[github/fretlink/docker-nix.git] / debian / Dockerfile

# Dockerfile to create an environment that contains the Nix package manager.
FROM debian:stable-slim

ARG NIX_VERSION
ENV NIX_VERSION ${NIX_VERSION:-2.2.1}
ARG LANG
ENV LANG ${LANG:-"en_US.UTF-8"}

RUN addgroup --gid 30000 --system nixbld \
    && for i in $(seq 1 30); do adduser --system --disabled-password --home /var/empty --gecos "Nix build user $i" --uid $((30000 + i)) --ingroup nixbld nixbld$i ; done \
    && adduser --disabled-password nixuser \
    && mkdir -m 0755 /nix && chown nixuser /nix \
    && apt update && apt install -y wget bzip2 \
    && apt clean && rm -rf /var/lib/apt/lists/* /tmp/* /var/tmp/* \
    # sandboxing enabled by default since 2.2
    && mkdir -p /etc/nix && echo 'sandbox = false' > /etc/nix/nix.conf

USER nixuser
ENV USER=nixuser
ENV HOME="/home/nixuser"

RUN cd && wget https://nixos.org/releases/nix/nix-$NIX_VERSION/nix-$NIX_VERSION-x86_64-linux.tar.bz2 \
    && tar xjf nix-*-x86_64-linux.tar.bz2 \
    && ~/nix-*-x86_64-linux/install \
    && rm -rf ~/nix-*-*

ENV ENV="/home/nixuser/.nix-profile/etc/profile.d/nix.sh"
RUN echo ". ${ENV}" >> ${HOME}/.profile
# All subsequent "RUN" will use a login shell
SHELL ["/usr/bin/env", "bash", "-l", "-c"]

RUN nix-channel --add https://nixos.org/channels/nixpkgs-19.03-darwin nixpkgs \
    && nix-channel --add https://nixos.org/channels/nixpkgs-unstable unstable \
    && nix-channel --update

# Propagate UTF8
# https://github.com/NixOS/nix/issues/599#issuecomment-153885553
# The same is hapenning with stack2nix
RUN nix-env -iA nixpkgs.glibcLocales \
    && echo "export LOCALE_ARCHIVE=$(nix-env --installed --no-name --out-path --query glibc-locales)/lib/locale/locale-archive" >> ${HOME}/.profile

# Make sure to use "login" shell when running container
ENTRYPOINT ["/usr/bin/env", "bash", "-l", "-c"]
Commit	Line	Data
89f0519e	1	# Dockerfile to create an environment that contains the Nix package manager.
0366f366	2	FROM debian:stable-slim
89f0519e P	3
89f0519e P	4	ARG NIX_VERSION
e6f85a81	5	ENV NIX_VERSION ${NIX_VERSION:-2.2.1}
c223b406 P	6	ARG LANG
c223b406 P	7	ENV LANG ${LANG:-"en_US.UTF-8"}
89f0519e	8
0366f366 P	9	RUN addgroup --gid 30000 --system nixbld \
	10	&& for i in $(seq 1 30); do adduser --system --disabled-password --home /var/empty --gecos "Nix build user $i" --uid $((30000 + i)) --ingroup nixbld nixbld$i ; done \
	11	&& adduser --disabled-password nixuser \
89f0519e	12	&& mkdir -m 0755 /nix && chown nixuser /nix \
0366f366	13	&& apt update && apt install -y wget bzip2 \
e6f85a81 HAL	14	&& apt clean && rm -rf /var/lib/apt/lists/* /tmp/* /var/tmp/* \
	15	# sandboxing enabled by default since 2.2
	16	&& mkdir -p /etc/nix && echo 'sandbox = false' > /etc/nix/nix.conf
89f0519e P	17
	18	USER nixuser
	19	ENV USER=nixuser
	20	ENV HOME="/home/nixuser"
	21
	22	RUN cd && wget https://nixos.org/releases/nix/nix-$NIX_VERSION/nix-$NIX_VERSION-x86_64-linux.tar.bz2 \
	23	&& tar xjf nix-*-x86_64-linux.tar.bz2 \
	24	&& ~/nix-*-x86_64-linux/install \
	25	&& rm -rf ~/nix--
	26
	27	ENV ENV="/home/nixuser/.nix-profile/etc/profile.d/nix.sh"
c223b406	28	RUN echo ". ${ENV}" >> ${HOME}/.profile
75cabc50	29	# All subsequent "RUN" will use a login shell
89f0519e	30	SHELL ["/usr/bin/env", "bash", "-l", "-c"]
75cabc50	31
4d15def7 HAL	32	RUN nix-channel --add https://nixos.org/channels/nixpkgs-19.03-darwin nixpkgs \
	33	&& nix-channel --add https://nixos.org/channels/nixpkgs-unstable unstable \
	34	&& nix-channel --update
75cabc50 P	35
	36	# Propagate UTF8
	37	# https://github.com/NixOS/nix/issues/599#issuecomment-153885553
	38	# The same is hapenning with stack2nix
	39	RUN nix-env -iA nixpkgs.glibcLocales \
	40	&& echo "export LOCALE_ARCHIVE=$(nix-env --installed --no-name --out-path --query glibc-locales)/lib/locale/locale-archive" >> ${HOME}/.profile
	41
	42	# Make sure to use "login" shell when running container
95f6e232	43	ENTRYPOINT ["/usr/bin/env", "bash", "-l", "-c"]