Dockerfile

FROM ubuntu:24.04

# Stop ubuntu-20 interactive options.
ENV DEBIAN_FRONTEND noninteractive
ARG TARGETPLATFORM

# Stop script if any individual command fails.
RUN set -e

# Define LLVM version.
ENV llvm_version=21.1.0

# Define home directory
ENV HOME=/home/SVF-tools

# Define dependencies.
ENV lib_deps="cmake g++ gcc git zlib1g-dev libncurses5-dev libtinfo6 build-essential libssl-dev libpcre2-dev zip libzstd-dev"
ENV build_deps="wget xz-utils git gdb tcl software-properties-common"

# Fetch dependencies.
RUN apt-get update --fix-missing
RUN apt-get install -y $build_deps $lib_deps

# Use the python3 that ships with the Ubuntu 24.04 base image (python 3.12).
# Avoid pulling python3.10 from ppa:deadsnakes/ppa — Launchpad's PPA infrastructure
# has been intermittently unreachable from CI runners (HTTP 504 / 2-minute timeouts
# from add-apt-repository), and SVF does not pin a Python version.
RUN apt-get install -y python3-dev python3-pip python3-ipykernel
RUN python3 -m pip install --break-system-packages pysvf
RUN python3 -m pip install --break-system-packages z3-solver

# Fetch and build SVF source.
RUN echo "Downloading LLVM and building SVF to " ${HOME}
WORKDIR ${HOME}
RUN git clone "https://github.com/SVF-tools/SVF.git"
WORKDIR ${HOME}/SVF
RUN echo "Building SVF ..."
RUN bash ./build.sh

# Export SVF, llvm, z3 paths
ENV PATH=${HOME}/SVF/Release-build/bin:$PATH
ENV PATH=${HOME}/SVF/llvm-$llvm_version.obj/bin:$PATH
ENV SVF_DIR=${HOME}/SVF
ENV LLVM_DIR=${HOME}/SVF/llvm-$llvm_version.obj
ENV Z3_DIR=${HOME}/SVF/z3.obj
RUN ln -s ${Z3_DIR}/bin/libz3.so ${Z3_DIR}/bin/libz3.so.4

# Fetch and build Software-Security-Analysis
WORKDIR ${HOME}
RUN git clone "https://github.com/SVF-tools/Software-Security-Analysis.git"
WORKDIR ${HOME}/Software-Security-Analysis
RUN echo "Building Software-Security-Analysis ..."
RUN sed -i 's/lldb/gdb/g' ${HOME}/Software-Security-Analysis/.vscode/launch.json
RUN cmake -DCMAKE_BUILD_TYPE=Release .
RUN make -j8

# GDB inside Docker requires ptrace permissions at container runtime.
LABEL devcontainer.metadata='[{"runArgs":["--cap-add=SYS_PTRACE","--security-opt=seccomp=unconfined"]}]'