mirror of
https://github.com/wahyd4/docker-ipsec-vpn-server.git
synced 2026-08-09 04:46:22 +10:00
hwdsl2
aab55ff13a
- Remove libunbound2 and libunbound-dev (these packages are not needed because we are not enabling DNSSEC) Ref: https://github.com/libreswan/libreswan/issues/117
46 lines
1.6 KiB
Docker
46 lines
1.6 KiB
Docker
FROM debian:stretch
|
|
MAINTAINER Lin Song <linsongui@gmail.com>
|
|
|
|
ENV REFRESHED_AT 2017-09-27
|
|
ENV SWAN_VER 3.21
|
|
|
|
WORKDIR /opt/src
|
|
|
|
RUN apt-get -yqq update \
|
|
&& DEBIAN_FRONTEND=noninteractive \
|
|
apt-get -yqq --no-install-recommends install \
|
|
wget dnsutils openssl ca-certificates kmod \
|
|
iproute gawk grep sed net-tools iptables \
|
|
bsdmainutils libcurl3-nss \
|
|
libnss3-tools libevent-dev libcap-ng0 xl2tpd \
|
|
libnss3-dev libnspr4-dev pkg-config libpam0g-dev \
|
|
libcap-ng-dev libcap-ng-utils libselinux1-dev \
|
|
libcurl4-nss-dev flex bison gcc make \
|
|
&& wget -t 3 -T 30 -nv -O "libreswan.tar.gz" "https://github.com/libreswan/libreswan/archive/v${SWAN_VER}.tar.gz" \
|
|
|| wget -t 3 -T 30 -nv -O "libreswan.tar.gz" "https://download.libreswan.org/libreswan-${SWAN_VER}.tar.gz" \
|
|
&& tar xzf "libreswan.tar.gz" \
|
|
&& rm -f "libreswan.tar.gz" \
|
|
&& cd "libreswan-${SWAN_VER}" \
|
|
&& printf 'WERROR_CFLAGS =\nUSE_DNSSEC = false\nUSE_SYSTEMD_WATCHDOG = false\n' > Makefile.inc.local \
|
|
&& make -s base \
|
|
&& make -s install-base \
|
|
&& cd /opt/src \
|
|
&& rm -rf "/opt/src/libreswan-${SWAN_VER}" \
|
|
&& apt-get -yqq remove \
|
|
libnss3-dev libnspr4-dev pkg-config libpam0g-dev \
|
|
libcap-ng-dev libcap-ng-utils libselinux1-dev \
|
|
libcurl4-nss-dev flex bison gcc make \
|
|
perl-modules perl \
|
|
&& apt-get -yqq autoremove \
|
|
&& apt-get -y clean \
|
|
&& rm -rf /var/lib/apt/lists/*
|
|
|
|
COPY ./run.sh /opt/src/run.sh
|
|
RUN chmod 755 /opt/src/run.sh
|
|
|
|
EXPOSE 500/udp 4500/udp
|
|
|
|
VOLUME ["/lib/modules"]
|
|
|
|
CMD ["/opt/src/run.sh"]
|