coturn/Dockerfile

ARG ARCH
FROM amd64/debian:10.10-slim@sha256:0fe071e7b4811869579bef3f308096be22f672aa52f121b62c6c401f18abb97c AS base-amd64
FROM arm32v7/debian:10.10-slim@sha256:d153da92759d083bfc24a071ad79a970a4ef06980e6ffef8da2074383ffa15e0 AS base-arm
FROM arm64v8/debian:10.10-slim@sha256:e5000dd397c5f596bcf84eed9b3e68430b91c6e50238134fe075179dfcce99a4 AS base-arm64
FROM base-${ARCH}

ENV COTURN_VERSION="4.5.2"
ENV PROMETHEUS_CLIENT_VERSION="v0.1.3"

ENV BUILD_PREFIX /usr/local/src

WORKDIR /root/coturn

RUN apt-get update && apt-get dist-upgrade -y && apt-get install -y \
    build-essential="12.6" \
    pkg-config="0.29-6" \
    libssl-dev="1.1.1d-0+deb10u6" \
    libevent-dev="2.1.8-stable-4" \
    curl \
 && PCV=$(echo "${PROMETHEUS_CLIENT_VERSION}" | cut -c 2-) \
 && curl -L "https://github.com/digitalocean/prometheus-client-c/releases/download/${PROMETHEUS_CLIENT_VERSION}/libprom-dev-${PCV}-Linux.deb" > /tmp/libprom.deb \
 && curl -L "https://github.com/digitalocean/prometheus-client-c/releases/download/${PROMETHEUS_CLIENT_VERSION}/libpromhttp-dev-${PCV}-Linux.deb" > /tmp/libpromhttp.deb \
 && apt-get install -y /tmp/libprom.deb \
 && apt-get install -y /tmp/libpromhttp.deb \
 && rm /tmp/libprom.deb /tmp/libpromhttp.deb \
 && curl -L "https://github.com/coturn/coturn/archive/${COTURN_VERSION}.tar.gz" | tar xvz --strip 1 \
 && ./configure \
 && make \
 && make install \
 && rm -rf /root/coturn \
 && apt-get remove -y --purge curl

RUN addgroup --system turnserver \
 && adduser --system --home / --shell /bin/false --no-create-home --ingroup turnserver --disabled-password --disabled-login --gecos "turnserver daemon" turnserver

WORKDIR /
USER turnserver

# SUTN/TURN PORTS
EXPOSE 3478 3479 3478/udp 3479/udp 80 80/udp
EXPOSE 5349 5350 5349/udp 5350/udp 443 443/udp
# CLI
EXPOSE 5766
# Relay Ports
EXPOSE 49152-65535 49152-65535/udp
# Prometheus
EXPOSE 9641

ENTRYPOINT ["turnserver", "--pidfile", "/var/tmp/turnserver.pid"]