From 9a5b8e834463d0833a834a799224ced09ca545b2 Mon Sep 17 00:00:00 2001
From: Ruben Fiszel <ruben@windmill.dev>
Date: Mon, 15 Dec 2025 18:09:29 +0000
Subject: [PATCH] all

---
 docker/DockerfileNsjailSlim | 48 +++++++++++++++++++++++++++++++++++++
 docker/DockerfileOnlyNsjail | 20 ++++++++++++++++
 2 files changed, 68 insertions(+)
 create mode 100644 docker/DockerfileNsjailSlim
 create mode 100644 docker/DockerfileOnlyNsjail

diff --git a/docker/DockerfileNsjailSlim b/docker/DockerfileNsjailSlim
new file mode 100644
index 0000000000..977ef8a2ed
--- /dev/null
+++ b/docker/DockerfileNsjailSlim
@@ -0,0 +1,48 @@
+FROM debian:bookworm-slim AS nsjail
+
+WORKDIR /nsjail
+
+RUN apt-get -y update \
+    && apt-get install -y \
+    bison=2:3.8.* \
+    flex=2.6.* \
+    g++=4:12.2.* \
+    gcc=4:12.2.* \
+    git=1:2.39.* \
+    libprotobuf-dev=3.21.* \
+    libnl-route-3-dev=3.7.* \
+    make=4.3-4.1 \
+    pkg-config=1.8.* \
+    protobuf-compiler=3.21.*
+
+
+RUN git clone -b master --single-branch https://github.com/google/nsjail.git . && git checkout dccf911fd2659e7b08ce9507c25b2b38ec2c5800
+RUN make
+
+FROM alpine:3.14 AS oracledb-client
+
+ARG TARGETPLATFORM
+
+# Oracle DB Client for amd64
+COPY --from=ghcr.io/oracle/oraclelinux9-instantclient:23 /usr/lib/oracle/23/client64/lib /opt/oracle/23/amd64/lib
+
+# Oracle DB Client for arm64
+RUN mkdir -p /opt/oracle/23/arm64 \
+	&& cd /opt/oracle/23/arm64 \
+	&& wget https://download.oracle.com/otn_software/linux/instantclient/instantclient-basiclite-linux-arm64.zip \
+	&& unzip instantclient-basiclite-linux-arm64.zip && rm instantclient-basiclite-linux-arm64.zip && mv instantclient* ./lib
+
+RUN if [ "$TARGETPLATFORM" = "linux/arm64" ]; then \
+        mv /opt/oracle/23/arm64/lib /opt/oracle/23/lib; \
+    else \
+        mv /opt/oracle/23/amd64/lib /opt/oracle/23/lib; \
+    fi
+
+FROM ghcr.io/windmill-labs/windmill-ee:dev
+
+
+# iptables
+RUN apt-get install -y iptables
+
+COPY --from=nsjail /nsjail/nsjail /bin/nsjail
+
diff --git a/docker/DockerfileOnlyNsjail b/docker/DockerfileOnlyNsjail
new file mode 100644
index 0000000000..2dfbeab1e1
--- /dev/null
+++ b/docker/DockerfileOnlyNsjail
@@ -0,0 +1,20 @@
+FROM debian:bookworm-slim AS nsjail
+
+WORKDIR /nsjail
+
+RUN apt-get -y update \
+    && apt-get install -y \
+    bison=2:3.8.* \
+    flex=2.6.* \
+    g++=4:12.2.* \
+    gcc=4:12.2.* \
+    git=1:2.39.* \
+    libprotobuf-dev=3.21.* \
+    libnl-route-3-dev=3.7.* \
+    make=4.3-4.1 \
+    pkg-config=1.8.* \
+    protobuf-compiler=3.21.*
+
+
+RUN git clone -b master --single-branch https://github.com/google/nsjail.git . && git checkout dccf911fd2659e7b08ce9507c25b2b38ec2c5800
+RUN make
\ No newline at end of file