283 lines
8.2 KiB
Docker
283 lines
8.2 KiB
Docker
#
|
|
# DO NOT EDIT THIS DOCKERFILE
|
|
#
|
|
# This file is auto-generated via scripts/build-dockerfile
|
|
# by using environment substitution while concatenating the
|
|
# contents of templates/*, and then adding the contents
|
|
# of Dockerfile.solution
|
|
#
|
|
# Most solution specific changes should be isolated in
|
|
# Dockerfile.solution. After making changes, you can then re-run
|
|
# scripts/build-dockerfile
|
|
#
|
|
|
|
#
|
|
# Template from templates/ubuntu/00-from.in
|
|
#
|
|
# Pull from ubuntu on Docker Hub
|
|
FROM ubuntu:focal AS xe-base-stage
|
|
|
|
|
|
#
|
|
# Template from templates/01-env.in
|
|
#
|
|
# Configure ENV variables which are set by scripts/build-dockerfile.sh
|
|
# and available in the container for use in assets/entry
|
|
|
|
ENV GPGPU_PACKAGE_REPOSITORY "https://osgc.jf.intel.com/internal"
|
|
ENV GPGPU_PACKAGE_STREAM "focal"
|
|
ENV GPGPU_PACKAGE_DISTRO "ubuntu"
|
|
ENV GPGPU_PACKAGE_DISTRO_RELEASE "focal"
|
|
|
|
#
|
|
# Template from templates/ubuntu/05-intel-proxy.in
|
|
#
|
|
# Pre-install proxy configuration values
|
|
#
|
|
# This uses the linux-ftp.ostc.intel.com as a mirror.
|
|
RUN { \
|
|
for suite in focal focal-updates focal-security focal-backports; do \
|
|
for component in main restricted universe multiverse; do \
|
|
echo "deb http://linux-ftp.ostc.intel.com/pub/mirrors/ubuntu ${suite} ${component}" ; \
|
|
done \
|
|
done \
|
|
} > /etc/apt/sources.list
|
|
|
|
ARG http_proxy="http://proxy-chain.intel.com:911/"
|
|
ARG https_proxy="http://proxy-chain.intel.com:912/"
|
|
ARG ftp_proxy="ftp://proxy-chain.intel.com:911/"
|
|
ARG socks_proxy="socks://proxy-chain.intel.com:1080/"
|
|
ARG no_proxy="localhost,*.*.intel.com"
|
|
|
|
ENV http_proxy="${http_proxy}"
|
|
ENV https_proxy="${https_proxy}"
|
|
ENV no_proxy="${no_proxy}"
|
|
ENV ftp_proxy="${http_proxy}"
|
|
ENV socks_proxy="${socks_proxy}"
|
|
|
|
ENV HTTP_PROXY="${http_proxy}"
|
|
ENV HTTPS_PROXY="${http_proxy}"
|
|
ENV NO_PROXY="${no_proxy}"
|
|
|
|
RUN { \
|
|
echo "Acquire::http::proxy \"${http_proxy}\";\n" ; \
|
|
echo "Acquire::https::proxy \"${https_proxy}\";\n" ; \
|
|
echo "Acquire::ftp::proxy \"${ftp_proxy}\";\n" ; \
|
|
echo "Acquire::socks::proxy \"${socks_proxy}\";\n" ; \
|
|
echo "Acquire::http::Proxy::linux-ftp.ostc.intel.com DIRECT;\n" ; \
|
|
} > /etc/apt/apt.conf
|
|
|
|
|
|
#
|
|
# Template from templates/ubuntu/08-intel-certs.in
|
|
#
|
|
# Install Intel CA5A cert so Intel certs are recognized
|
|
|
|
RUN apt-get -q update \
|
|
&& DEBIAN_FRONTEND=noninteractive apt-get install --no-install-recommends -y \
|
|
ca-certificates \
|
|
wget \
|
|
unzip \
|
|
&& apt-get clean \
|
|
&& rm -rf /var/lib/apt/lists/{apt,dpkg,cache,log} \
|
|
&& mkdir -p /usr/local/share/ca-certificates \
|
|
&& wget -qO tmp.zip http://certificates.intel.com/repository/certificates/IntelSHA2RootChain-Base64.zip \
|
|
&& unzip tmp.zip -d /usr/local/share/ca-certificates \
|
|
&& rm tmp.zip \
|
|
&& wget -qO tmp.zip http://certificates.intel.com/repository/certificates/Intel%20Root%20Certificate%20Chain%20Base64.zip \
|
|
&& unzip tmp.zip -d /usr/local/share/ca-certificates \
|
|
&& rm tmp.zip \
|
|
&& apt-get remove -y wget unzip \
|
|
&& update-ca-certificates --fresh
|
|
|
|
|
|
#
|
|
# Template from templates/ubuntu/10-default-packages.in
|
|
#
|
|
# Update the repo lists and then install things using the internal
|
|
# sources. Packages used by many developers are pulled into this image
|
|
# but we do want it to be relatively small.
|
|
#
|
|
# NOTE: We use DEBIAN_FRONTEND=noninteractive to prevent krb5-user from
|
|
# trying to prompt for configuration details during install.
|
|
RUN apt-get -q update \
|
|
&& DEBIAN_FRONTEND=noninteractive apt-get install -y --no-install-recommends -q \
|
|
locales \
|
|
software-properties-common
|
|
|
|
# Set up locales
|
|
RUN localedef -c -f UTF-8 -i en_US en_US.UTF-8
|
|
ENV LANG=en_US.UTF-8 LANGUAGE=en_US.UTF-8 LC_ALL=en_US.UTF-8
|
|
|
|
#
|
|
# Template from templates/ubuntu/20-repositories-intel-com.in
|
|
#
|
|
# Once we have a signed repository:
|
|
#
|
|
# Update and install gpg-agent as it isn't in the base Ubuntu image and
|
|
# is needed for apt-key
|
|
#
|
|
#RUN apt-get -q update \
|
|
# && DEBIAN_FRONTEND=noninteractive \
|
|
# apt-get --no-install-recommends -q -y install \
|
|
# wget \
|
|
# gpg-agent \
|
|
# && apt-get clean \
|
|
# && rm -rf /var/lib/apt/lists/{apt,dpkg,cache,log}
|
|
|
|
# Fetch and install the signing key for repositories.intel.com
|
|
#
|
|
#RUN wget --no-proxy --quiet -O /tmp/repositories.key ${PACKAGE_KEYFILE} \
|
|
# && APT_KEY_DONT_WARN_ON_DANGEROUS_USAGE=DontWarn \
|
|
# apt-key add /tmp/repositories.key \
|
|
# && rm /tmp/repositories.key
|
|
|
|
# Once the keys are being used, remove 'trusted=yes' from the repo line
|
|
# below:
|
|
|
|
# Install repository as trusted until we have a signed repository:
|
|
RUN echo "deb [trusted=yes arch=amd64] https://osgc.jf.intel.com/internal/ubuntu focal main" > /etc/apt/sources.list.d/intel-graphics.list
|
|
|
|
# Cleanup
|
|
#RUN apt-get remove -y wget
|
|
|
|
|
|
#
|
|
# Template from templates/ubuntu/25-create-user.in
|
|
#
|
|
# Create user 'user' and add them to 'sudo' for sudo access and set
|
|
# the passwd to 'user'
|
|
|
|
FROM xe-base-stage AS xe-user-stage
|
|
|
|
RUN apt-get -q update \
|
|
&& DEBIAN_FRONTEND=noninteractive \
|
|
&& apt-get install --no-install-recommends -y \
|
|
sudo
|
|
|
|
ARG USER_UID=1000
|
|
ARG USER_GID=1000
|
|
|
|
RUN echo "Creating 'user': $USER_UID:$USER_GID"
|
|
|
|
# NOTE: Requires 'sudo' package to already be installed
|
|
RUN groupadd -g $USER_GID user \
|
|
&& useradd --no-log-init \
|
|
-s /bin/bash \
|
|
-m \
|
|
-u $USER_UID \
|
|
-g user \
|
|
-G sudo,video \
|
|
-p $(echo "user" | openssl passwd -stdin) user
|
|
|
|
# Set 'sudo' to NOPASSWD for all container users
|
|
RUN sed -i -e 's,%sudo.*,%sudo ALL=(ALL) NOPASSWD:ALL,g' /etc/sudoers
|
|
|
|
RUN apt-get clean \
|
|
&& rm -rf /var/lib/apt/lists/{apt,dpkg,cache,log}
|
|
|
|
USER user
|
|
|
|
#
|
|
# Solution begins here (from Dockerfile.solution)
|
|
#
|
|
#
|
|
# Docker.solution based on the Intel-Media-SDK instructions available here:
|
|
#
|
|
# https://github.com/Intel-Media-SDK/MediaSDK/wiki/Build-and-use-ffmpeg-with-MediaSDK
|
|
#
|
|
# This should really be part of a multi-stage build so the final
|
|
# image isn't polluted with build artifacts
|
|
#
|
|
# NOTE: This image will only work with Ubuntu 19.04 (eoan) and newer
|
|
FROM xe-user-stage AS solution-build
|
|
|
|
USER root
|
|
|
|
# Install git and build tools, clone ffmpeg, and get ready to build it
|
|
RUN apt-get update \
|
|
&& DEBIAN_FRONTEND=noninteractive \
|
|
&& apt-get -q -y install \
|
|
git build-essential pkg-config
|
|
|
|
# Install all required Media common packages, broken out
|
|
# from the above command to highlight which packages are
|
|
# specific to media
|
|
RUN apt-get update \
|
|
&& DEBIAN_FRONTEND=noninteractive \
|
|
&& apt-get -q -y install \
|
|
libva-dev$LIBVA_DEV_VERSION \
|
|
libmfx-dev$LIBMFX_DEV_VERSION \
|
|
libmfx1$LIBMFX1_VERSION \
|
|
vainfo$VAINFO_VERSION
|
|
|
|
ENV LIBVA_DRIVER_NAME=iHD
|
|
|
|
USER user
|
|
|
|
# Clone ffmpeg
|
|
# NOTE: This explicitly clones the FFMPEG_TAG_VERSION (see SOLUTIONS)
|
|
RUN git clone --depth 1 --branch n4.2.1 https://github.com/ffmpeg/ffmpeg /home/user/ffmpeg
|
|
|
|
# Build FFmpeg
|
|
WORKDIR /home/user/ffmpeg
|
|
|
|
RUN ./configure --arch=x86_64 --disable-x86asm --enable-vaapi --enable-libmfx \
|
|
&& make -j $(nproc --all) \
|
|
&& sudo make install
|
|
|
|
FROM xe-user-stage
|
|
|
|
USER root
|
|
|
|
# Update and install the Mesa, OpenCL, and Media from repositories.intel.com
|
|
#
|
|
# NOTE: libva requires libpciaccess0, however it doesn't depend on it
|
|
# so explicitly install it.
|
|
#
|
|
# curl is used by assets/commands/test to obtain test content if it
|
|
# does not already exist
|
|
RUN apt-get -q update \
|
|
&& DEBIAN_FRONTEND=noninteractive \
|
|
&& apt-get --no-install-recommends -q -y install \
|
|
intel-media-va-driver-non-free$INTEL_MEDIA_VA_DRIVER_NON_FREE_VERSION \
|
|
libva2$LIBVA2_VERSION \
|
|
libmfx1$LIBMFX1_VERSION \
|
|
vainfo$VAINFO_VERSION \
|
|
libpciaccess0 \
|
|
pciutils \
|
|
curl
|
|
|
|
# Copy ffmpeg and ffprobe from build container
|
|
COPY --from=solution-build /usr/local/bin/ /usr/local/bin/
|
|
|
|
RUN apt-get clean \
|
|
&& rm -rf /var/lib/apt/lists/*
|
|
|
|
ENV LIBVA_DRIVER_NAME=iHD
|
|
|
|
# In order for ffmpeg to access the video input, 'user' needs to have
|
|
# access to the hardware. Not sure how to do that across different
|
|
# OS releases, so setting user to 'root' for now.
|
|
USER root
|
|
|
|
WORKDIR /home/user
|
|
|
|
|
|
#
|
|
# Standard ending begins here (from templates/ending.in)
|
|
#
|
|
# NOTE: This should be added as the last template entry
|
|
# as it will always modify a layer (since the Dockerfile
|
|
# changes,) causing all subsequent layers to be
|
|
# regenerated.
|
|
|
|
# Copy boiler plate entry point
|
|
COPY assets/ /assets/
|
|
ENTRYPOINT [ "/assets/entry" ]
|
|
|
|
# Ensure that each Docker container self-documents the
|
|
# versions included in it
|
|
COPY SOLUTION /assets/
|
|
COPY Dockerfile /assets/Dockerfile
|