From 8fef40a37ecb1ab3d2675fd29cb7f03988086313 Mon Sep 17 00:00:00 2001
From: Jason Volk <jason@zemos.net>
Date: Sun, 15 Jun 2025 21:38:09 +0000
Subject: [PATCH] docker: Add assertion for dynamic or static executable upon
 install.

Signed-off-by: Jason Volk <jason@zemos.net>
---
 docker/Dockerfile.install | 8 ++++++++
 1 file changed, 8 insertions(+)

diff --git a/docker/Dockerfile.install b/docker/Dockerfile.install
index 0089644d..c1d419e6 100644
--- a/docker/Dockerfile.install
+++ b/docker/Dockerfile.install
@@ -5,6 +5,7 @@ ARG rust_target
 ARG CARGO_TARGET_DIR
 ARG cargo_target_profile
 ARG install_prefix
+ARG assert_linkage=""
 
 WORKDIR /
 COPY --link --from=input . .
@@ -14,6 +15,13 @@ ENV src_path="${CARGO_TARGET_DIR}/${rust_target}/${cargo_target_profile}/tuwunel
 ENV dst_path="${install_prefix}/bin/tuwunel"
 COPY --from=bins $src_path $dst_path
 RUN <<EOF
+    ret=$(ldd "${dst_path}")
+    if [ "$ret" = "0" ] && [ "$assert_linkage" = "static" ]; then
+        exit 1
+    elif [ "$ret" != "0" ] && [ "$assert_linkage" = "dynamic" ]; then
+        exit 1
+    fi
+
     set -eux
     ldd -v ${dst_path} || true
     du -h ${dst_path}