Install GHC directly

Author: AlistairB

8.10/buster/Dockerfile

@@ -2,14 +2,18 @@ FROM debian:buster
 
 ENV LANG C.UTF-8
 
+# common haskell + stack dependencies
 RUN apt-get update && \
     apt-get install -y --no-install-recommends \
         ca-certificates \
         curl \
-        dirmngr \
-        g++ \
         git \
+        gcc \
         gnupg \
+        g++ \
+        libc6-dev \
+        libffi-dev \
+        libgmp-dev \
         libsqlite3-dev \
         libtinfo-dev \
         make \
@@ -19,7 +23,10 @@ RUN apt-get update && \
         zlib1g-dev && \
     rm -rf /var/lib/apt/lists/*
 
-ARG GHC=8.10.4
+# https://downloads.haskell.org/~cabal/cabal-install-3.6.0.0/ does not provide GPG signatures
+# except for the SHA256SUMS.sig . Not sure what the best process here is, probably ask
+# cabal to provide gpg signatures for the cabal-install tar files?
+
 ARG DEBIAN_KEY=427CB69AAC9D00F2A43CAF1CBA3CBA3FFE22B574
 ARG CABAL_INSTALL=3.4
 
@@ -30,10 +37,31 @@ RUN export GNUPGHOME="$(mktemp -d)" && \
     echo 'deb http://downloads.haskell.org/debian buster main' > /etc/apt/sources.list.d/ghc.list && \
     apt-get update && \
     apt-get install -y --no-install-recommends \
-        cabal-install-${CABAL_INSTALL} \
-        ghc-${GHC} && \
+        cabal-install-${CABAL_INSTALL} && \
     rm -rf "$GNUPGHOME" /var/lib/apt/lists/*
 
+ARG GHC=8.10.7
+
+# To be verified once https://gitlab.haskell.org/ghc/ghc/-/issues/20362 is resolved
+# gpg --batch --keyserver hkps://pgp.mit.edu:443 --receive-keys 588764FBE22D19C4 && \
+# gpg --batch --verify ghc-$GHC-x86_64-deb10-linux.tar.xz.sig ghc-$GHC-x86_64-deb10-linux.tar.xz && \
+
+RUN cd /tmp && \
+  export GNUPGHOME="$(mktemp -d)" && \
+  curl -sSLO https://downloads.haskell.org/~ghc/$GHC/ghc-$GHC-x86_64-deb10-linux.tar.xz && \
+  curl -sSLO https://downloads.haskell.org/~ghc/$GHC/ghc-$GHC-x86_64-deb10-linux.tar.xz.sig && \
+  tar xf ghc-$GHC-x86_64-deb10-linux.tar.xz && \
+  cd ghc-$GHC && \
+  ./configure --prefix /opt/ghc/$GHC && \
+  make install && \
+  find /opt/ghc/lib -name "*.p_hi" -type f -delete && \
+  find /opt/ghc/lib -name "*_p.a" -type f -delete && \
+  rm -rf "$GNUPGHOME" /tmp/*
+
+# ensure any user gets GHC on the path
+RUN echo "export PATH=\"/opt/ghc/$GHC/bin:\$PATH\"" >> /etc/profile.d/ghc_path.sh && \
+	chmod +x /etc/profile.d/ghc_path.sh
+
 ARG STACK=2.7.3
 ARG STACK_KEY=C5705533DA4F78D8664B5DC0575159689BEFB442
 ARG STACK_RELEASE_KEY=2C6A674E85EE3FB896AFC9B965101FF31C5C154D