dhi.debian.fpm.wsc.Dockerfile

# build: docker build --no-cache --progress=plain --build-arg PHP_VERSION=8.4 -t docker.io/tobi312/php:8.4-dhi-fpm-debian-wsc -f dhi.debian.fpm.wsc.Dockerfile .
# check: docker run --rm --name phpcheck -it docker.io/tobi312/php:8.4-dhi-fpm-debian-wsc -m
# https://github.com/Tob1as/docker-php
# 
# https://hub.docker.com/hardened-images/catalog/dhi/php | short: https://dhi.io/catalog/php
# https://github.com/docker-hardened-images/catalog
#
# WSC = WoltLab Suite Core <https://www.woltlab.com/en/>
# PHP Extensions Requirements:
# - https://manual.woltlab.com/en/requirements/#php-extensions
# - https://manual.woltlab.com/en/elasticsearch/#system-requirements
# - https://manual.woltlab.com/en/ldap/#system-requirements
# Note: Some PHP Extensions/Modules are installed by default:
#       ctype curl dom intl libxml mbstring openssl opcache PDO zlib
# These are still needed: exif gd gmp imagick ldap pdo_mysql redis
#
ARG PHP_VERSION=8.4
ARG BUILD_PHP_VERSION=${PHP_VERSION}
ARG BUILD_OS=debian13
# =========================
# Stage 0: Build Base Image
# =========================
FROM dhi.io/php:${BUILD_PHP_VERSION}${BUILD_OS:+-${BUILD_OS}}-dev AS dev
ARG BUILD_PHP_VERSION

# =========================
# Stage 1: Build Extensions
# =========================
FROM dev AS builder
ARG BUILD_PHP_VERSION

WORKDIR /tmp

# Install required system libraries for building PHP extensions
RUN apt-get update \ 
    && apt-get install -y --no-install-recommends \
        git \
        unzip \
        autoconf \
        build-essential \
        libjpeg-dev \
        libpng-dev \
        libxpm-dev \
        libfreetype6-dev \
        libicu-dev \
        libldap2-dev \
        libgmp-dev \
    && apt-get install -y \
        libmagickwand-dev \
    && rm -rf /var/lib/apt/lists/*

# =========================
# Preparation:
# - move existing extensions, such as opcache, so that 
#   they are not copied into the final image (again).
# =========================

RUN echo "" \
    #&& ls ${PHP_PREFIX}/etc/php/conf.d/ \
    && rm -f ${PHP_PREFIX}/etc/php/conf.d/* \
    && VAR_PHP_EXTENSION_DIR=$(php -r "echo ini_get('extension_dir');") \
    #&& ls ${VAR_PHP_EXTENSION_DIR} \
    && rm -f ${VAR_PHP_EXTENSION_DIR}/* \
    && echo ""

# =========================
# Core PHP Extensions
# =========================

# exif
RUN cd $PHP_SRC_DIR/ext/exif \
    && phpize \
    && ./configure \
    && make -j$(nproc) \
    && make install

# gd
RUN cd $PHP_SRC_DIR/ext/gd \
    && phpize \
    && ./configure \
        #--with-avif \
        --with-freetype \
        --with-jpeg \
        --with-webp \
        #--with-xpm \
    && make -j$(nproc) \
    && make install

# gmp
RUN cd $PHP_SRC_DIR/ext/gmp \
    && phpize \
    && ./configure \
    && make -j$(nproc) \
    && make install

# ldap
RUN cd $PHP_SRC_DIR/ext/ldap \
    && phpize \
    && ./configure \
    && make -j$(nproc) \
    && make install

# pdo_mysql
RUN cd $PHP_SRC_DIR/ext/pdo_mysql \
    && phpize \
    && ./configure \
    && make -j$(nproc) \
    && make install

# =========================
# PECL Extensions
# =========================
WORKDIR /tmp

# Imagick <https://github.com/Imagick/imagick>
RUN pecl download imagick \
    && tar xzf imagick-*.tgz \
    && rm imagick-*.tgz \
    && cd imagick-* \
    && phpize \
    && ./configure \
    && make -j$(nproc) \
    && make install \
    && cd ..

# Redis <https://github.com/phpredis/phpredis/>
RUN pecl download redis \
    && tar xzf redis-*.tgz \
	&& rm redis-*.tgz \
    && cd redis-* \
    && phpize \
    && ./configure \
    && make -j$(nproc) \
    && make install \
    && cd ..
	
# =========================
# Enable all extensions
# =========================
RUN echo "" \
    && echo "extension=exif.so" > $PHP_INI_DIR/conf.d/docker-php-ext-exif.ini \
    && echo "extension=gd.so" > $PHP_INI_DIR/conf.d/docker-php-ext-gd.ini \
    && echo "extension=gmp.so" > $PHP_INI_DIR/conf.d/docker-php-ext-gmp.ini \
    && echo "extension=ldap.so" > $PHP_INI_DIR/conf.d/docker-php-ext-ldap.ini \
    && echo "extension=pdo_mysql.so" > $PHP_INI_DIR/conf.d/docker-php-ext-pdo_mysql.ini \
    && echo "extension=imagick.so" > $PHP_INI_DIR/conf.d/docker-php-ext-imagick.ini \
    && echo "extension=redis.so" > $PHP_INI_DIR/conf.d/docker-php-ext-redis.ini \
    && echo ""

# =========================
# Stage 2: Package extractor
# =========================
# Taken from: https://github.com/GoogleContainerTools/distroless/issues/863#issuecomment-986062361
# more see: https://github.com/Tob1as/docker-build-example/blob/main/distroless.debian.Dockerfile#L54-L100
FROM dev AS deb-extractor

WORKDIR /tmp
SHELL ["/bin/bash", "-o", "pipefail", "-c"]

# List of packages for download separated by spaces.
ENV PACKAGE_LIST_GD='libpng16-16t64 libwebp7 libjpeg62-turbo libxpm4 libfreetype6 libbz2-1.0 libsharpyuv0 libx11-6 libxau6 libxcb1 libxdmcp6'
ENV PACKAGE_LIST_IMAGICK="libgomp1 imagemagick-7-common libmagickcore-7.q16-10 libmagickcore-7.q16-10-extra libmagickwand-7.q16-10 liblcms2-2 liblqr-1-0 libfftw3-double3 libfontconfig1 libxext6 libltdl7 libglib2.0-0t64 libexpat1 libatomic1"
ENV PACKAGE_LIST="${PACKAGE_LIST_GD} ${PACKAGE_LIST_IMAGICK}"

# hadolint ignore=DL3008,DL3015,SC2086
RUN \
    apt-get update && \
    apt-get install -y apt-rdepends tree && \
    # Search subpackages for package (apt-rdepends PACKAGE | grep -v "^ " | sort -u | tr '\n' ' ')
    #packages=$(for package in $PACKAGE_LIST; do \
    #    apt-rdepends $package 2>/dev/null | \
    #    grep -v "^ " | \
    #    grep -v "^PreDepends:" | \
    #    sort -u; \
    #done | sort -u) && \
    packages=$PACKAGE_LIST ; \
    # Download packages
    echo ">> Packages to Download: $(echo $packages | tr '\n' ' ')" && \
    apt-get download \
        $packages \
    && \
    mkdir -p /dpkg/var/lib/dpkg/status.d/ && \
    for deb in *.deb; do \
        package_name=$(dpkg-deb -I "${deb}" | awk '/^ Package: .*$/ {print $2}'); \
        echo "Processing: ${package_name}"; \
        dpkg --ctrl-tarfile "$deb" | tar -Oxf - ./control > "/dpkg/var/lib/dpkg/status.d/${package_name}"; \
        dpkg --extract "$deb" /dpkg || exit 10; \
    done \
    && \
    echo "Packages have been processed !"

# List directory and file structure
#RUN tree /dpkg

# Delete everything except libraries (*.so) that are required for PHP extensions
RUN find /dpkg -mindepth 1 \
    ! -path '/dpkg/usr' \
    ! -path '/dpkg/usr/lib' \
    ! -path '/dpkg/usr/lib/*' \
    -exec rm -rf {} + \
    && find /dpkg -type f \( -name '*.a' -o -name '*.la' \) -exec rm -f {} +

# List directory and file structure
RUN tree /dpkg

# =========================
# Stage 3: DHI FPM Image
# =========================
FROM dhi.io/php:${BUILD_PHP_VERSION}${BUILD_OS:+-${BUILD_OS}}-fpm AS production
ARG BUILD_PHP_VERSION
#ARG BUILD_OS
ARG VCS_REF
ARG BUILD_DATE
LABEL org.opencontainers.image.authors="Tobias Hargesheimer <docker@ison.ws>" \
      org.opencontainers.image.title="DHI PHP-FPM for WSC" \
      org.opencontainers.image.description="DHI (Docker Hardened Images): Debian with PHP-FPM ${BUILD_PHP_VERSION} for WSC (WoltLab Suite Core)" \
      org.opencontainers.image.created="${BUILD_DATE}" \
      org.opencontainers.image.revision="${VCS_REF}" \
      org.opencontainers.image.licenses="Apache-2.0" \
      org.opencontainers.image.url="https://hub.docker.com/r/tobi312/php" \
      org.opencontainers.image.source="https://github.com/Tob1as/docker-php"
# Copy php extensions
COPY --from=builder ${PHP_PREFIX}/lib/php/extensions/ ${PHP_PREFIX}/lib/php/extensions/
COPY --from=builder ${PHP_PREFIX}/etc/php/conf.d/ ${PHP_PREFIX}/etc/php/conf.d/
# Copy the libraries from the extractor stage into root
COPY --from=deb-extractor /dpkg /