llvm/docs/Docker.rst - rust-lang/llvm-project - Git at Google

 =========================================
 A guide to Dockerfiles for building LLVM
 =========================================

 Introduction
 ============
 You can find a number of sources to build docker images with LLVM components in
 ``llvm/utils/docker``. They can be used by anyone who wants to build the docker
 images for their own use, or as a starting point for someone who wants to write
 their own Dockerfiles.

 We currently provide Dockerfiles with ``debian8`` and ``nvidia-cuda`` base images.
 We also provide an ``example`` image, which contains placeholders that one would need
 to fill out in order to produce Dockerfiles for a new docker image.

 Why?
 ----
 Docker images provide a way to produce binary distributions of
 software inside a controlled environment. Having Dockerfiles to builds docker images
 inside LLVM repo makes them much more discoverable than putting them into any other
 place.

 Docker basics
 -------------
 If you've never heard about Docker before, you might find this section helpful
 to get a very basic explanation of it.
 `Docker <https://www.docker.com/>`_ is a popular solution for running programs in
 an isolated and reproducible environment, especially to maintain releases for
 software deployed to large distributed fleets.
 It uses linux kernel namespaces and cgroups to provide a lightweight isolation
 inside currently running linux kernel.
 A single active instance of dockerized environment is called a *docker
 container*.
 A snapshot of a docker container filesystem is called a *docker image*.
 One can start a container from a prebuilt docker image.

 Docker images are built from a so-called *Dockerfile*, a source file written in
 a specialized language that defines instructions to be used when build
 the docker image (see `official
 documentation <https://docs.docker.com/engine/reference/builder/>`_ for more
 details). A minimal Dockerfile typically contains a base image and a number
 of RUN commands that have to be executed to build the image. When building a new
 image, docker will first download your base image, mount its filesystem as
 read-only and then add a writable overlay on top of it to keep track of all
 filesystem modifications, performed while building your image. When the build
 process is finished, a diff between your image's final filesystem state and the
 base image's filesystem is stored in the resulting image.

 Overview
 ========
 The ``llvm/utils/docker`` folder contains Dockerfiles and simple bash scripts to
 serve as a basis for anyone who wants to create their own Docker image with
 LLVM components, compiled from sources. The sources are checked out from the
 upstream svn repository when building the image.

 The resulting image contains only the requested LLVM components and a few extra
 packages to make the image minimally useful for C++ development, e.g. libstdc++
 and binutils.

 The interface to run the build is ``build_docker_image.sh`` script. It accepts a
 list of LLVM repositories to checkout and arguments for CMake invocation.

 If you want to write your own docker image, start with an ``example/`` subfolder.
 It provides an incomplete Dockerfile with (very few) FIXMEs explaining the steps
 you need to take in order to make your Dockerfiles functional.

 Usage
 =====
 The ``llvm/utils/build_docker_image.sh`` script provides a rather high degree of
 control on how to run the build. It allows you to specify the projects to
 checkout from svn and provide a list of CMake arguments to use during when
 building LLVM inside docker container.

 Here's a very simple example of getting a docker image with clang binary,
 compiled by the system compiler in the debian8 image:

 .. code-block:: bash

     ./llvm/utils/docker/build_docker_image.sh \
 	--source debian8 \
 	--docker-repository clang-debian8 --docker-tag "staging" \
 	-p clang -i install-clang -i install-clang-headers \
 	-- \
 	-DCMAKE_BUILD_TYPE=Release

 Note that a build like that doesn't use a 2-stage build process that
 you probably want for clang. Running a 2-stage build is a little more intricate,
 this command will do that:

 .. code-block:: bash

     # Run a 2-stage build.
     #   LLVM_TARGETS_TO_BUILD=Native is to reduce stage1 compile time.
     #   Options, starting with BOOTSTRAP_* are passed to stage2 cmake invocation.
     ./build_docker_image.sh \
 	--source debian8 \
 	--docker-repository clang-debian8 --docker-tag "staging" \
 	-p clang -i stage2-install-clang -i stage2-install-clang-headers \
 	-- \
 	-DLLVM_TARGETS_TO_BUILD=Native -DCMAKE_BUILD_TYPE=Release \
 	-DBOOTSTRAP_CMAKE_BUILD_TYPE=Release \
 	-DCLANG_ENABLE_BOOTSTRAP=ON -DCLANG_BOOTSTRAP_TARGETS="install-clang;install-clang-headers"

 This will produce a new image ``clang-debian8:staging`` from the latest
 upstream revision.
 After the image is built you can run bash inside a container based on your image
 like this:

 .. code-block:: bash

     docker run -ti clang-debian8:staging bash

 Now you can run bash commands as you normally would:

 .. code-block:: bash

     root@80f351b51825:/# clang -v
     clang version 5.0.0 (trunk 305064)
     Target: x86_64-unknown-linux-gnu
     Thread model: posix
     InstalledDir: /bin
     Found candidate GCC installation: /usr/lib/gcc/x86_64-linux-gnu/4.8
     Found candidate GCC installation: /usr/lib/gcc/x86_64-linux-gnu/4.8.4
     Found candidate GCC installation: /usr/lib/gcc/x86_64-linux-gnu/4.9
     Found candidate GCC installation: /usr/lib/gcc/x86_64-linux-gnu/4.9.2
     Selected GCC installation: /usr/lib/gcc/x86_64-linux-gnu/4.9
     Candidate multilib: .;@m64
     Selected multilib: .;@m64


 Which image should I choose?
 ============================
 We currently provide two images: debian8-based and nvidia-cuda-based. They
 differ in the base image that they use, i.e. they have a different set of
 preinstalled binaries. Debian8 is very minimal, nvidia-cuda is larger, but has
 preinstalled CUDA libraries and allows to access a GPU, installed on your
 machine.

 If you need a minimal linux distribution with only clang and libstdc++ included,
 you should try debian8-based image.

 If you want to use CUDA libraries and have access to a GPU on your machine,
 you should choose nvidia-cuda-based image and use `nvidia-docker
 <https://github.com/NVIDIA/nvidia-docker>`_ to run your docker containers. Note
 that you don't need nvidia-docker to build the images, but you need it in order
 to have an access to GPU from a docker container that is running the built
 image.

 If you have a different use-case, you could create your own image based on
 ``example/`` folder.

 Any docker image can be built and run using only the docker binary, i.e. you can
 run debian8 build on Fedora or any other Linux distribution. You don't need to
 install CMake, compilers or any other clang dependencies. It is all handled
 during the build process inside Docker's isolated environment.

 Stable build
 ============
 If you want a somewhat recent and somewhat stable build, use the
 ``branches/google/stable`` branch, i.e. the following command will produce a
 debian8-based image using the latest ``google/stable`` sources for you:

 .. code-block:: bash

     ./llvm/utils/docker/build_docker_image.sh \
 	-s debian8 --d clang-debian8 -t "staging" \
 	--branch branches/google/stable \
 	-p clang -i install-clang -i install-clang-headers \
 	-- \
 	-DCMAKE_BUILD_TYPE=Release


 Minimizing docker image size
 ============================
 Due to how Docker's filesystem works, all intermediate writes are persisted in
 the resulting image, even if they are removed in the following commands.
 To minimize the resulting image size we use `multi-stage Docker builds
 <https://docs.docker.com/develop/develop-images/multistage-build/>`_.
 Internally Docker builds two images. The first image does all the work: installs
 build dependencies, checks out LLVM source code, compiles LLVM, etc.
 The first image is only used during build and does not have a descriptive name,
 i.e. it is only accessible via the hash value after the build is finished.
 The second image is our resulting image. It contains only the built binaries
 and not any build dependencies. It is also accessible via a descriptive name
 (specified by -d and -t flags).
	=========================================
	A guide to Dockerfiles for building LLVM
	=========================================

	Introduction
	============
	You can find a number of sources to build docker images with LLVM components in
	``llvm/utils/docker``. They can be used by anyone who wants to build the docker
	images for their own use, or as a starting point for someone who wants to write
	their own Dockerfiles.

	We currently provide Dockerfiles with ``debian8`` and ``nvidia-cuda`` base images.
	We also provide an ``example`` image, which contains placeholders that one would need
	to fill out in order to produce Dockerfiles for a new docker image.

	Why?
	----
	Docker images provide a way to produce binary distributions of
	software inside a controlled environment. Having Dockerfiles to builds docker images
	inside LLVM repo makes them much more discoverable than putting them into any other
	place.

	Docker basics
	-------------
	If you've never heard about Docker before, you might find this section helpful
	to get a very basic explanation of it.
	`Docker <https://www.docker.com/>`_ is a popular solution for running programs in
	an isolated and reproducible environment, especially to maintain releases for
	software deployed to large distributed fleets.
	It uses linux kernel namespaces and cgroups to provide a lightweight isolation
	inside currently running linux kernel.
	A single active instance of dockerized environment is called a *docker
	container*.
	A snapshot of a docker container filesystem is called a docker image.
	One can start a container from a prebuilt docker image.

	Docker images are built from a so-called Dockerfile, a source file written in
	a specialized language that defines instructions to be used when build
	the docker image (see `official
	documentation <https://docs.docker.com/engine/reference/builder/>`_ for more
	details). A minimal Dockerfile typically contains a base image and a number
	of RUN commands that have to be executed to build the image. When building a new
	image, docker will first download your base image, mount its filesystem as
	read-only and then add a writable overlay on top of it to keep track of all
	filesystem modifications, performed while building your image. When the build
	process is finished, a diff between your image's final filesystem state and the
	base image's filesystem is stored in the resulting image.

	Overview
	========
	The ``llvm/utils/docker`` folder contains Dockerfiles and simple bash scripts to
	serve as a basis for anyone who wants to create their own Docker image with
	LLVM components, compiled from sources. The sources are checked out from the
	upstream svn repository when building the image.

	The resulting image contains only the requested LLVM components and a few extra
	packages to make the image minimally useful for C++ development, e.g. libstdc++
	and binutils.

	The interface to run the build is ``build_docker_image.sh`` script. It accepts a
	list of LLVM repositories to checkout and arguments for CMake invocation.

	If you want to write your own docker image, start with an ``example/`` subfolder.
	It provides an incomplete Dockerfile with (very few) FIXMEs explaining the steps
	you need to take in order to make your Dockerfiles functional.

	Usage
	=====
	The ``llvm/utils/build_docker_image.sh`` script provides a rather high degree of
	control on how to run the build. It allows you to specify the projects to
	checkout from svn and provide a list of CMake arguments to use during when
	building LLVM inside docker container.

	Here's a very simple example of getting a docker image with clang binary,
	compiled by the system compiler in the debian8 image:

	.. code-block:: bash

	./llvm/utils/docker/build_docker_image.sh \
	--source debian8 \
	--docker-repository clang-debian8 --docker-tag "staging" \
	-p clang -i install-clang -i install-clang-headers \
	-- \
	-DCMAKE_BUILD_TYPE=Release

	Note that a build like that doesn't use a 2-stage build process that
	you probably want for clang. Running a 2-stage build is a little more intricate,
	this command will do that:

	.. code-block:: bash

	# Run a 2-stage build.
	# LLVM_TARGETS_TO_BUILD=Native is to reduce stage1 compile time.
	# Options, starting with BOOTSTRAP_* are passed to stage2 cmake invocation.
	./build_docker_image.sh \
	--source debian8 \
	--docker-repository clang-debian8 --docker-tag "staging" \
	-p clang -i stage2-install-clang -i stage2-install-clang-headers \
	-- \
	-DLLVM_TARGETS_TO_BUILD=Native -DCMAKE_BUILD_TYPE=Release \
	-DBOOTSTRAP_CMAKE_BUILD_TYPE=Release \
	-DCLANG_ENABLE_BOOTSTRAP=ON -DCLANG_BOOTSTRAP_TARGETS="install-clang;install-clang-headers"

	This will produce a new image ``clang-debian8:staging`` from the latest
	upstream revision.
	After the image is built you can run bash inside a container based on your image
	like this:

	.. code-block:: bash

	docker run -ti clang-debian8:staging bash

	Now you can run bash commands as you normally would:

	.. code-block:: bash

	root@80f351b51825:/# clang -v
	clang version 5.0.0 (trunk 305064)
	Target: x86_64-unknown-linux-gnu
	Thread model: posix
	InstalledDir: /bin
	Found candidate GCC installation: /usr/lib/gcc/x86_64-linux-gnu/4.8
	Found candidate GCC installation: /usr/lib/gcc/x86_64-linux-gnu/4.8.4
	Found candidate GCC installation: /usr/lib/gcc/x86_64-linux-gnu/4.9
	Found candidate GCC installation: /usr/lib/gcc/x86_64-linux-gnu/4.9.2
	Selected GCC installation: /usr/lib/gcc/x86_64-linux-gnu/4.9
	Candidate multilib: .;@m64
	Selected multilib: .;@m64


	Which image should I choose?
	============================
	We currently provide two images: debian8-based and nvidia-cuda-based. They
	differ in the base image that they use, i.e. they have a different set of
	preinstalled binaries. Debian8 is very minimal, nvidia-cuda is larger, but has
	preinstalled CUDA libraries and allows to access a GPU, installed on your
	machine.

	If you need a minimal linux distribution with only clang and libstdc++ included,
	you should try debian8-based image.

	If you want to use CUDA libraries and have access to a GPU on your machine,
	you should choose nvidia-cuda-based image and use `nvidia-docker
	<https://github.com/NVIDIA/nvidia-docker>`_ to run your docker containers. Note
	that you don't need nvidia-docker to build the images, but you need it in order
	to have an access to GPU from a docker container that is running the built
	image.

	If you have a different use-case, you could create your own image based on
	``example/`` folder.

	Any docker image can be built and run using only the docker binary, i.e. you can
	run debian8 build on Fedora or any other Linux distribution. You don't need to
	install CMake, compilers or any other clang dependencies. It is all handled
	during the build process inside Docker's isolated environment.

	Stable build
	============
	If you want a somewhat recent and somewhat stable build, use the
	``branches/google/stable`` branch, i.e. the following command will produce a
	debian8-based image using the latest ``google/stable`` sources for you:

	.. code-block:: bash

	./llvm/utils/docker/build_docker_image.sh \
	-s debian8 --d clang-debian8 -t "staging" \
	--branch branches/google/stable \
	-p clang -i install-clang -i install-clang-headers \
	-- \
	-DCMAKE_BUILD_TYPE=Release


	Minimizing docker image size
	============================
	Due to how Docker's filesystem works, all intermediate writes are persisted in
	the resulting image, even if they are removed in the following commands.
	To minimize the resulting image size we use `multi-stage Docker builds
	<https://docs.docker.com/develop/develop-images/multistage-build/>`_.
	Internally Docker builds two images. The first image does all the work: installs
	build dependencies, checks out LLVM source code, compiles LLVM, etc.
	The first image is only used during build and does not have a descriptive name,
	i.e. it is only accessible via the hash value after the build is finished.
	The second image is our resulting image. It contains only the built binaries
	and not any build dependencies. It is also accessible via a descriptive name
	(specified by -d and -t flags).