FROM linuxkit/alpine:07f7d136e427dc68154cd5edbb2b9576f9ac5213 AS kernel-build RUN apk add \ argp-standalone \ automake \ bash \ bc \ binutils-dev \ bison \ build-base \ curl \ diffutils \ flex \ git \ gmp-dev \ gnupg \ installkernel \ kmod \ libelf-dev \ libressl-dev \ libunwind-dev \ linux-headers \ ncurses-dev \ sed \ squashfs-tools \ tar \ xz \ xz-dev \ zlib-dev ARG KERNEL_VERSION ARG KERNEL_SERIES ARG DEBUG ENV KERNEL_SOURCE=https://www.kernel.org/pub/linux/kernel/v4.x/linux-${KERNEL_VERSION}.tar.xz ENV KERNEL_SHA256_SUMS=https://www.kernel.org/pub/linux/kernel/v4.x/sha256sums.asc ENV KERNEL_PGP2_SIGN=https://www.kernel.org/pub/linux/kernel/v4.x/linux-${KERNEL_VERSION}.tar.sign # PGP keys: 589DA6B1 (greg@kroah.com) & 6092693E (autosigner@kernel.org) & 00411886 (torvalds@linux-foundation.org) COPY keys.asc keys.asc # Download and verify kernel RUN curl -fsSLO ${KERNEL_SHA256_SUMS} && \ gpg2 -q --import keys.asc && \ gpg2 --verify sha256sums.asc && \ KERNEL_SHA256=$(grep linux-${KERNEL_VERSION}.tar.xz sha256sums.asc | cut -d ' ' -f 1) && \ curl -fsSLO ${KERNEL_SOURCE} && \ echo "${KERNEL_SHA256} linux-${KERNEL_VERSION}.tar.xz" | sha256sum -c - && \ xz -d linux-${KERNEL_VERSION}.tar.xz && \ curl -fsSLO ${KERNEL_PGP2_SIGN} && \ gpg2 --verify linux-${KERNEL_VERSION}.tar.sign linux-${KERNEL_VERSION}.tar && \ cat linux-${KERNEL_VERSION}.tar | tar --absolute-names -x && mv /linux-${KERNEL_VERSION} /linux #COPY linux-slice /linux COPY kernel_config-${KERNEL_SERIES} /linux/arch/x86/configs/x86_64_defconfig COPY kernel_config.debug /linux/debug_config RUN if [ -n "${DEBUG}" ]; then \ sed -i 's/CONFIG_PANIC_ON_OOPS=y/# CONFIG_PANIC_ON_OOPS is not set/' /linux/arch/x86/configs/x86_64_defconfig; \ cat /linux/debug_config >> /linux/arch/x86/configs/x86_64_defconfig; \ fi # Apply local patches COPY patches-${KERNEL_SERIES} /patches WORKDIR /linux RUN set -e && for patch in /patches/*.patch; do \ echo "Applying $patch"; \ patch -p1 < "$patch"; \ done RUN mkdir /out # Kernel RUN make defconfig && \ make oldconfig && \ make -j "$(getconf _NPROCESSORS_ONLN)" KCFLAGS="-fno-pie" && \ cp arch/x86_64/boot/bzImage /out/kernel && \ cp System.map /out && \ ([ -n "${DEBUG}" ] && cp vmlinux /out || true) # Modules RUN make INSTALL_MOD_PATH=/tmp/kernel-modules modules_install && \ ( DVER=$(basename $(find /tmp/kernel-modules/lib/modules/ -mindepth 1 -maxdepth 1)) && \ cd /tmp/kernel-modules/lib/modules/$DVER && \ rm build source && \ ln -s /usr/src/linux-headers-$DVER build ) && \ ( cd /tmp/kernel-modules && tar cf /out/kernel.tar lib ) # Headers (userspace API) RUN mkdir -p /tmp/kernel-headers/usr && \ make INSTALL_HDR_PATH=/tmp/kernel-headers/usr headers_install && \ ( cd /tmp/kernel-headers && tar cf /out/kernel-headers.tar usr ) # Headers (kernel development) RUN DVER=$(basename $(find /tmp/kernel-modules/lib/modules/ -mindepth 1 -maxdepth 1)) && \ dir=/tmp/usr/src/linux-headers-$DVER && \ mkdir -p $dir && \ cp /linux/.config $dir && \ cp /linux/Module.symvers $dir && \ find . -path './include/*' -prune -o \ -path './arch/*/include' -prune -o \ -path './scripts/*' -prune -o \ -type f \( -name 'Makefile*' -o -name 'Kconfig*' -o -name 'Kbuild*' -o \ -name '*.lds' -o -name '*.pl' -o -name '*.sh' \) | \ tar cf - -T - | (cd $dir; tar xf -) && \ ( cd /tmp && tar cf /out/kernel-dev.tar usr/src ) RUN printf "KERNEL_SOURCE=${KERNEL_SOURCE}\n" > /out/kernel-source-info # perf (Don't compile for 4.4.x, it's broken and tedious to fix) #RUN if [ "${KERNEL_SERIES}" != "4.4.x" ]; then \ #mkdir -p /build/perf && \ #make -C tools/perf LDFLAGS=-static O=/build/perf && \ #strip /build/perf/perf && \ #cp /build/perf/perf /out; \ #fi FROM scratch ENTRYPOINT [] CMD [] WORKDIR / COPY --from=kernel-build /out/* /