protonvpn-docker/Dockerfile at master · edgeworkscreative/protonvpn-docker · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
#syntax=docker/dockerfile:1.2

FROM ubuntu:focal-20220801 as upstream
FROM upstream as base

ARG VERSION="v0.0.0"
ENV VERSION="${VERSION}"

# Overlay defaults
ENV S6_BEHAVIOUR_IF_STAGE2_FAILS=2 \
    S6_CMD_WAIT_FOR_SERVICES=1 \
    S6_KILL_GRACETIME=10000

# Proton defaults
ENV PROTONVPN_DNS_LEAK_PROTECT=1 \
    PROTONVPN_PROTOCOL=udp \
    PROTONVPN_EXCLUDE_CIDRS="169.254.169.254/32,169.254.170.2/32" \
    PROTONVPN_CHECK_INTERVAL=60 \
    PROTONVPN_FAIL_THRESHOLD=3 \
    PROTONVPN_IPCHECK_ENDPOINT="https://icanhazip.com/"

ARG S6_OVERLAY_VERSION="2.2.0.3"

RUN rm -f /etc/apt/apt.conf.d/docker-clean \
    && echo 'Binary::apt::APT::Keep-Downloaded-Packages "true";' > /etc/apt/apt.conf.d/buildkit-cache

# Copy GPG Keys
COPY --chown=root:root --chmod=0644 root/usr/share/keyrings/ /usr/share/keyrings/

# Install Packages
# hadolint ignore=DL3008,DL3009
RUN --mount=type=tmpfs,target=/downloads/ \
    --mount=type=tmpfs,target=/var/lib/apt \
    --mount=type=cache,sharing=private,target=/var/cache/apt \
    apt-get update \
    && apt-get install --no-install-recommends --yes \
    curl \
    procps \
    iptables \
    ca-certificates \
    openvpn \
    dialog \
    python3-pip \
    cron \
    && ARCH="$(uname -m)" \
    && export ARCH \
    && if [ "$ARCH" = "x86_64" ]; then \
    S6_ARCH="amd64"; \
    elif [ "$ARCH" = "aarch64" ]; then \
    S6_ARCH="aarch64"; \
    elif [ "$ARCH" = "armv7l" ]; then \
    S6_ARCH="armhf"; \
    else \
    exit 1; \
    fi \
    && export S6_ARCH \
    && mkdir -p /downloads \
    && curl -sSfL "https://github.com/just-containers/s6-overlay/releases/download/v${S6_OVERLAY_VERSION}/s6-overlay-${S6_ARCH}-installer" -o /downloads/s6-overlay-installer \
    && curl -sSfL "https://github.com/just-containers/s6-overlay/releases/download/v${S6_OVERLAY_VERSION}/s6-overlay-${S6_ARCH}-installer.sig" -o /downloads/s6-overlay-installer.sig \
    && gpgv --keyring /usr/share/keyrings/just-containers.gpg /downloads/s6-overlay-installer.sig /downloads/s6-overlay-installer \
    && chmod +x /downloads/s6-overlay-installer \
    && /downloads/s6-overlay-installer /

COPY --chown=root:root --chmod=0644 root/requirements.txt /requirements.txt
# hadolint ignore=DL3042
RUN --mount=type=cache,target=/root/.cache/pip \
    --mount=type=cache,target=/root/.cache/wheel \
    pip3 install \
    --progress-bar=off \
    --upgrade \
    --disable-pip-version-check \
    -r requirements.txt

COPY --chown=root:root --chmod=0755 root/etc /etc
COPY --chown=root:root --chmod=0755 root/usr/bin /usr/bin
COPY --chown=root:root --chmod=0644 root/usr/share/shlib /usr/share/shlib

ENTRYPOINT ["/init"]