Something went wrong. Try again.
What happens if I push all of nixpkgs
Something went wrong. Try again.
12 kB · 398 lines
Nix
123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399{ lib, callPackage }:
rec { dockerGen = { version, cliRev, cliHash, mobyRev, mobyHash, runcRev, runcHash, containerdRev, containerdHash, tiniRev, tiniHash, buildxSupport ? true, composeSupport ? true, sbomSupport ? false, initSupport ? false, # package dependencies stdenv, fetchFromGitHub, fetchpatch, buildGoModule, makeWrapper, installShellFiles, pkg-config, glibc, go-md2man, go, containerd, runc, tini, libtool, bash, sqlite, iproute2, docker-buildx, docker-compose, docker-sbom, docker-init, iptables, e2fsprogs, xz, util-linux, xfsprogs, gitMinimal, procps, rootlesskit, slirp4netns, fuse-overlayfs, nixosTests, clientOnly ? !stdenv.hostPlatform.isLinux, symlinkJoin, withSystemd ? lib.meta.availableOn stdenv.hostPlatform systemd, systemd, withBtrfs ? stdenv.hostPlatform.isLinux, btrfs-progs, withLvm ? stdenv.hostPlatform.isLinux, lvm2, withSeccomp ? stdenv.hostPlatform.isLinux, libseccomp, knownVulnerabilities ? [ ], }: let docker-meta = { license = lib.licenses.asl20; maintainers = with lib.maintainers; [ offline vdemeester periklis teutat3s ]; };
docker-runc = runc.overrideAttrs { pname = "docker-runc"; inherit version;
src = fetchFromGitHub { owner = "opencontainers"; repo = "runc"; rev = runcRev; hash = runcHash; };
preBuild = '' substituteInPlace Makefile --replace-warn "/bin/bash" "${stdenv.shell}" '';
# docker/runc already include these patches / are not applicable patches = [ ]; };
docker-containerd = containerd.overrideAttrs (oldAttrs: { pname = "docker-containerd"; inherit version;
# We only need binaries outputs = [ "out" ];
src = fetchFromGitHub { owner = "containerd"; repo = "containerd"; rev = containerdRev; hash = containerdHash; };
buildInputs = oldAttrs.buildInputs ++ lib.optionals withSeccomp [ libseccomp ];
# See above installTargets = "install"; });
docker-tini = tini.overrideAttrs { pname = "docker-init"; inherit version;
src = fetchFromGitHub { owner = "krallin"; repo = "tini"; rev = tiniRev; hash = tiniHash; };
# Do not remove static from make files as we want a static binary postPatch = "";
buildInputs = [ glibc glibc.static ];
env.NIX_CFLAGS_COMPILE = "-DMINIMAL=ON"; };
moby-src = fetchFromGitHub { owner = "moby"; repo = "moby"; rev = mobyRev; hash = mobyHash; };
moby = buildGoModule ( lib.optionalAttrs stdenv.hostPlatform.isLinux rec { pname = "moby"; inherit version;
src = moby-src;
vendorHash = null;
nativeBuildInputs = [ makeWrapper pkg-config go-md2man go libtool installShellFiles ]; buildInputs = [ sqlite ] ++ lib.optional withLvm lvm2 ++ lib.optional withBtrfs btrfs-progs ++ lib.optional withSystemd systemd ++ lib.optional withSeccomp libseccomp;
extraPath = lib.optionals stdenv.hostPlatform.isLinux ( lib.makeBinPath [ iproute2 iptables e2fsprogs xz xfsprogs procps util-linux gitMinimal ] );
extraUserPath = lib.optionals (stdenv.hostPlatform.isLinux && !clientOnly) ( lib.makeBinPath [ rootlesskit slirp4netns fuse-overlayfs ] );
postPatch = '' patchShebangs hack/make.sh hack/make/ hack/with-go-mod.sh '';
buildPhase = '' export GOCACHE="$TMPDIR/go-cache" # build engine export AUTO_GOPATH=1 export DOCKER_GITCOMMIT="${cliRev}" export VERSION="${version}" ./hack/make.sh dynbinary '';
installPhase = '' install -Dm755 ./bundles/dynbinary-daemon/dockerd $out/libexec/docker/dockerd install -Dm755 ./bundles/dynbinary-daemon/docker-proxy $out/libexec/docker/docker-proxy
makeWrapper $out/libexec/docker/dockerd $out/bin/dockerd \ --prefix PATH : "$out/libexec/docker:$extraPath"
ln -s ${docker-containerd}/bin/containerd $out/libexec/docker/containerd ln -s ${docker-containerd}/bin/containerd-shim $out/libexec/docker/containerd-shim ln -s ${docker-runc}/bin/runc $out/libexec/docker/runc ln -s ${docker-tini}/bin/tini-static $out/libexec/docker/docker-init
# systemd install -Dm644 ./contrib/init/systemd/docker.service $out/etc/systemd/system/docker.service substituteInPlace $out/etc/systemd/system/docker.service --replace-fail /usr/bin/dockerd $out/bin/dockerd install -Dm644 ./contrib/init/systemd/docker.socket $out/etc/systemd/system/docker.socket
# rootless Docker install -Dm755 ./contrib/dockerd-rootless.sh $out/libexec/docker/dockerd-rootless.sh makeWrapper $out/libexec/docker/dockerd-rootless.sh $out/bin/dockerd-rootless \ --prefix PATH : "$out/libexec/docker:$extraPath:$extraUserPath" '';
DOCKER_BUILDTAGS = lib.optional withSystemd "journald" ++ lib.optional (!withBtrfs) "exclude_graphdriver_btrfs" ++ lib.optional (!withLvm) "exclude_graphdriver_devicemapper" ++ lib.optional withSeccomp "seccomp";
meta = docker-meta // { homepage = "https://mobyproject.org/"; description = "Collaborative project for the container ecosystem to assemble container-based systems"; }; } );
plugins = lib.optional buildxSupport docker-buildx ++ lib.optional composeSupport docker-compose ++ lib.optional sbomSupport docker-sbom ++ lib.optional initSupport docker-init; pluginsRef = symlinkJoin { name = "docker-plugins"; paths = plugins; }; in buildGoModule ( lib.optionalAttrs (!clientOnly) { # allow overrides of docker components # TODO: move packages out of the let...in into top-level to allow proper overrides inherit docker-runc docker-containerd docker-tini moby ; } // rec { pname = "docker"; inherit version;
src = fetchFromGitHub { owner = "docker"; repo = "cli"; rev = cliRev; hash = cliHash; };
vendorHash = null;
nativeBuildInputs = [ makeWrapper pkg-config go-md2man go libtool installShellFiles ];
buildInputs = plugins ++ lib.optionals (stdenv.hostPlatform.isLinux) [ glibc glibc.static ];
postPatch = '' patchShebangs man scripts/build/ substituteInPlace ./scripts/build/.variables --replace-fail "set -eu" "" '' + lib.optionalString (plugins != [ ]) '' substituteInPlace ./cli-plugins/manager/manager_unix.go --replace-fail /usr/libexec/docker/cli-plugins \ "${pluginsRef}/libexec/docker/cli-plugins" '';
# Keep eyes on BUILDTIME format - https://github.com/docker/cli/blob/${version}/scripts/build/.variables buildPhase = '' export GOCACHE="$TMPDIR/go-cache"
# Mimic AUTO_GOPATH mkdir -p .gopath/src/github.com/docker/ ln -sf $PWD .gopath/src/github.com/docker/cli export GOPATH="$PWD/.gopath:$GOPATH" export GITCOMMIT="${cliRev}" export VERSION="${version}" export BUILDTIME="1970-01-01T00:00:00Z" make dynbinary
'';
outputs = [ "out" ];
installPhase = '' runHook preInstall
install -Dm755 ./build/docker $out/libexec/docker/docker
makeWrapper $out/libexec/docker/docker $out/bin/docker \ --prefix PATH : "$out/libexec/docker:$extraPath" '' + lib.optionalString (!clientOnly) '' # symlink docker daemon to docker cli derivation ln -s ${moby}/bin/dockerd $out/bin/dockerd ln -s ${moby}/bin/dockerd-rootless $out/bin/dockerd-rootless
# systemd mkdir -p $out/etc/systemd/system ln -s ${moby}/etc/systemd/system/docker.service $out/etc/systemd/system/docker.service ln -s ${moby}/etc/systemd/system/docker.socket $out/etc/systemd/system/docker.socket '' # Required to avoid breaking cross builds + lib.optionalString (stdenv.buildPlatform.canExecute stdenv.hostPlatform) '' # completion (cli) installShellCompletion --cmd docker \ --bash <($out/bin/docker completion bash) \ --fish <($out/bin/docker completion fish) \ --zsh <($out/bin/docker completion zsh) '' + '' runHook postInstall '';
passthru = { # Exposed for tarsum build on non-linux systems (build-support/docker/default.nix) inherit moby-src; tests = lib.optionalAttrs (!clientOnly) { inherit (nixosTests) docker; }; };
meta = docker-meta // { homepage = "https://www.docker.com/"; description = "Open source project to pack, ship and run any application as a lightweight container"; longDescription = '' Docker is a platform designed to help developers build, share, and run modern applications.
To enable the docker daemon on NixOS, set the `virtualisation.docker.enable` option to `true`. ''; mainProgram = "docker"; inherit knownVulnerabilities; }; } );
# Get revisions from # https://github.com/moby/moby/tree/${version}/hack/dockerfile/install/* docker_25 = callPackage dockerGen rec { version = "25.0.11"; # Upstream forgot to tag release # https://github.com/docker/cli/issues/5789 cliRev = "43987fca488a535d810c429f75743d8c7b63bf4f"; cliHash = "sha256-OwufdfuUPbPtgqfPeiKrQVkOOacU2g4ommHb770gV40="; mobyRev = "v${version}"; mobyHash = "sha256-vHHi0/sX9fm83gyUjDpRYTGV9h18IVia1oSmj4n31nc="; runcRev = "v1.2.5"; runcHash = "sha256-J/QmOZxYnMPpzm87HhPTkYdt+fN+yeSUu2sv6aUeTY4="; containerdRev = "v1.7.27"; containerdHash = "sha256-H94EHnfW2Z59KcHcbfJn+BipyZiNUvHe50G5EXbrIps="; tiniRev = "v0.19.0"; tiniHash = "sha256-ZDKu/8yE5G0RYFJdhgmCdN3obJNyRWv6K/Gd17zc1sI="; };
docker_28 = callPackage dockerGen rec { version = "28.3.2"; cliRev = "v${version}"; cliHash = "sha256-LsV9roOPw0LccvBUeF3bY014OwG6QpnVsLf+dqKyvsg="; mobyRev = "v${version}"; mobyHash = "sha256-YfdnCAc9NgLTuvxLHGhTPdWqXz9VSVsQsfzLD3YER3g="; runcRev = "v1.2.6"; runcHash = "sha256-XMN+YKdQOQeOLLwvdrC6Si2iAIyyHD5RgZbrOHrQE/g="; containerdRev = "v1.7.27"; containerdHash = "sha256-H94EHnfW2Z59KcHcbfJn+BipyZiNUvHe50G5EXbrIps="; tiniRev = "v0.19.0"; tiniHash = "sha256-ZDKu/8yE5G0RYFJdhgmCdN3obJNyRWv6K/Gd17zc1sI="; };
}