feat: Dockerfile generator

.github/workflows/debian.yml

@@ -35,17 +35,18 @@ jobs:
           - ghc: '9.12.2'
             ghc_minor: '9.12'
             deb: 'slim-bookworm'
+          - ghc: '9.12.2'
+            ghc_minor: '9.12'
+            deb: 'bullseye'
+          - ghc: '9.12.2'
+            ghc_minor: '9.12'
+            deb: 'slim-bullseye'
           - ghc: '9.10.2'
             ghc_minor: '9.10'
           - ghc: '9.8.4'
             ghc_minor: '9.8'
           - ghc: '9.6.7'
             ghc_minor: '9.6'
-        exclude:
-          - ghc: '9.12.2'
-            deb: 'bullseye'
-          - ghc: '9.12.2'
-            deb: 'slim-bullseye'
     steps:
       - uses: actions/checkout@v4
       - name: build + smoke test [${{ matrix.ghc }}]

.gitignore

@@ -1,3 +1,7 @@
+generator/.stack-work
+generator/dist-newstyle
+/.idea
+
 keys/*
 
 ### https://raw.github.com/github/gitignore/2399ff1c7957fa3b4eeecefa7354bbe50776063b/Global/Emacs.gitignore
@@ -55,7 +59,8 @@ tramp
 .LSOverride
 
 # Icon must end with two \r
-Icon
+Icon
+
 
 # Thumbnails
 ._*

9.10/_globals.yaml

@@ -0,0 +1,9 @@
+stack:
+  version: "3.3.1"
+  release_key: "C5705533DA4F78D8664B5DC0575159689BEFB442"
+  sha256sum:
+    "aarch64": 'bdd618ea5a9c921417727011f2ecd78987dffa5cee5e741108baf65a9b5b58ab'
+    "x86_64": '88d7e517342c125b0a098d9d578fe53e590618ae4b2427283a27408a1ebd06d8'
+cabal_install:
+  version: "3.14.1.1"
+  release_key: "EAF2A9A722C0C96F2B431CA511AAD8CEDEE0CAEF"

9.10/bookworm.yaml

@@ -0,0 +1,21 @@
+---
+distro:
+  codename: 'bookworm'
+  abbr: 'deb12'
+  image: 'debian:bookworm'
+ghc:
+  version: "9.10.2"
+  release_key: "88B57FCF7DB53B4DB3BFA4B1588764FBE22D19C4"
+  sha256sum:
+    "aarch64": '0188ca098abdaf71eb0804d0f35311f405da489137d8d438bfaa43b8d1e3f1b0'
+    "x86_64": '71d025743f2eb4d3af95d4dd94a22c093c2814d78ab95dd0e12bb6751b1c7d4e'
+cabal_install:
+  sha256sum:
+    "aarch64": 'f763fb2af2bc1ff174b7361a7d51109a585954f87a0e14f86d144f3bce28f7a9'
+    "x86_64": '73a463306c771e18ca22c0a9469176ffab0138ec5925adb5364ef47174e1adc5'
+overrides:
+  ghc:
+    "aarch64":
+      # GHC 9.10.2 doesn't have a deb12 bindist for aarch64 for some reason, so we're using the bullseye one instead
+      url: "https://downloads.haskell.org/~ghc/9.10.2/ghc-9.10.2-aarch64-deb11-linux.tar.xz"
+_globals: !include '_globals.yaml'

9.10/bookworm/Dockerfile

@@ -0,0 +1,144 @@
+FROM debian:bookworm
+
+ENV LANG=C.UTF-8
+
+# common haskell + stack dependencies
+RUN <<EOT
+    apt-get update && \
+    apt-get install -y --no-install-recommends \
+        ca-certificates \
+        curl \
+        dpkg-dev \
+        git \
+        gcc \
+        gnupg \
+        g++ \
+        libc6-dev \
+        libffi-dev \
+        libgmp-dev \
+        libnuma-dev \
+        libtinfo-dev \
+        make \
+        netbase \
+        xz-utils \
+        zlib1g-dev && \
+    rm -rf /var/lib/apt/lists/*
+EOT
+
+ARG STACK=3.3.1
+ARG STACK_RELEASE_KEY=C5705533DA4F78D8664B5DC0575159689BEFB442
+
+RUN <<EOT
+    set -eux
+    cd /tmp
+    ARCH="$(dpkg-architecture --query DEB_BUILD_GNU_CPU)"
+    STACK_URL="https://github.com/commercialhaskell/stack/releases/download/v${STACK}/stack-${STACK}-linux-$ARCH.tar.gz"
+    # sha256 from https://github.com/commercialhaskell/stack/releases/download/v${STACK}/stack-${STACK}-linux-$ARCH.tar.gz.sha256
+    case "$ARCH" in 
+        'aarch64') 
+            STACK_SHA256='bdd618ea5a9c921417727011f2ecd78987dffa5cee5e741108baf65a9b5b58ab'
+            ;;
+        'x86_64') 
+            STACK_SHA256='88d7e517342c125b0a098d9d578fe53e590618ae4b2427283a27408a1ebd06d8'
+            ;;
+        *) echo >&2 "error: unsupported architecture '$ARCH'" exit 1 ;
+    esac
+    curl -sSL "$STACK_URL" -o stack.tar.gz
+    echo "$STACK_SHA256 stack.tar.gz" | sha256sum --strict --check
+
+    curl -sSL "$STACK_URL.asc" -o stack.tar.gz.asc
+    GNUPGHOME="$(mktemp -d)"
+    export GNUPGHOME
+    gpg --batch --keyserver keyserver.ubuntu.com --receive-keys "$STACK_RELEASE_KEY"
+    gpg --batch --verify stack.tar.gz.asc stack.tar.gz
+    gpgconf --kill all
+
+    tar -xf stack.tar.gz -C /usr/local/bin --strip-components=1 "stack-$STACK-linux-$ARCH/stack"
+    stack config set system-ghc --global true
+    stack config set install-ghc --global false
+
+    rm -rf /tmp/*
+
+    stack --version;
+EOT
+
+ARG CABAL_INSTALL=3.14.1.1
+ARG CABAL_INSTALL_RELEASE_KEY=EAF2A9A722C0C96F2B431CA511AAD8CEDEE0CAEF
+
+RUN <<EOT
+    set -eux
+    cd /tmp
+    ARCH="$(dpkg-architecture --query DEB_BUILD_GNU_CPU)"
+    CABAL_INSTALL_TAR="cabal-install-$CABAL_INSTALL-$ARCH-linux-deb12.tar.xz"
+    CABAL_INSTALL_URL="https://downloads.haskell.org/~cabal/cabal-install-$CABAL_INSTALL/$CABAL_INSTALL_TAR"
+    CABAL_INSTALL_SHA256SUMS_URL="https://downloads.haskell.org/~cabal/cabal-install-$CABAL_INSTALL/SHA256SUMS"
+    # sha256 from https://downloads.haskell.org/~cabal/cabal-install-$CABAL_INSTALL/SHA256SUMS
+    case "$ARCH" in
+        'aarch64')
+            CABAL_INSTALL_SHA256='f763fb2af2bc1ff174b7361a7d51109a585954f87a0e14f86d144f3bce28f7a9'
+            ;;
+        'x86_64')
+            CABAL_INSTALL_SHA256='73a463306c771e18ca22c0a9469176ffab0138ec5925adb5364ef47174e1adc5'
+            ;;
+        *) echo >&2 "error: unsupported architecture '$ARCH'"; exit 1 ;;
+    esac
+    curl -fSL "$CABAL_INSTALL_URL" -o cabal-install.tar.gz
+    echo "$CABAL_INSTALL_SHA256 cabal-install.tar.gz" | sha256sum --strict --check
+
+    curl -sSLO "$CABAL_INSTALL_SHA256SUMS_URL"
+    curl -sSLO "$CABAL_INSTALL_SHA256SUMS_URL.sig"
+    GNUPGHOME="$(mktemp -d)"; export GNUPGHOME
+    gpg --batch --keyserver keyserver.ubuntu.com --receive-keys "$CABAL_INSTALL_RELEASE_KEY"
+    gpg --batch --verify SHA256SUMS.sig SHA256SUMS
+    # confirm we are verifying SHA256SUMS that matches the release + sha256
+    grep "$CABAL_INSTALL_SHA256  $CABAL_INSTALL_TAR" SHA256SUMS
+    gpgconf --kill all;
+
+    tar -xf cabal-install.tar.gz -C /usr/local/bin
+
+    rm -rf /tmp/*
+
+    cabal --version
+EOT
+
+ARG GHC='9.10.2'
+ARG GHC_RELEASE_KEY='88B57FCF7DB53B4DB3BFA4B1588764FBE22D19C4'
+
+RUN <<EOT
+    set -eux
+    cd /tmp
+    ARCH="$(dpkg-architecture --query DEB_BUILD_GNU_CPU)"
+    GHC_URL="https://downloads.haskell.org/~ghc/$GHC/ghc-$GHC-$ARCH-deb12-linux.tar.xz"
+    # sha256 from https://downloads.haskell.org/~ghc/$GHC/SHA256SUMS
+    case "$ARCH" in
+        'aarch64')
+            GHC_SHA256='0188ca098abdaf71eb0804d0f35311f405da489137d8d438bfaa43b8d1e3f1b0'
+            GHC_URL='https://downloads.haskell.org/~ghc/9.10.2/ghc-9.10.2-aarch64-deb11-linux.tar.xz'
+            ;;
+        'x86_64')
+            GHC_SHA256='71d025743f2eb4d3af95d4dd94a22c093c2814d78ab95dd0e12bb6751b1c7d4e'
+            ;;
+        *) echo >&2 "error: unsupported architecture '$ARCH'" ; exit 1 ;;
+    esac
+    curl -sSL "$GHC_URL" -o ghc.tar.xz
+    echo "$GHC_SHA256 ghc.tar.xz" | sha256sum --strict --check
+
+    GNUPGHOME="$(mktemp -d)"; export GNUPGHOME
+    curl -sSL "$GHC_URL.sig" -o ghc.tar.xz.sig
+    gpg --batch --keyserver keyserver.ubuntu.com --receive-keys "$GHC_RELEASE_KEY"
+    gpg --batch --verify ghc.tar.xz.sig ghc.tar.xz
+    gpgconf --kill all
+
+    tar xf ghc.tar.xz
+    cd "ghc-$GHC-$ARCH-unknown-linux"
+    ./configure --prefix "/opt/ghc/$GHC"
+    make install
+
+    rm -rf /tmp/*
+
+    "/opt/ghc/$GHC/bin/ghc" --version
+EOT
+
+ENV PATH=/root/.cabal/bin:/root/.local/bin:/opt/ghc/${GHC}/bin:$PATH
+
+CMD ["ghci"]

9.10/bullseye.yaml

@@ -0,0 +1,17 @@
+---
+distro:
+  codename: 'bullseye'
+  abbr: 'deb11'
+  image: 'debian:bullseye'
+ghc:
+  version: "9.10.2"
+  release_key: "88B57FCF7DB53B4DB3BFA4B1588764FBE22D19C4"
+  sha256sum:
+    "aarch64": '0188ca098abdaf71eb0804d0f35311f405da489137d8d438bfaa43b8d1e3f1b0'
+    "x86_64": '2fe2c3e0a07e4782530e8bf83eeda8ff6935e40d5450c1809abcdc6182c9c848'
+cabal_install:
+  sha256sum:
+    "aarch64": '5e8c47a055d5b744741039a7061ee43ec7d080d1251784e7a4cd836403e42523'
+    "x86_64": '41b85bb25fa654e4b79169014b9142fe696ff35e002e043caa0e52d65204ba8a'
+_globals: !include '_globals.yaml'
+