export PKG_CONFIG_PATH=/usr/local/lib/pkgconfig && \
# build structure
    echo '--> creating build structure' && \
    for folder in 'bin'; do \
        install --directory --owner="${__USER__}" --group="${__USER__}" --mode=0755 "${__BUILD_DIR__}/usr/${folder}"; \
    done && \
    for folder in '/tmp'; do \
        install --directory --owner="${__USER__}" --group="${__USER__}" --mode=1777 "${__BUILD_DIR__}${folder}"; \
    done && \
# dependencies
    echo '--> instaling dependencies' && \
    dnf --quiet makecache --refresh && \
    dnf --assumeyes --quiet --setopt=install_weak_deps='no' install \
        binutils \
        ca-certificates \
        curl \
        diffutils \
        file \
        findutils \
        gcc \
        gperf \
        gzip \
        jq \
        make \
        patch \
        perl-interpreter \
        perl-base \
        perl-lib \
        perl-File-Compare \
        perl-File-Copy \
        perl-FindBin \
        perl-IPC-Cmd \
        python3-devel \
        rsync \
        tar \
        xz \
        > /dev/null && \
    ln --symbolic --force python3 /usr/bin/python && \
# kernel headers
    echo '--> installing kernel headers' && \
    KERNEL_VERSION="$(curl --silent --location --retry 3 'https://www.kernel.org/releases.json' | jq -r '.latest_stable.version')" && \
    install --directory "${__SOURCE_DIR__}/kernel" && \
    curl --silent --location --retry 3 "https://cdn.kernel.org/pub/linux/kernel/v${KERNEL_VERSION%%.*}.x/linux-${KERNEL_VERSION}.tar.xz" \
        | tar xJ --no-same-owner --strip-components=1 -C "${__SOURCE_DIR__}/kernel" && \
    cd "${__SOURCE_DIR__}/kernel" && \
    make mrproper > /dev/null && \
    make ARCH="${__KARCH__}" INSTALL_HDR_PATH="/usr/local" headers_install > /dev/null && \
    # The kernel headers that exported to user space are not covered by the GPLv2 license.
    # This is documented in the "Linux kernel licensing rules":
    # https://www.kernel.org/doc/html/latest/process/license-rules.html
    cd ~- && \
    rm -rf "${__SOURCE_DIR__}/kernel" && \
# musl
    echo '--> installing musl libc' && \
    install --directory "${__SOURCE_DIR__}/musl/_build" && \
    curl --silent --location --retry 3 "https://musl.libc.org/releases/musl-latest.tar.gz" \
        | tar xz --no-same-owner --strip-components=1 -C "${__SOURCE_DIR__}/musl" && \
    cd "${__SOURCE_DIR__}/musl/_build" && \
    ../configure \
        CFLAGS="-fPIC -O2 -g0 -s -w -pipe -march=${__MARCH__} -mtune=generic -DNDEBUG -DCLS=${__DCACHE_LINESIZE__}" \
        --prefix='/usr/local' \
        --disable-debug \
        --disable-shared \
        --enable-wrapper=all \
        --enable-static \
        > /dev/null && \
    make > /dev/null && \
    make install > /dev/null && \
    # Applications linked against all musl public header files and crt files are allowed to
    # omit copyright notice and permission notice otherwise required by the license.
    # This is documented in the "COPYRIGHT" file.
    # https://git.musl-libc.org/cgit/musl/tree/COPYRIGHT
    cd ~- && \
    rm -rf "${__SOURCE_DIR__}/musl" && \
# zlib
    echo '--> installing zlib' && \
    ZLIB_VERSION="$(rpm -q --qf "%{VERSION}" zlib)" && \
    install --directory "${__SOURCE_DIR__}/zlib/_build" && \
    curl --silent --location --retry 3 "https://zlib.net/fossils/zlib-${ZLIB_VERSION}.tar.gz" \
        | tar xz --no-same-owner --strip-components=1 -C "${__SOURCE_DIR__}/zlib" && \
    cd "${__SOURCE_DIR__}/zlib/_build" && \
    sed -i.orig -e '/(man3dir)/d' ../Makefile.in && \
    CC="musl-gcc -static --static" \
    CFLAGS="-fPIC -O2 -g0 -s -w -pipe -mmusl -march=${__MARCH__} -mtune=generic -DNDEBUG -DCLS=${__DCACHE_LINESIZE__}" \
    ../configure \
        --prefix='/usr/local' \
        --includedir='/usr/local/include' \
        --libdir='/usr/local/lib' \
        --static \
        > /dev/null && \
    make > /dev/null && \
    make install > /dev/null && \
    install --directory --owner="${__USER__}" --group="${__USER__}" --mode=0755 "${__BUILD_DIR__}/licenses/zlib" && \
    install --owner="${__USER__}" --group="${__USER__}" --mode=0644 --target-directory="${__BUILD_DIR__}/licenses/zlib" '../README' && \
    (cd .. && find ./ -type f -a \( -iname '*LICENSE*' -o -iname '*COPYING*' \) -exec cp --parents {} "${__BUILD_DIR__}/licenses/zlib" ';') && \
    cd ~- && \
    rm -rf "${__SOURCE_DIR__}/zlib" && \
# openssl
    echo '--> installing openssl' && \
    OPENSSL_VERSION="$(rpm -q --qf "%{VERSION}" openssl-libs)" && \
    install --directory "${__SOURCE_DIR__}/openssl/_build" && \
    curl --silent --location --retry 3 "https://www.openssl.org/source/openssl-${OPENSSL_VERSION}.tar.gz" \
        | tar xz --no-same-owner --strip-components=1 -C "${__SOURCE_DIR__}/openssl" && \
    cd "${__SOURCE_DIR__}/openssl/_build" && \
    ../config \
        CC="musl-gcc -static --static" \
        --openssldir='/etc/ssl' \
        --prefix='/usr/local' \
        --libdir='/usr/local/lib' \
        --release \
        --static \
        enable-cms \
        enable-ec_nistp_64_gcc_128 \
        enable-rfc3779 \
        no-comp \
        no-shared \
        no-ssl3 \
        no-weak-ssl-ciphers \
        zlib \
        -static \
        -DCLS=${DCACHE_LINESIZE} \
        -DNDEBUG \
        -DOPENSSL_NO_HEARTBEATS \
        -fPIC -O2 -g0 -s -w -pipe -mmusl -march=${__MARCH__} -mtune=generic '-DDEVRANDOM="\"/dev/urandom\""' && \
    make > /dev/null && \
    make install_sw > /dev/null && \
    make install_ssldirs > /dev/null && \
    install --directory --owner="${__USER__}" --group="${__USER__}" --mode=0755 "${__BUILD_DIR__}/licenses/openssl" && \
    (cd .. && find ./ -type f -a \( -iname '*LICENSE*' -o -iname '*COPYING*' \) -exec cp --parents {} "${__BUILD_DIR__}/licenses/openssl" ';') && \
    cd ~- && \
    rm -rf "${__SOURCE_DIR__}/openssl" && \
# libevent
    echo '--> installing libevent' && \
    LIBEVENT_URL="$(curl --silent --location --retry 3 'https://api.github.com/repos/libevent/libevent/releases/latest' | jq -r '.assets[] | select(.content_type=="application/gzip") | .browser_download_url')" && \
    install --directory "${__SOURCE_DIR__}/libevent/_build" && \
    curl --silent --location --retry 3 "${LIBEVENT_URL}" \
        | tar xz --no-same-owner --strip-components=1 -C "${__SOURCE_DIR__}/libevent" && \
    cd "${__SOURCE_DIR__}/libevent/_build" && \
    ../configure \
        CC="musl-gcc -static --static" \
        CFLAGS="-fPIC -O2 -g0 -s -w -pipe -mmusl -march=${__MARCH__} -mtune=generic -DNDEBUG -DCLS=${__DCACHE_LINESIZE__}" \
        --quiet \
        --prefix='/usr/local' \
        --includedir='/usr/local/include' \
        --libdir='/usr/local/lib' \
        --sysconfdir='/etc' \
        --enable-fast-install \
        --enable-silent-rules \
        --enable-static \
        --disable-debug-mode \
        --disable-samples \
        --disable-shared && \
    make > /dev/null && \
    make install > /dev/null && \
    install --directory --owner="${__USER__}" --group="${__USER__}" --mode=0755 "${__BUILD_DIR__}/licenses/libevent" && \
    (cd .. && find ./ -type f -a \( -iname '*LICENSE*' -o -iname '*COPYING*' \) -exec cp --parents {} "${__BUILD_DIR__}/licenses/libevent" ';') && \
    cd ~- && \
    rm -rf "${__SOURCE_DIR__}/libevent" && \
# libseccomp
    echo '--> installing libseccomp' && \
    LIBSECCOMP_URL="$(curl --silent --location --retry 3 'https://api.github.com/repos/seccomp/libseccomp/releases/latest' | jq -r '.assets[] | select(.content_type=="application/gzip") | .browser_download_url')" && \
    install --directory "${__SOURCE_DIR__}/libseccomp/_build" && \
    curl --silent --location --retry 3 "${LIBSECCOMP_URL}" \
        | tar xz --no-same-owner --strip-components=1 -C "${__SOURCE_DIR__}/libseccomp" && \
    cd "${__SOURCE_DIR__}/libseccomp/_build" && \
    sed -i.orig -e '/^SUBDIRS/ s/ \(doc\|tests\)//g' ../Makefile.in && \
    ../configure \
        CC="musl-gcc -static --static" \
        CFLAGS="-fPIC -O2 -g0 -s -w -pipe -mmusl -march=${__MARCH__} -mtune=generic -DNDEBUG -DCLS=${__DCACHE_LINESIZE__}" \
        --quiet \
        --prefix='/usr/local' \
        --includedir='/usr/local/include' \
        --libdir='/usr/local/lib' \
        --sysconfdir='/etc' \
        --enable-fast-install \
        --enable-silent-rules \
        --enable-static \
        --disable-python \
        --disable-shared && \
    make > /dev/null && \
    make install > /dev/null && \
    install --directory --owner="${__USER__}" --group="${__USER__}" --mode=0755 "${__BUILD_DIR__}/licenses/libseccomp" && \
    (cd .. && find ./ -type f -a \( -iname '*LICENSE*' -o -iname '*COPYING*' \) -exec cp --parents {} "${__BUILD_DIR__}/licenses/libseccomp" ';') && \
    cd ~- && \
    rm -rf "${__SOURCE_DIR__}/libseccomp" && \
# cyrus-sasl
    # echo '--> installing cyrus-sasl' && \
    # CYRUS_SASL_URL="$(curl --silent --location --retry 3 'https://api.github.com/repos/cyrusimap/cyrus-sasl/releases/latest' | jq -r '.assets[] | select(.content_type=="application/x-gzip") | .browser_download_url')" && \
    # install --directory "${__SOURCE_DIR__}/cyrus-sasl/_build" && \
    # curl --silent --location --retry 3 "${CYRUS_SASL_URL}" \
    #     | tar xz --no-same-owner --strip-components=1 -C "${__SOURCE_DIR__}/cyrus-sasl" && \
    # cd "${__SOURCE_DIR__}/cyrus-sasl/_build" && \
    # ../configure \
    #     CC="musl-gcc -static --static" \
    #     CFLAGS="-fPIC -O2 -g0 -s -w -pipe -mmusl -march=${__MARCH__} -mtune=generic -DNDEBUG -DCLS=${__DCACHE_LINESIZE__}" \
    #     --quiet \
    #     --prefix='/usr/local' \
    #     --includedir='/usr/local/include' \
    #     --libdir='/usr/local/lib' \
    #     --sysconfdir='/etc' \
    #     --with-lib-subdir='lib' \
    #     --with-openssl='/usr/local' \
    #     --with-devrandom='/dev/urandom' \
    #     --with-rc4 \
    #     --without-pwcheck \
    #     --without-sqlite \
    #     --enable-fast-install \
    #     --enable-silent-rules \
    #     --enable-static \
    #     --enable-staticdlopen \
    #     --disable-java \
    #     --disable-otp \
    #     --enable-anon \
    #     --enable-cram \
    #     --enable-digest \
    #     --enable-ntlm \
    #     --enable-plain \
    #     --enable-login \
    #     --enable-auth-sasldb \
    #     --enable-alwaystrue \
    #     --disable-shared && \
    # make --directory='./common' > /dev/null && \
    # make --directory='./plugins' > /dev/null && \
    # make > /dev/null && \
    # make dist_man3_MANS='' install > /dev/null && \
    # cd ~- && \
    # rm -rf "${__SOURCE_DIR__}/cyrus-sasl" && \
# memcached
    echo '--> installing memcached' && \
    install --directory "${__SOURCE_DIR__}/memcached/_build" && \
    curl --silent --location --retry 3 "http://www.memcached.org/files/memcached-${MEMCACHED_VERSION}.tar.gz" \
        | tar xz --no-same-owner --strip-components=1 -C "${__SOURCE_DIR__}/memcached" && \
    for p in "${__WORK_DIR__}/patches/memcached-${MEMCACHED_VERSION//./_}"*.patch; do \
        patch --quiet --backup --unified --strip=0 --directory="${__SOURCE_DIR__}/memcached" < ${p}; \
    done && \
    cd "${__SOURCE_DIR__}/memcached/_build" && \
    ../configure \
        CC="musl-gcc -static --static" \
        CFLAGS="-fPIC -O2 -g0 -s -w -pipe -mmusl -march=${__MARCH__} -mtune=generic -DCLS=${__DCACHE_LINESIZE__}" \
        --quiet \
        --prefix='/usr' \
        --includedir='/usr/include' \
        --libdir='/usr/lib' \
        --sysconfdir='/etc' \
        # --enable-sasl \
        # --enable-sasl-pwdb \
        --enable-seccomp \
        --enable-silent-rules \
        --enable-static \
        --enable-tls \
        --disable-docs && \
    make > /dev/null && \
    make DESTDIR="${__BUILD_DIR__}" install-exec > /dev/null && \
    install --directory --owner="${__USER__}" --group="${__USER__}" --mode=0755 "${__BUILD_DIR__}/licenses/memcached" && \
    install --owner="${__USER__}" --group="${__USER__}" --mode=0644 --target-directory="${__BUILD_DIR__}/licenses/memcached" '../COPYING' && \
    cd ~- && \
    rm -rf "${__SOURCE_DIR__}/memcached" && \
# stripping
    # echo '--> stripping binaries' && \
    # find "${__BUILD_DIR__}"/usr/bin -type f -not -links +1 -exec strip --strip-all {} ';' && \
# licenses
    echo '--> project licenses' && \
    install --owner="${__USER__}" --group="${__USER__}" --mode=0644 --target-directory="${__BUILD_DIR__}/licenses" "${__WORK_DIR__}/LICENSE" && \
# done
    echo '--> all done!'



FROM scratch

ARG __BUILD_DIR__
ARG REDIS_VERSION

LABEL \
    maintainer="Frederico Martins <https://hub.docker.com/u/fscm/>" \
    vendor="fscm" \
    cmd="docker container run --detach --publish 11211:11211/tcp fscm/memcached" \
    org.label-schema.schema-version="1.0" \
    org.label-schema.name="fscm/memcached" \
    org.label-schema.description="A small image that can be used to run the memcached server" \
    org.label-schema.url="https://memcached.org/" \
    org.label-schema.vcs-url="https://github.com/fscm/docker-memcached/" \
    org.label-schema.vendor="fscm" \
    org.label-schema.version=${REDIS_VERSION} \
    org.label-schema.docker.cmd="docker container run --interactive --rm --tty --publish 11211:11211/tcp fscm/memcached" \
    org.label-schema.docker.cmd.test="docker container run --interactive --rm --tty fscm/memcached --version"

EXPOSE 11211/tcp

COPY --from=build "${__BUILD_DIR__}" "/"

ENTRYPOINT ["/usr/bin/memcached"]