CircleCI: Do not run build as root. Move to public docker repo.
[feed/packages.git] / .circleci / Dockerfile
1 FROM debian:9
2
3 RUN apt update && apt install -y \
4 build-essential \
5 curl \
6 jq \
7 gawk \
8 gettext \
9 git \
10 libncurses5-dev \
11 libssl-dev \
12 python \
13 subversion \
14 time \
15 wget \
16 zlib1g-dev \
17 unzip \
18 xz-utils \
19 && rm -rf /var/lib/apt/lists/*
20
21 RUN useradd -c "OpenWrt Builder" -m -d /home/build -s /bin/bash build
22 USER build
23 ENV HOME /home/build
24
25 # LEDE Build System (LEDE GnuPG key for unattended build jobs)
26 RUN curl 'https://git.openwrt.org/?p=keyring.git;a=blob_plain;f=gpg/626471F1.asc' | gpg --import \
27 && echo '54CC74307A2C6DC9CE618269CD84BCED626471F1:6:' | gpg --import-ownertrust
28
29 # LEDE Release Builder (17.01 "Reboot" Signing Key)
30 RUN curl 'https://git.openwrt.org/?p=keyring.git;a=blob_plain;f=gpg/D52BBB6B.asc' | gpg --import \
31 && echo 'B09BE781AE8A0CD4702FDCD3833C6010D52BBB6B:6:' | gpg --import-ownertrust
32
33 # OpenWrt Release Builder (18.06 Signing Key)
34 RUN curl 'https://git.openwrt.org/?p=keyring.git;a=blob_plain;f=gpg/17E1CE16.asc' | gpg --import \
35 && echo '6768C55E79B032D77A28DA5F0F20257417E1CE16:6:' | gpg --import-ownertrust