docker-php/dhi.alpine.helper.Dockerfile at master · Tob1as/docker-php · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
# build: docker build --no-cache --progress=plain --target=production-alpine -t docker.io/tobi312/php:dhi-helper-alpine -f dhi.alpine.helper.Dockerfile .
ARG BUILD_OS=3.23
FROM dhi.io/alpine-base:${BUILD_OS}-dev AS dev-alpine

SHELL ["/bin/sh", "-o", "pipefail", "-c"]

COPY <<'EOF' /usr/local/bin/php-fpm-healthcheck.sh
#!/bin/sh
# required: fcgi (alpine) or libfcgi-bin (debian)
: "${PHP_FPM_STATUS_HOST:="127.0.0.1"}"       # set host
: "${PHP_FPM_STATUS_PORT:="9001"}"            # PHP-FPM Status/Ping Port (default: 9000, but here use 9001)
: "${PHP_FPM_PING_PATH:="/php_fpm_ping"}"     # (default: /ping, but here use /php_fpm_ping)
echo ">> FCGI Settings: Host=${PHP_FPM_STATUS_HOST}, Port=${PHP_FPM_STATUS_PORT}, Path=${PHP_FPM_PING_PATH}"
SCRIPT_NAME="${PHP_FPM_PING_PATH}" SCRIPT_FILENAME="${PHP_FPM_PING_PATH}" REQUEST_METHOD=GET cgi-fcgi -bind -connect "${PHP_FPM_PING_HOST}:${PHP_FPM_STATUS_PORT}" >/dev/null 2>&1
echo $?
EOF

COPY conf/wsc-setup-preparation.sh /usr/local/bin/wsc-setup-preparation.sh
COPY conf/mysql-setup-preparation.sh /usr/local/bin/mysql-setup-preparation.sh

RUN chmod +x /usr/local/bin/*.sh


FROM dev-alpine AS builder-alpine

SHELL ["/bin/sh", "-o", "pipefail", "-c"]

WORKDIR /tmp

ENV PACKAGE_LIST_CURL=""
ENV PACKAGE_LIST_NANO=""
ENV PACKAGE_LIST_DB=""
ENV PACKAGE_LIST_Q=""
ENV PACKAGE_LIST_SSH=""
# example package extractor: https://github.com/Tob1as/docker-php/blob/master/dhi.alpine.fpm.wsc.Dockerfile#L150
# List of packages for download separated by spaces.
ENV PACKAGE_LIST_CURL="curl libcurl zlib c-ares nghttp3 nghttp2-libs libidn2 libpsl libssl3 libcrypto3 zstd-libs brotli-libs libunistring"
ENV PACKAGE_LIST_NANO="nano libncursesw ncurses-terminfo-base"
ENV PACKAGE_LIST_DB="mysql-client mariadb-client libstdc++ libgcc mariadb-connector-c"
#ENV PACKAGE_LIST_DB="${PACKAGE_LIST_DB} mariadb-backup pcre2 libaio"
ENV PACKAGE_LIST_Q="jq oniguruma yq-go"
ENV PACKAGE_LIST_SSH="sshpass openssh-keygen openssh-client-common openssh-client-default libncursesw ncurses-terminfo-base libedit"
ENV PACKAGE_LIST="fcgi unzip kubectl ${PACKAGE_LIST_CURL} ${PACKAGE_LIST_NANO} ${PACKAGE_LIST_DB} ${PACKAGE_LIST_Q} ${PACKAGE_LIST_SSH}"
# hadolint ignore=DL3008,DL3015,SC2086
RUN \
    #apk fetch --no-cache --recursive $PACKAGE_LIST && \
    apk fetch --no-cache $(echo $PACKAGE_LIST | tr ' ' '\n' | sort -u | tr '\n' ' ') && \
    mkdir -p /apkroot && \
    for pkg in *.apk; do \
        tar -xzf "$pkg" -C /apkroot; \
    done && \
    echo "Packages have been processed !"
# List directory and file structure
#RUN tree /apkroot

COPY --from=dev-alpine /usr/local/bin/ /apkroot/usr/local/bin/

RUN tree /apkroot


FROM dhi.io/alpine-base:${BUILD_OS} AS production-alpine
ARG BUILD_PHP_VERSION
ARG VCS_REF
ARG BUILD_DATE
#ENV TERM=xterm
LABEL org.opencontainers.image.authors="Tobias Hargesheimer <docker@ison.ws>" \
      org.opencontainers.image.title="Helper tools (dhi alpine)" \
      org.opencontainers.image.description="DHI (Docker Hardened Images): Helper tools on Alpine" \
      org.opencontainers.image.created="${BUILD_DATE}" \
      org.opencontainers.image.revision="${VCS_REF}" \
      org.opencontainers.image.licenses="Apache-2.0" \
      org.opencontainers.image.url="https://hub.docker.com/r/tobi312/php" \
      org.opencontainers.image.source="https://github.com/Tob1as/docker-php"
# Copy the libraries from the extractor/dev stage into root
COPY --from=builder-alpine /apkroot /
WORKDIR /tmp
#USER nonroot
CMD [ "tail", "-f", "/dev/null" ]