Dockerfile

# Use official Alpine release
FROM alpine:3.14.3 as build

# Maintainer
LABEL maintainer="Alex Terrell <phate999@gmail.com>"

ENV RADSECVERSION 1.9.1
ENV RADSECURL https://github.com/radsecproxy/radsecproxy/releases/download/${RADSECVERSION}/
ENV RADSECFILENAME radsecproxy-${RADSECVERSION}.tar.gz

# Change working dir
WORKDIR /root

# Update apk
RUN apk update

# Install buildtools
RUN apk add --no-cache make g++ openssl-dev nettle-dev musl-dev

# Create output dir
RUN mkdir output

# Download Radsecproxy source files
RUN wget ${RADSECURL}${RADSECFILENAME}

# Untar Radsecproxy
RUN tar xf ${RADSECFILENAME} --strip-components=1

# Configure
RUN ./configure --prefix=/root/output --sysconfdir=/etc

# Make and install to output dir
RUN make && make install

# --- --- ---

# Create Radsecproxy container
FROM alpine:3.14.3

# Update apk
RUN apk update

# Install openssl, ca-certificates, nettle and tini
RUN apk add --no-cache openssl ca-certificates bash nettle tini python3

# Copy from 'build' stage
COPY --from=build /root/output/ /

# Copy start.sh
COPY --chown=root:root start.sh get_certs.py csclient.py /root
RUN mkdir /etc/pki/
RUN mkdir /etc/pki/radsecproxy/

# Make start.sh executeable
RUN chmod u+x /root/start.sh

# Make Radsecproxy's ports available
EXPOSE 1812
EXPOSE 1813

# Set Tini entrypoint
ENTRYPOINT ["/sbin/tini", "--"]

# Start Radsecproxy
CMD ["/root/start.sh"]