0a39c4075b
- modified buildx.sh to build privatebin/fs, privatebin/pdo, privatebin/gcs and privatebin/nginx-fpm-alpine - default build of privatebin/nginx-fpm-alpine contains everything
69 lines
2.9 KiB
Docker
69 lines
2.9 KiB
Docker
FROM alpine:3.14
|
|
|
|
MAINTAINER PrivateBin <support@privatebin.org>
|
|
|
|
ARG ALPINE_PACKAGES="php8-pdo_mysql php8-pdo_pgsql"
|
|
ARG COMPOSER_PACKAGES="google/cloud-storage"
|
|
|
|
ENV RELEASE 1.3.5
|
|
ENV PBURL https://github.com/PrivateBin/PrivateBin/
|
|
ENV S6_READ_ONLY_ROOT 1
|
|
ENV CONFIG_PATH /srv/cfg
|
|
|
|
RUN \
|
|
# Install dependencies
|
|
apk add --no-cache gnupg nginx php8 php8-curl php8-fpm php8-json php8-gd \
|
|
php8-mbstring php8-opcache php8-phar \
|
|
s6-overlay tzdata php8-openssl $ALPINE_PACKAGES \
|
|
&& apk upgrade --no-cache \
|
|
# Remove (some of the) default nginx config
|
|
&& rm -f /etc/nginx.conf /etc/nginx/http.d/default.conf /etc/php8/php-fpm.d/www.conf \
|
|
&& rm -rf /etc/nginx/sites-* \
|
|
# Ensure nginx logs, even if the config has errors, are written to stderr
|
|
&& ln -s /dev/stderr /var/log/nginx/error.log \
|
|
# Install PrivateBin
|
|
&& export GNUPGHOME="$(mktemp -d)" \
|
|
&& gpg2 --list-public-keys || /bin/true \
|
|
&& wget -qO - https://privatebin.info/key/release.asc | gpg2 --import - \
|
|
&& rm -rf /var/www/* \
|
|
&& cd /tmp \
|
|
&& wget -qO ${RELEASE}.tar.gz.asc ${PBURL}releases/download/${RELEASE}/PrivateBin-${RELEASE}.tar.gz.asc \
|
|
&& wget -q ${PBURL}archive/${RELEASE}.tar.gz \
|
|
&& gpg2 --verify ${RELEASE}.tar.gz.asc \
|
|
&& wget -qO composer-setup.php https://getcomposer.org/installer \
|
|
&& ln -s $(which php8) /usr/local/bin/php \
|
|
&& php composer-setup.php --install-dir=/usr/local/bin --filename=composer \
|
|
&& cd /var/www \
|
|
&& tar -xzf /tmp/${RELEASE}.tar.gz --strip 1 \
|
|
&& wget -q $(echo ${PBURL} | sed s/github.com/raw.githubusercontent.com/)${RELEASE}/composer.json \
|
|
&& wget -q $(echo ${PBURL} | sed s/github.com/raw.githubusercontent.com/)${RELEASE}/composer.lock \
|
|
&& composer remove --dev --no-update phpunit/phpunit \
|
|
&& ([ -z "$COMPOSER_PACKAGES"] || composer require --no-update $COMPOSER_PACKAGES) \
|
|
&& composer update --no-dev --optimize-autoloader \
|
|
&& rm *.md cfg/conf.sample.php composer.* /usr/local/bin/* \
|
|
&& mv cfg lib tpl vendor /srv \
|
|
&& mkdir -p /srv/data \
|
|
&& sed -i "s#define('PATH', '');#define('PATH', '/srv/');#" index.php \
|
|
# Support running s6 under a non-root user
|
|
&& mkdir -p /etc/s6/services/nginx/supervise /etc/s6/services/php-fpm8/supervise \
|
|
&& mkfifo \
|
|
/etc/s6/services/nginx/supervise/control \
|
|
/etc/s6/services/php-fpm8/supervise/control \
|
|
&& chown -R 65534:82 /etc/s6 /run /srv/* /var/lib/nginx /var/www \
|
|
&& chmod o+rwx /run /var/lib/nginx /var/lib/nginx/tmp \
|
|
# Clean up
|
|
&& rm -rf "${GNUPGHOME}" /tmp/* \
|
|
&& apk del gnupg php8 php8-curl php8-mbstring php8-phar
|
|
|
|
COPY etc/ /etc/
|
|
|
|
WORKDIR /var/www
|
|
# user nobody, group www-data
|
|
USER 65534:82
|
|
|
|
# mark dirs as volumes that need to be writable, allows running the container --read-only
|
|
VOLUME /run /srv/data /tmp /var/lib/nginx/tmp
|
|
|
|
EXPOSE 8080
|
|
|
|
ENTRYPOINT ["/init"]
|