Skip to content

Instantly share code, notes, and snippets.

@bongole

bongole/Dockerfile

Created July 13, 2020 06:57
Show Gist options
  • Save bongole/a2f59c884e24d4d379ee0bdac893fb98 to your computer and use it in GitHub Desktop.
Save bongole/a2f59c884e24d4d379ee0bdac893fb98 to your computer and use it in GitHub Desktop.
Download ZIP
static ffmpeg
Raw
Dockerfile
FROM alpine:3.12.0 AS builder
# bump: ffmpeg /FFMPEG_VERSION=([\d.]+)/ https://github.com/FFmpeg/FFmpeg.git|^4
ARG FFMPEG_VERSION=4.3
ARG FFMPEG_URL="https://ffmpeg.org/releases/ffmpeg-$FFMPEG_VERSION.tar.bz2"
ARG FFMPEG_SHA256=a7e87112fc49ad5b59e26726e3a7cae0ffae511cba5376c579ba3cb04483d6e2
# bump: mp3lame /MP3LAME_VERSION=([\d.]+)/ svn:http://svn.code.sf.net/p/lame/svn|/^RELEASE__(.*)$/|/_/./|*
ARG MP3LAME_VERSION=3.100
ARG MP3LAME_URL="https://sourceforge.net/projects/lame/files/lame/$MP3LAME_VERSION/lame-$MP3LAME_VERSION.tar.gz/download"
ARG MP3LAME_SHA256=ddfe36cab873794038ae2c1210557ad34857a4b6bdc515785d1da9e175b1da1e
# bump: libfdk-aac /FDK_AAC_VERSION=([\d.]+)/ https://github.com/mstorsjo/fdk-aac.git|*
ARG FDK_AAC_VERSION=2.0.1
ARG FDK_AAC_URL="https://github.com/mstorsjo/fdk-aac/archive/v$FDK_AAC_VERSION.tar.gz"
ARG FDK_AAC_SHA256=a4142815d8d52d0e798212a5adea54ecf42bcd4eec8092b37a8cb615ace91dc6
# bump: libogg /OGG_VERSION=([\d.]+)/ https://github.com/xiph/ogg.git|*
ARG OGG_VERSION=1.3.4
ARG OGG_URL="https://downloads.xiph.org/releases/ogg/libogg-$OGG_VERSION.tar.gz"
ARG OGG_SHA256=fe5670640bd49e828d64d2879c31cb4dde9758681bb664f9bdbf159a01b0c76e
# bump: libvorbis /VORBIS_VERSION=([\d.]+)/ https://github.com/xiph/vorbis.git|*
ARG VORBIS_VERSION=1.3.6
ARG VORBIS_URL="https://downloads.xiph.org/releases/vorbis/libvorbis-$VORBIS_VERSION.tar.gz"
ARG VORBIS_SHA256=6ed40e0241089a42c48604dc00e362beee00036af2d8b3f46338031c9e0351cb
# bump: opus /OPUS_VERSION=([\d.]+)/ https://github.com/xiph/opus.git|^1
ARG OPUS_VERSION=1.3.1
ARG OPUS_URL="https://archive.mozilla.org/pub/opus/opus-$OPUS_VERSION.tar.gz"
ARG OPUS_SHA256=65b58e1e25b2a114157014736a3d9dfeaad8d41be1c8179866f144a2fb44ff9d
# bump: theora /THEORA_VERSION=([\d.]+)/ https://github.com/xiph/theora.git|*
ARG THEORA_VERSION=1.1.1
ARG THEORA_URL="https://downloads.xiph.org/releases/theora/libtheora-$THEORA_VERSION.tar.bz2"
ARG THEORA_SHA256=b6ae1ee2fa3d42ac489287d3ec34c5885730b1296f0801ae577a35193d3affbc
# bump: libvpx /VPX_VERSION=([\d.]+)/ https://github.com/webmproject/libvpx.git|*
ARG VPX_VERSION=1.8.2
ARG VPX_URL="https://github.com/webmproject/libvpx/archive/v$VPX_VERSION.tar.gz"
ARG VPX_SHA256=8735d9fcd1a781ae6917f28f239a8aa358ce4864ba113ea18af4bb2dc8b474ac
# x264 only have a stable branch no tags and we checkout commit so no hash is needed
# bump: x264 /X264_VERSION=([[:xdigit:]]+)/ gitrefs:https://code.videolan.org/videolan/x264.git|re:#^refs/heads/master$#|@
ARG X264_URL="https://code.videolan.org/videolan/x264.git"
ARG X264_VERSION=4c9b076be684832b9141f5b6c03aaf302adca0e4
# bump: x265 /X265_VERSION=([\d.]+)/ fetch:https://bitbucket.org/multicoreware/x265/raw/Release_3.1/.hgtags|/(?m:^.* (.*)$)/$1/|^3
ARG X265_VERSION=3.1.2
ARG X265_URL="https://bitbucket.org/multicoreware/x265/downloads/x265_$X265_VERSION.tar.gz"
ARG X265_SHA256=6f785f1c9a42e00a56402da88463bb861c49d9af108be53eb3ef10295f2a59aa
# bump: libwebp /WEBP_VERSION=([\d.]+)/ https://github.com/webmproject/libwebp.git|*
ARG WEBP_VERSION=1.1.0
ARG WEBP_URL="https://github.com/webmproject/libwebp/archive/v$WEBP_VERSION.tar.gz"
ARG WEBP_SHA256=424faab60a14cb92c2a062733b6977b4cc1e875a6398887c5911b3a1a6c56c51
# bump: wavpack /WAVPACK_VERSION=([\d.]+)/ https://github.com/dbry/WavPack.git|*
ARG WAVPACK_VERSION=5.3.0
ARG WAVPACK_URL="https://github.com/dbry/WavPack/archive/$WAVPACK_VERSION.tar.gz"
ARG WAVPACK_SHA256=361ca0f4970c1e86b47fb8c3796693048306a9c0ae4c96191d7619aaa8b26828
# bump: speex /SPEEX_VERSION=([\d.]+)/ https://github.com/xiph/speex.git|*
ARG SPEEX_VERSION=1.2.0
ARG SPEEX_URL="https://github.com/xiph/speex/archive/Speex-$SPEEX_VERSION.tar.gz"
ARG SPEEX_SHA256=4781a30d3a501abc59a4266f9bbf8b1da66fd509bef014697dc3f61e406b990c
# bump: aom /AOM_VERSION=([\d.]+)/ git:https://aomedia.googlesource.com/aom|*
# Remember to update commit hash
ARG AOM_VERSION=2.0.0
ARG AOM_URL="https://aomedia.googlesource.com/aom"
ARG AOM_COMMIT=bb35ba9148543f22ba7d8642e4fbd29ae301f5dc
# bump: vid.stab /VIDSTAB_VERSION=([\d.]+)/ https://github.com/georgmartius/vid.stab.git|*
ARG VIDSTAB_VERSION=1.1.0
ARG VIDSTAB_URL="https://github.com/georgmartius/vid.stab/archive/v$VIDSTAB_VERSION.tar.gz"
ARG VIDSTAB_SHA256=14d2a053e56edad4f397be0cb3ef8eb1ec3150404ce99a426c4eb641861dc0bb
# bump: kvazaar /KVAZAAR_VERSION=([\d.]+)/ https://github.com/ultravideo/kvazaar.git|^1
ARG KVAZAAR_VERSION=1.3.0
ARG KVAZAAR_URL="https://github.com/ultravideo/kvazaar/archive/v$KVAZAAR_VERSION.tar.gz"
ARG KVAZAAR_SHA256=f694fe71cc6e3e6f583a9faf380825ea93b2635c4db8d1d3121b9ebcf736ac1c
# bump: libass /ASS_VERSION=([\d.]+)/ https://github.com/libass/libass.git|*
ARG ASS_VERSION=0.14.0
ARG ASS_URL="https://github.com/libass/libass/releases/download/$ASS_VERSION/libass-$ASS_VERSION.tar.gz"
ARG ASS_SHA256=8d5a5c920b90b70a108007ffcd2289ac652c0e03fc88e6eecefa37df0f2e7fdf
# bump: zimg /ZIMG_VERSION=([\d.]+)/ https://github.com/sekrit-twc/zimg.git|*
ARG ZIMG_VERSION=2.9.3
ARG ZIMG_URL="https://github.com/sekrit-twc/zimg/archive/release-$ZIMG_VERSION.tar.gz"
ARG ZIMG_SHA256=a15c0483fbe945ffe695a1a989bc43b3381c8bf33e2d1760464ec21d32cdf30b
# bump: openjpeg /OPENJPEG_VERSION=([\d.]+)/ https://github.com/uclouvain/openjpeg.git|*
ARG OPENJPEG_VERSION=2.3.1
ARG OPENJPEG_URL="https://github.com/uclouvain/openjpeg/archive/v$OPENJPEG_VERSION.tar.gz"
ARG OPENJPEG_SHA256=63f5a4713ecafc86de51bfad89cc07bb788e9bba24ebbf0c4ca637621aadb6a9
# bump: libdav1d /LIBDAV1D_VERSION=([\d.]+)/ https://code.videolan.org/videolan/dav1d.git|^0
ARG LIBDAV1D_VERSION=0.7.1
ARG LIBDAV1D_URL="https://code.videolan.org/videolan/dav1d/-/archive/$LIBDAV1D_VERSION/dav1d-$LIBDAV1D_VERSION.tar.gz"
ARG LIBDAV1D_SHA256=c389c0262f081eb8a8bb59a3e5d73a21da801c0a7a6357c6d8db9ebb4b0b6835
# bump: libxvid /LIBXVID_VERSION=([\d.]+)/ svn:http://anonymous:@svn.xvid.org|/^release-(.*)$/|/_/./|^1
ARG LIBXVID_VERSION=1.3.7
ARG LIBXVID_URL="https://downloads.xvid.com/downloads/xvidcore-$LIBXVID_VERSION.tar.gz"
ARG LIBXVID_SHA256=abbdcbd39555691dd1c9b4d08f0a031376a3b211652c0d8b3b8aa9be1303ce2d
ARG LIBZMQ_VERSION=4.3.2
ARG LIBZMQ_URL="https://github.com/zeromq/libzmq/releases/download/v$LIBZMQ_VERSION/zeromq-$LIBZMQ_VERSION.tar.gz"
ARG LIBZMQ_SHA256=ebd7b5c830d6428956b67a0454a7f8cbed1de74b3b01e5c33c5378e22740f763
# -O3 makes sure we compile with optimization. setting CFLAGS/CXXFLAGS seems to override
# default automake cflags.
# -static-libgcc is needed to make gcc not include gcc_s as "as-needed" shared library which
# cmake will include as a implicit library.
# other options to get hardened build (same as ffmpeg hardened)
ARG CFLAGS="-O3 -static-libgcc -fno-strict-overflow -fstack-protector-all -fPIE"
ARG CXXFLAGS="-O3 -static-libgcc -fno-strict-overflow -fstack-protector-all -fPIE"
ARG LDFLAGS="-Wl,-z,relro,-z,now"
RUN apk add --no-cache \
coreutils \
openssl \
openssl-dev \
openssl-libs-static \
bash \
tar \
xz \
build-base \
autoconf \
automake \
libtool \
diffutils \
cmake \
meson \
ninja \
git \
yasm \
nasm \
texinfo \
jq \
zlib \
zlib-dev \
zlib-static \
libbz2 \
bzip2-dev \
bzip2-static \
libxml2 \
libxml2-dev \
expat \
expat-dev \
expat-static \
fontconfig \
fontconfig-dev \
fontconfig-static \
freetype \
freetype-dev \
freetype-static \
graphite2-static \
glib-static \
libpng-static \
harfbuzz \
harfbuzz-dev \
harfbuzz-static \
fribidi \
fribidi-dev \
fribidi-static \
brotli \
brotli-dev \
brotli-static \
soxr \
soxr-dev \
soxr-static
# workaround for https://github.com/google/brotli/issues/795
# pkgconfig --static can't have different name than .so
RUN \
ln -s /usr/lib/libbrotlicommon-static.a /usr/lib/libbrotlicommon.a && \
ln -s /usr/lib/libbrotlidec-static.a /usr/lib/libbrotlidec.a
RUN \
OPENSSL_VERSION=$(pkg-config --modversion openssl) \
LIBXML2_VERSION=$(pkg-config --modversion libxml-2.0) \
EXPAT_VERSION=$(pkg-config --modversion expat) \
FREETYPE_VERSION=$(pkg-config --modversion freetype2) \
FONTCONFIG_VERSION=$(pkg-config --modversion fontconfig) \
FRIBIDI_VERSION=$(pkg-config --modversion fribidi) \
SOXR_VERSION=$(pkg-config --modversion soxr) \
jq -n \
'{ \
ffmpeg: env.FFMPEG_VERSION, \
openssl: env.OPENSSL_VERSION, \
libxml2: env.LIBXML2_VERSION, \
expat: env.EXPAT_VERSION, \
libmp3lame: env.MP3LAME_VERSION, \
"libfdk-aac": env.FDK_AAC_VERSION, \
libogg: env.OGG_VERSION, \
libvorbis: env.VORBIS_VERSION, \
libopus: env.OPUS_VERSION, \
libtheora: env.THEORA_VERSION, \
libvpx: env.VPX_VERSION, \
libx264: env.X264_VERSION, \
libx265: env.X265_VERSION, \
libwebp: env.WEBP_VERSION, \
libwavpack: env.WAVPACK_VERSION, \
libspeex: env.SPEEX_VERSION, \
libaom: env.AOM_VERSION, \
libvidstab: env.VIDSTAB_VERSION, \
libkvazaar: env.KVAZAAR_VERSION, \
libfreetype: env.FREETYPE_VERSION, \
fontconfig: env.FONTCONFIG_VERSION, \
libfribidi: env.FRIBIDI_VERSION, \
libass: env.ASS_VERSION, \
libzimg: env.ZIMG_VERSION, \
libsoxr: env.SOXR_VERSION, \
libopenjpeg: env.OPENJPEG_VERSION, \
libdav1d: env.LIBDAV1D_VERSION, \
libxvid: env.LIBXVID_VERSION, \
}' > /versions.json
RUN \
wget -O lame.tar.gz "$MP3LAME_URL" && \
echo "$MP3LAME_SHA256 lame.tar.gz" | sha256sum --status -c - && \
tar xfz lame.tar.gz && \
cd lame-* && ./configure --enable-static --disable-shared && make -j$(nproc) install
RUN \
wget -O fdk-aac.tar.gz "$FDK_AAC_URL" && \
echo "$FDK_AAC_SHA256 fdk-aac.tar.gz" | sha256sum --status -c - && \
tar xfz fdk-aac.tar.gz && \
cd fdk-aac-* && ./autogen.sh && ./configure --enable-static --disable-shared && make -j$(nproc) install
RUN \
wget -O libogg.tar.gz "$OGG_URL" && \
echo "$OGG_SHA256 libogg.tar.gz" | sha256sum --status -c - && \
tar xfz libogg.tar.gz && \
cd libogg-* && ./configure --enable-static --disable-shared && make -j$(nproc) install
# require libogg to build
RUN \
wget -O libvorbis.tar.gz "$VORBIS_URL" && \
echo "$VORBIS_SHA256 libvorbis.tar.gz" | sha256sum --status -c - && \
tar xfz libvorbis.tar.gz && \
cd libvorbis-* && ./configure --enable-static --disable-shared && make -j$(nproc) install
RUN \
wget -O opus.tar.gz "$OPUS_URL" && \
echo "$OPUS_SHA256 opus.tar.gz" | sha256sum --status -c - && \
tar xfz opus.tar.gz && \
cd opus-* && ./configure --enable-static --disable-shared && make -j$(nproc) install
RUN \
wget -O libtheora.tar.gz "$THEORA_URL" && \
echo "$THEORA_SHA256 libtheora.tar.gz" | sha256sum --status -c - && \
tar xfj libtheora.tar.gz && \
cd libtheora-* && ./configure --disable-examples --enable-static --disable-shared && make -j$(nproc) install
RUN \
wget -O libvpx.tar.gz "$VPX_URL" && \
echo "$VPX_SHA256 libvpx.tar.gz" | sha256sum --status -c - && \
tar xfz libvpx.tar.gz && \
cd libvpx-* && ./configure --enable-static --disable-shared --disable-unit-tests --disable-examples && make -j$(nproc) install
RUN \
git clone "$X264_URL" && \
cd x264 && \
git checkout $X264_VERSION && \
./configure --enable-pic --enable-static && make -j$(nproc) install
RUN \
wget -O x265.tar.gz "$X265_URL" && \
echo "$X265_SHA256 x265.tar.gz" | sha256sum --status -c - && \
tar xfz x265.tar.gz && \
cd x265_*/build/linux && \
cmake -G "Unix Makefiles" -DENABLE_SHARED=OFF -DENABLE_AGGRESSIVE_CHECKS=ON ../../source && \
make -j$(nproc) install
RUN \
wget -O libwebp.tar.gz "$WEBP_URL" && \
echo "$WEBP_SHA256 libwebp.tar.gz" | sha256sum --status -c - && \
tar xfz libwebp.tar.gz && \
cd libwebp-* && ./autogen.sh && ./configure --enable-static --disable-shared && make -j$(nproc) install
RUN \
wget -O wavpack.tar.gz "$WAVPACK_URL" && \
echo "$WAVPACK_SHA256 wavpack.tar.gz" | sha256sum --status -c - && \
tar xfz wavpack.tar.gz && \
cd WavPack-* && ./autogen.sh && ./configure --enable-static --disable-shared && make -j$(nproc) install
RUN \
wget -O speex.tar.gz "$SPEEX_URL" && \
echo "$SPEEX_SHA256 speex.tar.gz" | sha256sum --status -c - && \
tar xfz speex.tar.gz && \
cd speex-Speex-* && ./autogen.sh && ./configure --enable-static --disable-shared && make -j$(nproc) install
RUN \
git clone --depth 1 --branch v$AOM_VERSION "$AOM_URL" && \
cd aom && test $(git rev-parse HEAD) = $AOM_COMMIT && \
mkdir build_tmp && cd build_tmp && cmake -DBUILD_SHARED_LIBS=0 -DENABLE_TESTS=0 -DCMAKE_INSTALL_LIBDIR=lib .. && make -j$(nproc) install
RUN \
wget -O vid.stab.tar.gz "$VIDSTAB_URL" && \
echo "$VIDSTAB_SHA256 vid.stab.tar.gz" | sha256sum --status -c - && \
tar xfz vid.stab.tar.gz && \
cd vid.stab-* && cmake -DBUILD_SHARED_LIBS=OFF . && make -j$(nproc) install
RUN \
wget -O kvazaar.tar.gz "$KVAZAAR_URL" && \
echo "$KVAZAAR_SHA256 kvazaar.tar.gz" | sha256sum --status -c - && \
tar xfz kvazaar.tar.gz && \
cd kvazaar-* && ./autogen.sh && ./configure --enable-static --disable-shared && make -j$(nproc) install
RUN \
wget -O libass.tar.gz "$ASS_URL" && \
echo "$ASS_SHA256 libass.tar.gz" | sha256sum --status -c - && \
tar xfz libass.tar.gz && \
cd libass-* && ./configure --enable-static --disable-shared && make -j$(nproc) && make install
RUN \
wget -O zimg.tar.gz "$ZIMG_URL" && \
echo "$ZIMG_SHA256 zimg.tar.gz" | sha256sum --status -c - && \
tar xfz zimg.tar.gz && \
cd zimg-* && ./autogen.sh && ./configure --enable-static --disable-shared && make -j$(nproc) install
RUN \
wget -O openjpeg.tar.gz "$OPENJPEG_URL" && \
echo "$OPENJPEG_SHA256 openjpeg.tar.gz" | sha256sum --status -c - && \
tar xfz openjpeg.tar.gz && \
cd openjpeg-* && cmake -G "Unix Makefiles" -DBUILD_SHARED_LIBS=OFF -DBUILD_TESTS=OFF && make -j$(nproc) install
RUN \
wget -O dav1d.tar.gz "$LIBDAV1D_URL" && \
echo "$LIBDAV1D_SHA256 dav1d.tar.gz" | sha256sum --status -c - && \
tar xfz dav1d.tar.gz && \
cd dav1d-* && meson build --buildtype release -Ddefault_library=static && ninja -C build install
# add extra CFLAGS that are not enabled by -O3
# http://websvn.xvid.org/cvs/viewvc.cgi/trunk/xvidcore/build/generic/configure.in?revision=2146&view=markup
RUN \
wget -O libxvid.tar.gz "$LIBXVID_URL" && \
echo "$LIBXVID_SHA256 libxvid.tar.gz" | sha256sum --status -c - && \
tar xfz libxvid.tar.gz && \
cd xvidcore/build/generic && \
CFLAGS="$CLFAGS -fstrength-reduce -ffast-math" \
./configure && make -j$(nproc) && make install
RUN \
wget -O libzmq.tar.gz "$LIBZMQ_URL" && \
echo "$LIBZMQ_SHA256 libzmq.tar.gz" | sha256sum --status -c - && \
tar xfz libzmq.tar.gz && \
cd zeromq-* && ./configure --enable-static --disable-shared && make -j$(nproc) install
RUN \
wget -O ffmpeg.tar.bz2 "$FFMPEG_URL" && \
echo "$FFMPEG_SHA256 ffmpeg.tar.bz2" | sha256sum --status -c - && \
tar xfj ffmpeg.tar.bz2 && \
cd ffmpeg-* && \
./configure \
--pkg-config-flags=--static \
--extra-cflags="-fopenmp" \
--extra-ldflags="-static -fopenmp" \
--toolchain=hardened \
--disable-debug \
--disable-shared \
--disable-ffplay \
--enable-static \
--enable-gpl \
--enable-nonfree \
--enable-openssl \
--enable-iconv \
--enable-libxml2 \
--enable-libmp3lame \
--enable-libfdk-aac \
--enable-libvorbis \
--enable-libopus \
--enable-libtheora \
--enable-libvpx \
--enable-libx264 \
--enable-libx265 \
--enable-libwebp \
--enable-libwavpack \
--enable-libspeex \
--enable-libaom \
--enable-libvidstab \
--enable-libkvazaar \
--enable-libfreetype \
--enable-fontconfig \
--enable-libfribidi \
--enable-libass \
--enable-libzimg \
--enable-libsoxr \
--enable-libopenjpeg \
--enable-libdav1d \
--enable-libxvid \
--enable-libzmq \
|| (cat ffbuild/config.log ; false) \
&& make -j$(nproc) install
# make sure binaries have no dependencies
RUN \
test $(ldd /usr/local/bin/ffmpeg | wc -l) -eq 1 && \
test $(ldd /usr/local/bin/ffprobe | wc -l) -eq 1
FROM alpine:3.12.0
COPY --from=builder /versions.json /usr/local/bin/ffmpeg /usr/local/bin/ffprobe /
COPY --from=builder /usr/local/share/doc/ffmpeg/* /doc/
COPY --from=builder /etc/ssl/cert.pem /etc/ssl/cert.pem
# sanity tests
RUN ["/ffmpeg", "-version"]
RUN ["/ffprobe", "-version"]
RUN ["/ffprobe", "-i", "https://github.com/favicon.ico"]
RUN ["/ffprobe", "-tls_verify", "1", "-ca_file", "/etc/ssl/cert.pem", "-i", "https://github.com/favicon.ico"]
#ENTRYPOINT ["/ffmpeg"]
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment