mirror of
https://github.com/Part-DB/Part-DB-server.git
synced 2025-06-20 17:15:51 +02:00
feat(docker): Refactor Dockerfile (#683)
* reorder nodejs/yarn install, separate packages per line * reduce run actions and reorganize commands * simplify file creation, copy in one layer only * fix lint LegacyKeyValueFormat * arg php_version to run different version * reorder copy from generated config * update dockerfile-frankenphp
This commit is contained in:
parent
756152dd68
commit
b5a0189f29
2 changed files with 139 additions and 81 deletions
183
Dockerfile
183
Dockerfile
|
@ -1,22 +1,64 @@
|
||||||
FROM debian:bullseye-slim
|
ARG BASE_IMAGE=debian:bullseye-slim
|
||||||
|
ARG PHP_VERSION=8.1
|
||||||
|
|
||||||
|
FROM ${BASE_IMAGE} AS base
|
||||||
|
ARG PHP_VERSION
|
||||||
|
|
||||||
# Install needed dependencies for PHP build
|
# Install needed dependencies for PHP build
|
||||||
#RUN apt-get update && apt-get install -y pkg-config curl libcurl4-openssl-dev libicu-dev \
|
#RUN apt-get update && apt-get install -y pkg-config curl libcurl4-openssl-dev libicu-dev \
|
||||||
# libpng-dev libjpeg-dev libfreetype6-dev gnupg zip libzip-dev libjpeg62-turbo-dev libonig-dev libxslt-dev libwebp-dev vim \
|
# libpng-dev libjpeg-dev libfreetype6-dev gnupg zip libzip-dev libjpeg62-turbo-dev libonig-dev libxslt-dev libwebp-dev vim \
|
||||||
# && apt-get -y autoremove && apt-get clean autoclean && rm -rf /var/lib/apt/lists/*
|
# && apt-get -y autoremove && apt-get clean autoclean && rm -rf /var/lib/apt/lists/*
|
||||||
|
|
||||||
RUN apt-get update && apt-get -y install apt-transport-https lsb-release ca-certificates curl zip mariadb-client postgresql-client \
|
RUN apt-get update && apt-get -y install \
|
||||||
|
apt-transport-https \
|
||||||
|
lsb-release \
|
||||||
|
ca-certificates \
|
||||||
|
curl \
|
||||||
|
zip \
|
||||||
|
mariadb-client \
|
||||||
|
postgresql-client \
|
||||||
&& curl -sSLo /usr/share/keyrings/deb.sury.org-php.gpg https://packages.sury.org/php/apt.gpg \
|
&& curl -sSLo /usr/share/keyrings/deb.sury.org-php.gpg https://packages.sury.org/php/apt.gpg \
|
||||||
&& sh -c 'echo "deb [signed-by=/usr/share/keyrings/deb.sury.org-php.gpg] https://packages.sury.org/php/ $(lsb_release -sc) main" > /etc/apt/sources.list.d/php.list' \
|
&& sh -c 'echo "deb [signed-by=/usr/share/keyrings/deb.sury.org-php.gpg] https://packages.sury.org/php/ $(lsb_release -sc) main" > /etc/apt/sources.list.d/php.list' \
|
||||||
&& apt-get update && apt-get upgrade -y \
|
&& apt-get update && apt-get upgrade -y \
|
||||||
&& apt-get install -y apache2 php8.1 php8.1-fpm php8.1-opcache php8.1-curl php8.1-gd php8.1-mbstring php8.1-xml php8.1-bcmath php8.1-intl php8.1-zip php8.1-xsl php8.1-sqlite3 php8.1-mysql php8.1-pgsql gpg sudo \
|
&& apt-get install -y \
|
||||||
&& apt-get -y autoremove && apt-get clean autoclean && rm -rf /var/lib/apt/lists/*;
|
apache2 \
|
||||||
|
php${PHP_VERSION} \
|
||||||
ENV APACHE_CONFDIR /etc/apache2
|
php${PHP_VERSION}-fpm \
|
||||||
ENV APACHE_ENVVARS $APACHE_CONFDIR/envvars
|
php${PHP_VERSION}-opcache \
|
||||||
|
php${PHP_VERSION}-curl \
|
||||||
|
php${PHP_VERSION}-gd \
|
||||||
|
php${PHP_VERSION}-mbstring \
|
||||||
|
php${PHP_VERSION}-xml \
|
||||||
|
php${PHP_VERSION}-bcmath \
|
||||||
|
php${PHP_VERSION}-intl \
|
||||||
|
php${PHP_VERSION}-zip \
|
||||||
|
php${PHP_VERSION}-xsl \
|
||||||
|
php${PHP_VERSION}-sqlite3 \
|
||||||
|
php${PHP_VERSION}-mysql \
|
||||||
|
php${PHP_VERSION}-pgsql \
|
||||||
|
gpg \
|
||||||
|
sudo \
|
||||||
|
&& apt-get -y autoremove && apt-get clean autoclean && rm -rf /var/lib/apt/lists/* \
|
||||||
# Create workdir and set permissions if directory does not exists
|
# Create workdir and set permissions if directory does not exists
|
||||||
RUN mkdir -p /var/www/html && chown -R www-data:www-data /var/www/html
|
&& mkdir -p /var/www/html \
|
||||||
|
&& chown -R www-data:www-data /var/www/html \
|
||||||
|
# delete the "index.html" that installing Apache drops in here
|
||||||
|
&& rm -rvf /var/www/html/*
|
||||||
|
|
||||||
|
# Install node and yarn
|
||||||
|
RUN curl -sS https://dl.yarnpkg.com/debian/pubkey.gpg | apt-key add - && \
|
||||||
|
echo "deb https://dl.yarnpkg.com/debian/ stable main" | tee /etc/apt/sources.list.d/yarn.list && \
|
||||||
|
curl -sL https://deb.nodesource.com/setup_18.x | bash - && \
|
||||||
|
apt-get update && apt-get install -y \
|
||||||
|
nodejs \
|
||||||
|
yarn \
|
||||||
|
&& apt-get -y autoremove && apt-get clean autoclean && rm -rf /var/lib/apt/lists/*
|
||||||
|
|
||||||
|
# Install composer
|
||||||
|
COPY --from=composer:latest /usr/bin/composer /usr/bin/composer
|
||||||
|
|
||||||
|
ENV APACHE_CONFDIR=/etc/apache2
|
||||||
|
ENV APACHE_ENVVARS=$APACHE_CONFDIR/envvars
|
||||||
|
|
||||||
# Configure apache 2 (taken from https://github.com/docker-library/php/blob/master/8.2/bullseye/apache/Dockerfile)
|
# Configure apache 2 (taken from https://github.com/docker-library/php/blob/master/8.2/bullseye/apache/Dockerfile)
|
||||||
# generically convert lines like
|
# generically convert lines like
|
||||||
|
@ -27,8 +69,6 @@ RUN mkdir -p /var/www/html && chown -R www-data:www-data /var/www/html
|
||||||
# so that they can be overridden at runtime ("-e APACHE_RUN_USER=...")
|
# so that they can be overridden at runtime ("-e APACHE_RUN_USER=...")
|
||||||
RUN sed -ri 's/^export ([^=]+)=(.*)$/: ${\1:=\2}\nexport \1/' "$APACHE_ENVVARS"; \
|
RUN sed -ri 's/^export ([^=]+)=(.*)$/: ${\1:=\2}\nexport \1/' "$APACHE_ENVVARS"; \
|
||||||
set -eux; . "$APACHE_ENVVARS"; \
|
set -eux; . "$APACHE_ENVVARS"; \
|
||||||
# delete the "index.html" that installing Apache drops in here
|
|
||||||
rm -rvf /var/www/html/*; \
|
|
||||||
\
|
\
|
||||||
# logs should go to stdout / stderr
|
# logs should go to stdout / stderr
|
||||||
ln -sfT /dev/stderr "$APACHE_LOG_DIR/error.log"; \
|
ln -sfT /dev/stderr "$APACHE_LOG_DIR/error.log"; \
|
||||||
|
@ -36,82 +76,86 @@ RUN sed -ri 's/^export ([^=]+)=(.*)$/: ${\1:=\2}\nexport \1/' "$APACHE_ENVVARS"
|
||||||
ln -sfT /dev/stdout "$APACHE_LOG_DIR/other_vhosts_access.log"; \
|
ln -sfT /dev/stdout "$APACHE_LOG_DIR/other_vhosts_access.log"; \
|
||||||
chown -R --no-dereference "$APACHE_RUN_USER:$APACHE_RUN_GROUP" "$APACHE_LOG_DIR";
|
chown -R --no-dereference "$APACHE_RUN_USER:$APACHE_RUN_GROUP" "$APACHE_LOG_DIR";
|
||||||
|
|
||||||
# Enable php-fpm
|
# ---
|
||||||
RUN a2enmod proxy_fcgi setenvif && a2enconf php8.1-fpm
|
|
||||||
|
|
||||||
|
FROM scratch AS apache-config
|
||||||
|
ARG PHP_VERSION
|
||||||
# Configure php-fpm to log to stdout of the container (stdout of PID 1)
|
# Configure php-fpm to log to stdout of the container (stdout of PID 1)
|
||||||
# We have to use /proc/1/fd/1 because /dev/stdout or /proc/self/fd/1 does not point to the container stdout (because we use apache as entrypoint)
|
# We have to use /proc/1/fd/1 because /dev/stdout or /proc/self/fd/1 does not point to the container stdout (because we use apache as entrypoint)
|
||||||
# We also disable the clear_env option to allow the use of environment variables in php-fpm
|
# We also disable the clear_env option to allow the use of environment variables in php-fpm
|
||||||
RUN { \
|
COPY <<EOF /etc/php/${PHP_VERSION}/fpm/pool.d/zz-docker.conf
|
||||||
echo '[global]'; \
|
[global]
|
||||||
echo 'error_log = /proc/1/fd/1'; \
|
error_log = /proc/1/fd/1
|
||||||
echo; \
|
|
||||||
echo '[www]'; \
|
[www]
|
||||||
echo 'access.log = /proc/1/fd/1'; \
|
access.log = /proc/1/fd/1
|
||||||
echo 'catch_workers_output = yes'; \
|
catch_workers_output = yes
|
||||||
echo 'decorate_workers_output = no'; \
|
decorate_workers_output = no
|
||||||
echo 'clear_env = no'; \
|
clear_env = no
|
||||||
} | tee "/etc/php/8.1/fpm/pool.d/zz-docker.conf"
|
EOF
|
||||||
|
|
||||||
# PHP files should be handled by PHP, and should be preferred over any other file type
|
# PHP files should be handled by PHP, and should be preferred over any other file type
|
||||||
RUN { \
|
COPY <<EOF /etc/apache2/conf-available/docker-php.conf
|
||||||
echo '<FilesMatch \.php$>'; \
|
<FilesMatch \\.php$>
|
||||||
echo '\tSetHandler application/x-httpd-php'; \
|
SetHandler application/x-httpd-php
|
||||||
echo '</FilesMatch>'; \
|
</FilesMatch>
|
||||||
echo; \
|
|
||||||
echo 'DirectoryIndex disabled'; \
|
DirectoryIndex disabled
|
||||||
echo 'DirectoryIndex index.php index.html'; \
|
DirectoryIndex index.php index.html
|
||||||
echo; \
|
|
||||||
echo '<Directory /var/www/>'; \
|
<Directory /var/www/>
|
||||||
echo '\tOptions -Indexes'; \
|
Options -Indexes
|
||||||
echo '\tAllowOverride All'; \
|
AllowOverride All
|
||||||
echo '</Directory>'; \
|
</Directory>
|
||||||
} | tee "$APACHE_CONFDIR/conf-available/docker-php.conf" \
|
EOF
|
||||||
&& a2enconf docker-php
|
|
||||||
|
|
||||||
# Enable opcache and configure it recommended for symfony (see https://symfony.com/doc/current/performance.html)
|
# Enable opcache and configure it recommended for symfony (see https://symfony.com/doc/current/performance.html)
|
||||||
RUN \
|
COPY <<EOF /etc/php/${PHP_VERSION}/fpm/conf.d/symfony-recommended.ini
|
||||||
{ \
|
opcache.memory_consumption=256
|
||||||
echo 'opcache.memory_consumption=256'; \
|
opcache.max_accelerated_files=20000
|
||||||
echo 'opcache.max_accelerated_files=20000'; \
|
opcache.validate_timestamp=0
|
||||||
echo 'opcache.validate_timestamp=0'; \
|
# Configure Realpath cache for performance
|
||||||
# Configure Realpath cache for performance
|
realpath_cache_size=4096K
|
||||||
echo 'realpath_cache_size=4096K'; \
|
realpath_cache_ttl=600
|
||||||
echo 'realpath_cache_ttl=600'; \
|
EOF
|
||||||
} > /etc/php/8.1/fpm/conf.d/symfony-recommended.ini
|
|
||||||
|
|
||||||
# Increase upload limit and enable preloading
|
# Increase upload limit and enable preloading
|
||||||
RUN \
|
COPY <<EOF /etc/php/${PHP_VERSION}/fpm/conf.d/partdb.ini
|
||||||
{ \
|
upload_max_filesize=256M
|
||||||
echo 'upload_max_filesize=256M'; \
|
post_max_size=300M
|
||||||
echo 'post_max_size=300M'; \
|
opcache.preload_user=www-data
|
||||||
echo 'opcache.preload_user=www-data'; \
|
opcache.preload=/var/www/html/config/preload.php
|
||||||
echo 'opcache.preload=/var/www/html/config/preload.php'; \
|
EOF
|
||||||
} > /etc/php/8.1/fpm/conf.d/partdb.ini
|
|
||||||
|
|
||||||
# Install node and yarn
|
COPY ./.docker/symfony.conf /etc/apache2/sites-available/symfony.conf
|
||||||
RUN curl -sS https://dl.yarnpkg.com/debian/pubkey.gpg | apt-key add -
|
|
||||||
RUN echo "deb https://dl.yarnpkg.com/debian/ stable main" | tee /etc/apt/sources.list.d/yarn.list
|
|
||||||
RUN curl -sL https://deb.nodesource.com/setup_18.x | bash - && apt-get update && apt-get install -y nodejs yarn && apt-get -y autoremove && apt-get clean autoclean && rm -rf /var/lib/apt/lists/*
|
|
||||||
|
|
||||||
# Install composer
|
# ---
|
||||||
COPY --from=composer:latest /usr/bin/composer /usr/bin/composer
|
|
||||||
|
|
||||||
|
FROM base
|
||||||
|
ARG PHP_VERSION
|
||||||
|
|
||||||
# Set working dir
|
# Set working dir
|
||||||
WORKDIR /var/www/html
|
WORKDIR /var/www/html
|
||||||
|
COPY --from=apache-config / /
|
||||||
COPY --chown=www-data:www-data . .
|
COPY --chown=www-data:www-data . .
|
||||||
|
|
||||||
# Setup apache2
|
# Setup apache2
|
||||||
RUN a2dissite 000-default.conf
|
RUN a2dissite 000-default.conf && \
|
||||||
COPY ./.docker/symfony.conf /etc/apache2/sites-available/symfony.conf
|
a2ensite symfony.conf && \
|
||||||
RUN a2ensite symfony.conf
|
# Enable php-fpm
|
||||||
RUN a2enmod rewrite
|
a2enmod proxy_fcgi setenvif && \
|
||||||
|
a2enconf php${PHP_VERSION}-fpm && \
|
||||||
|
a2enconf docker-php && \
|
||||||
|
a2enmod rewrite
|
||||||
|
|
||||||
# Install composer and yarn dependencies for Part-DB
|
# Install composer and yarn dependencies for Part-DB
|
||||||
USER www-data
|
USER www-data
|
||||||
RUN composer install -a --no-dev && composer clear-cache
|
RUN composer install -a --no-dev && \
|
||||||
RUN yarn install --network-timeout 600000 && yarn build && yarn cache clean && rm -rf node_modules/
|
composer clear-cache
|
||||||
|
RUN yarn install --network-timeout 600000 && \
|
||||||
|
yarn build && \
|
||||||
|
yarn cache clean && \
|
||||||
|
rm -rf node_modules/
|
||||||
|
|
||||||
# Use docker env to output logs to stdout
|
# Use docker env to output logs to stdout
|
||||||
ENV APP_ENV=docker
|
ENV APP_ENV=docker
|
||||||
|
@ -119,10 +163,9 @@ ENV DATABASE_URL="sqlite:///%kernel.project_dir%/uploads/app.db"
|
||||||
|
|
||||||
USER root
|
USER root
|
||||||
|
|
||||||
# Copy entrypoint to /usr/local/bin and make it executable
|
# Copy entrypoint and apache2-foreground to /usr/local/bin and make it executable
|
||||||
RUN cp ./.docker/partdb-entrypoint.sh /usr/local/bin/partdb-entrypoint.sh && chmod +x /usr/local/bin/partdb-entrypoint.sh
|
RUN install ./.docker/partdb-entrypoint.sh /usr/local/bin && \
|
||||||
# Copy apache2-foreground to /usr/local/bin and make it executable
|
install ./.docker/apache2-foreground /usr/local/bin
|
||||||
RUN cp ./.docker/apache2-foreground /usr/local/bin/apache2-foreground && chmod +x /usr/local/bin/apache2-foreground
|
|
||||||
ENTRYPOINT ["partdb-entrypoint.sh"]
|
ENTRYPOINT ["partdb-entrypoint.sh"]
|
||||||
CMD ["apache2-foreground"]
|
CMD ["apache2-foreground"]
|
||||||
|
|
||||||
|
@ -130,4 +173,4 @@ CMD ["apache2-foreground"]
|
||||||
STOPSIGNAL SIGWINCH
|
STOPSIGNAL SIGWINCH
|
||||||
|
|
||||||
EXPOSE 80
|
EXPOSE 80
|
||||||
VOLUME ["/var/www/html/uploads", "/var/www/html/public/media"]
|
VOLUME ["/var/www/html/uploads", "/var/www/html/public/media"]
|
||||||
|
|
|
@ -1,11 +1,25 @@
|
||||||
FROM dunglas/frankenphp:1-php8.3 AS frankenphp_upstream
|
FROM dunglas/frankenphp:1-php8.3 AS frankenphp_upstream
|
||||||
|
|
||||||
RUN apt-get update && apt-get -y install curl zip mariadb-client postgresql-client file acl git gettext ca-certificates gnupg \
|
RUN apt-get update && apt-get -y install \
|
||||||
|
curl \
|
||||||
|
ca-certificates \
|
||||||
|
mariadb-client \
|
||||||
|
postgresql-client \
|
||||||
|
file \
|
||||||
|
acl \
|
||||||
|
git \
|
||||||
|
gettext \
|
||||||
|
gnupg \
|
||||||
|
zip \
|
||||||
&& apt-get -y autoremove && apt-get clean autoclean && rm -rf /var/lib/apt/lists/*;
|
&& apt-get -y autoremove && apt-get clean autoclean && rm -rf /var/lib/apt/lists/*;
|
||||||
|
|
||||||
# Create workdir and set permissions if directory does not exists
|
# Install node and yarn
|
||||||
RUN mkdir -p /app
|
RUN curl -sS https://dl.yarnpkg.com/debian/pubkey.gpg | apt-key add - && \
|
||||||
WORKDIR /app
|
echo "deb https://dl.yarnpkg.com/debian/ stable main" | tee /etc/apt/sources.list.d/yarn.list && \
|
||||||
|
curl -sL https://deb.nodesource.com/setup_20.x | bash - && \
|
||||||
|
apt-get update && apt-get install -y \
|
||||||
|
nodejs yarn \
|
||||||
|
&& apt-get -y autoremove && apt-get clean autoclean && rm -rf /var/lib/apt/lists/*
|
||||||
|
|
||||||
# Install PHP
|
# Install PHP
|
||||||
RUN set -eux; \
|
RUN set -eux; \
|
||||||
|
@ -33,15 +47,13 @@ ENV FRANKENPHP_CONFIG="import worker.Caddyfile"
|
||||||
|
|
||||||
RUN mv "$PHP_INI_DIR/php.ini-production" "$PHP_INI_DIR/php.ini"
|
RUN mv "$PHP_INI_DIR/php.ini-production" "$PHP_INI_DIR/php.ini"
|
||||||
|
|
||||||
# Install node and yarn
|
|
||||||
RUN curl -sS https://dl.yarnpkg.com/debian/pubkey.gpg | apt-key add -
|
|
||||||
RUN echo "deb https://dl.yarnpkg.com/debian/ stable main" | tee /etc/apt/sources.list.d/yarn.list
|
|
||||||
RUN curl -sL https://deb.nodesource.com/setup_20.x | bash - && apt-get update && apt-get install -y nodejs yarn && apt-get -y autoremove && apt-get clean autoclean && rm -rf /var/lib/apt/lists/*
|
|
||||||
|
|
||||||
# Install composer
|
# Install composer
|
||||||
ENV COMPOSER_ALLOW_SUPERUSER=1
|
ENV COMPOSER_ALLOW_SUPERUSER=1
|
||||||
#COPY --from=composer:latest /usr/bin/composer /usr/bin/composer
|
#COPY --from=composer:latest /usr/bin/composer /usr/bin/composer
|
||||||
|
|
||||||
|
# Create workdir and set permissions if directory does not exists
|
||||||
|
WORKDIR /app
|
||||||
|
|
||||||
# prevent the reinstallation of vendors at every changes in the source code
|
# prevent the reinstallation of vendors at every changes in the source code
|
||||||
COPY --link composer.* symfony.* ./
|
COPY --link composer.* symfony.* ./
|
||||||
RUN set -eux; \
|
RUN set -eux; \
|
||||||
|
@ -58,7 +70,10 @@ RUN set -eux; \
|
||||||
composer run-script --no-dev post-install-cmd; \
|
composer run-script --no-dev post-install-cmd; \
|
||||||
chmod +x bin/console; sync;
|
chmod +x bin/console; sync;
|
||||||
|
|
||||||
RUN yarn install --network-timeout 600000 && yarn build && yarn cache clean && rm -rf node_modules/
|
RUN yarn install --network-timeout 600000 && \
|
||||||
|
yarn build && \
|
||||||
|
yarn cache clean && \
|
||||||
|
rm -rf node_modules/
|
||||||
|
|
||||||
# Use docker env to output logs to stdout
|
# Use docker env to output logs to stdout
|
||||||
ENV APP_ENV=docker
|
ENV APP_ENV=docker
|
||||||
|
@ -83,4 +98,4 @@ ENV XDG_DATA_HOME /data
|
||||||
EXPOSE 80
|
EXPOSE 80
|
||||||
EXPOSE 443
|
EXPOSE 443
|
||||||
EXPOSE 443/udp
|
EXPOSE 443/udp
|
||||||
EXPOSE 2019
|
EXPOSE 2019
|
||||||
|
|
Loading…
Add table
Add a link
Reference in a new issue