File size: 3,115 Bytes
c83d379 | 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 | FROM ubuntu:24.04
ENV DEBIAN_FRONTEND=noninteractive
# Runtime libs for the precompiled CADO-NFS binaries (libhwloc15, libgomp1) plus
# a toolchain to build the small ramnfs broker/shim.
RUN apt-get update && apt-get install -y --no-install-recommends \
python3 python3-pip python3-dev \
build-essential gcc g++ make \
libgmp-dev libhwloc15 libhwloc-dev libgomp1 \
zlib1g-dev \
&& rm -rf /var/lib/apt/lists/*
# gmpy2 for the solver; flask + requests are required by CADO-NFS master's
# cadofactor orchestrator (api_server) and its clients.
RUN pip install --no-cache-dir --break-system-packages gmpy2 flask requests
# Precompiled CADO-NFS (compiled for ubuntu:24.04 / glibc 2.39 at /opt/cado-nfs,
# matching the extraction path so the build-tree cado-nfs.py resolves its
# parameter files via source-location.txt). Shipping the binaries avoids the
# long from-source cmake build that can exceed the image build timeout. flask is
# already installed, so the --help smoke test imports cleanly.
COPY cado-nfs.tar.gz /tmp/
RUN tar xzf /tmp/cado-nfs.tar.gz -C / \
&& rm /tmp/cado-nfs.tar.gz \
&& chmod +x /opt/cado-nfs/build/release/sieve/las \
/opt/cado-nfs/build/release/polyselect/polyselect \
&& python3 /opt/cado-nfs/build/release/cado-nfs.py --help > /dev/null 2>&1
# ramnfs: broker daemon + LD_PRELOAD shim. Routes CADO-NFS file I/O under
# /ramwork to memfd_create RAM-backed files, bypassing the validator's small
# (~1 GB) noexec /tmp tmpfs — no mount, no root, no extra privileges.
COPY ramnfs/broker.c ramnfs/shim.c /opt/ramnfs/
RUN cd /opt/ramnfs \
&& gcc -O2 -pthread -o broker broker.c -lpthread \
&& gcc -O2 -fPIC -shared -o shim.so shim.c -ldl -lpthread \
&& chmod +x broker
# ubuntu:24.04 ships a UID-1000 "ubuntu" user; remove it so --user miner is UID 1000.
RUN userdel -r ubuntu 2>/dev/null; useradd -m -u 1000 -s /usr/sbin/nologin miner
WORKDIR /app
COPY enigma_challenges /app/enigma_challenges/
COPY breaking_rsa.py gpu_la.py section3_build.py /app/
# Prebuilt portable GPU msieve (block-Lanczos linear algebra). Built off-image
# with -march=x86-64-v3 (AVX2, NO AVX-512) for CPU portability, the kernel PTX at
# the sm_70 baseline (driver JITs it forward to any sm_70+ card) and the CUB
# engines as multi-arch cubins (sm_70/75/80/86/90). The binary links only the
# CUDA *driver* (libcuda.so.1), which `docker run --gpus` injects at runtime, so
# no CUDA toolkit/runtime needs to live in the image. When no GPU is present the
# solver never touches these and runs CADO's own (CPU) linear algebra.
COPY msieve /app/msieve/
RUN chmod +x /app/msieve/msieve
ENV CADO_NFS=/opt/cado-nfs/build/release/cado-nfs.py \
CADO_REPLAY=/opt/cado-nfs/build/release/filter/replay \
MSIEVE_BIN=/app/msieve/msieve \
RAMNFS_BROKER=/opt/ramnfs/broker \
RAMNFS_SHIM=/opt/ramnfs/shim.so \
RAMNFS_SOCK=/tmp/ramnfs.sock \
RAMNFS_WORKDIR=/ramwork/factor.work \
HOME=/tmp \
TMPDIR=/tmp \
WALL_TIME=14400 \
DEADLINE_MARGIN=120 \
PYTHONUNBUFFERED=1
USER miner
ENTRYPOINT ["python3", "/app/breaking_rsa.py"]
|