hashgg/Dockerfile at master · paulscode/hashgg · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
# TODO: pin by manifest-list digest at publish time, e.g.
#   FROM debian:bookworm-slim@sha256:<digest>
# Get the current digest with:
#   docker buildx imagetools inspect debian:bookworm-slim
FROM debian:bookworm-slim AS base

LABEL org.opencontainers.image.title="HashGG" \
      org.opencontainers.image.description="Sovereign hash routing for Datum Gateway — expose your stratum port to the internet via playit.gg or a VPS SSH tunnel." \
      org.opencontainers.image.source="https://github.com/paulscode/hashgg" \
      org.opencontainers.image.licenses="MIT"

RUN apt-get update && \
    apt-get install -y --no-install-recommends \
      curl ca-certificates netcat-traditional socat nodejs jq procps openssh-client && \
    rm -rf /var/lib/apt/lists/*

# Install yq (same approach as datum-gateway-startos)
ENV yq_sha256_amd64=c0eb42f6fbf928f0413422967983dcdf9806cc4dedc9394edc60c0dfb4a98529
ENV yq_sha256_arm64=4ab0b301059348d671fc1833e99903c1fecc7ca287ac131f72dca0eb9a6ba87a

ARG ARCH
ARG PLATFORM
ARG TARGETARCH
# Which packaging this image belongs to, stated rather than deduced.
#
# The 0.4.0 package declares this through its own manifest. The 0.3.5.1 package
# has no equivalent, so the backend otherwise infers it from the presence of
# StartOS's config file. That inference does work — the file is written on a
# fresh install — but it ties a user-visible behaviour to an implementation
# detail of a platform we do not control, and getting it wrong makes HashGG
# claim node reachability is fully supported on the one platform where it
# cannot work at all.
#
# Left empty for the published image, which serves Umbrel and bare Docker.
# Both infer correctly, and an empty value keeps that inference in charge.
ARG HASHGG_PLATFORM=""
ENV HASHGG_PLATFORM=${HASHGG_PLATFORM}
# Use PLATFORM if provided (0.3.5.1 build), otherwise derive from TARGETARCH (0.4.0 build)
RUN PLAT="${PLATFORM:-${TARGETARCH}}"; \
    curl -sLo /usr/local/bin/yq https://github.com/mikefarah/yq/releases/download/v4.46.1/yq_linux_${PLAT} && \
    eval echo "\${yq_sha256_${PLAT}} */usr/local/bin/yq" | sha256sum -c && \
    chmod +x /usr/local/bin/yq

# Install playit daemon binary (v1.0.0-rc17 playitd)
ENV PLAYIT_VERSION=1.0.0-rc17
RUN PLAT="${PLATFORM:-${TARGETARCH}}"; \
    if [ "$PLAT" = "amd64" ]; then \
      curl -sLo /tmp/playit.deb https://github.com/playit-cloud/playit-agent/releases/download/v${PLAYIT_VERSION}/playit_amd64.deb; \
    elif [ "$PLAT" = "arm64" ]; then \
      curl -sLo /tmp/playit.deb https://github.com/playit-cloud/playit-agent/releases/download/v${PLAYIT_VERSION}/playit_arm64.deb; \
    fi && \
    dpkg -x /tmp/playit.deb /tmp/playit-extract && \
    cp /tmp/playit-extract/opt/playit/playitd /usr/local/bin/playitd && \
    chmod +x /usr/local/bin/playitd && \
    rm -rf /tmp/playit.deb /tmp/playit-extract

WORKDIR /root

# Copy backend application
ADD ./app/backend /usr/local/lib/hashgg/backend
ADD ./app/frontend /usr/local/lib/hashgg/frontend

# Copy entrypoint and health checks
ADD ./docker_entrypoint.sh /usr/local/bin/docker_entrypoint.sh
RUN chmod a+x /usr/local/bin/docker_entrypoint.sh
ADD ./check-tunnel.sh /usr/local/bin/check-tunnel.sh
RUN chmod a+x /usr/local/bin/check-tunnel.sh
ADD ./check-datum.sh /usr/local/bin/check-datum.sh
RUN chmod a+x /usr/local/bin/check-datum.sh

# Informational — the entrypoint binds here; docker-compose / `docker run -p`
# decide how it's published on the host.
EXPOSE 3000

# Plain-Docker entrypoint. StartOS ignores this and uses manifest.yaml's
# `main.entrypoint` instead, so the StartOS build is unaffected.
ENTRYPOINT ["/usr/local/bin/docker_entrypoint.sh"]