sermones-ci (latest)
Published 2026-08-03 21:55:54 -04:00 by lyssieth
Installation
docker pull code.allura.moe/lyssieth/sermones-ci:latestsha256:c373e16d41905101ba6cab60506d157c00c0e9e8bbe255f39a7f90074790f7bbImage layers
| # debian.sh --arch 'amd64' out/ 'trixie' '@1783900800' |
| RUN /bin/sh -c set -eux; apt-get update; apt-get install -y --no-install-recommends ca-certificates curl gnupg netbase sq wget ; apt-get dist-clean # buildkit |
| RUN /bin/sh -c set -eux; apt-get update; apt-get install -y --no-install-recommends git mercurial openssh-client subversion procps ; apt-get dist-clean # buildkit |
| RUN /bin/sh -c set -ex; apt-get update; apt-get install -y --no-install-recommends autoconf automake bzip2 default-libmysqlclient-dev dpkg-dev file g++ gcc imagemagick libbz2-dev libc6-dev libcurl4-openssl-dev libdb-dev libevent-dev libffi-dev libgdbm-dev libglib2.0-dev libgmp-dev libjpeg-dev libkrb5-dev liblzma-dev libmagickcore-dev libmagickwand-dev libmaxminddb-dev libncurses5-dev libncursesw5-dev libpng-dev libpq-dev libreadline-dev libsqlite3-dev libssl-dev libtool libwebp-dev libxml2-dev libxslt-dev libyaml-dev make patch unzip xz-utils zlib1g-dev ; apt-get dist-clean # buildkit |
| RUN /bin/sh -c groupadd --gid 1000 node && useradd --uid 1000 --gid node --shell /bin/bash --create-home node # buildkit |
| ENV NODE_VERSION=24.19.0 |
| RUN /bin/sh -c ARCH= && dpkgArch="$(dpkg --print-architecture)" && case "${dpkgArch##*-}" in amd64) ARCH='x64';; ppc64el) ARCH='ppc64le';; s390x) ARCH='s390x';; arm64) ARCH='arm64';; *) echo "unsupported architecture"; exit 1 ;; esac && export GNUPGHOME="$(mktemp -d)" && set -ex && for key in 5BE8A3F6C8A5C01D106C0AD820B1A390B168D356 DD792F5973C6DE52C432CBDAC77ABFA00DDBF2B7 CC68F5A3106FF448322E48ED27F5E38D5B0A215F 8FCCA13FEF1D0C2E91008E09770F7A9A5AE15600 890C08DB8579162FEE0DF9DB8BEAB4DFCF555EF4 C82FA3AE1CBEDC6BE46B9360C43CEC45C17AB93C 108F52B48DB57BB0CC439B2997B01419BD92F80A A363A499291CBBC940DD62E41F10027AF002F8B0 655F3B5C1FB3FA8D1A0CA6BDE4A7D232B936D2FD ; do { gpg --batch --keyserver hkps://keys.openpgp.org --recv-keys "$key" && gpg --batch --fingerprint "$key"; } || { gpg --batch --keyserver keyserver.ubuntu.com --recv-keys "$key" && gpg --batch --fingerprint "$key"; } ; done && curl -fsSLO --compressed "https://nodejs.org/dist/v$NODE_VERSION/node-v$NODE_VERSION-linux-$ARCH.tar.xz" && curl -fsSLO --compressed "https://nodejs.org/dist/v$NODE_VERSION/SHASUMS256.txt.asc" && gpg --batch --decrypt --output SHASUMS256.txt SHASUMS256.txt.asc && gpgconf --kill all && rm -rf "$GNUPGHOME" && grep " node-v$NODE_VERSION-linux-$ARCH.tar.xz\$" SHASUMS256.txt | sha256sum -c - && tar -xJf "node-v$NODE_VERSION-linux-$ARCH.tar.xz" -C /usr/local --strip-components=1 --no-same-owner && rm "node-v$NODE_VERSION-linux-$ARCH.tar.xz" SHASUMS256.txt.asc SHASUMS256.txt && ln -s /usr/local/bin/node /usr/local/bin/nodejs && node --version && npm --version && rm -rf /tmp/* # buildkit |
| ENV YARN_VERSION=1.22.22 |
| RUN /bin/sh -c set -ex && export GNUPGHOME="$(mktemp -d)" && for key in 6A010C5166006599AA17F08146C2130DFD2497F5 ; do { gpg --batch --keyserver hkps://keys.openpgp.org --recv-keys "$key" && gpg --batch --fingerprint "$key"; } || { gpg --batch --keyserver keyserver.ubuntu.com --recv-keys "$key" && gpg --batch --fingerprint "$key"; } ; done && curl -fsSLO --compressed "https://yarnpkg.com/downloads/$YARN_VERSION/yarn-v$YARN_VERSION.tar.gz" && curl -fsSLO --compressed "https://yarnpkg.com/downloads/$YARN_VERSION/yarn-v$YARN_VERSION.tar.gz.asc" && gpg --batch --verify yarn-v$YARN_VERSION.tar.gz.asc yarn-v$YARN_VERSION.tar.gz && gpgconf --kill all && rm -rf "$GNUPGHOME" && mkdir -p /opt && tar -xzf yarn-v$YARN_VERSION.tar.gz -C /opt/ && ln -s /opt/yarn-v$YARN_VERSION/bin/yarn /usr/local/bin/yarn && ln -s /opt/yarn-v$YARN_VERSION/bin/yarnpkg /usr/local/bin/yarnpkg && rm yarn-v$YARN_VERSION.tar.gz.asc yarn-v$YARN_VERSION.tar.gz && yarn --version && rm -rf /tmp/* # buildkit |
| COPY docker-entrypoint.sh /usr/local/bin/ # buildkit |
| ENTRYPOINT ["docker-entrypoint.sh"] |
| CMD ["node"] |
| ENV DEBIAN_FRONTEND=noninteractive |
| RUN /bin/sh -c apt-get update && apt-get install -y --no-install-recommends qt6-base-dev qt6-declarative-dev qt6-webengine-dev qt6-webchannel-dev qt6-tools-dev qt6ct qt6-positioning-dev clang cmake binutils libgl1-mesa-dev lld pkg-config unzip && rm -rf /var/lib/apt/lists/* # buildkit |
| ENV LC_ALL=C.UTF-8 |
| RUN /bin/sh -c ln -s /usr/bin/qmake6 /usr/local/bin/qmake # buildkit |
| ARG SCCACHE_VERSION=0.17.0 |
| RUN |1 SCCACHE_VERSION=0.17.0 /bin/sh -c curl -4 -sSL --retry 3 --retry-delay 2 "https://github.com/mozilla/sccache/releases/download/v${SCCACHE_VERSION}/sccache-v${SCCACHE_VERSION}-x86_64-unknown-linux-musl.tar.gz" | tar -xz -C /usr/local/bin --strip-components=1 "sccache-v${SCCACHE_VERSION}-x86_64-unknown-linux-musl/sccache" # buildkit |
| ARG NEXTEST_VERSION=0.9.140 |
| RUN |2 SCCACHE_VERSION=0.17.0 NEXTEST_VERSION=0.9.140 /bin/sh -c curl -4 -sSL --retry 3 --retry-delay 2 "https://get.nexte.st/${NEXTEST_VERSION}/linux" | tar -xz -C /usr/local/bin cargo-nextest # buildkit |
| ARG TOMBI_VERSION=1.2.5 |
| ARG DPRINT_VERSION=0.55.2 |
| ARG MARKDOWNLINT_CLI2_VERSION=0.23.2 |
| ARG UV_VERSION=0.12.1 |
| ARG MDFORMAT_VERSION=0.7.22 |
| RUN |7 SCCACHE_VERSION=0.17.0 NEXTEST_VERSION=0.9.140 TOMBI_VERSION=1.2.5 DPRINT_VERSION=0.55.2 MARKDOWNLINT_CLI2_VERSION=0.23.2 UV_VERSION=0.12.1 MDFORMAT_VERSION=0.7.22 /bin/sh -c curl -4 -sSL --retry 3 --retry-delay 2 "https://github.com/tombi-toml/tombi/releases/download/v${TOMBI_VERSION}/tombi-cli-${TOMBI_VERSION}-x86_64-unknown-linux-musl.tar.gz" | tar -xz -C /usr/local/bin --strip-components=1 "tombi-cli-${TOMBI_VERSION}-x86_64-unknown-linux-musl/tombi" && curl -4 -sSL --retry 3 --retry-delay 2 -o /tmp/dprint.zip "https://github.com/dprint/dprint/releases/download/${DPRINT_VERSION}/dprint-x86_64-unknown-linux-gnu.zip" && unzip -o /tmp/dprint.zip -d /usr/local/bin && chmod +x /usr/local/bin/dprint && rm /tmp/dprint.zip && npm install -g "markdownlint-cli2@${MARKDOWNLINT_CLI2_VERSION}" # buildkit |
| RUN |7 SCCACHE_VERSION=0.17.0 NEXTEST_VERSION=0.9.140 TOMBI_VERSION=1.2.5 DPRINT_VERSION=0.55.2 MARKDOWNLINT_CLI2_VERSION=0.23.2 UV_VERSION=0.12.1 MDFORMAT_VERSION=0.7.22 /bin/sh -c curl -4 -sSL --retry 3 --retry-delay 2 "https://github.com/astral-sh/uv/releases/download/${UV_VERSION}/uv-x86_64-unknown-linux-gnu.tar.gz" | tar -xz -C /usr/local/bin --strip-components=1 "uv-x86_64-unknown-linux-gnu/uv" && UV_TOOL_DIR=/usr/local/uv-tools UV_TOOL_BIN_DIR=/usr/local/bin uv tool install "mdformat==${MDFORMAT_VERSION}" --with mdformat-tables --with mdformat-front-matters # buildkit |
| RUN |7 SCCACHE_VERSION=0.17.0 NEXTEST_VERSION=0.9.140 TOMBI_VERSION=1.2.5 DPRINT_VERSION=0.55.2 MARKDOWNLINT_CLI2_VERSION=0.23.2 UV_VERSION=0.12.1 MDFORMAT_VERSION=0.7.22 /bin/sh -c corepack enable # buildkit |
| ENV RUSTUP_HOME=/usr/local/rustup CARGO_HOME=/usr/local/cargo PATH=/usr/local/cargo/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin |
| COPY rust-toolchain.toml /tmp/rust-toolchain.toml # buildkit |
| RUN |7 SCCACHE_VERSION=0.17.0 NEXTEST_VERSION=0.9.140 TOMBI_VERSION=1.2.5 DPRINT_VERSION=0.55.2 MARKDOWNLINT_CLI2_VERSION=0.23.2 UV_VERSION=0.12.1 MDFORMAT_VERSION=0.7.22 /bin/sh -c curl -4 --proto '=https' --tlsv1.2 -sSf --retry 3 --retry-delay 2 https://sh.rustup.rs | sh -s -- -y --profile minimal --default-toolchain none && cd /tmp && rustup show && rustup default nightly && rm /tmp/rust-toolchain.toml && chmod -R a+w /usr/local/rustup /usr/local/cargo # buildkit |