Dockerfile/Containerfile for Arti

It would be great to have a Dockerfile (our Containerfile) for Arti.

Things to consider:

• Environment variables to tune Arti's build options.
• Defaults that work for most cases.
• Tags for different OSes and architectures? Which ones makes sense?
• Onion Services support (if not on the default image, at least in a tag/variant).
• CI for building images and publishing in a Container Registry.

cc: @gabi-250

mentioned in commit tpo/onion-services/ecosystem@0597d08a

@gabi-250, I am interested in this issue.

I successfully ran arti proxy in a docker container. I would like to know if the issue is still available before proceed with the next steps.

Hey, thanks for your interest! I think @hjrgrn is also looking into this, so I would suggest coordinating with them first.

Thanks for the notice @gabi-250. I still haven't started working on that, so if @pythonbrad wants to take care of this I have no problems with that.

@hjrgrn, I would like to have your opinion about this prototype.

https://gitlab.torproject.org/pythonbrad/docker-arti

Between, I am not familiar with GitLab CI action.

The Debian and Debian slim docker file are working. I have an issue with the alpine docker file.

Disclaimer: I'm just an external contributor so I'm probably not the right person to ask, AFAIK @rhatto is the specialist on this matter.

What kind of issues are you having with alpine?

Is there any documentation involving Arti not running as it should on non-glibc distros?

I have a linkage issue with the sqlite3 library.

...

---

From: hjrgrn (@hjrgrn) git@gitlab.torproject.org Sent: Tuesday, April 1, 2025 1:34:03 PM To: brady.fomegne@outlook.com brady.fomegne@outlook.com Subject: Re: Arti | Dockerfile/Containerfile for Arti (#1904)

hjrgrnhttps://gitlab.torproject.org/hjrgrn commented on a discussion#1904 (comment 3182988):

Disclaimer: I'm just an external contributor so I'm probably not the right person to ask, AFAIK @rhattohttps://gitlab.torproject.org/rhatto is the specialist on this matter.

What kind of issues are you having with alpine?

Is there any documentation involving Arti not running as it should on non-glibc distros?

— Reply to this email directly or view it on GitLab#1904 (comment 3182988). You're receiving this email because of your account on gitlab.torproject.orghttps://gitlab.torproject.org. Unsubscribehttps://gitlab.torproject.org/-/sent_notifications/REDACTED/unsubscribe from this thread · Manage all notificationshttps://gitlab.torproject.org/-/profile/notifications · Helphttps://gitlab.torproject.org/help

mentioned in issue tpo/onion-services/onimages#1

I look like, this issue is being solved at https://gitlab.torproject.org/tpo/onion-services/onimages

Hi @pythonbrad :)

The Onimages repository is specific to Onion Service usage, so its Arti images tend not to be useful for a broader audience, and hence the need for this ticket.

Ideally, such Onion Services images could be based on official Arti images.

I'm having the same issue linking Arti with libraries such as sqlite3, but I don't have much time to work on it right now, so any help would be appreciated :)

Thank you!

@rhatto, I saw a sqlite-static on the alpine package registry. I tested and it works. . Maybe the dynamic one was not required.

I'm having the same issue linking Arti with libraries such as sqlite3, but I don't have much time to work on it right now, so any help would be appreciated :)

You can build arti with a bundled version of sqlite3 if you enable the static-sqlite (or static) feature: https://tpo.pages.torproject.net/core/arti/guides/troubleshooting#when-i-try-to-build-arti-linking-fails (sqlite3 will be built from source and statically linked)

mentioned in issue tpo/onion-services/onimages#2

Another idea would be to first create a base Rust container (as a merge request on the base-images repository).

Arti's Dockerfile could then use this image, install a few dependencies and then compile/install Arti (either from source like @pythonbrad's current implementation or using cargo install (maybe both could be supported?).

These Rust images could be useful for related projects.