mirror of
https://github.com/lwthiker/curl-impersonate.git
synced 2026-10-10 19:36:32 +00:00
lwthiker
22508c6863
Rename the binary files of curl-impersonate so that the Firefox and Chrome versions can co-exist on the same system. The Firefox version is now named 'curl-impersonate-ff' and 'libcurl-impersonate-ff' and the Chrome version is named 'curl-impersonate-chrome' and 'libcurl-impersonate-chrome'. The wrapper scripts look for these names as well. Symbolic names with the old names are still created inside the Docker images to keep compatibility as much as possible.
249 lines
8.5 KiB
Docker
249 lines
8.5 KiB
Docker
#
|
|
# NOTE: THIS DOCKERFILE IS GENERATED FROM "Dockerfile.template" VIA
|
|
# "generate-dockerfiles.sh".
|
|
#
|
|
# PLEASE DO NOT EDIT IT DIRECTLY.
|
|
#
|
|
|
|
{{#debian}}
|
|
# Python is needed for building libnss.
|
|
# Use it as a common base.
|
|
FROM python:3.10.1-slim-buster
|
|
{{/debian}}
|
|
{{#alpine}}
|
|
FROM alpine:3.15.0 as builder
|
|
{{/alpine}}
|
|
|
|
WORKDIR /build
|
|
|
|
# Common dependencies
|
|
{{#debian}}
|
|
RUN apt-get update && \
|
|
apt-get install -y git ninja-build cmake curl zlib1g-dev
|
|
{{/debian}}
|
|
{{#alpine}}
|
|
RUN apk add git build-base make cmake ninja curl zlib-dev patch linux-headers python3 python3-dev
|
|
{{/alpine}}
|
|
|
|
# The following are needed because we are going to change some autoconf scripts,
|
|
# both for libnghttp2 and curl.
|
|
{{#debian}}
|
|
RUN apt-get install -y autoconf automake autotools-dev pkg-config libtool
|
|
{{/debian}}
|
|
{{#alpine}}
|
|
RUN apk add autoconf automake pkgconfig libtool
|
|
{{/alpine}}
|
|
|
|
{{#firefox}}
|
|
# Dependencies for building libnss
|
|
# See https://firefox-source-docs.mozilla.org/security/nss/build.html#mozilla-projects-nss-building
|
|
{{#debian}}
|
|
RUN apt-get install -y mercurial python3-pip
|
|
{{/debian}}
|
|
{{#alpine}}
|
|
RUN apk add mercurial py3-pip clang-analyzer
|
|
{{/alpine}}
|
|
|
|
{{#debian}}
|
|
# curl tries to load the CA certificates for libnss.
|
|
# It loads them from /usr/lib/x86_64-linux-gnu/nss/libnssckbi.so,
|
|
# which is supplied by libnss3 on Debian/Ubuntu
|
|
RUN apt-get install -y libnss3
|
|
{{/debian}}
|
|
{{/firefox}}
|
|
{{#chrome}}
|
|
# Dependencies for downloading and building BoringSSL
|
|
{{#debian}}
|
|
RUN apt-get install -y g++ golang-go unzip
|
|
{{/debian}}
|
|
{{#alpine}}
|
|
RUN apk add g++ go unzip
|
|
{{/alpine}}
|
|
{{/chrome}}
|
|
|
|
# Download and compile libbrotli
|
|
ARG BROTLI_VERSION=1.0.9
|
|
RUN curl -L https://github.com/google/brotli/archive/refs/tags/v${BROTLI_VERSION}.tar.gz -o brotli-${BROTLI_VERSION}.tar.gz && \
|
|
tar xf brotli-${BROTLI_VERSION}.tar.gz
|
|
RUN cd brotli-${BROTLI_VERSION} && \
|
|
mkdir build && cd build && \
|
|
cmake -DCMAKE_BUILD_TYPE=Release -DCMAKE_INSTALL_PREFIX=./installed .. && \
|
|
cmake --build . --config Release --target install
|
|
|
|
{{#firefox}}
|
|
# Needed for building libnss
|
|
RUN pip install gyp-next
|
|
|
|
ARG NSS_VERSION=nss-3.75
|
|
# This tarball is already bundled with nspr, a dependency of libnss.
|
|
ARG NSS_URL=https://ftp.mozilla.org/pub/security/nss/releases/NSS_3_75_RTM/src/nss-3.75-with-nspr-4.32.tar.gz
|
|
|
|
# Download and compile nss.
|
|
RUN curl -o ${NSS_VERSION}.tar.gz ${NSS_URL}
|
|
RUN tar xf ${NSS_VERSION}.tar.gz && \
|
|
cd ${NSS_VERSION}/nss && \
|
|
{{#alpine}}
|
|
# Hack to make nss compile on alpine with python3
|
|
ln -sf python3 /usr/bin/python && \
|
|
{{/alpine}}
|
|
./build.sh -o --disable-tests --static
|
|
{{/firefox}}
|
|
{{#chrome}}
|
|
# BoringSSL doesn't have versions. Choose a commit that is used in a stable
|
|
# Chromium version.
|
|
ARG BORING_SSL_COMMIT=3a667d10e94186fd503966f5638e134fe9fb4080
|
|
RUN curl -L https://github.com/google/boringssl/archive/${BORING_SSL_COMMIT}.zip -o boringssl.zip && \
|
|
unzip boringssl && \
|
|
mv boringssl-${BORING_SSL_COMMIT} boringssl
|
|
|
|
# Compile BoringSSL.
|
|
# See https://boringssl.googlesource.com/boringssl/+/HEAD/BUILDING.md
|
|
COPY patches/boringssl-*.patch boringssl/
|
|
RUN cd boringssl && \
|
|
for p in $(ls boringssl-*.patch); do patch -p1 < $p; done && \
|
|
mkdir build && cd build && \
|
|
cmake -DCMAKE_BUILD_TYPE=Release -DCMAKE_POSITION_INDEPENDENT_CODE=on -GNinja .. && \
|
|
ninja
|
|
|
|
# Fix the directory structure so that curl can compile against it.
|
|
# See https://everything.curl.dev/source/build/tls/boringssl
|
|
RUN mkdir boringssl/build/lib && \
|
|
ln -s ../crypto/libcrypto.a boringssl/build/lib/libcrypto.a && \
|
|
ln -s ../ssl/libssl.a boringssl/build/lib/libssl.a && \
|
|
cp -R boringssl/include boringssl/build
|
|
{{/chrome}}
|
|
|
|
ARG NGHTTP2_VERSION=nghttp2-1.46.0
|
|
ARG NGHTTP2_URL=https://github.com/nghttp2/nghttp2/releases/download/v1.46.0/nghttp2-1.46.0.tar.bz2
|
|
|
|
# Download nghttp2 for HTTP/2.0 support.
|
|
RUN curl -o ${NGHTTP2_VERSION}.tar.bz2 -L ${NGHTTP2_URL}
|
|
RUN tar xf ${NGHTTP2_VERSION}.tar.bz2
|
|
|
|
# Patch nghttp2 pkg config file to support static builds.
|
|
COPY patches/libnghttp2-*.patch ${NGHTTP2_VERSION}/
|
|
RUN cd ${NGHTTP2_VERSION} && \
|
|
for p in $(ls libnghttp2-*.patch); do patch -p1 < $p; done && \
|
|
autoreconf -i && automake && autoconf
|
|
|
|
# Compile nghttp2
|
|
RUN cd ${NGHTTP2_VERSION} && \
|
|
./configure --with-pic && \
|
|
make && make install
|
|
|
|
# Download curl.
|
|
ARG CURL_VERSION=curl-7.81.0
|
|
RUN curl -o ${CURL_VERSION}.tar.xz https://curl.se/download/${CURL_VERSION}.tar.xz
|
|
RUN tar xf ${CURL_VERSION}.tar.xz
|
|
|
|
# Patch curl and re-generate the configure script
|
|
COPY patches/curl-*.patch ${CURL_VERSION}/
|
|
RUN cd ${CURL_VERSION} && \
|
|
for p in $(ls curl-*.patch); do patch -p1 < $p; done && \
|
|
autoreconf -fi
|
|
|
|
# Compile curl with nghttp2, libbrotli and nss (firefox) or boringssl (chrome).
|
|
# Enable keylogfile for debugging of TLS traffic.
|
|
RUN cd ${CURL_VERSION} && \
|
|
./configure --enable-static \
|
|
--disable-shared \
|
|
--with-nghttp2=/usr/local \
|
|
--with-brotli=/build/brotli-${BROTLI_VERSION}/build/installed \
|
|
{{#firefox}}
|
|
--with-nss=/build/${NSS_VERSION}/dist/Release \
|
|
CFLAGS="-I/build/${NSS_VERSION}/dist/public/nss -I/build/${NSS_VERSION}/dist/Release/include/nspr" \
|
|
{{/firefox}}
|
|
{{#chrome}}
|
|
--with-openssl=/build/boringssl/build \
|
|
LIBS="-pthread" \
|
|
CFLAGS="-I/build/boringssl/build" \
|
|
{{/chrome}}
|
|
USE_CURL_SSLKEYLOGFILE=true && \
|
|
make
|
|
|
|
RUN mkdir out && \
|
|
{{#firefox}}
|
|
cp ${CURL_VERSION}/src/curl out/curl-impersonate-ff && \
|
|
ln -s curl-impersonate-ff out/curl-impersonate && \
|
|
{{/firefox}}
|
|
{{#chrome}}
|
|
cp ${CURL_VERSION}/src/curl out/curl-impersonate-chrome && \
|
|
ln -s curl-impersonate-chrome out/curl-impersonate && \
|
|
{{/chrome}}
|
|
strip out/curl-impersonate
|
|
|
|
# Re-compile libcurl dynamically
|
|
RUN cd ${CURL_VERSION} && \
|
|
./configure --with-nghttp2=/usr/local \
|
|
--with-brotli=/build/brotli-${BROTLI_VERSION}/build/installed \
|
|
{{#firefox}}
|
|
--with-nss=/build/${NSS_VERSION}/dist/Release \
|
|
CFLAGS="-I/build/${NSS_VERSION}/dist/public/nss -I/build/${NSS_VERSION}/dist/Release/include/nspr" \
|
|
{{/firefox}}
|
|
{{#chrome}}
|
|
--with-openssl=/build/boringssl/build \
|
|
LIBS="-pthread" \
|
|
CFLAGS="-I/build/boringssl/build" \
|
|
{{/chrome}}
|
|
USE_CURL_SSLKEYLOGFILE=true && \
|
|
make clean && make
|
|
|
|
# Rename to 'libcurl-impersonate' to avoid confusion, and recreate the
|
|
# symbolic links.
|
|
RUN ver=$(readlink -f curl-7.81.0/lib/.libs/libcurl.so | sed 's/.*so\.//') && \
|
|
major=$(echo -n $ver | cut -d'.' -f1) && \
|
|
{{#firefox}}
|
|
cp "${CURL_VERSION}/lib/.libs/libcurl.so.$ver" "out/libcurl-impersonate-ff.so.$ver" && \
|
|
ln -s "libcurl-impersonate-ff.so.$ver" "out/libcurl-impersonate-ff.so.$major" && \
|
|
ln -s "libcurl-impersonate-ff.so.$ver" "out/libcurl-impersonate-ff.so" && \
|
|
ln -s "libcurl-impersonate-ff.so.$ver" "out/libcurl-impersonate.so.$ver" && \
|
|
{{/firefox}}
|
|
{{#chrome}}
|
|
cp "${CURL_VERSION}/lib/.libs/libcurl.so.$ver" "out/libcurl-impersonate-chrome.so.$ver" && \
|
|
ln -s "libcurl-impersonate-chrome.so.$ver" "out/libcurl-impersonate-chrome.so.$major" && \
|
|
ln -s "libcurl-impersonate-chrome.so.$ver" "out/libcurl-impersonate-chrome.so" && \
|
|
ln -s "libcurl-impersonate-chrome.so.$ver" "out/libcurl-impersonate.so.$ver" && \
|
|
{{/chrome}}
|
|
ln -s "libcurl-impersonate.so.$ver" "out/libcurl-impersonate.so" && \
|
|
strip "out/libcurl-impersonate.so.$ver"
|
|
|
|
# Wrapper scripts
|
|
{{#firefox}}
|
|
COPY curl_ff* out/
|
|
{{/firefox}}
|
|
{{#chrome}}
|
|
COPY curl_chrome* curl_edge* curl_safari* out/
|
|
{{/chrome}}
|
|
{{#alpine}}
|
|
# Replace /bin/bash with /bin/ash
|
|
RUN sed -i 's@/bin/bash@/bin/ash@' out/curl_*
|
|
{{/alpine}}
|
|
RUN chmod +x out/curl_*
|
|
{{#alpine}}
|
|
|
|
# When using alpine, create a final, minimal image with the compiled binaries
|
|
# only.
|
|
FROM alpine:3.15.0
|
|
{{#firefox}}
|
|
# curl tries to load the CA certificates for libnss.
|
|
# It loads them from /usr/lib/libnssckbi.so,
|
|
# which is supplied by 'nss' on alpine.
|
|
RUN apk add --no-cache nss
|
|
{{/firefox}}
|
|
|
|
# Copy curl-impersonate from the builder image
|
|
{{#firefox}}
|
|
COPY --from=builder /build/out/curl-impersonate-ff /usr/local/bin/
|
|
RUN ln -s curl-impersonate-ff /usr/local/bin/curl-impersonate
|
|
{{/firefox}}
|
|
{{#chrome}}
|
|
COPY --from=builder /build/out/curl-impersonate-chrome /usr/local/bin/
|
|
RUN ln -s curl-impersonate-chrome /usr/local/bin/curl-impersonate
|
|
{{/chrome}}
|
|
# Wrapper scripts
|
|
COPY --from=builder /build/out/curl_* /usr/local/bin/
|
|
|
|
# Copy libcurl-impersonate from the builder image
|
|
COPY --from=builder /build/out/libcurl-impersonate.so /usr/local/lib/
|
|
{{/alpine}}
|