lightninglabs · djkazic · Sep 9, 2025 · Sep 9, 2025
diff --git a/.github/workflows/build.yaml b/.github/workflows/build.yaml
@@ -8,6 +8,8 @@ jobs:
     strategy:
       matrix:
         version:
+          - '29.1'
+          - '29.1/alpine'
           - '29'
           - '29/alpine'
           - '28'

diff --git a/26/alpine/Dockerfile b/26/alpine/Dockerfile
@@ -2,10 +2,14 @@
 FROM alpine as berkeleydb
 
 RUN sed -i 's/http\:\/\/dl-cdn.alpinelinux.org/https\:\/\/alpine.global.ssl.fastly.net/g' /etc/apk/repositories
-RUN apk --no-cache add autoconf
-RUN apk --no-cache add automake
-RUN apk --no-cache add build-base
-RUN apk --no-cache add libressl
+RUN apk --no-cache add \
+  autoconf \
+  automake \
+  build-base \
+  libressl \
+  linux-headers \
+  wget \
+  tar
 
 ENV BERKELEYDB_VERSION=db-4.8.30.NC
 ENV BERKELEYDB_PREFIX=/opt/${BERKELEYDB_VERSION}
@@ -17,7 +21,7 @@ RUN mkdir -p ${BERKELEYDB_PREFIX}
 
 WORKDIR /${BERKELEYDB_VERSION}/build_unix
 
-RUN ../dist/configure --enable-cxx --disable-shared --with-pic --prefix=${BERKELEYDB_PREFIX} --build=aarch64-unknown-linux-gnu
+RUN ../dist/configure --enable-cxx --disable-shared --with-pic --with-mutex=POSIX/pthreads --prefix=${BERKELEYDB_PREFIX} --build=aarch64-unknown-linux-gnu
 RUN make -j4
 RUN make install
 RUN rm -rf ${BERKELEYDB_PREFIX}/docs

diff --git a/27/alpine/Dockerfile b/27/alpine/Dockerfile
@@ -2,10 +2,14 @@
 FROM alpine as berkeleydb
 
 RUN sed -i 's/http\:\/\/dl-cdn.alpinelinux.org/https\:\/\/alpine.global.ssl.fastly.net/g' /etc/apk/repositories
-RUN apk --no-cache add autoconf
-RUN apk --no-cache add automake
-RUN apk --no-cache add build-base
-RUN apk --no-cache add libressl
+RUN apk --no-cache add \
+  autoconf \
+  automake \
+  build-base \
+  libressl \
+  linux-headers \
+  wget \
+  tar
 
 ENV BERKELEYDB_VERSION=db-4.8.30.NC
 ENV BERKELEYDB_PREFIX=/opt/${BERKELEYDB_VERSION}
@@ -17,7 +21,7 @@ RUN mkdir -p ${BERKELEYDB_PREFIX}
 
 WORKDIR /${BERKELEYDB_VERSION}/build_unix
 
-RUN ../dist/configure --enable-cxx --disable-shared --with-pic --prefix=${BERKELEYDB_PREFIX} --build=aarch64-unknown-linux-gnu
+RUN ../dist/configure --enable-cxx --disable-shared --with-pic --with-mutex=POSIX/pthreads --prefix=${BERKELEYDB_PREFIX} --build=aarch64-unknown-linux-gnu
 RUN make -j4
 RUN make install
 RUN rm -rf ${BERKELEYDB_PREFIX}/docs

diff --git a/28/alpine/Dockerfile b/28/alpine/Dockerfile
@@ -2,10 +2,14 @@
 FROM alpine as berkeleydb
 
 RUN sed -i 's/http\:\/\/dl-cdn.alpinelinux.org/https\:\/\/alpine.global.ssl.fastly.net/g' /etc/apk/repositories
-RUN apk --no-cache add autoconf
-RUN apk --no-cache add automake
-RUN apk --no-cache add build-base
-RUN apk --no-cache add libressl
+RUN apk --no-cache add \
+  autoconf \
+  automake \
+  build-base \
+  libressl \
+  linux-headers \
+  wget \
+  tar
 
 ENV BERKELEYDB_VERSION=db-4.8.30.NC
 ENV BERKELEYDB_PREFIX=/opt/${BERKELEYDB_VERSION}
@@ -17,7 +21,7 @@ RUN mkdir -p ${BERKELEYDB_PREFIX}
 
 WORKDIR /${BERKELEYDB_VERSION}/build_unix
 
-RUN ../dist/configure --enable-cxx --disable-shared --with-pic --prefix=${BERKELEYDB_PREFIX} --build=aarch64-unknown-linux-gnu
+RUN ../dist/configure --enable-cxx --disable-shared --with-pic --with-mutex=POSIX/pthreads --prefix=${BERKELEYDB_PREFIX} --build=aarch64-unknown-linux-gnu
 RUN make -j4
 RUN make install
 RUN rm -rf ${BERKELEYDB_PREFIX}/docs
@@ -97,8 +101,6 @@ RUN make install
 RUN strip ${BITCOIN_PREFIX}/bin/bitcoin-cli
 RUN strip ${BITCOIN_PREFIX}/bin/bitcoin-tx
 RUN strip ${BITCOIN_PREFIX}/bin/bitcoind
-RUN strip ${BITCOIN_PREFIX}/lib/libbitcoinconsensus.a
-RUN strip ${BITCOIN_PREFIX}/lib/libbitcoinconsensus.so.0.0.0
 
 # Build stage for compiled artifacts
 FROM alpine

diff --git a/29.1/Dockerfile b/29.1/Dockerfile
@@ -0,0 +1,79 @@
+FROM debian:bookworm-slim
+
+ARG UID=101
+ARG GID=101
+
+LABEL maintainer.0="João Fonseca (@joaopaulofonseca)" \
+  maintainer.1="Pedro Branco (@pedrobranco)" \
+  maintainer.2="Rui Marinho (@ruimarinho)"
+
+RUN groupadd --gid ${GID} bitcoin \
+  && useradd --create-home --no-log-init -u ${UID} -g ${GID} bitcoin \
+  && apt-get update -y \
+  && apt-get install -y curl gnupg gosu \
+  && apt-get clean \
+  && rm -rf /var/lib/apt/lists/* /tmp/* /var/tmp/*
+
+# Special variables just for release candidates, both should be empty for stable
+# releases.
+ARG RC
+ARG RC_DIR
+
+ARG TARGETPLATFORM
+ENV BITCOIN_VERSION=29.1
+ENV BITCOIN_DATA=/home/bitcoin/.bitcoin
+ENV PATH=/opt/bitcoin-${BITCOIN_VERSION}${RC}/bin:$PATH
+
+RUN set -ex \
+  && if [ "${TARGETPLATFORM}" = "linux/amd64" ]; then export TARGETPLATFORM=x86_64-linux-gnu; fi \
+  && if [ "${TARGETPLATFORM}" = "linux/arm64" ]; then export TARGETPLATFORM=aarch64-linux-gnu; fi \
+  && if [ "${TARGETPLATFORM}" = "linux/arm/v7" ]; then export TARGETPLATFORM=arm-linux-gnueabihf; fi \
+  && for key in \
+  101598DC823C1B5F9A6624ABA5E0907A0380E6C3 \
+  6A8F9C266528E25AEB1D7731C2371D91CB716EA7 \
+  2840EAABF4BC9F0FFD716AFAFBAFCC46DE2D3FE2 \
+  E86AE73439625BBEE306AAE6B66D427F873CB1A3 \
+  A0083660F235A27000CD3C81CE6EC49945C17EA6 \
+  F19F5FF2B0589EC341220045BA03F4DBE0C63FB4 \
+  637DB1E23370F84AFF88CCE03152347D07DA627C \
+  ED9BDF7AD6A55E232E84524257FF9BDBCC301009 \
+  CFB16E21C950F67FA95E558F2EEB9F5CC09526C1 \
+  152812300785C96444D3334D17565732E08E5E41 \
+  C388F6961FB972A95678E327F62711DBDCA8AE56 \
+  9DEAE0DC7063249FB05474681E4AED62986CD25D \
+  D1DBF2C4B96F2DEBF4C16654410108112E7EA81F \
+  F4FC70F07310028424EFC20A8E4256593F177720 \
+  E61773CD6E01040E2F1BD78CE7E2984B6289C93A \
+  9D3CC86A72F8494342EA5FD10A41BDC3F4FAFF1C \
+  33C103B4B2794170546CCF7BCFB2C83C66CD792A \
+  0CCBAAFD76A2ECE2CCD3141DE2FFD5B1D88CA97D \
+  F2CFC4ABD0B99D837EEBB7D09B79B45691DB4173 \
+  0AD83877C1F0CD1EE9BD660AD7CC770B81FD22A8 \
+  ; do \
+  gpg --batch --keyserver keyserver.ubuntu.com --recv-keys "$key" || \
+  gpg --batch --keyserver keys.openpgp.org --recv-keys "$key" || \
+  gpg --batch --keyserver pgp.mit.edu --recv-keys "$key" || \
+  gpg --batch --keyserver keyserver.pgp.com --recv-keys "$key" || \
+  gpg --batch --keyserver ha.pool.sks-keyservers.net --recv-keys "$key" || \
+  gpg --batch --keyserver hkp://p80.pool.sks-keyservers.net:80 --recv-keys "$key" ; \
+  done \
+  && curl -SLO https://bitcoincore.org/bin/bitcoin-core-${BITCOIN_VERSION}/${RC_DIR}bitcoin-${BITCOIN_VERSION}${RC}-${TARGETPLATFORM}.tar.gz \
+  && curl -SLO https://bitcoincore.org/bin/bitcoin-core-${BITCOIN_VERSION}/${RC_DIR}SHA256SUMS \
+  && curl -SLO https://bitcoincore.org/bin/bitcoin-core-${BITCOIN_VERSION}/${RC_DIR}SHA256SUMS.asc \
+  && gpg --verify SHA256SUMS.asc SHA256SUMS \
+  && grep " bitcoin-${BITCOIN_VERSION}${RC}-${TARGETPLATFORM}.tar.gz" SHA256SUMS | sha256sum -c - \
+  && tar -xzf *.tar.gz -C /opt \
+  && rm *.tar.gz *.asc \
+  && rm -rf /opt/bitcoin-${BITCOIN_VERSION}${RC}/bin/bitcoin-qt
+
+COPY docker-entrypoint.sh /entrypoint.sh
+
+VOLUME ["/home/bitcoin/.bitcoin"]
+
+EXPOSE 8332 8333 18332 18333 18443 18444 38333 38332
+
+ENTRYPOINT ["/entrypoint.sh"]
+
+RUN bitcoind -version | grep "Bitcoin Core daemon version v${BITCOIN_VERSION}"
+
+CMD ["bitcoind"]
diff --git a/29.1/alpine/Dockerfile b/29.1/alpine/Dockerfile
@@ -0,0 +1,121 @@
+# Build stage for Bitcoin Core
+FROM alpine as bitcoin-core
+
+ENV GNUPGHOME=/tmp/gnupg
+
+RUN sed -i 's/http\:\/\/dl-cdn.alpinelinux.org/https\:\/\/alpine.global.ssl.fastly.net/g' /etc/apk/repositories
+RUN apk --no-cache add cmake
+RUN apk --no-cache add boost-dev
+RUN apk --no-cache add build-base
+RUN apk --no-cache add chrpath
+RUN apk --no-cache add file
+RUN apk --no-cache add gnupg
+RUN apk --no-cache add libevent-dev
+RUN apk --no-cache add libressl
+RUN apk --no-cache add libtool
+RUN apk --no-cache add linux-headers
+RUN apk --no-cache add sqlite-dev
+RUN apk --no-cache add zeromq-dev
+RUN mkdir -p ${GNUPGHOME}
+RUN set -ex \
+  && for key in \
+  101598DC823C1B5F9A6624ABA5E0907A0380E6C3 \
+  6A8F9C266528E25AEB1D7731C2371D91CB716EA7 \
+  2840EAABF4BC9F0FFD716AFAFBAFCC46DE2D3FE2 \
+  E86AE73439625BBEE306AAE6B66D427F873CB1A3 \
+  A0083660F235A27000CD3C81CE6EC49945C17EA6 \
+  F19F5FF2B0589EC341220045BA03F4DBE0C63FB4 \
+  637DB1E23370F84AFF88CCE03152347D07DA627C \
+  ED9BDF7AD6A55E232E84524257FF9BDBCC301009 \
+  CFB16E21C950F67FA95E558F2EEB9F5CC09526C1 \
+  152812300785C96444D3334D17565732E08E5E41 \
+  C388F6961FB972A95678E327F62711DBDCA8AE56 \
+  9DEAE0DC7063249FB05474681E4AED62986CD25D \
+  D1DBF2C4B96F2DEBF4C16654410108112E7EA81F \
+  F4FC70F07310028424EFC20A8E4256593F177720 \
+  E61773CD6E01040E2F1BD78CE7E2984B6289C93A \
+  9D3CC86A72F8494342EA5FD10A41BDC3F4FAFF1C \
+  33C103B4B2794170546CCF7BCFB2C83C66CD792A \
+  0CCBAAFD76A2ECE2CCD3141DE2FFD5B1D88CA97D \
+  F2CFC4ABD0B99D837EEBB7D09B79B45691DB4173 \
+  0AD83877C1F0CD1EE9BD660AD7CC770B81FD22A8 \
+  ; do \
+  gpg --batch --keyserver keyserver.ubuntu.com --recv-keys "$key" || \
+  gpg --batch --keyserver keys.openpgp.org --recv-keys "$key" || \
+  gpg --batch --keyserver keyserver.pgp.com --recv-keys "$key" || \
+  gpg --batch --keyserver ha.pool.sks-keyservers.net --recv-keys "$key" || \
+  gpg --batch --keyserver hkp://p80.pool.sks-keyservers.net:80 --recv-keys "$key" ; \
+  done
+
+# Special variables just for release candidates, both should be empty for stable
+# releases.
+ARG RC
+ARG RC_DIR
+
+ENV BITCOIN_VERSION=29.1
+ENV BITCOIN_PREFIX=/opt/bitcoin-${BITCOIN_VERSION}${RC}
+
+RUN wget https://bitcoincore.org/bin/bitcoin-core-${BITCOIN_VERSION}/${RC_DIR}SHA256SUMS
+RUN wget https://bitcoincore.org/bin/bitcoin-core-${BITCOIN_VERSION}/${RC_DIR}SHA256SUMS.asc
+RUN wget https://bitcoincore.org/bin/bitcoin-core-${BITCOIN_VERSION}/${RC_DIR}bitcoin-${BITCOIN_VERSION}${RC}.tar.gz
+RUN gpg --verify SHA256SUMS.asc SHA256SUMS
+RUN grep " bitcoin-${BITCOIN_VERSION}${RC}.tar.gz\$" SHA256SUMS | sha256sum -c -
+RUN tar -xzf *.tar.gz
+
+WORKDIR /bitcoin-${BITCOIN_VERSION}${RC}
+
+RUN cmake -B build \
+    -DWITH_QRENCODE=OFF \
+    -DBUILD_TESTS=OFF \
+    -DWITH_ZMQ=ON \
+    -DCMAKE_INSTALL_PREFIX=${BITCOIN_PREFIX}
+RUN cmake --build build -j4
+RUN cmake --install build
+RUN strip ${BITCOIN_PREFIX}/bin/bitcoin-cli
+RUN strip ${BITCOIN_PREFIX}/bin/bitcoind
+
+# Build stage for compiled artifacts
+FROM alpine
+
+ARG UID=100
+ARG GID=101
+
+LABEL maintainer.0="João Fonseca (@joaopaulofonseca)" \
+  maintainer.1="Pedro Branco (@pedrobranco)" \
+  maintainer.2="Rui Marinho (@ruimarinho)"
+
+RUN addgroup bitcoin --gid ${GID} --system
+RUN adduser --uid ${UID} --system bitcoin --ingroup bitcoin
+RUN sed -i 's/http\:\/\/dl-cdn.alpinelinux.org/https\:\/\/alpine.global.ssl.fastly.net/g' /etc/apk/repositories
+RUN apk --no-cache add \
+  boost-filesystem \
+  boost-system \
+  boost-thread \
+  libevent \
+  libzmq \
+  shadow \
+  sqlite-dev \
+  su-exec
+
+# Special variables just for release candidates, both should be empty for stable
+# releases.
+# ENV RC=
+# ENV RC_DIR=
+
+ENV BITCOIN_DATA=/home/bitcoin/.bitcoin
+ENV BITCOIN_VERSION=29.1
+ENV BITCOIN_PREFIX=/opt/bitcoin-${BITCOIN_VERSION}${RC}
+ENV PATH=${BITCOIN_PREFIX}/bin:$PATH
+
+COPY --from=bitcoin-core /opt /opt
+COPY docker-entrypoint.sh /entrypoint.sh
+
+VOLUME ["/home/bitcoin/.bitcoin"]
+
+EXPOSE 8332 8333 18332 18333 18444
+
+ENTRYPOINT ["/entrypoint.sh"]
+
+RUN bitcoind -version | grep "Bitcoin Core daemon version v${BITCOIN_VERSION}"
+
+CMD ["bitcoind"]
diff --git a/29.1/alpine/docker-entrypoint.sh b/29.1/alpine/docker-entrypoint.sh
@@ -0,0 +1,39 @@
+#!/bin/sh
+set -e
+
+if [ -n "${UID+x}" ] && [ "${UID}" != "0" ]; then
+  usermod -u "$UID" bitcoin
+fi
+
+if [ -n "${GID+x}" ] && [ "${GID}" != "0" ]; then
+  groupmod -g "$GID" bitcoin
+fi
+
+echo "$0: assuming uid:gid for bitcoin:bitcoin of $(id -u bitcoin):$(id -g bitcoin)"
+
+if [ $(echo "$1" | cut -c1) = "-" ]; then
+  echo "$0: assuming arguments for bitcoind"
+
+  set -- bitcoind "$@"
+fi
+
+if [ $(echo "$1" | cut -c1) = "-" ] || [ "$1" = "bitcoind" ]; then
+  mkdir -p "$BITCOIN_DATA"
+  chmod 700 "$BITCOIN_DATA"
+  # Fix permissions for home dir.
+  chown -R bitcoin:bitcoin "$(getent passwd bitcoin | cut -d: -f6)"
+  # Fix permissions for bitcoin data dir.
+  chown -R bitcoin:bitcoin "$BITCOIN_DATA"
+
+  echo "$0: setting data directory to $BITCOIN_DATA"
+
+  set -- "$@" -datadir="$BITCOIN_DATA"
+fi
+
+if [ "$1" = "bitcoind" ] || [ "$1" = "bitcoin-cli" ] || [ "$1" = "bitcoin-tx" ]; then
+  echo
+  exec su-exec bitcoin "$@"
+fi
+
+echo
+exec "$@"
diff --git a/29.1/docker-entrypoint.sh b/29.1/docker-entrypoint.sh
@@ -0,0 +1,39 @@
+#!/bin/bash
+set -e
+
+if [ -n "${UID+x}" ] && [ "${UID}" != "0" ]; then
+  usermod -u "$UID" bitcoin
+fi
+
+if [ -n "${GID+x}" ] && [ "${GID}" != "0" ]; then
+  groupmod -g "$GID" bitcoin
+fi
+
+echo "$0: assuming uid:gid for bitcoin:bitcoin of $(id -u bitcoin):$(id -g bitcoin)"
+
+if [ $(echo "$1" | cut -c1) = "-" ]; then
+  echo "$0: assuming arguments for bitcoind"
+
+  set -- bitcoind "$@"
+fi
+
+if [ $(echo "$1" | cut -c1) = "-" ] || [ "$1" = "bitcoind" ]; then
+  mkdir -p "$BITCOIN_DATA"
+  chmod 700 "$BITCOIN_DATA"
+  # Fix permissions for home dir.
+  chown -R bitcoin:bitcoin "$(getent passwd bitcoin | cut -d: -f6)"
+  # Fix permissions for bitcoin data dir.
+  chown -R bitcoin:bitcoin "$BITCOIN_DATA"
+
+  echo "$0: setting data directory to $BITCOIN_DATA"
+
+  set -- "$@" -datadir="$BITCOIN_DATA"
+fi
+
+if [ "$1" = "bitcoind" ] || [ "$1" = "bitcoin-cli" ] || [ "$1" = "bitcoin-tx" ]; then
+  echo
+  exec gosu bitcoin "$@"
+fi
+
+echo
+exec "$@"