all

docker/DockerfileNsjailSlim

@@ -0,0 +1,48 @@
+FROM debian:bookworm-slim AS nsjail
+
+WORKDIR /nsjail
+
+RUN apt-get -y update \
+    && apt-get install -y \
+    bison=2:3.8.* \
+    flex=2.6.* \
+    g++=4:12.2.* \
+    gcc=4:12.2.* \
+    git=1:2.39.* \
+    libprotobuf-dev=3.21.* \
+    libnl-route-3-dev=3.7.* \
+    make=4.3-4.1 \
+    pkg-config=1.8.* \
+    protobuf-compiler=3.21.*
+
+
+RUN git clone -b master --single-branch https://github.com/google/nsjail.git . && git checkout dccf911fd2659e7b08ce9507c25b2b38ec2c5800
+RUN make
+
+FROM alpine:3.14 AS oracledb-client
+
+ARG TARGETPLATFORM
+
+# Oracle DB Client for amd64
+COPY --from=ghcr.io/oracle/oraclelinux9-instantclient:23 /usr/lib/oracle/23/client64/lib /opt/oracle/23/amd64/lib
+
+# Oracle DB Client for arm64
+RUN mkdir -p /opt/oracle/23/arm64 \
+	&& cd /opt/oracle/23/arm64 \
+	&& wget https://download.oracle.com/otn_software/linux/instantclient/instantclient-basiclite-linux-arm64.zip \
+	&& unzip instantclient-basiclite-linux-arm64.zip && rm instantclient-basiclite-linux-arm64.zip && mv instantclient* ./lib
+
+RUN if [ "$TARGETPLATFORM" = "linux/arm64" ]; then \
+        mv /opt/oracle/23/arm64/lib /opt/oracle/23/lib; \
+    else \
+        mv /opt/oracle/23/amd64/lib /opt/oracle/23/lib; \
+    fi
+
+FROM ghcr.io/windmill-labs/windmill-ee:dev
+
+
+# iptables
+RUN apt-get install -y iptables
+
+COPY --from=nsjail /nsjail/nsjail /bin/nsjail
+

docker/DockerfileOnlyNsjail

@@ -0,0 +1,20 @@
+FROM debian:bookworm-slim AS nsjail
+
+WORKDIR /nsjail
+
+RUN apt-get -y update \
+    && apt-get install -y \
+    bison=2:3.8.* \
+    flex=2.6.* \
+    g++=4:12.2.* \
+    gcc=4:12.2.* \
+    git=1:2.39.* \
+    libprotobuf-dev=3.21.* \
+    libnl-route-3-dev=3.7.* \
+    make=4.3-4.1 \
+    pkg-config=1.8.* \
+    protobuf-compiler=3.21.*
+
+
+RUN git clone -b master --single-branch https://github.com/google/nsjail.git . && git checkout dccf911fd2659e7b08ce9507c25b2b38ec2c5800
+RUN make