forked from hwdsl2/docker-ipsec-vpn-server
-
Notifications
You must be signed in to change notification settings - Fork 0
/
Dockerfile.debian
68 lines (61 loc) · 2.99 KB
/
Dockerfile.debian
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
#
# Copyright (C) 2016-2024 Lin Song <[email protected]>
#
# This work is licensed under the Creative Commons Attribution-ShareAlike 3.0
# Unported License: http://creativecommons.org/licenses/by-sa/3.0/
#
# Attribution required: please include my name in any derivative and let me
# know how you have improved it!
FROM debian:bookworm-slim
ENV SWAN_VER=5.0
WORKDIR /opt/src
RUN apt-get -yqq update \
&& DEBIAN_FRONTEND=noninteractive \
apt-get -yqq --no-install-recommends install \
wget dnsutils openssl ca-certificates kmod iproute2 \
gawk net-tools iptables bsdmainutils libcurl3-nss \
libnss3-tools libevent-dev uuid-runtime xl2tpd \
libnss3-dev libnspr4-dev pkg-config libpam0g-dev \
libcap-ng-dev libcap-ng-utils libselinux1-dev \
libcurl4-nss-dev flex bison gcc make \
&& wget -t 3 -T 30 -nv -O libreswan.tar.gz "https://github.com/libreswan/libreswan/archive/v${SWAN_VER}.tar.gz" \
|| wget -t 3 -T 30 -nv -O libreswan.tar.gz "https://download.libreswan.org/libreswan-${SWAN_VER}.tar.gz" \
&& tar xzf libreswan.tar.gz \
&& rm -f libreswan.tar.gz \
&& cd "libreswan-${SWAN_VER}" \
&& printf 'WERROR_CFLAGS=-w -s\nUSE_DNSSEC=false\nUSE_SYSTEMD_WATCHDOG=false\n' > Makefile.inc.local \
&& printf 'USE_DH2=true\nUSE_NSS_KDF=false\nFINALNSSDIR=/etc/ipsec.d\nNSSDIR=/etc/ipsec.d\n' >> Makefile.inc.local \
&& make -s base \
&& make -s install-base \
&& cd /opt/src \
&& rm -rf "/opt/src/libreswan-${SWAN_VER}" \
&& apt-get -yqq remove \
libnss3-dev libnspr4-dev pkg-config libpam0g-dev \
libcap-ng-dev libcap-ng-utils libselinux1-dev \
libcurl4-nss-dev flex bison gcc make \
&& apt-get -yqq autoremove \
&& apt-get -y clean \
&& rm -rf /var/lib/apt/lists/* \
&& rm -rf /var/log/* \
&& update-alternatives --set iptables /usr/sbin/iptables-legacy
RUN wget -t 3 -T 30 -nv -O /opt/src/ikev2.sh https://github.com/hwdsl2/setup-ipsec-vpn/raw/9a625dba296d488f89c2213627931b8685efd354/extras/ikev2setup.sh \
&& chmod +x /opt/src/ikev2.sh \
&& ln -s /opt/src/ikev2.sh /usr/bin
COPY ./run.sh /opt/src/run.sh
RUN chmod 755 /opt/src/run.sh
EXPOSE 500/udp 4500/udp
CMD ["/opt/src/run.sh"]
ARG BUILD_DATE
ARG VERSION
ARG VCS_REF
ENV IMAGE_VER=$BUILD_DATE
LABEL maintainer="Lin Song <[email protected]>" \
org.opencontainers.image.created="$BUILD_DATE" \
org.opencontainers.image.version="$VERSION" \
org.opencontainers.image.revision="$VCS_REF" \
org.opencontainers.image.authors="Lin Song <[email protected]>" \
org.opencontainers.image.title="IPsec VPN Server on Docker" \
org.opencontainers.image.description="Docker image to run an IPsec VPN server, with IPsec/L2TP, Cisco IPsec and IKEv2." \
org.opencontainers.image.url="https://github.com/hwdsl2/docker-ipsec-vpn-server" \
org.opencontainers.image.source="https://github.com/hwdsl2/docker-ipsec-vpn-server" \
org.opencontainers.image.documentation="https://github.com/hwdsl2/docker-ipsec-vpn-server"