[dev-image] Add libseccomp 2.5.1 for building workspacekit

Author: Christian Weichel

.gitpod.yml

@@ -1,4 +1,4 @@
-image: eu.gcr.io/gitpod-core-dev/dev/dev-environment:cw-supervisor-execve-ring3.25
+image: eu.gcr.io/gitpod-core-dev/dev/dev-environment:cw-workspacekit.3
 workspaceLocation: gitpod/gitpod-ws.theia-workspace
 checkoutLocation: gitpod
 ports:

.werft/build.yaml

@@ -30,7 +30,7 @@ pod:
     - name: MYSQL_TCP_PORT
       value: 23306
   - name: build
-    image: eu.gcr.io/gitpod-core-dev/dev/dev-environment:cw-supervisor-execve-ring3.25
+    image: eu.gcr.io/gitpod-core-dev/dev/dev-environment:cw-workspacekit.3
     workingDir: /workspace
     imagePullPolicy: Always
     volumeMounts:

.werft/wipe-devstaging.yaml

@@ -14,7 +14,7 @@ pod:
       secretName: gcp-sa-gitpod-dev-deployer
   containers:
   - name: wipe-devstaging
-    image: eu.gcr.io/gitpod-core-dev/dev/dev-environment:cw-supervisor-execve-ring3.25
+    image: eu.gcr.io/gitpod-core-dev/dev/dev-environment:cw-workspacekit.3
     workingDir: /workspace
     imagePullPolicy: Always
     volumeMounts:

dev/image/Dockerfile

@@ -87,6 +87,12 @@ RUN curl -fsSL https://packagecloud.io/datawireio/telepresence/gpgkey | apt-key
 RUN curl -L -o /usr/bin/toxiproxy https://github.com/Shopify/toxiproxy/releases/download/v2.1.4/toxiproxy-cli-linux-amd64 \
     && chmod +x /usr/bin/toxiproxy
 
+### libseccomp > 2.5.0
+RUN apt-get update && apt-get install -yq gperf && apt-get clean && rm -rf /var/lib/apt/lists/* /tmp/* \
+    && cd $(mktemp -d) \
+    && curl -L https://github.com/seccomp/libseccomp/releases/download/v2.5.1/libseccomp-2.5.1.tar.gz | tar xz \
+    && cd libseccomp-2.5.1 && ./configure && make && make install
+
 USER gitpod
 
 # Fix node version we develop against