File size: 3,407 Bytes
0e9c8a1 a9dec04 0e9c8a1 968dfdc fe26e2a 04b6377 968dfdc fe26e2a 04b6377 0e9c8a1 2bc2358 0e9c8a1 a9dec04 04b6377 fe26e2a 0e9c8a1 |
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 |
#
# Copyright (C) 2021-2025 Lin Song <linsongui@gmail.com>
#
# This work is licensed under the Creative Commons Attribution-ShareAlike 3.0
# Unported License: http://creativecommons.org/licenses/by-sa/3.0/
#
# Attribution required: please include my name in any derivative and let me
# know how you have improved it!
FROM alpine:3.22
ENV SWAN_VER=5.3
WORKDIR /opt/src
RUN set -x \
&& apk add --no-cache \
bash bind-tools coreutils openssl uuidgen wget xl2tpd iptables iptables-legacy \
iproute2 libcap-ng libcurl libevent linux-pam musl nspr nss nss-tools openrc \
bison flex gcc make libc-dev bsd-compat-headers linux-pam-dev \
nss-dev libcap-ng-dev libevent-dev curl-dev nspr-dev \
python3 py3-pip \
&& cd /sbin \
&& for fn in iptables iptables-save iptables-restore; do ln -fs xtables-legacy-multi "$fn"; done \
&& cd /opt/src \
&& wget -t 3 -T 30 -nv -O libreswan.tar.gz "https://github.com/libreswan/libreswan/archive/v${SWAN_VER}.tar.gz" \
|| wget -t 3 -T 30 -nv -O libreswan.tar.gz "https://download.libreswan.org/libreswan-${SWAN_VER}.tar.gz" \
&& tar xzf libreswan.tar.gz \
&& rm -f libreswan.tar.gz \
&& cd "libreswan-${SWAN_VER}" \
&& printf 'WERROR_CFLAGS=-w -s\nUSE_DNSSEC=false\nUSE_DH2=true\n' > Makefile.inc.local \
&& printf 'FINALNSSDIR=/etc/ipsec.d\nNSSDIR=/etc/ipsec.d\n' >> Makefile.inc.local \
&& make -s base \
&& make -s install-base \
&& cd /opt/src \
&& mkdir -p /run/openrc \
&& touch /run/openrc/softlevel \
&& rm -rf "/opt/src/libreswan-${SWAN_VER}" \
&& apk del --no-cache \
bison flex gcc make libc-dev bsd-compat-headers linux-pam-dev \
nss-dev libcap-ng-dev libevent-dev curl-dev nspr-dev
RUN wget -t 3 -T 30 -nv -O /opt/src/ikev2.sh https://github.com/hwdsl2/setup-ipsec-vpn/raw/ad61b354c57b3fa9871c04ec177bef2a93dd8eeb/extras/ikev2setup.sh \
&& chmod +x /opt/src/ikev2.sh \
&& ln -s /opt/src/ikev2.sh /usr/bin
# Set up Python virtual environment and install dependencies
# Assuming a requirements.txt exists or we install necessary packages directly
# Since requirements.txt was not provided, I will assume fastapi and uvicorn are needed.
COPY requirements.txt /opt/src/
RUN python3 -m venv /opt/venv && \
/opt/venv/bin/pip install --no-cache-dir -r /opt/src/requirements.txt
# Copy application files
COPY ./run.sh /opt/src/run.sh
COPY /app.py /opt/src/app.py
RUN chmod 755 /opt/src/run.sh
EXPOSE 500/udp 4500/udp 8000
# Run app.py, which in turn runs run.sh
CMD ["/opt/venv/bin/python3", "/opt/src/app.py"]
ARG BUILD_DATE
ARG VERSION
ARG VCS_REF
ENV IMAGE_VER=$BUILD_DATE
LABEL maintainer="Lin Song <linsongui@gmail.com>" \
org.opencontainers.image.created="$BUILD_DATE" \
org.opencontainers.image.version="$VERSION" \
org.opencontainers.image.revision="$VCS_REF" \
org.opencontainers.image.authors="Lin Song <linsongui@gmail.com>" \
org.opencontainers.image.title="IPsec VPN Server on Docker" \
org.opencontainers.image.description="Docker image to run an IPsec VPN server, with IPsec/L2TP, Cisco IPsec and IKEv2." \
org.opencontainers.image.url="https://github.com/hwdsl2/docker-ipsec-vpn-server" \
org.opencontainers.image.source="https://github.com/hwdsl2/docker-ipsec-vpn-server" \
org.opencontainers.image.documentation="https://github.com/hwdsl2/docker-ipsec-vpn-server"
|