Dockerfile

# This dockerfile is the root "shell" around the entire hive container ecosystem.
#
# Its goal is to containerize everything that hive does within a single mega
# container, preventing any leakage of junk (be that file system, docker images
# and/or containers, network traffic) into the host system.
#
# To this effect is runs its own docker engine within, executing the entire hive
# test suite inside. The data workspace of the internal docker engine needs to
# be mounted outside to allow proper image caching. Further, to allow running a
# docker instance internally, this shell must be started in privileged mode.
#
# Callers need to:
#   - Bind /var/lib/docker to an external volume for cache reuse
#   - Forward UID envvar to reown docker and hive generated files
#   - Run with --privileged to allow docker-in-docker containers
FROM docker:dind

# Configure the container for building hive
RUN apk add --update musl-dev go && rm -rf /var/cache/apk/*
ENV GOPATH /gopath
ENV PATH   $GOPATH/bin:$PATH

# Inject and build the hive dependencies (modified very rarely, cache builds)
ADD vendor $GOPATH/src/github.com/karalabe/hive/vendor
RUN (cd $GOPATH/src/github.com/karalabe/hive && go install ./...)

# Inject and build hive itself (modified during hive dev only, cache builds)
ADD *.go $GOPATH/src/github.com/karalabe/hive/

WORKDIR $GOPATH/src/github.com/karalabe/hive
RUN go install

# Define the tiny startup script to boot docker and hive afterwards
RUN \
  echo '#!/bin/sh'  > $GOPATH/bin/hive.sh && \
	echo 'set -e'    >> $GOPATH/bin/hive.sh && \
	\
	echo 'dockerd-entrypoint.sh --storage-driver=aufs 2>/dev/null &' >> $GOPATH/bin/hive.sh && \
	echo 'while [ ! -S /var/run/docker.sock ]; do sleep 1; done'           >> $GOPATH/bin/hive.sh && \
	\
	echo 'for id in `docker ps -a -q`; do docker rm -f $id; done'                                                     >> $GOPATH/bin/hive.sh && \
	echo 'for id in `docker images -f "dangling=true" | tail -n +2 | awk "{print \\$3}"`; do docker rmi -f $id; done' >> $GOPATH/bin/hive.sh && \
	echo 'hive --docker-noshell $@'                                                                                   >> $GOPATH/bin/hive.sh && \
	echo 'for id in `docker ps -a -q`; do docker rm -f $id; done'                                                     >> $GOPATH/bin/hive.sh && \
	echo 'for id in `docker images -f "dangling=true" | tail -n +2 | awk "{print \\$3}"`; do docker rmi -f $id; done' >> $GOPATH/bin/hive.sh && \
	\
	echo 'adduser -u $UID -D hive'       >> $GOPATH/bin/hive.sh && \
	echo 'chown -R hive /var/lib/docker' >> $GOPATH/bin/hive.sh && \
  echo 'chown -R hive workspace'       >> $GOPATH/bin/hive.sh && \
	\
	chmod +x $GOPATH/bin/hive.sh

ENTRYPOINT ["hive.sh"]

# Inject all other runtime resources (modified most frequently)
COPY . $GOPATH/src/github.com/karalabe/hive