cic-stack/apps/contract-migration/docker/Dockerfile

FROM python:3.8.6-slim-buster as compile-image

RUN apt-get update
RUN apt-get install -y --no-install-recommends git gcc g++ libpq-dev gawk jq telnet wget openssl iputils-ping gnupg socat bash procps make python2 cargo

RUN apt-get install -y software-properties-common
RUN add-apt-repository ppa:ethereum/ethereum
RUN apt-key adv --keyserver keyserver.ubuntu.com --recv-keys 1C52189C923F6CA9
RUN apt-get update
RUN apt-get install solc
RUN pip install --upgrade pip

WORKDIR /root
RUN mkdir -vp /usr/local/etc/cic

COPY contract-migration/nvm.sh .
ENV CONFINI_DIR /usr/local/etc/cic/
RUN mkdir -vp $CONFINI_DIR

ARG cic_config_commit=35c69ba75f00c8147150acf325565d5391cf25bf
ARG cic_config_url=https://gitlab.com/grassrootseconomics/cic-config.git/
RUN echo Install confini schema files && \
	git clone --depth 1 $cic_config_url cic-config && \
	cd cic-config && \
	git fetch --depth 1 origin $cic_config_commit && \
	git checkout $cic_config_commit && \	
	cp -v *.ini $CONFINI_DIR

ARG cic_contracts_commit=698ef3a30fde8d7f2c498f1208fb0ff45d665501
ARG cic_contracts_url=https://gitlab.com/grassrootseconomics/cic-contracts.git/
RUN echo Install ABI collection for solidity interfaces used across all components && \
	git clone --depth 1 $cic_contracts_url cic-contracts && \
	cd cic-contracts && \
	git fetch --depth 1 origin $cic_contracts_commit && \
	git checkout $cic_contracts_commit && \
	make install

# Install nvm with node and npm
# https://stackoverflow.com/questions/25899912/how-to-install-nvm-in-docker
ENV NVM_DIR /root/.nvm
ENV NODE_VERSION 15.3.0
ENV BANCOR_NODE_VERSION 10.16.0

RUN wget -qO- https://raw.githubusercontent.com/nvm-sh/nvm/v0.37.2/install.sh | bash \
	&& . $NVM_DIR/nvm.sh \
	&& nvm install $NODE_VERSION \
	&& nvm alias default $NODE_VERSION \
	&& nvm use $NODE_VERSION
# So many ridiculously stupid issues with node in docker that take oceans of absolutely wasted time to resolve
# owner of these files is "1001" by default - wtf
# && chown -R root:root "$NVM_DIR/versions/node/v$NODE_VERSION"

ENV NODE_PATH $NVM_DIR/versions/node//v$NODE_VERSION/lib/node_modules
ENV PATH      $NVM_DIR/versions/node//v$NODE_VERSION/bin:$PATH

# RUN pip install --user --extra-index-url $pip_extra_index_url cic-base[full_graph]==$cic_base_version

ARG pip_extra_index_url=https://pip.grassrootseconomics.net:8433
ARG cic_base_version=0.1.1a23
ARG cic_registry_version=0.5.3a24
RUN pip install --user --extra-index-url $pip_extra_index_url  cic-base[full_graph]==$cic_base_version
RUN pip install --user --extra-index-url $pip_extra_index_url  cic-registry==$cic_registry_version

# ARG cic_bancor_url=https://gitlab.com/grassrootseconomics/cic-bancor.git/
# ARG cic_bancor_contracts_url=https://github.com/bancorprotocol/contracts-solidity
# RUN echo Compile and install bancor protocol contracts && \
# 	git clone --depth 1 $cic_bancor_url cic-bancor && \
# 	cd cic-bancor

# RUN cd cic-bancor/python && \
# 	pip install --extra-index-url $pip_extra_index_url .

# This is a temporary solution for building the Bancor contracts using the bancor protocol repository truffle setup
# We should instead flatten the files ourselves and build them with solc in the first image layer in this file
# ARG cic_bancor_commit=a04c7ae6882ea515938d852cc861d59a35070094
# ARG cic_bancor_url=https://gitlab.com/grassrootseconomics/cic-bancor.git/
# ARG cic_bancor_contracts_url=https://github.com/bancorprotocol/contracts-solidity
# RUN echo Compile and install bancor protocol contracts && \
# 	git clone --depth 1 $cic_bancor_url cic-bancor && \
# 	cd cic-bancor && \
# 	git fetch --depth 1 origin $cic_bancor_commit && \
# 	git checkout $cic_bancor_commit && \
# 	# Apparently the git version here doesn't have set-url as a command. *sigh*
# 	#if [ ! -z $cic_bancor_contracts_url ]; then
# 	#	git submodule set-url bancor $cic_bancor_contracts_url
# 	#fi
# 	git submodule init && \
# 	git submodule update
# RUN cd root && \
# 	. $NVM_DIR/nvm.sh &&\
# 	nvm install $BANCOR_NODE_VERSION && \
# 	nvm use $BANCOR_NODE_VERSION && \
# 	cd - && \
# 	cd cic-bancor/bancor && \
# 	npm install --python=/usr/bin/python2 && \
# 	node_modules/truffle/build/cli.bundled.js compile && \
# 	mkdir -vp /usr/local/share/cic/bancor/solidity/build  && \
# 	cp -vR solidity/build/contracts /usr/local/share/cic/bancor/solidity/build/
# RUN cd cic-bancor/python && \
# 	pip install --extra-index-url $pip_extra_index_url .

FROM python:3.8.6-slim-buster as runtime-image

COPY --from=compile-image /usr/local/bin/ /usr/local/bin/
COPY --from=compile-image /usr/local/etc/cic/ /usr/local/etc/cic/


ENV HOME /home/grassroots
RUN useradd --create-home grassroots
WORKDIR $HOME
# COPY python dependencies to user dir
COPY --from=compile-image /root/.local .local
ENV PATH=$HOME/.local/bin:$PATH
# RUN chown grassroots:grassroots $HOME/.local/

COPY contract-migration/testdata/pgp testdata/pgp
COPY contract-migration/wait-for-it.sh .
COPY contract-migration/reset.sh reset.sh
COPY contract-migration/from_env.sh from_env.sh
COPY contract-migration/seed_cic_eth.sh seed_cic_eth.sh
COPY contract-migration/sarafu_declaration.json sarafu_declaration.json
COPY contract-migration/keystore keystore
COPY contract-migration/envlist .

# critically, includes the .local folder from compile-image
RUN chown -R grassroots:grassroots .

RUN mkdir -p /tmp/cic/config
RUN chown grassroots:grassroots /tmp/cic/config
# A shared output dir for environment configs
RUN chmod a+rwx /tmp/cic/config 

USER grassroots

ENTRYPOINT [ ]