annotate deploy/linux/docker/Dockerfile_v3.0.2_ubuntu1604 @ 2265:d33dff02b39b sandbox-notarize

Work on sandboxing (possibly) and using the hardened runtime for notarization. Supply appropriate bundle ID for helpers as well as main application, and request inherited sandbox entitlements. Currently works with sandboxing (apparently) but not yet with the hardened runtime, where we can't load plugins signed by third parties even with the com.apple.security.cs.disable-library-validation entitlement because their team IDs don't match the host. Possibly that exception is supposed to be requested some other way?
author Chris Cannam
date Thu, 25 Apr 2019 16:46:02 +0100
parents 38c40fe5135b
children
rev   line source
Chris@1669 1 FROM ubuntu:16.04
Chris@1669 2 MAINTAINER Chris Cannam <cannam@all-day-breakfast.com>
Chris@1669 3 RUN apt-get update && \
Chris@1669 4 apt-get install -y \
Chris@1669 5 build-essential \
Chris@1669 6 libbz2-dev \
Chris@1669 7 libfftw3-dev \
Chris@1669 8 libfishsound1-dev \
Chris@1669 9 libid3tag0-dev \
Chris@1669 10 liblo-dev \
Chris@1669 11 liblrdf0-dev \
Chris@1669 12 libmad0-dev \
Chris@1669 13 liboggz2-dev \
Chris@1669 14 libpulse-dev \
Chris@1669 15 libsamplerate-dev \
Chris@1669 16 libsndfile-dev \
Chris@1669 17 libsord-dev \
Chris@1669 18 libxml2-utils \
Chris@1669 19 portaudio19-dev \
Chris@1669 20 qt5-default libqt5svg5-dev \
Chris@1669 21 raptor-utils \
Chris@1669 22 librubberband-dev \
Chris@1669 23 git \
Chris@1669 24 mercurial \
Chris@1669 25 curl wget \
Chris@1669 26 autoconf automake libtool lintian
Chris@1669 27 RUN apt-get clean && rm -rf /var/lib/apt/lists/*
Chris@1669 28 RUN locale-gen en_US.UTF-8
Chris@1669 29 ENV LANG en_US.UTF-8
Chris@1669 30 ENV LANGUAGE en_US:en
Chris@1669 31 ENV LC_ALL en_US.UTF-8
Chris@1669 32 RUN git clone https://github.com/sandstorm-io/capnproto
Chris@1669 33 WORKDIR capnproto/c++
Chris@1669 34 RUN ./setup-autotools.sh && autoreconf -i
Chris@1669 35 RUN ./configure --enable-static --disable-shared
Chris@1669 36 RUN make && make install
Chris@1669 37 WORKDIR ../..
Chris@1669 38 RUN hg clone -rsv_v3.0.2 https://code.soundsoftware.ac.uk/hg/sonic-visualiser
Chris@1669 39 WORKDIR sonic-visualiser
Chris@1669 40 RUN ./configure
Chris@1669 41 RUN make -j3
Chris@1669 42 RUN deploy/linux/deploy-deb.sh 3.0.2 amd64
Chris@1669 43 RUN tar cvf output.tar *.deb && cp output.tar ..