-
Notifications
You must be signed in to change notification settings - Fork 0
Expand file tree
/
Copy pathdockerfile-dev
More file actions
229 lines (194 loc) · 9.66 KB
/
Copy pathdockerfile-dev
File metadata and controls
229 lines (194 loc) · 9.66 KB
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
# syntax=docker/dockerfile:1.7
# Pool-Stack Docker Compose Dev Build
#
# Builds the BlockDAG node + nodeworker, mining-pool,
# and the cpu-miner from LOCAL CLONES of the source repositories.
# Build inputs are provided as named BuildKit contexts from compose:
#
# stack_src -> stack-redis repo root
# blockdag_corechain -> local clone of blockdag node source
# pool_src -> local clone of mining pool source
# cpu_miner_src -> local clone of cpu miner source
# dashboard_src -> local clone of redis-dash source
#
# Optional snapshot import: SNAPSHOT_PATH copies a .bdsnap from the build context
# (see compose / Makefile). No URL download. Datadir matches node.conf.
# ----------------------------------------------------------------------------
# Common base
# ----------------------------------------------------------------------------
FROM golang:1.26-bookworm AS base
RUN apt-get update && apt-get install -y --no-install-recommends \
make git gcc g++ libc6-dev jq ca-certificates wget \
&& rm -rf /var/lib/apt/lists/*
# ----------------------------------------------------------------------------
# Node Build Stage (blockdag-corechain)
# ----------------------------------------------------------------------------
FROM base AS node-build
WORKDIR /src/blockdag-corechain
COPY --from=blockdag_corechain . .
RUN make all && \
mkdir -p /out && \
cp -f ./build/bin/bdag /out/blockdag-node && \
cp -f ./build/bin/nodeworker /out/nodeworker
# ----------------------------------------------------------------------------
# Pool Build Stage (pool)
# ----------------------------------------------------------------------------
FROM base AS pool-build
WORKDIR /src/pool
COPY --from=pool_src . .
RUN make build && \
mkdir -p /out && \
cp -f ./bin/pool /out/mining-pool && \
cp -f ./bin/dashboard-api /out/dashboard-api
# ----------------------------------------------------------------------------
# Miner Build Stage (cpu-miner)
# ----------------------------------------------------------------------------
FROM base AS miner-build
WORKDIR /src/cpu-miner
COPY --from=cpu_miner_src . .
# CGO is required for the C-implemented scrypt inner loop. Use portable -O2
# instead of -march=native so the resulting binary runs on any x86_64 host.
RUN CGO_ENABLED=1 CGO_CFLAGS='-O2' go build -o /out/scrypt-miner ./cmd/miner
# ----------------------------------------------------------------------------
# Dashboard Build Stage
# ----------------------------------------------------------------------------
FROM base AS dashboard-build
WORKDIR /src/dashboard
COPY --from=dashboard_src . .
RUN CGO_ENABLED=0 go build -trimpath -o /out/dashboard .
# ----------------------------------------------------------------------------
# Node Runtime Stage (with optional snapshot import)
# ----------------------------------------------------------------------------
FROM ubuntu:24.04 AS node
ARG SNAPSHOT_PATH=docker/no-snapshot.marker
RUN apt-get update && DEBIAN_FRONTEND=noninteractive apt-get install -y --no-install-recommends \
ca-certificates tzdata curl \
&& rm -rf /var/lib/apt/lists/*
RUN groupadd -r bdagStack && useradd -r -g bdagStack -d /var/lib/bdagStack -m bdagStack
RUN mkdir -p /etc/bdagStack /var/lib/bdagStack/node/mainnet /var/lib/bdagStack/nodeworker /var/log/bdagStack \
&& chown -R bdagStack:bdagStack /var/lib/bdagStack /var/log/bdagStack /etc/bdagStack
COPY --from=node-build /out/blockdag-node /usr/local/bin/blockdag-node
COPY --from=node-build /out/nodeworker /usr/local/bin/nodeworker
RUN chmod +x /usr/local/bin/blockdag-node /usr/local/bin/nodeworker
COPY --from=stack_src docker/entrypoint-nodeworker.sh /usr/local/bin/docker-entrypoint-nodeworker.sh
RUN chmod +x /usr/local/bin/docker-entrypoint-nodeworker.sh
# Snapshot file must be in the main build context (repo root).
COPY ${SNAPSHOT_PATH} /tmp/snapshot-candidate.bdsnap
RUN set -eu; \
if [ "$(stat -c%s /tmp/snapshot-candidate.bdsnap)" -ge 1024 ]; then \
echo "Importing local snapshot ($(stat -c%s /tmp/snapshot-candidate.bdsnap) bytes)"; \
/usr/local/bin/blockdag-node snap import \
--datadir /var/lib/bdagStack/node/mainnet \
--path /tmp/snapshot-candidate.bdsnap; \
cp -f /tmp/snapshot-candidate.bdsnap /var/lib/bdagStack/node/mainnet/snapshot.bdsnap; \
chown -R bdagStack:bdagStack /var/lib/bdagStack/node /var/log/bdagStack; \
echo "Snapshot import finished and P2P snapshot archive published"; \
else \
echo "No snapshot file (marker or tiny file); node will sync from genesis or P2P and cannot serve a P2P snapshot until snapshot.bdsnap exists in its datadir"; \
fi; \
rm -f /tmp/snapshot-candidate.bdsnap
WORKDIR /var/lib/bdagStack/node
EXPOSE 8150 38131 38132 18545 18546 6060
# Start as root so entrypoint can chown Docker volumes; processes run as bdagStack after that.
ENTRYPOINT ["/usr/local/bin/docker-entrypoint-nodeworker.sh", \
"/usr/local/bin/nodeworker", \
"--node-binary=/usr/local/bin/blockdag-node", \
"--node-args=--configfile /etc/bdagStack/node.conf", \
"--rpc-url=ws://127.0.0.1:18546", \
"--dag-rpc-url=http://127.0.0.1:38131", \
"--persist-root=/var/lib/bdagStack/nodeworker", \
"--health-min-peers=2", \
"--rollout-window=30m"]
# ----------------------------------------------------------------------------
# Pool Runtime Stage
# ----------------------------------------------------------------------------
FROM ubuntu:24.04 AS pool
RUN apt-get update && DEBIAN_FRONTEND=noninteractive apt-get install -y --no-install-recommends \
ca-certificates tzdata \
&& rm -rf /var/lib/apt/lists/*
RUN groupadd -r bdagStack && useradd -r -g bdagStack -d /var/lib/bdagStack -m bdagStack \
&& mkdir -p /etc/bdagStack /var/lib/bdagStack/pool /var/log/bdagStack \
&& chown -R bdagStack:bdagStack /var/lib/bdagStack /var/log/bdagStack /etc/bdagStack
COPY --from=pool-build /out/mining-pool /usr/local/bin/mining-pool
COPY --from=pool-build /out/dashboard-api /usr/local/bin/dashboard-api
RUN chmod +x /usr/local/bin/mining-pool /usr/local/bin/dashboard-api
# godotenv loads this path at runtime; bake .env.example so builds work without a
# gitignored .env. Compose still passes env via `environment:`; copy .env to
# .env in this repository root on the host if you want extra keys in the file.
COPY --from=stack_src .env.example /var/lib/bdagStack/pool/.env
RUN chown bdagStack:bdagStack /var/lib/bdagStack/pool/.env
USER bdagStack
WORKDIR /var/lib/bdagStack/pool
EXPOSE 3334 8080
ENTRYPOINT ["/usr/local/bin/mining-pool"]
# ----------------------------------------------------------------------------
# CPU Miner Runtime Stage
# ----------------------------------------------------------------------------
FROM ubuntu:24.04 AS miner
RUN apt-get update && DEBIAN_FRONTEND=noninteractive apt-get install -y --no-install-recommends \
ca-certificates tzdata \
&& rm -rf /var/lib/apt/lists/*
COPY --from=miner-build /out/scrypt-miner /usr/local/bin/cpu-miner
RUN chmod +x /usr/local/bin/cpu-miner
RUN groupadd -r bdagStack && useradd -r -g bdagStack -d /var/lib/bdagStack -m bdagStack \
&& mkdir -p /var/lib/bdagStack/miner \
&& chown -R bdagStack:bdagStack /var/lib/bdagStack/miner
USER bdagStack
WORKDIR /var/lib/bdagStack/miner
ENV POOL_URL=stratum+tcp://pool:3334 \
POOL_USER=0x0000000000000000000000000000000000000000 \
POOL_PASS=x \
WORKERS=1
ENTRYPOINT ["/usr/local/bin/cpu-miner"]
# ----------------------------------------------------------------------------
# Shared Ops Runtime Stage (Docker repair helpers)
# ----------------------------------------------------------------------------
FROM docker:27-cli AS ops-runtime
RUN apk add --no-cache \
bash \
ca-certificates \
coreutils \
curl \
findutils \
iproute2 \
openssl \
procps \
py3-pip \
python3 \
shadow \
tzdata
ENV PYTHONUNBUFFERED=1 \
BDAG_PROJECT_ROOT=/workspace \
BDAG_RUNTIME_DIR=/workspace/ops/runtime \
BDAG_POOL_ENV_FILE=/workspace/.env
WORKDIR /workspace
# ----------------------------------------------------------------------------
# Watchdog Runtime Stage (containerized repair loop)
# ----------------------------------------------------------------------------
FROM ops-runtime AS watchdog
LABEL org.opencontainers.image.title="BlockDAG Stack Watchdog"
# ----------------------------------------------------------------------------
# Status Sampler Runtime Stage (shared status and mining imperative loop)
# ----------------------------------------------------------------------------
FROM ops-runtime AS status-sampler
LABEL org.opencontainers.image.title="BlockDAG Stack Status Sampler"
# ----------------------------------------------------------------------------
# Sentinel Runtime Stage (last-resort liveness repair loop)
# ----------------------------------------------------------------------------
FROM ops-runtime AS sentinel
LABEL org.opencontainers.image.title="BlockDAG Stack Sentinel"
# ----------------------------------------------------------------------------
# Dashboard Runtime Stage (Redis-backed Go UI)
# ----------------------------------------------------------------------------
FROM ubuntu:24.04 AS dashboard
RUN apt-get update && DEBIAN_FRONTEND=noninteractive apt-get install -y --no-install-recommends \
ca-certificates tzdata curl redis-server redis-tools \
&& rm -rf /var/lib/apt/lists/*
COPY --from=dashboard-build /out/dashboard /usr/local/bin/dashboard
COPY docker/dashboard-redis.conf /etc/redis/redis.conf
RUN chmod +x /usr/local/bin/dashboard \
&& mkdir -p /run/dashboard-redis /var/lib/dashboard-redis /app/redis/functions \
&& chmod 700 /run/dashboard-redis /var/lib/dashboard-redis
ENV ADDR=0.0.0.0:8088
EXPOSE 8088
ENTRYPOINT ["/usr/local/bin/dashboard"]