mirror of
				https://github.com/linuxkit/linuxkit.git
				synced 2025-11-04 14:16:10 +00:00 
			
		
		
		
	
		
			
				
	
	
		
			99 lines
		
	
	
		
			3.1 KiB
		
	
	
	
		
			Docker
		
	
	
	
	
	
			
		
		
	
	
			99 lines
		
	
	
		
			3.1 KiB
		
	
	
	
		
			Docker
		
	
	
	
	
	
FROM linuxkit/alpine:07f7d136e427dc68154cd5edbb2b9576f9ac5213 AS kernel-build
 | 
						|
RUN apk --no-cache add \
 | 
						|
    argp-standalone \
 | 
						|
    automake \
 | 
						|
    bash \
 | 
						|
    bc \
 | 
						|
    binutils-dev \
 | 
						|
    bison \
 | 
						|
    build-base \
 | 
						|
    curl \
 | 
						|
    diffutils \
 | 
						|
    git \
 | 
						|
    installkernel \
 | 
						|
    kmod \
 | 
						|
    libelf-dev \
 | 
						|
    linux-headers \
 | 
						|
    sed \
 | 
						|
    tar \
 | 
						|
    xz \
 | 
						|
    zlib-dev \
 | 
						|
    openssl \
 | 
						|
    openssl-dev
 | 
						|
 | 
						|
ARG KERNEL_VERSION
 | 
						|
ARG DEBUG=0
 | 
						|
 | 
						|
ENV OKERNEL_SOURCE=https://github.com/linux-okernel/linux-okernel/archive/${KERNEL_VERSION}.tar.gz
 | 
						|
ENV USPACE_SOURCE=https://github.com/linux-okernel/linux-okernel-components/archive/master.tar.gz
 | 
						|
 | 
						|
RUN if [ -n $HTTP_PROXY ]; then \
 | 
						|
    curl -fsSL -x ${HTTP_PROXY} -o linux-${KERNEL_VERSION}.tar.gz ${OKERNEL_SOURCE}; \
 | 
						|
    else \
 | 
						|
    curl -fsSL -o linux-${KERNEL_VERSION}.tar.gz ${OKERNEL_SOURCE}; \
 | 
						|
    fi
 | 
						|
 | 
						|
RUN cat linux-${KERNEL_VERSION}.tar.gz | tar --absolute-names -xz && mv /linux-okernel-${KERNEL_VERSION} /linux
 | 
						|
 | 
						|
COPY kernel_config.okernel /linux/.config
 | 
						|
 | 
						|
RUN mkdir /out
 | 
						|
 | 
						|
# Kernel
 | 
						|
RUN cd /linux && \
 | 
						|
    make oldconfig && \
 | 
						|
    make -j "$(getconf _NPROCESSORS_ONLN)" KCFLAGS="-fno-pie" && \
 | 
						|
    cp arch/x86_64/boot/bzImage /out/kernel && \
 | 
						|
    cp System.map /out && \
 | 
						|
    cp vmlinux /out
 | 
						|
 | 
						|
# Modules & Headers (userspace API)
 | 
						|
RUN cd /linux && \
 | 
						|
    make INSTALL_MOD_PATH=/tmp/kernel-modules modules_install && \
 | 
						|
    ( DVER=$(basename $(find /tmp/kernel-modules/lib/modules/ -mindepth 1 -maxdepth 1)) && \
 | 
						|
      cd /tmp/kernel-modules/lib/modules/$DVER && \
 | 
						|
      rm build source && \
 | 
						|
      ln -s /usr/src/linux-headers-$DVER build ) && \
 | 
						|
    ( cd /tmp/kernel-modules && tar cf /out/kernel.tar lib ) && \
 | 
						|
    mkdir -p /tmp/kernel-headers/usr && \
 | 
						|
    make INSTALL_HDR_PATH=/tmp/kernel-headers/usr headers_install && \
 | 
						|
    ( cd /tmp/kernel-headers && tar cf /out/kernel-headers.tar usr ) 
 | 
						|
 | 
						|
# Headers (kernel development)
 | 
						|
RUN DVER=$(basename $(find /tmp/kernel-modules/lib/modules/ -mindepth 1 -maxdepth 1)) && \
 | 
						|
    dir=/tmp/usr/src/linux-headers-$DVER && \
 | 
						|
    mkdir -p $dir && \
 | 
						|
    cp /linux/.config $dir && \
 | 
						|
    cp /linux/Module.symvers $dir && \
 | 
						|
    find . -path './include/*' -prune -o \
 | 
						|
           -path './arch/*/include' -prune -o \
 | 
						|
           -path './scripts/*' -prune -o \
 | 
						|
           -type f \( -name 'Makefile*' -o -name 'Kconfig*' -o -name 'Kbuild*' -o \
 | 
						|
                      -name '*.lds' -o -name '*.pl' -o -name '*.sh' \) | \
 | 
						|
         tar cf - -T - | (cd $dir; tar xf -) && \
 | 
						|
    ( cd /tmp && tar cf /out/kernel-dev.tar usr/src )
 | 
						|
 | 
						|
RUN printf "KERNEL_SOURCE=${OKERNEL_SOURCE}\n" > /kernel-source-info
 | 
						|
 | 
						|
# Build kernel module from linux-okernel-components
 | 
						|
RUN if [ -n $HTTP_PROXY ]; then \
 | 
						|
    curl -fsSL -x ${HTTP_PROXY} -o okernel-userspace.tar.gz ${USPACE_SOURCE}; \
 | 
						|
    else \
 | 
						|
    curl -fsSL -o okernel-userspace.tar.gz ${USPACE_SOURCE}; \
 | 
						|
    fi
 | 
						|
 | 
						|
RUN cat okernel-userspace.tar.gz | tar --absolute-names -xz && mv /linux-okernel-components-master /ok_components
 | 
						|
 | 
						|
WORKDIR /ok_components/test_mappings/kvmod
 | 
						|
 | 
						|
RUN sed -i 's_~/linux-okernel_/linux_' Makefile && \
 | 
						|
    make && \
 | 
						|
    cp kernel_vuln.ko /out/
 | 
						|
 | 
						|
FROM scratch
 | 
						|
ENTRYPOINT []
 | 
						|
CMD []
 | 
						|
WORKDIR /
 | 
						|
COPY --from=kernel-build /out/* /
 | 
						|
 |