Dockerfile

FROM alpine:3.16
ENV OC_VERSION=1.2.1
ENV USER=test
ENV PASS=test
# Install dependencies
RUN buildDeps=" \
		curl \
		g++ \
		gawk \
		geoip \
		gnutls-dev \
		gnutls \
		gnutls-utils \
		gpgme \
		krb5-dev \
		libc-dev \
		libev-dev \
		libev \
		libnl3-dev \
		libproxy \
		
		lua-resty-openidc \
		curl-dev \
		libcurl \
		
		libseccomp-dev \
		libseccomp \
		libtasn1 \
		linux-headers \
		linux-pam-dev \
		linux-pam \
		lz4-dev \
		lz4-libs \
		lz4 \
		make \
		oath-toolkit-liboath \
		oath-toolkit-libpskc \
		oath-toolkit-dev \
		p11-kit \
		pcsc-lite-libs \
		protobuf-c \
		readline-dev \
		readline \
		scanelf \
		stoken-dev \
		tar \
		tpm2-tss-esys \
		xz \
		tar \
		apache2-dev \
        	openssl-dev \
		openssl \
		autoconf \
		libtool \
		automake \
		abi-compliance-checker \
		iptables \
		libintl \
		tcpdump \
		libnl3 \
	"; \
	set -x \
	&& apk add --update --virtual .build-deps $buildDeps \
	&& curl -SL "ftp://ftp.infradead.org/pub/ocserv/ocserv-$OC_VERSION.tar.xz" -o ocserv.tar.xz \
	&& mkdir -p /usr/src/ocserv \
	&& tar -xf ocserv.tar.xz -C /usr/src/ocserv --strip-components=1 \
	&& rm ocserv.tar.xz* \
    	&& apk add libcrypto3 --repository=http://dl-cdn.alpinelinux.org/alpine/edge/main \
    	&& apk add cjose cjose-dev --repository=http://dl-cdn.alpinelinux.org/alpine/edge/testing \

	&& RADCLI_VERSION=`curl "https://api.github.com/repos/radcli/radcli/releases/latest" | sed -n 's/^.*"tag_name": "\(.*\)",$/\1/p'` \
  	&& curl -SL "https://github.com/radcli/radcli/releases/download/$RADCLI_VERSION/radcli-$RADCLI_VERSION.tar.gz" -o radcli.tar.gz \
	&& mkdir -p /usr/src/radcli \
	&& tar -xf radcli.tar.gz -C /usr/src/radcli --strip-components=1 \
	&& rm radcli.tar.gz* \
	&& cd /usr/src/radcli \
	&& ./configure --sysconfdir=/etc/ \
	&& make \
	&& make install \
	&& cd / \
	&& rm -fr /usr/src/radcli 



RUN curl -L https://s3.amazonaws.com/archie-public/mod-authn-otp/mod_authn_otp-1.1.10.tar.gz -o authn-otp.tar.gz \
    	&& tar -xvzf authn-otp.tar.gz \
    	&& ls \
    	&& cd mod_authn_otp-1.1.10 \
    	&& ls \
    	&& ./configure \
    	&& make \
    	&& cp genotpurl /usr/local/bin/ \
    	&& chmod +x /usr/local/bin/genotpurl

RUN cd /usr/src/ocserv \
	&& ./configure --with-liboath --enable-oidc-auth \
	&& make \
	&& make install \
	&& cd / \
	&& rm -rf /usr/src/ocserv \
	&& runDeps="$( \
			scanelf --needed --nobanner /usr/local/sbin/ocserv \
				| awk '{ gsub(/,/, "\nso:", $2); print "so:" $2 }' \
				| xargs -r apk info --installed \
				| sort -u \
			)" \
	&& apk add --update --virtual .run-deps $runDeps gnutls-utils iptables libqrencode tzdata\
	&& apk del .build-deps \
	&& rm -rf /var/cache/apk/* 
	
RUN apk add --update bash rsync libnl3 ipcalc sipcalc ca-certificates rsyslog logrotate runit libseccomp\
	&& rm -rf /var/cache/apk/* 

RUN update-ca-certificates

ADD ocserv /etc/default/ocserv
ADD ocserv /etc/ocserv
RUN chmod a+x /etc/ocserv/*.sh /etc/default/ocserv/*.sh

WORKDIR /etc/ocserv

COPY docker-entrypoint.sh /entrypoint.sh
COPY generate_otp.sh /generate_otp.sh
COPY gen_cert.sh /gen_cert.sh
RUN chmod +x /entrypoint.sh /generate_otp.sh /gen_cert.sh
ENTRYPOINT ["/entrypoint.sh"]
EXPOSE 4443
EXPOSE 4443/udp
CMD ["ocserv", "-c", "/etc/ocserv/ocserv.conf", "-f"]