Fixes <https://issues.guix.gnu.org/68053>. * gnu/packages/docker.scm (%docker-version): Update to 20.10.27. (docker-libnetwork): Update to 20.10-3.3797618. (docker)[native-inputs]: Replace go-1.19 with go-1.20. Change-Id: Ie4cc54f62c89f3a6c83969d1e7e425189c370482 Signed-off-by: Hilton Chain <hako@ultrarare.space>
		
			
				
	
	
		
			811 lines
		
	
	
	
		
			35 KiB
		
	
	
	
		
			Scheme
		
	
	
	
	
	
			
		
		
	
	
			811 lines
		
	
	
	
		
			35 KiB
		
	
	
	
		
			Scheme
		
	
	
	
	
	
| ;;; GNU Guix --- Functional package management for GNU
 | ||
| ;;; Copyright © 2016 David Thompson <davet@gnu.org>
 | ||
| ;;; Copyright © 2018, 2023 Efraim Flashner <efraim@flashner.co.il>
 | ||
| ;;; Copyright © 2019, 2020 Tobias Geerinckx-Rice <me@tobias.gr>
 | ||
| ;;; Copyright © 2019, 2020, 2021, 2023 Maxim Cournoyer <maxim.cournoyer@gmail.com>
 | ||
| ;;; Copyright © 2020 Michael Rohleder <mike@rohleder.de>
 | ||
| ;;; Copyright © 2020 Katherine Cox-Buday <cox.katherine.e@gmail.com>
 | ||
| ;;; Copyright © 2020 Jesse Dowell <jessedowell@gmail.com>
 | ||
| ;;; Copyright © 2021, 2022 Oleg Pykhalov <go.wigust@gmail.com>
 | ||
| ;;; Copyright © 2022 Pierre Langlois <pierre.langlois@gmx.com>
 | ||
| ;;;
 | ||
| ;;; This file is part of GNU Guix.
 | ||
| ;;;
 | ||
| ;;; GNU Guix is free software; you can redistribute it and/or modify it
 | ||
| ;;; under the terms of the GNU General Public License as published by
 | ||
| ;;; the Free Software Foundation; either version 3 of the License, or (at
 | ||
| ;;; your option) any later version.
 | ||
| ;;;
 | ||
| ;;; GNU Guix is distributed in the hope that it will be useful, but
 | ||
| ;;; WITHOUT ANY WARRANTY; without even the implied warranty of
 | ||
| ;;; MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
 | ||
| ;;; GNU General Public License for more details.
 | ||
| ;;;
 | ||
| ;;; You should have received a copy of the GNU General Public License
 | ||
| ;;; along with GNU Guix.  If not, see <http://www.gnu.org/licenses/>.
 | ||
| 
 | ||
| (define-module (gnu packages docker)
 | ||
|   #:use-module ((guix licenses) #:prefix license:)
 | ||
|   #:use-module (gnu packages)
 | ||
|   #:use-module (guix packages)
 | ||
|   #:use-module (guix download)
 | ||
|   #:use-module (guix gexp)
 | ||
|   #:use-module (guix git-download)
 | ||
|   #:use-module (guix build-system cmake)
 | ||
|   #:use-module (guix build-system gnu)
 | ||
|   #:use-module (guix build-system go)
 | ||
|   #:use-module (guix build-system python)
 | ||
|   #:use-module (guix utils)
 | ||
|   #:use-module (gnu packages autotools)
 | ||
|   #:use-module (gnu packages base)
 | ||
|   #:use-module (gnu packages check)
 | ||
|   #:use-module (gnu packages compression)
 | ||
|   #:use-module (gnu packages glib)
 | ||
|   #:use-module (gnu packages golang)
 | ||
|   #:use-module (gnu packages linux)
 | ||
|   #:use-module (gnu packages networking)
 | ||
|   #:use-module (gnu packages pkg-config)
 | ||
|   #:use-module (gnu packages python)
 | ||
|   #:use-module (gnu packages python-crypto)
 | ||
|   #:use-module (gnu packages python-web)
 | ||
|   #:use-module (gnu packages python-xyz)
 | ||
|   #:use-module (gnu packages version-control)
 | ||
|   #:use-module (gnu packages virtualization))
 | ||
| 
 | ||
| ;; Note - when changing Docker versions it is important to update the versions
 | ||
| ;; of several associated packages (docker-libnetwork and go-sctp).
 | ||
| (define %docker-version "20.10.27")
 | ||
| 
 | ||
| (define-public python-docker
 | ||
|   (package
 | ||
|     (name "python-docker")
 | ||
|     (version "5.0.3")
 | ||
|     (source
 | ||
|      (origin
 | ||
|        (method url-fetch)
 | ||
|        (uri (pypi-uri "docker" version))
 | ||
|        (sha256
 | ||
|         (base32
 | ||
|          "1yr7w8vmdis01myx26pqx7wcyz2cy1mfs421alppq3lpc9ms45nr"))))
 | ||
|     (build-system python-build-system)
 | ||
|     ;; TODO: Tests require a running Docker daemon.
 | ||
|     (arguments '(#:tests? #f))
 | ||
|     (inputs
 | ||
|      (list python-requests python-six python-urllib3))
 | ||
|     (propagated-inputs
 | ||
|      (list python-docker-pycreds python-paramiko ;adds SSH support
 | ||
|            python-websocket-client))
 | ||
|     (home-page "https://github.com/docker/docker-py/")
 | ||
|     (synopsis "Python client for Docker")
 | ||
|     (description "Docker-Py is a Python client for the Docker container
 | ||
| management tool.")
 | ||
|     (license license:asl2.0)))
 | ||
| 
 | ||
| (define-public python-dockerpty
 | ||
|   (package
 | ||
|     (name "python-dockerpty")
 | ||
|     (version "0.4.1")
 | ||
|     (source
 | ||
|      (origin
 | ||
|        (method url-fetch)
 | ||
|        (uri (pypi-uri "dockerpty" version))
 | ||
|        (sha256
 | ||
|         (base32
 | ||
|          "1kjn64wx23jmr8dcc6g7bwlmrhfmxr77gh6iphqsl39sayfxdab9"))))
 | ||
|     (build-system python-build-system)
 | ||
|     (native-inputs
 | ||
|      (list python-six))
 | ||
|     (home-page "https://github.com/d11wtq/dockerpty")
 | ||
|     (synopsis "Python library to use the pseudo-TTY of a Docker container")
 | ||
|     (description "Docker PTY provides the functionality needed to operate the
 | ||
| pseudo-terminal (PTY) allocated to a Docker container using the Python
 | ||
| client.")
 | ||
|     (license license:asl2.0)))
 | ||
| 
 | ||
| ;;; TODO: This package needs to be updated to its 2.x series, now authored in
 | ||
| ;;; Go.
 | ||
| (define-public docker-compose
 | ||
|   (package
 | ||
|     (name "docker-compose")
 | ||
|     (version "1.29.2")
 | ||
|     (source
 | ||
|      (origin
 | ||
|        (method url-fetch)
 | ||
|        (uri (pypi-uri "docker-compose" version))
 | ||
|        (sha256
 | ||
|         (base32
 | ||
|          "1dq9kfak61xx7chjrzmkvbw9mvj9008k7g8q7mwi4x133p9dk32c"))))
 | ||
|     (build-system python-build-system)
 | ||
|     ;; TODO: Tests require running Docker daemon.
 | ||
|     (arguments '(#:tests? #f))
 | ||
|     (inputs
 | ||
|      (list python-cached-property
 | ||
|            python-distro
 | ||
|            python-docker
 | ||
|            python-dockerpty
 | ||
|            python-docopt
 | ||
|            python-dotenv
 | ||
|            python-jsonschema-3
 | ||
|            python-pyyaml-5
 | ||
|            python-requests
 | ||
|            python-six
 | ||
|            python-texttable
 | ||
|            python-websocket-client-0.59))
 | ||
|     (home-page "https://www.docker.com/")
 | ||
|     (synopsis "Multi-container orchestration for Docker")
 | ||
|     (description "Docker Compose is a tool for defining and running
 | ||
| multi-container Docker applications.  A Compose file is used to configure an
 | ||
| application’s services.  Then, using a single command, the containers are
 | ||
| created and all the services are started as specified in the configuration.")
 | ||
|     (license license:asl2.0)))
 | ||
| 
 | ||
| (define-public python-docker-pycreds
 | ||
|   (package
 | ||
|     (name "python-docker-pycreds")
 | ||
|     (version "0.4.0")
 | ||
|     (source
 | ||
|       (origin
 | ||
|         (method url-fetch)
 | ||
|         (uri (pypi-uri "docker-pycreds" version))
 | ||
|         (sha256
 | ||
|          (base32
 | ||
|           "1m44smrggnqghxkqfl7vhapdw89m1p3vdr177r6cq17lr85jgqvc"))))
 | ||
|     (build-system python-build-system)
 | ||
|     (arguments
 | ||
|      `(#:phases
 | ||
|        (modify-phases %standard-phases
 | ||
|          (add-after 'unpack 'fix-versioning
 | ||
|            (lambda _
 | ||
|              (substitute* "test-requirements.txt"
 | ||
|                (("3.0.2") ,(package-version python-pytest))
 | ||
|                (("2.3.1") ,(package-version python-pytest-cov))
 | ||
|                (("2.4.1") ,(package-version python-flake8)))
 | ||
|              #t)))))
 | ||
|     (native-inputs
 | ||
|      (list python-flake8 python-pytest python-pytest-cov))
 | ||
|     (propagated-inputs
 | ||
|      (list python-six))
 | ||
|     (home-page "https://github.com/shin-/dockerpy-creds")
 | ||
|     (synopsis
 | ||
|      "Python bindings for the Docker credentials store API")
 | ||
|     (description
 | ||
|      "Docker-Pycreds contains the Python bindings for the docker credentials
 | ||
| store API.  It allows programmers to interact with a Docker registry using
 | ||
| Python without keeping their credentials in a Docker configuration file.")
 | ||
|     (license license:asl2.0)))
 | ||
| 
 | ||
| (define-public containerd
 | ||
|   (package
 | ||
|     (name "containerd")
 | ||
|     (version "1.6.22")
 | ||
|     (source
 | ||
|      (origin
 | ||
|        (method git-fetch)
 | ||
|        (uri (git-reference
 | ||
|              (url "https://github.com/containerd/containerd")
 | ||
|              (commit (string-append "v" version))))
 | ||
|        (file-name (git-file-name name version))
 | ||
|        (sha256
 | ||
|         (base32 "1m31y00sq2m76m1jiq4znws8gxbgkh5adklvqibxiz1b96vvwjk8"))
 | ||
|        (patches
 | ||
|         (search-patches "containerd-create-pid-file.patch"))))
 | ||
|     (build-system go-build-system)
 | ||
|     (arguments
 | ||
|      (let ((make-flags #~(list (string-append "VERSION=" #$version)
 | ||
|                                (string-append "DESTDIR=" #$output)
 | ||
|                                "PREFIX="
 | ||
|                                "REVISION=0")))
 | ||
|        (list
 | ||
|         #:import-path "github.com/containerd/containerd"
 | ||
|         #:phases
 | ||
|         #~(modify-phases %standard-phases
 | ||
|             (add-after 'unpack 'patch-paths
 | ||
|               (lambda* (#:key inputs import-path outputs #:allow-other-keys)
 | ||
|                 (with-directory-excursion (string-append "src/" import-path)
 | ||
|                   (substitute* "runtime/v1/linux/runtime.go"
 | ||
|                     (("defaultRuntime[ \t]*=.*")
 | ||
|                      (string-append "defaultRuntime = \""
 | ||
|                                     (search-input-file inputs "/sbin/runc")
 | ||
|                                     "\"\n"))
 | ||
|                     (("defaultShim[ \t]*=.*")
 | ||
|                      (string-append "defaultShim = \""
 | ||
|                                     (assoc-ref outputs "out")
 | ||
|                                     "/bin/containerd-shim\"\n")))
 | ||
|                   (substitute* "pkg/cri/config/config_unix.go"
 | ||
|                     (("DefaultRuntimeName: \"runc\"")
 | ||
|                      (string-append "DefaultRuntimeName: \""
 | ||
|                                     (search-input-file inputs "/sbin/runc")
 | ||
|                                     "\""))
 | ||
|                     ;; ContainerdConfig.Runtimes
 | ||
|                     (("\"runc\":")
 | ||
|                      (string-append "\""
 | ||
|                                     (search-input-file inputs "/sbin/runc")
 | ||
|                                     "\":")))
 | ||
|                   (substitute* "vendor/github.com/containerd/go-runc/runc.go"
 | ||
|                     (("DefaultCommand[ \t]*=.*")
 | ||
|                      (string-append "DefaultCommand = \""
 | ||
|                                     (search-input-file inputs "/sbin/runc")
 | ||
|                                     "\"\n")))
 | ||
|                   (substitute* "vendor/github.com/containerd/continuity/testutil\
 | ||
| /loopback/loopback_linux.go"
 | ||
|                     (("exec\\.Command\\(\"losetup\"")
 | ||
|                      (string-append "exec.Command(\""
 | ||
|                                     (search-input-file inputs "/sbin/losetup")
 | ||
|                                     "\"")))
 | ||
|                   (substitute* "archive/compression/compression.go"
 | ||
|                     (("exec\\.LookPath\\(\"unpigz\"\\)")
 | ||
|                      (string-append "\""
 | ||
|                                     (search-input-file inputs "/bin/unpigz")
 | ||
|                                     "\", error(nil)"))))))
 | ||
|             (replace 'build
 | ||
|               (lambda* (#:key import-path #:allow-other-keys)
 | ||
|                 (with-directory-excursion (string-append "src/" import-path)
 | ||
|                   (apply invoke "make" #$make-flags))))
 | ||
|             (replace 'install
 | ||
|               (lambda* (#:key import-path #:allow-other-keys)
 | ||
|                 (with-directory-excursion (string-append "src/" import-path)
 | ||
|                   (apply invoke "make" "install" #$make-flags))))))))
 | ||
|     (inputs
 | ||
|      (list btrfs-progs libseccomp pigz runc util-linux))
 | ||
|     (native-inputs
 | ||
|      (list go pkg-config))
 | ||
|     (synopsis "Docker container runtime")
 | ||
|     (description "This package provides the container daemon for Docker.
 | ||
| It includes image transfer and storage, container execution and supervision,
 | ||
| network attachments.")
 | ||
|     (home-page "https://containerd.io/")
 | ||
|     (license license:asl2.0)))
 | ||
| 
 | ||
| ;;; Private package that shouldn't be used directly; its purposes is to be
 | ||
| ;;; used as a template for the various packages it contains.  It doesn't build
 | ||
| ;;; anyway, as it needs many dependencies that aren't being satisfied.
 | ||
| (define docker-libnetwork
 | ||
|   ;; There are no recent release for libnetwork, so choose the last commit of
 | ||
|   ;; the branch that Docker uses, as can be seen in the 'vendor.conf' Docker
 | ||
|   ;; source file.  NOTE - It is important that this version is kept in sync
 | ||
|   ;; with the version of Docker being used.
 | ||
|   (let ((commit "3797618f9a38372e8107d8c06f6ae199e1133ae8")
 | ||
|         (version (version-major+minor %docker-version))
 | ||
|         (revision "3"))
 | ||
|     (package
 | ||
|       (name "docker-libnetwork")
 | ||
|       (version (git-version version revision commit))
 | ||
|       (source (origin
 | ||
|                 (method git-fetch)
 | ||
|                 (uri (git-reference
 | ||
|                       ;; Redirected from github.com/docker/libnetwork.
 | ||
|                       (url "https://github.com/moby/libnetwork")
 | ||
|                       (commit commit)))
 | ||
|                 (file-name (git-file-name name version))
 | ||
|                 (sha256
 | ||
|                  (base32
 | ||
|                   "1km3p6ya9az0ax2zww8wb5vbifr1gj5n9l82i273m9f3z9f2mq2p"))
 | ||
|                 ;; Delete bundled ("vendored") free software source code.
 | ||
|                 (modules '((guix build utils)))
 | ||
|                 (snippet '(delete-file-recursively "vendor"))))
 | ||
|       (build-system go-build-system)
 | ||
|       (arguments
 | ||
|        `(#:import-path "github.com/moby/libnetwork/"))
 | ||
|       (home-page "https://github.com/moby/libnetwork/")
 | ||
|       (synopsis "Networking for containers")
 | ||
|       (description "Libnetwork provides a native Go implementation for
 | ||
| connecting containers.  The goal of @code{libnetwork} is to deliver a robust
 | ||
| container network model that provides a consistent programming interface and
 | ||
| the required network abstractions for applications.")
 | ||
|       (license license:asl2.0))))
 | ||
| 
 | ||
| (define-public docker-libnetwork-cmd-proxy
 | ||
|   (package
 | ||
|     (inherit docker-libnetwork)
 | ||
|     (name "docker-libnetwork-cmd-proxy")
 | ||
|     (arguments
 | ||
|      ;; The tests are unsupported on all architectures except x86_64-linux.
 | ||
|      `(#:tests? ,(and (not (%current-target-system))
 | ||
|                       (target-x86-64?))
 | ||
|        #:import-path "github.com/docker/libnetwork/cmd/proxy"
 | ||
|        #:unpack-path "github.com/docker/libnetwork"
 | ||
|        #:install-source? #f))
 | ||
|     (native-inputs
 | ||
|      `(("go-sctp" ,go-sctp)
 | ||
|        ;; For tests.
 | ||
|        ("logrus" ,go-github-com-sirupsen-logrus)
 | ||
|        ("go-netlink" ,go-netlink)
 | ||
|        ("go-netns" ,go-netns)
 | ||
|        ("go-golang-org-x-crypto"
 | ||
|         ,go-golang-org-x-crypto)
 | ||
|        ("go-golang-org-x-sys" ,go-golang-org-x-sys)))
 | ||
|     (synopsis "Docker user-space proxy")
 | ||
|     (description "A proxy running in the user space.  It is used by the
 | ||
| built-in registry server of Docker.")
 | ||
|     (license license:asl2.0)))
 | ||
| 
 | ||
| ;; TODO: Patch out modprobes for ip_vs, nf_conntrack,
 | ||
| ;; brige, nf_conntrack_netlink, aufs.
 | ||
| (define-public docker
 | ||
|   (package
 | ||
|     (name "docker")
 | ||
|     (version %docker-version)
 | ||
|     (source
 | ||
|      (origin
 | ||
|        (method git-fetch)
 | ||
|        (uri (git-reference
 | ||
|              (url "https://github.com/moby/moby")
 | ||
|              (commit (string-append "v" version))))
 | ||
|        (file-name (git-file-name name version))
 | ||
|        (sha256
 | ||
|         (base32 "017frilx35w3m4dz3n6m2f293q4fq4jrk6hl8f7wg5xs3r8hswvq"))))
 | ||
|     (build-system gnu-build-system)
 | ||
|     (arguments
 | ||
|      (list
 | ||
|       #:modules
 | ||
|       '((guix build gnu-build-system)
 | ||
|         ((guix build go-build-system) #:prefix go:)
 | ||
|         (guix build union)
 | ||
|         (guix build utils))
 | ||
|       #:imported-modules
 | ||
|       `(,@%gnu-build-system-modules
 | ||
|         (guix build union)
 | ||
|         (guix build go-build-system))
 | ||
|       #:phases
 | ||
|       #~(modify-phases %standard-phases
 | ||
|           (add-after 'unpack 'patch-paths
 | ||
|             (lambda* (#:key inputs #:allow-other-keys)
 | ||
|               (substitute* "builder/builder-next/executor_unix.go"
 | ||
|                 (("CommandCandidates:.*runc.*")
 | ||
|                  (string-append "CommandCandidates: []string{\""
 | ||
|                                 (search-input-file inputs "/sbin/runc")
 | ||
|                                 "\"},\n")))
 | ||
|               (substitute* "vendor/github.com/containerd/go-runc/runc.go"
 | ||
|                 (("DefaultCommand = .*")
 | ||
|                  (string-append "DefaultCommand = \""
 | ||
|                                 (search-input-file inputs "/sbin/runc")
 | ||
|                                 "\"\n")))
 | ||
|               (substitute* "vendor/github.com/containerd/containerd/\
 | ||
| runtime/v1/linux/runtime.go"
 | ||
|                 (("defaultRuntime[ \t]*=.*")
 | ||
|                  (string-append "defaultRuntime = \""
 | ||
|                                 (search-input-file inputs "/sbin/runc")
 | ||
|                                 "\"\n"))
 | ||
|                 (("defaultShim[ \t]*=.*")
 | ||
|                  (string-append "defaultShim = \""
 | ||
|                                 (search-input-file inputs "/bin/containerd-shim")
 | ||
|                                 "\"\n")))
 | ||
|               (substitute* "daemon/daemon_unix.go"
 | ||
|                 (("DefaultShimBinary = .*")
 | ||
|                  (string-append "DefaultShimBinary = \""
 | ||
|                                 (search-input-file inputs "/bin/containerd-shim")
 | ||
|                                 "\"\n"))
 | ||
|                 (("DefaultRuntimeBinary = .*")
 | ||
|                  (string-append "DefaultRuntimeBinary = \""
 | ||
|                                 (search-input-file inputs "/sbin/runc")
 | ||
|                                 "\"\n")))
 | ||
|               (substitute* "daemon/runtime_unix.go"
 | ||
|                 (("defaultRuntimeName = .*")
 | ||
|                  (string-append "defaultRuntimeName = \""
 | ||
|                                 (search-input-file inputs "/sbin/runc")
 | ||
|                                 "\"\n")))
 | ||
|               (substitute* "daemon/config/config.go"
 | ||
|                 (("StockRuntimeName = .*")
 | ||
|                  (string-append "StockRuntimeName = \""
 | ||
|                                 (search-input-file inputs "/sbin/runc")
 | ||
|                                 "\"\n"))
 | ||
|                 (("DefaultInitBinary = .*")
 | ||
|                  (string-append "DefaultInitBinary = \""
 | ||
|                                 (search-input-file inputs "/bin/tini-static")
 | ||
|                                 "\"\n")))
 | ||
|               (substitute* "daemon/config/config_common_unix_test.go"
 | ||
|                 (("expectedInitPath: \"docker-init\"")
 | ||
|                  (string-append "expectedInitPath: \""
 | ||
|                                 (search-input-file inputs "/bin/tini-static")
 | ||
|                                 "\"")))
 | ||
|               (substitute* "vendor/github.com/moby/buildkit/executor/\
 | ||
| runcexecutor/executor.go"
 | ||
|                 (("var defaultCommandCandidates = .*")
 | ||
|                  (string-append "var defaultCommandCandidates = []string{\""
 | ||
|                                 (search-input-file inputs "/sbin/runc") "\"}")))
 | ||
|               (substitute* "vendor/github.com/docker/libnetwork/portmapper/proxy.go"
 | ||
|                 (("var userlandProxyCommandName = .*")
 | ||
|                  (string-append "var userlandProxyCommandName = \""
 | ||
|                                 (search-input-file inputs "/bin/proxy")
 | ||
|                                 "\"\n")))
 | ||
|               (substitute* "pkg/archive/archive.go"
 | ||
|                 (("string\\{\"xz")
 | ||
|                  (string-append "string{\"" (search-input-file inputs "/bin/xz"))))
 | ||
| 
 | ||
|               (let ((source-files (filter (lambda (name)
 | ||
|                                             (not (string-contains name "test")))
 | ||
|                                           (find-files "." "\\.go$"))))
 | ||
|                 (let-syntax ((substitute-LookPath*
 | ||
|                               (syntax-rules ()
 | ||
|                                 ((_ (source-text path) ...)
 | ||
|                                  (substitute* source-files
 | ||
|                                    (((string-append "\\<exec\\.LookPath\\(\""
 | ||
|                                                     source-text
 | ||
|                                                     "\")"))
 | ||
|                                     (string-append "\""
 | ||
|                                                    (search-input-file inputs path)
 | ||
|                                                    "\", error(nil)")) ...))))
 | ||
|                              (substitute-Command*
 | ||
|                               (syntax-rules ()
 | ||
|                                 ((_ (source-text path) ...)
 | ||
|                                  (substitute* source-files
 | ||
|                                    (((string-append "\\<(re)?exec\\.Command\\(\""
 | ||
|                                                     source-text
 | ||
|                                                     "\"") _ re?)
 | ||
|                                     (string-append (if re? re? "")
 | ||
|                                                    "exec.Command(\""
 | ||
|                                                    (search-input-file inputs path)
 | ||
|                                                    "\"")) ...)))))
 | ||
|                   (substitute-LookPath*
 | ||
|                    ("containerd" "/bin/containerd")
 | ||
|                    ("ps" "/bin/ps")
 | ||
|                    ("mkfs.xfs" "/sbin/mkfs.xfs")
 | ||
|                    ("lvmdiskscan" "/sbin/lvmdiskscan")
 | ||
|                    ("pvdisplay" "/sbin/pvdisplay")
 | ||
|                    ("blkid" "/sbin/blkid")
 | ||
|                    ("unpigz" "/bin/unpigz")
 | ||
|                    ("iptables" "/sbin/iptables")
 | ||
|                    ("ip6tables" "/sbin/ip6tables")
 | ||
|                    ("iptables-legacy" "/sbin/iptables")
 | ||
|                    ("ip" "/sbin/ip"))
 | ||
| 
 | ||
|                   (substitute-Command*
 | ||
|                    ("modprobe" "/bin/modprobe")
 | ||
|                    ("pvcreate" "/sbin/pvcreate")
 | ||
|                    ("vgcreate" "/sbin/vgcreate")
 | ||
|                    ("lvcreate" "/sbin/lvcreate")
 | ||
|                    ("lvconvert" "/sbin/lvconvert")
 | ||
|                    ("lvchange" "/sbin/lvchange")
 | ||
|                    ("mkfs.xfs" "/sbin/mkfs.xfs")
 | ||
|                    ("xfs_growfs" "/sbin/xfs_growfs")
 | ||
|                    ("mkfs.ext4" "/sbin/mkfs.ext4")
 | ||
|                    ("tune2fs" "/sbin/tune2fs")
 | ||
|                    ("blkid" "/sbin/blkid")
 | ||
|                    ("resize2fs" "/sbin/resize2fs")
 | ||
|                    ("ps" "/bin/ps")
 | ||
|                    ("losetup" "/sbin/losetup")
 | ||
|                    ("uname" "/bin/uname")
 | ||
|                    ("dbus-launch" "/bin/dbus-launch")
 | ||
|                    ("git" "/bin/git")))
 | ||
|                 ;; docker-mountfrom ??
 | ||
|                 ;; docker
 | ||
|                 ;; docker-untar ??
 | ||
|                 ;; docker-applyLayer ??
 | ||
|                 ;; /usr/bin/uname
 | ||
|                 ;; grep
 | ||
|                 ;; apparmor_parser
 | ||
| 
 | ||
|                 ;; Make compilation fail when, in future versions, Docker
 | ||
|                 ;; invokes other programs we don't know about and thus don't
 | ||
|                 ;; substitute.
 | ||
|                 (substitute* source-files
 | ||
|                   ;; Search for Java in PATH.
 | ||
|                   (("\\<exec\\.Command\\(\"java\"")
 | ||
|                    "xxec.Command(\"java\"")
 | ||
|                   ;; Search for AUFS in PATH (mainline Linux doesn't support it).
 | ||
|                   (("\\<exec\\.Command\\(\"auplink\"")
 | ||
|                    "xxec.Command(\"auplink\"")
 | ||
|                   ;; Fail on other unsubstituted commands.
 | ||
|                   (("\\<exec\\.Command\\(\"([a-zA-Z0-9][a-zA-Z0-9_-]*)\""
 | ||
|                     _ executable)
 | ||
|                    (string-append "exec.Guix_doesnt_want_Command(\""
 | ||
|                                   executable "\""))
 | ||
|                   (("\\<xxec\\.Command")
 | ||
|                    "exec.Command")
 | ||
|                   ;; Search for ZFS in PATH.
 | ||
|                   (("\\<LookPath\\(\"zfs\"\\)") "LooxPath(\"zfs\")")
 | ||
|                  ;; Do not fail when buildkit-qemu-<target> isn't found.
 | ||
|                  ;; FIXME: We might need to package buildkit and docker's
 | ||
|                  ;; buildx plugin, to support qemu-based docker containers.
 | ||
|                   (("\\<LookPath\\(\"buildkit-qemu-\"") "LooxPath(\"buildkit-qemu-\"")
 | ||
|                   ;; Fail on other unsubstituted LookPaths.
 | ||
|                   (("\\<LookPath\\(\"") "Guix_doesnt_want_LookPath\\(\"")
 | ||
|                   (("\\<LooxPath") "LookPath")))))
 | ||
|           (add-after 'patch-paths 'delete-failing-tests
 | ||
|             (lambda _
 | ||
|               ;; Needs internet access.
 | ||
|               (delete-file "builder/remotecontext/git/gitutils_test.go")
 | ||
|               ;; Permission denied.
 | ||
|               (delete-file "daemon/graphdriver/devmapper/devmapper_test.go")
 | ||
|               ;; Operation not permitted (idtools.MkdirAllAndChown).
 | ||
|               (delete-file "daemon/graphdriver/vfs/vfs_test.go")
 | ||
|               ;; Timeouts after 5 min.
 | ||
|               (delete-file "plugin/manager_linux_test.go")
 | ||
|               ;; Operation not permitted.
 | ||
|               (delete-file "daemon/graphdriver/aufs/aufs_test.go")
 | ||
|               (delete-file "daemon/graphdriver/btrfs/btrfs_test.go")
 | ||
|               (delete-file "daemon/graphdriver/overlay/overlay_test.go")
 | ||
|               (delete-file "daemon/graphdriver/overlay2/overlay_test.go")
 | ||
|               (delete-file "pkg/chrootarchive/archive_unix_test.go")
 | ||
|               (delete-file "daemon/container_unix_test.go")
 | ||
|               ;; This file uses cgroups and /proc.
 | ||
|               (delete-file "pkg/sysinfo/sysinfo_linux_test.go")
 | ||
|               ;; This file uses cgroups.
 | ||
|               (delete-file "runconfig/config_test.go")
 | ||
|               ;; This file uses /var.
 | ||
|               (delete-file "daemon/oci_linux_test.go")
 | ||
|               ;; Signal tests fail in bizarre ways
 | ||
|               (delete-file "pkg/signal/signal_linux_test.go")))
 | ||
|           (replace 'configure
 | ||
|             (lambda _
 | ||
|               (setenv "DOCKER_BUILDTAGS" "seccomp")
 | ||
|               (setenv "DOCKER_GITCOMMIT" (string-append "v" #$%docker-version))
 | ||
|               (setenv "VERSION" (string-append #$%docker-version "-ce"))
 | ||
|               ;; Automatically use bundled dependencies.
 | ||
|               ;; TODO: Unbundle - see file "vendor.conf".
 | ||
|               (setenv "AUTO_GOPATH" "1")
 | ||
|               ;; Respectively, strip the symbol table and debug
 | ||
|               ;; information, and the DWARF symbol table.
 | ||
|               (setenv "LDFLAGS" "-s -w")
 | ||
|               ;; Make build faster
 | ||
|               (setenv "GOCACHE" "/tmp")))
 | ||
|           (add-before 'build 'setup-go-environment
 | ||
|             (assoc-ref go:%standard-phases 'setup-go-environment))
 | ||
|           (replace 'build
 | ||
|             (lambda _
 | ||
|               ;; Our LD doesn't like the statically linked relocatable things
 | ||
|               ;; that go produces, so install the dynamic version of
 | ||
|               ;; dockerd instead.
 | ||
|               (invoke "hack/make.sh" "dynbinary")))
 | ||
|           (replace 'check
 | ||
|             (lambda* (#:key tests? #:allow-other-keys)
 | ||
|               (when tests?
 | ||
|                 ;; The build process generated a file because the environment
 | ||
|                 ;; variable "AUTO_GOPATH" was set.  Use it.
 | ||
|                 (setenv "GOPATH" (string-append (getcwd) "/.gopath"))
 | ||
|                 ;; ".gopath/src/github.com/docker/docker" is a link to the current
 | ||
|                 ;; directory and chdir would canonicalize to that.
 | ||
|                 ;; But go needs to have the uncanonicalized directory name, so
 | ||
|                 ;; store that.
 | ||
|                 (setenv "PWD" (string-append
 | ||
|                                (getcwd) "/.gopath/src/github.com/docker/docker"))
 | ||
|                 (with-directory-excursion ".gopath/src/github.com/docker/docker"
 | ||
|                   (invoke "hack/test/unit"))
 | ||
|                 (setenv "PWD" #f))))
 | ||
|           (replace 'install
 | ||
|             (lambda* (#:key outputs #:allow-other-keys)
 | ||
|               (let* ((out (assoc-ref outputs "out"))
 | ||
|                      (out-bin (string-append out "/bin")))
 | ||
|                 (install-file "bundles/dynbinary-daemon/dockerd" out-bin)
 | ||
|                 (install-file (string-append "bundles/dynbinary-daemon/dockerd-"
 | ||
|                                              (getenv "VERSION"))
 | ||
|                               out-bin))))
 | ||
|           (add-after 'install 'remove-go-references
 | ||
|             (assoc-ref go:%standard-phases 'remove-go-references)))))
 | ||
|     (inputs
 | ||
|      (list btrfs-progs
 | ||
|            containerd       ; for containerd-shim
 | ||
|            coreutils
 | ||
|            dbus
 | ||
|            docker-libnetwork-cmd-proxy
 | ||
|            e2fsprogs
 | ||
|            git
 | ||
|            iproute
 | ||
|            iptables
 | ||
|            kmod
 | ||
|            libseccomp
 | ||
|            pigz
 | ||
|            procps
 | ||
|            runc
 | ||
|            util-linux
 | ||
|            lvm2
 | ||
|            tini
 | ||
|            xfsprogs-5.9
 | ||
|            xz))
 | ||
|     (native-inputs
 | ||
|      (list eudev ; TODO: Should be propagated by lvm2 (.pc -> .pc)
 | ||
|            go-1.20 gotestsum pkg-config))
 | ||
|     (synopsis "Container component library and daemon")
 | ||
|     (description "This package provides a framework to assemble specialized
 | ||
| container systems.  It includes components for orchestration, image
 | ||
| management, secret management, configuration management, networking,
 | ||
| provisioning etc.")
 | ||
|     (home-page "https://mobyproject.org/")
 | ||
|     (license license:asl2.0)))
 | ||
| 
 | ||
| (define-public docker-cli
 | ||
|   (package
 | ||
|     (name "docker-cli")
 | ||
|     (version %docker-version)
 | ||
|     (source
 | ||
|      (origin
 | ||
|        (method git-fetch)
 | ||
|        (uri (git-reference
 | ||
|              (url "https://github.com/docker/cli")
 | ||
|              (commit (string-append "v" version))))
 | ||
|        (file-name (git-file-name name version))
 | ||
|        (sha256
 | ||
|         (base32 "0szwaxiasy77mm90wj2qg747zb9lyiqndg5halg7qbi41ng6ry0h"))))
 | ||
|     (build-system go-build-system)
 | ||
|     (arguments
 | ||
|      `(#:import-path "github.com/docker/cli"
 | ||
|        ;; TODO: Tests require a running Docker daemon.
 | ||
|        #:tests? #f
 | ||
|        #:phases
 | ||
|        (modify-phases %standard-phases
 | ||
|          (add-before 'build 'setup-environment-2
 | ||
|            (lambda _
 | ||
|              ;; Respectively, strip the symbol table and debug
 | ||
|              ;; information, and the DWARF symbol table.
 | ||
|              (setenv "LDFLAGS" "-s -w")
 | ||
| 
 | ||
|              ;; Make sure "docker -v" prints a usable version string.
 | ||
|              (setenv "VERSION" ,%docker-version)
 | ||
| 
 | ||
|              ;; Make build reproducible.
 | ||
|              (setenv "BUILDTIME" "1970-01-01 00:00:01.000000000+00:00")
 | ||
|              (symlink "src/github.com/docker/cli/scripts" "./scripts")
 | ||
|              (symlink "src/github.com/docker/cli/docker.Makefile" "./docker.Makefile")))
 | ||
|          (replace 'build
 | ||
|            (lambda _
 | ||
|              (setenv "GO_LINKMODE" "dynamic")
 | ||
|              (invoke "./scripts/build/binary")))
 | ||
|          (replace 'check
 | ||
|            (lambda* (#:key make-flags tests? #:allow-other-keys)
 | ||
|              (setenv "PATH" (string-append (getcwd) "/build:" (getenv "PATH")))
 | ||
|              (when tests?
 | ||
|                ;; Use the newly-built docker client for the tests.
 | ||
|                (with-directory-excursion "src/github.com/docker/cli"
 | ||
|                  ;; TODO: Run test-e2e as well?
 | ||
|                  (apply invoke "make" "-f" "docker.Makefile" "test-unit"
 | ||
|                         (or make-flags '()))))))
 | ||
|          (replace 'install
 | ||
|            (lambda* (#:key outputs #:allow-other-keys)
 | ||
|              (let* ((out (assoc-ref outputs "out"))
 | ||
|                     (out-bin (string-append out "/bin"))
 | ||
|                     (etc (string-append out "/etc")))
 | ||
|                (with-directory-excursion "src/github.com/docker/cli/contrib/completion"
 | ||
|                  (install-file "bash/docker"
 | ||
|                                (string-append etc "/bash_completion.d"))
 | ||
|                  (install-file "fish/docker.fish"
 | ||
|                                (string-append etc "/fish/completions"))
 | ||
|                  (install-file "zsh/_docker"
 | ||
|                                (string-append etc "/zsh/site-functions")))
 | ||
|                (install-file "build/docker" out-bin)))))))
 | ||
|     (native-inputs
 | ||
|      (list go libltdl pkg-config))
 | ||
|     (synopsis "Command line interface to Docker")
 | ||
|     (description "This package provides a command line interface to Docker.")
 | ||
|     (home-page "https://www.docker.com/")
 | ||
|     (license license:asl2.0)))
 | ||
| 
 | ||
| (define-public cqfd
 | ||
|   (package
 | ||
|     (name "cqfd")
 | ||
|     (version "5.4.0")
 | ||
|     (source (origin
 | ||
|               (method git-fetch)
 | ||
|               (uri (git-reference
 | ||
|                     (url "https://github.com/savoirfairelinux/cqfd")
 | ||
|                     (commit (string-append "v" version))))
 | ||
|               (file-name (git-file-name name version))
 | ||
|               (sha256
 | ||
|                (base32
 | ||
|                 "1kilrh4ahza19lka9218s2wkfcbk5r2cq9adczhlnlfggdrqnglg"))))
 | ||
|     (build-system gnu-build-system)
 | ||
|     (arguments
 | ||
|      ;; The test suite requires a docker daemon and connectivity.
 | ||
|      (list
 | ||
|       #:tests? #f
 | ||
|       #:make-flags #~(list (string-append "COMPLETIONSDIR="
 | ||
|                                           #$output "/etc/bash_completion.d")
 | ||
|                            (string-append "PREFIX=" #$output))
 | ||
|       #:phases #~(modify-phases %standard-phases
 | ||
|                    (delete 'configure)
 | ||
|                    (delete 'build))))
 | ||
|     (home-page "https://github.com/savoirfairelinux/cqfd")
 | ||
|     (synopsis "Convenience wrapper for Docker")
 | ||
|     (description "cqfd is a Bash script that provides a quick and convenient
 | ||
| way to run commands in the current directory, but within a Docker container
 | ||
| defined in a per-project configuration file.")
 | ||
|     (license license:gpl3+)))
 | ||
| 
 | ||
| (define-public tini
 | ||
|   (package
 | ||
|     (name "tini")
 | ||
|     (version "0.19.0")
 | ||
|     (source (origin
 | ||
|               (method git-fetch)
 | ||
|               (uri (git-reference
 | ||
|                     (url "https://github.com/krallin/tini")
 | ||
|                     (commit (string-append "v" version))))
 | ||
|               (file-name (git-file-name name version))
 | ||
|               (sha256
 | ||
|                (base32
 | ||
|                 "1hnnvjydg7gi5gx6nibjjdnfipblh84qcpajc08nvr44rkzswck4"))))
 | ||
|     (build-system cmake-build-system)
 | ||
|     (arguments
 | ||
|      `(#:tests? #f                    ;tests require a Docker daemon
 | ||
|        ;; 'tini-static' is a static binary, which leads CMake to fail with
 | ||
|        ;; ‘file RPATH_CHANGE could not write new RPATH: ...’.  Clear
 | ||
|        ;; CMAKE_INSTALL_RPATH to avoid that problem.
 | ||
|        #:configure-flags '("-DCMAKE_INSTALL_RPATH=")))
 | ||
|     (home-page "https://github.com/krallin/tini")
 | ||
|     (synopsis "Tiny but valid init for containers")
 | ||
|     (description "Tini is an init program specifically designed for use with
 | ||
| containers.  It manages a single child process and ensures that any zombie
 | ||
| processes produced from it are reaped and that signals are properly forwarded.
 | ||
| Tini is integrated with Docker.")
 | ||
|     (license license:expat)))
 | ||
| 
 | ||
| (define-public docker-registry
 | ||
|   (package
 | ||
|     (name "docker-registry")
 | ||
|     (version "2.8.1")
 | ||
|     (source (origin
 | ||
|               (method git-fetch)
 | ||
|               (uri (git-reference
 | ||
|                     (url "https://github.com/docker/distribution")
 | ||
|                     (commit (string-append "v" version))))
 | ||
|               (file-name (git-file-name name version))
 | ||
|               (sha256
 | ||
|                (base32
 | ||
|                 "1w8zr97p2c62gm1lrdwqa704ivjsy25ylznrddbbpv63idwdbi9k"))))
 | ||
|     (build-system go-build-system)
 | ||
|     (arguments
 | ||
|      (list
 | ||
|       #:import-path "github.com/docker/distribution"
 | ||
|       #:phases
 | ||
|       #~(modify-phases %standard-phases
 | ||
|           (add-after 'unpack 'chdir-to-src
 | ||
|             (lambda _ (chdir "src/github.com/docker/distribution")))
 | ||
|           (add-after 'chdir-to-src 'fix-versioning
 | ||
|             (lambda _
 | ||
|               ;; The Makefile use git to compute the version and the
 | ||
|               ;; revision. This requires the .git directory that we don't have
 | ||
|               ;; anymore in the unpacked source.
 | ||
|               (substitute* "Makefile"
 | ||
|                 (("^VERSION=\\$\\(.*\\)")
 | ||
|                  (string-append "VERSION=v" #$version))
 | ||
|                 ;; The revision originally used the git hash with .m appended
 | ||
|                 ;; if there was any local modifications.
 | ||
|                 (("^REVISION=\\$\\(.*\\)") "REVISION=0"))))
 | ||
|           (replace 'build
 | ||
|             (lambda _
 | ||
|               (invoke "make" "binaries")))
 | ||
|           (replace 'install
 | ||
|             (lambda _
 | ||
|               (let ((bin (string-append #$output "/bin")))
 | ||
|                 (mkdir-p bin)
 | ||
|                 (for-each
 | ||
|                  (lambda (file)
 | ||
|                    (install-file (string-append "bin/" file) bin))
 | ||
|                  '("digest"
 | ||
|                    "registry"
 | ||
|                    "registry-api-descriptor-template")))
 | ||
|               (let ((doc (string-append
 | ||
|                           #$output "/share/doc/" #$name "-" #$version)))
 | ||
|                 (mkdir-p doc)
 | ||
|                 (for-each
 | ||
|                  (lambda (file)
 | ||
|                    (install-file file doc))
 | ||
|                  '("BUILDING.md"
 | ||
|                    "CONTRIBUTING.md"
 | ||
|                    "LICENSE"
 | ||
|                    "MAINTAINERS"
 | ||
|                    "README.md"
 | ||
|                    "ROADMAP.md"))
 | ||
|                 (copy-recursively "docs/" (string-append doc "/docs")))
 | ||
|               (let ((examples
 | ||
|                      (string-append
 | ||
|                       #$output "/share/doc/" #$name "-" #$version
 | ||
|                       "/registry-example-configs")))
 | ||
|                 (mkdir-p examples)
 | ||
|                 (for-each
 | ||
|                  (lambda (file)
 | ||
|                    (install-file (string-append "cmd/registry/" file) examples))
 | ||
|                  '("config-cache.yml"
 | ||
|                    "config-example.yml"
 | ||
|                    "config-dev.yml")))))
 | ||
|           (delete 'install-license-files))))
 | ||
|     (home-page "https://github.com/docker/distribution")
 | ||
|     (synopsis "Docker registry server and associated tools")
 | ||
|     (description "The Docker registry server enable you to host your own
 | ||
| docker registry. With it, there is also two other utilities:
 | ||
| @itemize
 | ||
| @item The digest utility is a tool that generates checksums compatibles with
 | ||
| various docker manifest files.
 | ||
| @item The registry-api-descriptor-template is a tool for generating API
 | ||
| specifications from the docs/spec/api.md.tmpl file.
 | ||
| @end itemize")
 | ||
|     (license license:asl2.0)))
 |