Dockerfile

FROM alpine:3.20 AS base

RUN apk add --no-cache \
  autoconf \
  automake \
  brotli-dev \
  build-base \
  cmake \
  git \
  libtool \
  nghttp2-dev \
  pkgconfig \
  wget \
  zlib-dev \
  linux-headers \
  libpsl-dev

# https://curl.se/docs/http3.html
RUN git clone --depth 1 -b openssl-3.3.0+quic https://github.com/quictls/openssl \
    && cd openssl \
    && ./config enable-tls1_3 --prefix=/usr/local/openssl \
    && make \
    && make install

# Different architectures use different lib directories
RUN cp -r /usr/local/openssl/lib64 /usr/local/openssl/lib 2>/dev/null || :

RUN cd .. \
    && git clone --depth 1 -b v1.4.0 https://github.com/ngtcp2/nghttp3 \
    && cd nghttp3 \
    && git submodule update --init \
    && autoreconf -i \
    && ./configure --prefix=/usr/local/nghttp3 --enable-lib-only \
    && make \
    && make install

RUN cd .. \
    && git clone --depth 1 -b v1.6.0 https://github.com/ngtcp2/ngtcp2 \
    && cd ngtcp2 \
    && autoreconf -fi \
    && ./configure PKG_CONFIG_PATH=/usr/local/openssl/lib/pkgconfig:/usr/local/nghttp3/lib/pkgconfig LDFLAGS="-Wl,-rpath,/usr/local/openssl/lib" --prefix=/usr/local/ngtcp2 --enable-lib-only \
    && make \
    && make install

RUN cd .. \
    && git clone --depth 1 -b curl-8_10_1 https://github.com/curl/curl \
    && cd curl \
    && autoreconf -fi \
    && export PKG_CONFIG_PATH=/usr/local/openssl/lib/pkgconfig:/usr/local/nghttp3/lib/pkgconfig:/usr/local/ngtcp2/lib/pkgconfig \
    && LDFLAGS="-Wl,-rpath,/usr/local/openssl/lib" ./configure -with-zlib --with-brotli --with-openssl=/usr/local/openssl --with-nghttp3=/usr/local/nghttp3 --with-ngtcp2=/usr/local/ngtcp2 \
    && make \
    && make install

FROM alpine:3.20

COPY --from=base /usr/local/bin/curl /usr/local/bin/curl
COPY --from=base /usr/local/lib/libcurl.so.4 /usr/local/lib/libcurl.so.4
COPY --from=base /usr/local/nghttp3/lib/libnghttp3.so /usr/local/nghttp3/lib/libnghttp3.so.9
COPY --from=base /usr/local/ngtcp2/lib/libngtcp2_crypto_quictls.so /usr/local/ngtcp2/lib/libngtcp2_crypto_quictls.so.2
COPY --from=base /usr/local/ngtcp2/lib/libngtcp2.so /usr/local/ngtcp2/lib/libngtcp2.so.16
COPY --from=base /usr/lib/libnghttp2.so /usr/lib/libnghttp2.so.14
COPY --from=base /usr/local/openssl/lib/libssl.so.81.3 /usr/local/openssl/lib/libssl.so.81.3
COPY --from=base /usr/local/openssl/lib/libcrypto.so.81.3 /usr/local/openssl/lib/libcrypto.so.81.3
COPY --from=base /usr/lib/libbrotlidec.so.1 /usr/lib/libbrotlidec.so.1
COPY --from=base /usr/lib/libbrotlicommon.so.1 /usr/lib/libbrotlicommon.so.1
COPY --from=base /usr/lib/libpsl.so.5 /usr/lib/libpsl.so.5
COPY --from=base /usr/lib/libidn2.so.0 /usr/lib/libidn2.so.0
COPY --from=base /usr/lib/libunistring.so.5 /usr/lib/libunistring.so.5

USER nobody
RUN env | sort; which curl; curl --version