Docker: Introduce ubuntu24.04 no depedency image.

resources/docker_files/ubuntu-24.04-nodepends/Dockerfile

@@ -0,0 +1,166 @@
+# ubuntu-24.04-nodepends/Dockerfile
+#
+#  Copyright (c) 2018-2023, ARM Limited, All Rights Reserved
+#  SPDX-License-Identifier: Apache-2.0
+#
+#  Licensed under the Apache License, Version 2.0 (the "License"); you may
+#  not use this file except in compliance with the License.
+#  You may obtain a copy of the License at
+#
+#  http://www.apache.org/licenses/LICENSE-2.0
+#
+#  Unless required by applicable law or agreed to in writing, software
+#  distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
+#  WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+#  See the License for the specific language governing permissions and
+#  limitations under the License.
+#
+#  This file is part of Mbed TLS (https://www.trustedfirmware.org/projects/mbed-tls/)
+
+# Purpose
+# -------
+#
+# Minimal Ubuntu 24.04 image to build Mbed TLS from source tarballs.
+# This intentionally excludes Python, Perl and CI-only dependencies.
+
+FROM ubuntu:24.04
+
+ARG DEBIAN_FRONTEND=noninteractive
+WORKDIR /opt/src
+
+# Note: scripts/min_requirements.py need a writable
+# destination for installing python dependencies
+# FIXME: This should be /var/lib/build to use the host src directory as HOME
+ENV HOME=/var/lib/builds
+
+# Support for 32-bit builds+tests of Mbed TLS
+RUN case "$(uname -m)" in \
+        x86_64)  dpkg --add-architecture i386;; \
+        aarch64) dpkg --add-architecture armhf;; \
+    esac
+
+RUN apt-get update -q && apt-get install -yq \
+        # to build Mbed TLS: gcc, binutils, make, etc.
+        build-essential \
+        # to have a UTF-8 locale (see locale-gen below)
+        locales \
+        # to build Mbed TLS
+        clang \
+        # to build Mbed TLS
+        cmake \
+        make \
+        # to cross-build Mbed TLS
+        gcc-mingw-w64-i686 \
+        # to build Mbed TLS using latest gcc version available from Ubuntu
+        gcc-14 \
+        # build dependency of GCC
+        libisl-dev libmpfr-dev libmpc-dev \
+        # to check out Mbed TLS and others
+        git \
+        # to download things installed from other places
+        wget \
+        # to build Mbed TLS with MBEDTLS_ZILIB_SUPPORT (removed in 3.0)
+        zlib1g \
+        # to build Mbed TLS with MBEDTLS_ZILIB_SUPPORT (removed in 3.0)
+        zlib1g-dev \
+        # Reliable extraction of .tar.gz and .tar.xz source bundles.
+        tar \
+        xz-utils \
+        && rm -rf /var/lib/apt/lists/
+
+# Make sure we have a UTF-8 locale
+RUN locale && \
+    locale-gen "en_US.UTF-8" && \
+    dpkg-reconfigure locales
+
+# Install all the parts of gcc-multilib, which is necessary for 32-bit builds.
+# gcc-multilib conflicts with cross-compiler packages that we'll install later,
+# so don't keep it around. Just let it install its dependencies
+# (gcc-<VERSION>-multilib and libc support), then remove it. Manually create
+# one crucial symlink that's otherwise provided by the gcc-multilib package
+# (without that symlink, 32-bit builds won't find system headers). Note that
+# just installing the dependencies of gcc-multilib also brings in gcc-multilib
+# as a Recommends dependency.
+RUN if [ "$(uname -m)" = x86_64 ]; then \
+        apt-get update -q && apt-get install -yq \
+            gcc-multilib \
+        && rm -rf /var/lib/apt/lists/ && \
+        dpkg -r gcc-multilib && \
+        ln -s x86_64-linux-gnu/asm /usr/include/asm; \
+    fi
+
+# Install the Arm gcc-cross toolchains
+RUN if [ "$(uname -m)" = aarch64 ]; then \
+        # HACK: Ubuntu doesn't provide an armel port for Thumb-1 testing, so link
+        #       the cross-compiler's libraries into the standard multiarch location.
+        #       We need to create and link this directory first due to the /usr merge
+        #       from Ubuntu 19.04 onward.
+        mkdir -p /usr/arm-linux-gnueabi/lib && \
+        ln -s /usr/arm-linux-gnueabi/lib /lib/arm-linux-gnueabi && \
+        ln -s arm-linux-gnueabi/ld-linux.so.3 /lib/ld-linux.so.3; \
+    fi && \
+    apt-get update -q && apt-get install -yq \
+        gcc-aarch64-linux-gnu \
+        gcc-arm-linux-gnueabi \
+        gcc-arm-linux-gnueabihf \
+        gcc-arm-none-eabi \
+        libc6-dev-arm64-cross \
+        libc6-dev-armel-cross \
+        libc6-dev-armhf-cross \
+    && rm -rf /var/lib/apt/lists/
+
+# Install a snapshot of GCC that we want to test with.
+# GCC 15 will break our code: https://github.com/Mbed-TLS/mbedtls/issues/9814
+# During a transition period, we will use a snapshot of GCC 15 to test the
+# fix for that issue.
+# Eventually, gcc-latest should become GCC 15. This will cause test failures
+# on branches that don't have the fix yet, which is why we don't make
+# GCC 15 be gcc-latest immediately.
+RUN wget -q https://mirror.koddos.net/gcc/releases/gcc-15.1.0/gcc-15.1.0.tar.xz && \
+    tar -xf gcc-15.1.0.tar.xz && \
+    rm gcc-15.1.0.tar.xz && \
+    cd gcc-15.1.0 && \
+    ./configure --prefix=/usr/local/gcc-15 --program-suffix=-15 --disable-bootstrap --enable-languages=c,c++,lto && \
+    make && \
+    make install && \
+    cd .. && \
+    rm -rf gcc-15.1.0
+
+# If python is installed by some dependency, restrict it
+RUN if command -v python3 >/dev/null 2>&1; then \
+      chmod 700 "$(command -v python3)"; \
+      # also restrict common companions if present
+      for f in /usr/bin/python3.* /usr/bin/pydoc3* /usr/bin/idle3*; do \
+        [ -e "$f" ] && chmod 700 "$f" || true; \
+      done; \
+    fi
+
+# If perl is installed by some dependency, restrict it
+RUN if command -v perl >/dev/null 2>&1; then \
+      chmod 700 "$(command -v perl)"; \
+      # also restrict common companions if present
+      for f in /usr/bin/perl* /usr/bin/cpan* /usr/bin/enc2xs /usr/bin/h2ph /usr/bin/h2xs /usr/bin/perlbug /usr/bin/perldoc /usr/bin/perlivp /usr/bin/perlthanks /usr/bin/pl2pm /usr/bin/pod2* /usr/bin/pstruct /usr/bin/ptar* /usr/bin/ptx; do \
+        [ -e "$f" ] && chmod 700 "$f" || true; \
+      done; \
+    fi
+
+# Add user
+RUN useradd -m user
+
+# Create workspace
+# FIXME: This should be /var/lib/build to use the host src directory as HOME
+ARG AGENT_WORKDIR=/var/lib/builds
+ENV AGENT_WORKDIR=${AGENT_WORKDIR}
+RUN mkdir -p ${AGENT_WORKDIR} && chown -R user:user ${AGENT_WORKDIR}
+
+# From now on, run as the unprivileged user.
+USER user
+WORKDIR ${AGENT_WORKDIR}
+
+RUN \
+    # Make it possible to do git commits, e.g. to test prepare_release.py.
+    git config --global user.name 'Contained User' && \
+    git config --global user.email 'contained.user@unknown.invalid' && \
+    :
+
+ENTRYPOINT ["bash"]