# syntax=docker/dockerfile:1.2
# Enable secrets
#
# DO NOT EDIT THIS DOCKERFILE
#
# This file is auto-generated via scripts/build-dockerfile
# by using environment substitution while concatenating the
# contents of templates/*, and then adding the contents
# of Dockerfile.solution
#
# Most solution specific changes should be isolated in
# Dockerfile.solution. After making changes, you can then re-run
# scripts/build-dockerfile
#

#
# Template from templates/ubuntu/00-from.in
#
# Pull from ubuntu on Docker Hub
FROM amr-registry.caas.intel.com/cache/library/ubuntu:21.10 AS xe-base-stage


#
# Template from templates/ubuntu/05-intel-proxy.in
#
# Pre-install proxy configuration values
#
# This uses the linux-ftp.ostc.intel.com as a mirror.
RUN { \
  for suite in 21.10 21.10-updates 21.10-security 21.10-backports; do \
    for component in main restricted universe multiverse; do \
      echo "deb http://linux-ftp.ostc.intel.com/pub/mirrors/ubuntu ${suite} ${component}" ; \
    done \
  done \
} > /dev/null
#/etc/apt/sources.list

# Retry downloads up to 100 times to work around linux-ftp issue...
RUN echo 'APT::Acquire::Retries "100";' > /etc/apt/apt.conf.d/80-retries

ARG http_proxy="http://proxy-chain.intel.com:911/"
ARG https_proxy="http://proxy-chain.intel.com:912/"
ARG ftp_proxy="ftp://proxy-chain.intel.com:911/"
ARG socks_proxy="socks://proxy-chain.intel.com:1080/"
ARG no_proxy="localhost,*.*.intel.com"

ENV http_proxy="${http_proxy}"
ENV https_proxy="${https_proxy}"
ENV no_proxy="${no_proxy}"
ENV ftp_proxy="${http_proxy}"
ENV socks_proxy="${socks_proxy}"

ENV HTTP_PROXY="${http_proxy}"
ENV HTTPS_PROXY="${http_proxy}"
ENV NO_PROXY="${no_proxy}"

RUN { \
  echo "Acquire::http::proxy \"${http_proxy}\";\n" ; \
  echo "Acquire::https::proxy \"${https_proxy}\";\n" ; \
  echo "Acquire::ftp::proxy \"${ftp_proxy}\";\n" ; \
  echo "Acquire::socks::proxy \"${socks_proxy}\";\n" ; \
  echo "Acquire::http::Proxy::linux-ftp.ostc.intel.com DIRECT;\n" ; \
} > /etc/apt/apt.conf


#
# Template from templates/ubuntu/08-intel-certs.in
#
# Install Intel CA5A cert so Intel certs are recognized

RUN apt-get -q update \
  && DEBIAN_FRONTEND=noninteractive apt-get install --no-install-recommends -y \
    ca-certificates \
    wget \
    unzip \
  && apt-get clean \
  && rm -rf /var/lib/apt/lists/{apt,dpkg,cache,log} \
  && mkdir -p /usr/local/share/ca-certificates \
  && wget -qO tmp.zip http://certificates.intel.com/repository/certificates/IntelSHA2RootChain-Base64.zip \
     && unzip tmp.zip -d /usr/local/share/ca-certificates \
     && rm tmp.zip \
  && wget -qO tmp.zip http://certificates.intel.com/repository/certificates/Intel%20Root%20Certificate%20Chain%20Base64.zip \
     && unzip tmp.zip -d /usr/local/share/ca-certificates \
     && rm tmp.zip \
  && apt-get remove -y wget unzip \
  && update-ca-certificates --fresh


#
# Template from templates/ubuntu/10-default-packages.in
#
# Update the repo lists and then install things using the internal
# sources. Packages used by many developers are pulled into this image
# but we do want it to be relatively small.
#
# NOTE: We use DEBIAN_FRONTEND=noninteractive to prevent krb5-user from
#       trying to prompt for configuration details during install.
RUN apt-get -q update \
  && DEBIAN_FRONTEND=noninteractive apt-get install -y --no-install-recommends -q \
    locales \
    software-properties-common

# Set up locales
RUN localedef -c -f UTF-8 -i en_US en_US.UTF-8
ENV LANG=en_US.UTF-8 LANGUAGE=en_US.UTF-8 LC_ALL=en_US.UTF-8

#
# Template from templates/ubuntu/18-create-user.in
#
# Create user 'user' and add them to 'sudo' for sudo access and set
# the passwd to 'user'

FROM xe-base-stage AS xe-user-stage

RUN apt-get -q update \
  && DEBIAN_FRONTEND=noninteractive \
  && apt-get install --no-install-recommends -y \
      sudo

ARG USER_UID=1000
ARG USER_GID=1000

RUN echo "Creating 'user': $USER_UID:$USER_GID"

# NOTE: Requires 'sudo' package to already be installed
RUN groupadd -g $USER_GID user \
  && useradd --no-log-init \
    -s /bin/bash \
    -m \
    -u $USER_UID \
    -g user \
    -G sudo,video \
    -p $(echo "user" | openssl passwd -stdin) user

# Set 'sudo' to NOPASSWD for all container users
RUN sed -i -e 's,%sudo.*,%sudo ALL=(ALL) NOPASSWD:ALL,g' /etc/sudoers

RUN apt-get clean \
  && rm -rf /var/lib/apt/lists/{apt,dpkg,cache,log}

#
# Template from templates/ubuntu/20-repositories-intel-com.in
#
# Update and install wget and gpg-agent as it isn't in the base Ubuntu
# image and is needed for apt-key
#
RUN apt-get -q update \
  && DEBIAN_FRONTEND=noninteractive \
    apt-get --no-install-recommends -q -y install \
      wget \
      gpg-agent

# Fetch and install the signing key for https://repositories.intel.com/graphics
#
RUN wget -qO - https://repositories.intel.com/graphics/intel-graphics.key | apt-key add -
RUN apt-add-repository \
  'deb [arch=amd64] https://repositories.intel.com/graphics/ubuntu focal main'

# Cleanup
#RUN apt-get remove -y wget \
#  && apt-get clean \
#  && rm -rf /var/lib/apt/lists/{apt,dpkg,cache,log}

#
# Template from templates/99-env.in
#
# Configure ENV variables which are set by scripts/build-dockerfile.sh
# and available in the container for use in assets/entry

ENV GPGPU_PACKAGE_REPOSITORY "https://repositories.intel.com/graphics"
ENV GPGPU_PACKAGE_STREAM "focal"
ENV GPGPU_PACKAGE_DISTRO "ubuntu"
ENV GPGPU_PACKAGE_DISTRO_RELEASE "21.10"

USER user

#
# Solution begins here (from Dockerfile.solution)
#
#
# Docker.solution based on the Intel-Media-SDK instructions available here:
#
# https://github.com/Intel-Media-SDK/MediaSDK/wiki/Build-and-use-ffmpeg-with-MediaSDK
#
# This should really be part of a multi-stage build so the final 
# image isn't polluted with build artifacts
#
# NOTE: This image will only work with Ubuntu 19.04 (eoan) and newer
FROM xe-user-stage AS solution-build

USER root

# Install git and build tools, clone ffmpeg, and get ready to build it
RUN apt-get update \
  && DEBIAN_FRONTEND=noninteractive \
  && apt-get -q -y install \
    git build-essential pkg-config

# Install all required Media common packages, broken out
# from the above command to highlight which packages are
# specific to media
RUN apt-get update \
  && DEBIAN_FRONTEND=noninteractive \
  && apt-get -q -y install \
    libva-dev$LIBVA_DEV_VERSION \
    libmfx-dev$LIBMFX_DEV_VERSION \
    libmfx1$LIBMFX1_VERSION \
    vainfo$VAINFO_VERSION

ENV LIBVA_DRIVER_NAME=iHD

USER user

# Clone ffmpeg
# NOTE: This explicitly clones the FFMPEG_TAG_VERSION (see SOLUTIONS)
RUN git clone --depth 1 --branch n4.2.1 https://github.com/ffmpeg/ffmpeg /home/user/ffmpeg

# Build FFmpeg
WORKDIR /home/user/ffmpeg

RUN ./configure --arch=x86_64 --disable-x86asm --enable-vaapi --enable-libmfx \
  && make -j $(nproc --all) \
  && sudo make install

FROM xe-user-stage

USER root

# Update and install the Mesa, OpenCL, and Media from repositories.intel.com
#
# NOTE: libva requires libpciaccess0, however it doesn't depend on it
# so explicitly install it.
#
# curl is used by assets/commands/test to obtain test content if it
# does not already exist
RUN apt-get -q update \
  && DEBIAN_FRONTEND=noninteractive \
  && apt-get --no-install-recommends -q -y install \
    intel-media-va-driver-non-free$INTEL_MEDIA_VA_DRIVER_NON_FREE_VERSION \
    libva2$LIBVA2_VERSION \
    libmfx1$LIBMFX1_VERSION \
    vainfo$VAINFO_VERSION \
    libpciaccess0 \
    pciutils \
    curl

# Copy ffmpeg and ffprobe from build container
COPY --from=solution-build /usr/local/bin/ /usr/local/bin/

RUN apt-get clean \
  && rm -rf /var/lib/apt/lists/*

ENV LIBVA_DRIVER_NAME=iHD

# In order for ffmpeg to access the video input, 'user' needs to have
# access to the hardware. Not sure how to do that across different
# OS releases, so setting user to 'root' for now.
USER root

WORKDIR /home/user


#
# Standard ending begins here (from templates/ending.in)
#
# NOTE: This should be added as the last template entry
# as it will always modify a layer (since the Dockerfile
# changes,) causing all subsequent layers to be 
# regenerated.

# Copy boiler plate entry point
COPY assets/ /assets/
ENTRYPOINT [ "/assets/entry" ]

# Ensure that each Docker container self-documents the 
# versions included in it
COPY SOLUTION /assets/
COPY Dockerfile /assets/Dockerfile