resolve/Dockerfile at main · riversideresearch/resolve · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
# syntax=docker/dockerfile:1
#
# Copyright (c) 2025 Riverside Research.
# LGPL-3; See LICENSE.txt in the repo root for details.

FROM ubuntu:24.04 AS base
ARG RESOLVE_PREFIX=/opt/resolve

ENV DEBIAN_FRONTEND=noninteractive
RUN apt-get update && apt-get install -y --no-install-recommends \
    ca-certificates \
    curl \
    git \
    sudo \
    tar \
    unzip \
    zip \
    && apt-get clean && rm -rf /var/lib/apt/lists/*

# Install vcpkg
ENV VCPKG_ROOT=/opt/vcpkg
ENV PATH="${VCPKG_ROOT}:${PATH}"
RUN git clone --depth 1 --branch 2026.03.18 https://github.com/microsoft/vcpkg.git ${VCPKG_ROOT} && \
    ${VCPKG_ROOT}/bootstrap-vcpkg.sh -disableMetrics

# Install deps
COPY scripts /opt/resolve/scripts
RUN /opt/resolve/scripts/install-deps.sh && apt-get clean && rm -rf /var/lib/apt/lists/*

# Add resolve to PATH
ENV PATH="/opt/resolve/bin:${PATH}"

FROM ubuntu:24.04 AS cmake-builder
ARG RESOLVE_PREFIX=/opt/resolve
ENV DEBIAN_FRONTEND=noninteractive
RUN apt-get update && apt-get install -y --no-install-recommends \
    ca-certificates \
    curl \
    build-essential \
    git \
    libssl-dev \
    pkg-config \
    make \
    && apt-get clean && rm -rf /var/lib/apt/lists/*

# Build/Install cmake
ARG CMAKE_REPO_URL="https://gitlab.kitware.com/cmake/cmake.git"
ARG CMAKE_BRANCH="v4.3.0"
RUN git clone --depth 1 --branch "${CMAKE_BRANCH}" "${CMAKE_REPO_URL}" /build-cmake \
    && cd /build-cmake \
    && ./bootstrap --parallel="$(nproc)" --prefix=$RESOLVE_PREFIX \
    && make -j"$(nproc)"

FROM base AS builder
# Copy in resolve tools
COPY cmake /resolve/cmake
COPY klee /resolve/klee
COPY klee-uclibc-160 /resolve/klee-uclibc-160
COPY resolve-cc /resolve/resolve-cc
COPY resolve-cveassert /resolve/resolve-cveassert
COPY resolve-facts /resolve/resolve-facts
COPY mcp /resolve/mcp
COPY resolve-cli /resolve/resolve-cli
COPY Makefile /resolve/Makefile
COPY CMakeLists.txt /resolve/CMakeLists.txt

# Build
WORKDIR /resolve/
RUN PATH=$PATH:~/.cargo/bin make build-release install

# Install toolchains
RUN mkdir -p /opt/toolchain /opt/vcpkg-overlays/triplets
COPY toolchains/resolve-toolchain.cmake /opt/toolchain/resolve-toolchain.cmake
COPY toolchains/x64-linux-resolve.cmake /opt/vcpkg-overlays/triplets/x64-linux-resolve.cmake

# Declare defaults for later stages (can be overridden)
ONBUILD ARG TOOLCHAIN_FILE=/opt/toolchain/resolve-toolchain.cmake
ONBUILD ARG TRIPLET=x64-linux-resolve
ONBUILD ARG VCPKG_OVERLAY_TRIPLETS=/opt/vcpkg-overlays/triplets
ONBUILD ENV TOOLCHAIN_FILE=${TOOLCHAIN_FILE}
ONBUILD ENV TRIPLET=${TRIPLET}
ONBUILD ENV VCPKG_OVERLAY_PORTS=${VCPKG_OVERLAY_PORTS}
ONBUILD ENV VCPKG_OVERLAY_TRIPLETS=${VCPKG_OVERLAY_TRIPLETS}

ENV CMAKE_EXPERIMENTAL_FIND_CPS_PACKAGES="e82e467b-f997-4464-8ace-b00808fff261"
ENV CMAKE_EXPERIMENTAL_EXPORT_PACKAGE_INFO="b80be207-778e-46ba-8080-b23bba22639e"
ENV CMAKE_EXPERIMENTAL_GENERATE_SBOM="ca494ed3-b261-4205-a01f-603c95e4cae0"
ENV CMAKE_INSTALL_SBOM_FORMATS="SPDX"

FROM base AS git-version
COPY .git/ /resolve-git/

RUN export RESOLVE_VERSION=$(git -C /resolve-git rev-parse HEAD) \
    && echo "resolve version: $RESOLVE_VERSION" \
    && echo -n $RESOLVE_VERSION > /RESOLVE_VERSION

FROM base AS resolve
RUN --mount=from=cmake-builder,source=/build-cmake,target=/build-cmake,rw make -C /build-cmake install
COPY --from=builder /opt/resolve /opt/resolve
COPY --from=git-version /RESOLVE_VERSION /RESOLVE_VERSION

# Install toolchains
RUN mkdir -p /opt/toolchain /opt/vcpkg-overlays/triplets
COPY toolchains/resolve-toolchain.cmake /opt/toolchain/resolve-toolchain.cmake
COPY toolchains/x64-linux-resolve.cmake /opt/vcpkg-overlays/triplets/x64-linux-resolve.cmake

# Declare defaults for later stages (can be overridden)
ONBUILD ARG TOOLCHAIN_FILE=/opt/toolchain/resolve-toolchain.cmake
ONBUILD ARG TRIPLET=x64-linux-resolve
ONBUILD ARG VCPKG_OVERLAY_TRIPLETS=/opt/vcpkg-overlays/triplets
ONBUILD ENV TOOLCHAIN_FILE=${TOOLCHAIN_FILE}
ONBUILD ENV TRIPLET=${TRIPLET}
ONBUILD ENV VCPKG_OVERLAY_PORTS=${VCPKG_OVERLAY_PORTS}
ONBUILD ENV VCPKG_OVERLAY_TRIPLETS=${VCPKG_OVERLAY_TRIPLETS}

ENV CMAKE_EXPERIMENTAL_FIND_CPS_PACKAGES="e82e467b-f997-4464-8ace-b00808fff261"
ENV CMAKE_EXPERIMENTAL_EXPORT_PACKAGE_INFO="b80be207-778e-46ba-8080-b23bba22639e"
ENV CMAKE_EXPERIMENTAL_GENERATE_SBOM="ca494ed3-b261-4205-a01f-603c95e4cae0"
ENV CMAKE_INSTALL_SBOM_FORMATS="SPDX"