This is an attempt to Dockerize the Cryptech build environment.
The ten zillion Debian packages are tedious but straightforward.
The tricky bit is the XiLinx toolchain:
- You need to download the Xilinx ISE Design Suite distribution tarball.
- You need to get a license key from XiLinx before you can use ISE.
- You have to run GUI installation tools to install and configure it.
There's not much we can do about the first two, so we assume that
you've obtained a tarball and a license key file, and that you've
dropped them into this directory with the filenames we expect.
The third...is fun, in a demented sort of way.
The Xilinx tools are serious disk hogs: VMs for this need at least
30-40 GB of disk space. The build process for this Dockerized
environment is even worse: 60GB appears to be just barely enough.
To get a license, go to
http://www.xilinx.com/products/design-tools/ise-design-suite/ise-webpack.htm
and click on the Licensing Solutions link. On the resulting page,
expand the section "Obtain a license for Free or Evaluation
product". To download the ISE Webpack, you should have created an
account, so now you can go to the Licensing Site and use that account
to create a Certificate Based License.
You do not need to go through the HostID dance, just say "Do It". You
will then receive a certificate in email (not an X.509 certificate)
which you will be able to use.
http://www.xilinx.com/support/download/index.html/content/xilinx/en/downloadNav/design-tools.html
http://www.xilinx.com/products/design-tools/ise-design-suite/ise-webpack.htm
http://www.armadeus.com/wiki/index.php?title=ISE_WebPack_installation_on_Linux
Once you've downloaded the ISE installation tarball and the license
file, you should place copies of them in this directory (the one with
all the dockerization stuff). Since these were probably painful to
obtain, you might want to store the files somewhere else (eg, the
parent directory), chmod them 444, and hard link them into this
directory.
After you've added those files to this directory, typing make
should, in theory, build the whole thing. It takes a ridiculously
long time to build, but we dont' expect this to happen often.
Note that the resulting Docker image contains a licensed copy of the
build environment, so passing it around to your friends or installing
it on more machines than the license allows is a no-no. We're not
attempting to circumvent XiLinx's licensing system, just make it
possible to run builds which require ISE in a reproducable Dockerized
environment.
Readers familiar with Docker wiil notice that this build environment
is...kind of weird. Partly that's because of the size of some of the
files involved, but mostly it's because the Xvfb/ratpoison hack we're
using to drive ISE installation doesn't work under docker build.
Don't know why, don't really care (so many windmills, so little time).
