docker: Add a new multi-stage Docker file with proxy support

This combines the functionality of docker/build/Dockerfile and
docker/run/Dockerfile into a single file for convenience, and to be able
to use it in environments like GitHub actions which support only a
single Docker file.

The dockerignore file was optimized with the help of
https://github.com/pwaller/docker-show-context.

Signed-off-by: Sebastian Schuberth <[email protected]>

Author: sschuberth

.dockerignore

@@ -0,0 +1,28 @@
+# Ignore the Docker files themselves to avoid that all layers are invalidated if
+# the Docker files are changed during development.
+.dockerignore
+Dockerfile
+
+# Ignore the Git directory.
+.git/
+
+# Ignore IntelliJ IDEA files.
+.idea/
+*.iml
+
+# Ignore intermediate build artifacts.
+**/.gradle/
+**/.kotlintest/
+**/build/
+!docker/build
+**/out/
+reporter-web-app/node_modules/
+
+# Ignore the logos as we do not need them to run ORT.
+logos/
+
+# Ignore test directories as we do not need them to run ORT.
+**/*[Tt]est/
+
+# Ignore macOS-specific files.
+.DS_Store

Dockerfile

@@ -0,0 +1,116 @@
+# Copyright (C) 2020 Bosch Software Innovations GmbH
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+#
+# SPDX-License-Identifier: Apache-2.0
+# License-Filename: LICENSE
+
+FROM frolvlad/alpine-java:jdk8-slim AS build
+
+COPY . /usr/local/src/ort
+
+WORKDIR /usr/local/src/ort
+
+RUN apk add --no-cache \
+    # Required for Node.js to build the reporter-web-app.
+    libstdc++ \
+    # Required to allow to download via a proxy with a self-signed certificate.
+    ca-certificates coreutils openssl && \
+    scripts/import_proxy_certs.sh
+
+RUN scripts/set_gradle_proxy.sh && \
+    ./gradlew --no-daemon :cli:distTar
+
+FROM openjdk:11-jre-slim-sid
+
+ENV \
+    # Package manager versions.
+    BOWER_VERSION=1.8.8 \
+    BUNDLER_VERSION=1.17.3-3 \
+    CARGO_VERSION=0.40.0-3 \
+    COMPOSER_VERSION=1.9.1-1 \
+    CONAN_VERSION=1.18.0 \
+    FLUTTER_VERSION=v1.7.8+hotfix.3-stable \
+    GO_DEP_VERSION=0.5.4-3 \
+    GO_VERSION=1.13.4 \
+    HASKELL_STACK_VERSION=1.7.1-3 \
+    NPM_VERSION=6.13.4+ds-2 \
+    PYTHON_PIP_VERSION=18.1-5 \
+    PYTHON_PIPENV_VERSION=2018.11.26 \
+    PYTHON_VIRTUALENV_VERSION=15.1.0 \
+    SBT_VERSION=0.13.13-2 \
+    YARN_VERSION=1.21.1 \
+    # Scanner versions.
+    SCANCODE_VERSION=3.0.2 \
+    # Installation directories.
+    FLUTTER_HOME=/opt/flutter
+
+ENV PATH="$PATH:$FLUTTER_HOME/bin:$FLUTTER_HOME/bin/cache/dart-sdk/bin:/opt/go/bin"
+
+# Apt install commands.
+RUN apt-get update && \
+    apt-get install -y --no-install-recommends \
+        # Install general tools required by this Dockefile.
+        curl \
+        lib32stdc++6 \
+        openssh-client \
+        # Install VCS tools (no specific versions required here).
+        cvs \
+        git \
+        mercurial \
+        # Install package managers (in versions known to work).
+        bundler=$BUNDLER_VERSION \
+        cargo=$CARGO_VERSION \
+        composer=$COMPOSER_VERSION \
+        go-dep=$GO_DEP_VERSION \
+        haskell-stack=$HASKELL_STACK_VERSION \
+        npm=$NPM_VERSION \
+        python-pip=$PYTHON_PIP_VERSION \
+        python-setuptools \
+        python3-pip=$PYTHON_PIP_VERSION \
+        python3-setuptools \
+        sbt=$SBT_VERSION \
+    && \
+    rm -rf /var/lib/apt/lists/*
+
+# Custom install commands.
+RUN \
+    # Install VCS tools (no specific versions required here).
+    curl -ksS https://storage.googleapis.com/git-repo-downloads/repo > /usr/local/bin/repo && \
+    chmod a+x /usr/local/bin/repo && \
+    # Install package managers (in versions known to work).
+    npm install --global bower@$BOWER_VERSION yarn@$YARN_VERSION && \
+    pip install wheel && \
+    pip install conan==$CONAN_VERSION pipenv==$PYTHON_PIPENV_VERSION virtualenv==$PYTHON_VIRTUALENV_VERSION && \
+    curl -ksSO https://storage.googleapis.com/flutter_infra/releases/stable/linux/flutter_linux_$FLUTTER_VERSION.tar.xz && \
+    tar xf flutter_linux_$FLUTTER_VERSION.tar.xz -C $(dirname $FLUTTER_HOME) && \
+    rm flutter_linux_$FLUTTER_VERSION.tar.xz && \
+    chmod -R a+rw $FLUTTER_HOME && \
+    flutter config --no-analytics && \
+    flutter doctor && \
+    # Install golang in order to have `go mod` as package manager.
+    curl -ksSO https://dl.google.com/go/go$GO_VERSION.linux-amd64.tar.gz && \
+    tar -C /opt -xzf go$GO_VERSION.linux-amd64.tar.gz && \
+    rm go$GO_VERSION.linux-amd64.tar.gz && \
+    # Add scanners (in versions known to work).
+    curl -ksSL https://github.com/nexB/scancode-toolkit/archive/v$SCANCODE_VERSION.tar.gz | \
+        tar -zxC /usr/local && \
+        # Trigger configuration for end-users.
+        /usr/local/scancode-toolkit-$SCANCODE_VERSION/scancode --version && \
+        chmod -R o=u /usr/local/scancode-toolkit-$SCANCODE_VERSION && \
+        ln -s /usr/local/scancode-toolkit-$SCANCODE_VERSION/scancode /usr/local/bin/scancode
+
+COPY --from=build /usr/local/src/ort/cli/build/distributions/ort-*.tar /opt/ort.tar
+RUN mkdir /opt/ort && tar xf /opt/ort.tar -C /opt/ort --strip-components 1
+
+ENTRYPOINT ["/opt/ort/bin/ort"]