mirror of https://github.com/ConsenSys/mythril
blockchainethereumsmart-contractssoliditysecurityprogram-analysissecurity-analysissymbolic-execution
You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
102 lines
3.2 KiB
102 lines
3.2 KiB
# syntax=docker/dockerfile:1
|
|
ARG PYTHON_VERSION=3.10
|
|
ARG INSTALLED_SOLC_VERSIONS
|
|
|
|
|
|
FROM python:${PYTHON_VERSION} AS mythril-wheels
|
|
WORKDIR /wheels
|
|
|
|
# Enable cargo sparse-registry to prevent it using large amounts of memory in
|
|
# docker builds, and speed up builds by downloading less.
|
|
# https://github.com/rust-lang/cargo/issues/10781#issuecomment-1163819998
|
|
ENV CARGO_UNSTABLE_SPARSE_REGISTRY=true
|
|
|
|
SHELL ["/bin/bash", "-euo", "pipefail", "-c"]
|
|
RUN curl --proto '=https' --tlsv1.2 -sSf https://sh.rustup.rs | sh -s -- -y
|
|
ENV PATH=/root/.cargo/bin:$PATH
|
|
|
|
RUN --mount=source=requirements.txt,target=/run/requirements.txt \
|
|
pip wheel -r /run/requirements.txt
|
|
|
|
COPY . /mythril
|
|
RUN pip wheel --no-deps /mythril
|
|
|
|
|
|
# Solidity Compiler Version Manager. This provides cross-platform solc builds.
|
|
# It's used by foundry to provide solc. https://github.com/alloy-rs/svm-rs
|
|
FROM rust:slim-bookworm AS solidity-compiler-version-manager
|
|
RUN mkdir -p /svm-rs/bin && \
|
|
cargo install svm-rs --root /svm-rs
|
|
|
|
|
|
FROM python:${PYTHON_VERSION}-slim AS myth
|
|
ARG PYTHON_VERSION
|
|
# Space-separated version string without leading 'v' (e.g. "0.4.21 0.4.22")
|
|
ARG INSTALLED_SOLC_VERSIONS
|
|
|
|
COPY --from=solidity-compiler-version-manager /svm-rs/bin/* /usr/local/bin/
|
|
|
|
RUN --mount=from=mythril-wheels,source=/wheels,target=/wheels \
|
|
export PYTHONDONTWRITEBYTECODE=1 && pip install --no-cache-dir /wheels/*.whl
|
|
|
|
RUN adduser --disabled-password mythril
|
|
USER mythril
|
|
WORKDIR /home/mythril
|
|
|
|
# pre-install solc versions
|
|
RUN set -x; [ -z "${INSTALLED_SOLC_VERSIONS}" ] || svm install ${INSTALLED_SOLC_VERSIONS}
|
|
|
|
COPY --chown=mythril:mythril \
|
|
./mythril/support/assets/signatures.db \
|
|
/home/mythril/.mythril/signatures.db
|
|
|
|
COPY --chown=root:root --chmod=755 ./docker/docker-entrypoint.sh /
|
|
COPY --chown=root:root --chmod=755 \
|
|
./docker/sync-svm-solc-versions-with-solcx.sh \
|
|
/usr/local/bin/sync-svm-solc-versions-with-solcx
|
|
ENTRYPOINT ["/docker-entrypoint.sh"]
|
|
|
|
|
|
# Basic sanity checks to make sure the build is functional
|
|
FROM myth AS myth-smoke-test-execution
|
|
SHELL ["/bin/bash", "-euo", "pipefail", "-c"]
|
|
WORKDIR /smoke-test
|
|
COPY --chmod=755 <<"EOT" /smoke-test.sh
|
|
#!/usr/bin/env bash
|
|
set -x -euo pipefail
|
|
|
|
# Check solcx knows about svm solc versions
|
|
svm install 0.5.0
|
|
sync-svm-solc-versions-with-solcx
|
|
python -c '
|
|
import solcx
|
|
print("\n".join(str(v) for v in solcx.get_installed_solc_versions()))
|
|
' | grep -P '^0\.5\.0$' || {
|
|
echo "solcx did not report svm-installed solc version";
|
|
exit 1
|
|
}
|
|
|
|
# Show installed packages and versions
|
|
pip list
|
|
|
|
# Check myth can run
|
|
myth version
|
|
myth function-to-hash 'function transfer(address _to, uint256 _value) public returns (bool success)'
|
|
myth analyze /solidity_examples/origin.sol -t 1 > origin.log || true
|
|
grep 'SWC ID: 115' origin.log || {
|
|
error "Failed to detect SWC ID: 115 in origin.sol";
|
|
exit 1
|
|
}
|
|
|
|
# Check that the entrypoint works
|
|
[[ $(/docker-entrypoint.sh version) == $(myth version) ]]
|
|
[[ $(/docker-entrypoint.sh echo hi) == hi ]]
|
|
[[ $(/docker-entrypoint.sh bash -c "printf '>%s<' 'foo bar'") == ">foo bar<" ]]
|
|
EOT
|
|
|
|
RUN --mount=source=./solidity_examples,target=/solidity_examples \
|
|
/smoke-test.sh 2>&1 | tee smoke-test.log
|
|
|
|
|
|
FROM scratch AS myth-smoke-test
|
|
COPY --from=myth-smoke-test-execution /smoke-test/* /
|
|
|