image/base/Dockerfile

   1 # NAME:     discourse/base
   2 # VERSION:  release
   3 FROM debian:buster-slim
   4
   5 ENV PG_MAJOR 13
   6 ENV RUBY_ALLOCATOR /usr/lib/libjemalloc.so.1
   7 ENV RAILS_ENV production
   8
   9 #LABEL maintainer="Sam Saffron \"https://twitter.com/samsaffron\""
  10
  11 RUN echo 2.0.`date +%Y%m%d` > /VERSION
  12
  13 RUN apt update && apt install -y gnupg sudo curl
  14 RUN echo "debconf debconf/frontend select Teletype" | debconf-set-selections
  15 RUN apt update && apt -y install fping
  16 RUN sh -c "fping proxy && echo 'Acquire { Retries \"0\"; HTTP { Proxy \"http://proxy:3128\";}; };' > /etc/apt/apt.conf.d/40proxy && apt update || true"
  17 RUN apt -y install software-properties-common
  18 RUN apt-mark hold initscripts
  19 RUN apt -y upgrade
  20
  21 RUN apt install -y locales locales-all
  22 ENV LC_ALL en_US.UTF-8
  23 ENV LANG en_US.UTF-8
  24 ENV LANGUAGE en_US.UTF-8
  25
  26 RUN curl https://apt.postgresql.org/pub/repos/apt/ACCC4CF8.asc | apt-key add -
  27 RUN echo "deb http://apt.postgresql.org/pub/repos/apt/ buster-pgdg main" | \
  28         tee /etc/apt/sources.list.d/postgres.list
  29 RUN curl --silent --location https://deb.nodesource.com/setup_14.x | sudo bash -
  30 RUN apt -y update
  31 # install these without recommends to avoid pulling in e.g.
  32 # X11 libraries, mailutils
  33 RUN apt -y install --no-install-recommends git rsyslog logrotate cron ssh-client less
  34 RUN apt -y install build-essential rsync \
  35                        libxslt-dev libcurl4-openssl-dev \
  36                        libssl-dev libyaml-dev libtool \
  37                        libxml2-dev gawk parallel \
  38                        postgresql-${PG_MAJOR} postgresql-client-${PG_MAJOR} \
  39                        postgresql-contrib-${PG_MAJOR} libpq-dev libreadline-dev \
  40                        anacron wget \
  41                        psmisc vim whois brotli libunwind-dev \
  42                        libtcmalloc-minimal4 cmake \
  43                        pngcrush pngquant
  44 RUN sed -i -e 's/start -q anacron/anacron -s/' /etc/cron.d/anacron
  45 RUN sed -i.bak 's/$ModLoad imklog/#$ModLoad imklog/' /etc/rsyslog.conf
  46 RUN sed -i.bak 's/module(load="imklog")/#module(load="imklog")/' /etc/rsyslog.conf
  47 RUN dpkg-divert --local --rename --add /sbin/initctl
  48 RUN sh -c "test -f /sbin/initctl || ln -s /bin/true /sbin/initctl"
  49 RUN cd / &&\
  50     apt -y install runit socat &&\
  51     mkdir -p /etc/runit/1.d &&\
  52     apt clean &&\
  53     rm -f /etc/apt/apt.conf.d/40proxy &&\
  54     locale-gen en_US &&\
  55     apt install -y nodejs &&\
  56     npm install -g terser &&\
  57     npm install -g uglify-js
  58
  59 ADD install-nginx /tmp/install-nginx
  60 RUN /tmp/install-nginx
  61
  62 RUN apt -y install advancecomp jhead jpegoptim libjpeg-turbo-progs optipng
  63
  64 RUN mkdir /jemalloc-stable && cd /jemalloc-stable &&\
  65       wget https://github.com/jemalloc/jemalloc/releases/download/3.6.0/jemalloc-3.6.0.tar.bz2 &&\
  66       tar -xjf jemalloc-3.6.0.tar.bz2 && cd jemalloc-3.6.0 && ./configure --prefix=/usr && make && make install &&\
  67       cd / && rm -rf /jemalloc-stable
  68
  69 RUN mkdir /jemalloc-new && cd /jemalloc-new &&\
  70       wget https://github.com/jemalloc/jemalloc/releases/download/5.2.1/jemalloc-5.2.1.tar.bz2 &&\
  71       tar -xjf jemalloc-5.2.1.tar.bz2 && cd jemalloc-5.2.1 && ./configure --prefix=/usr --with-install-suffix=5.2.1 && make build_lib && make install_lib &&\
  72       cd / && rm -rf /jemalloc-new
  73
  74 RUN echo 'gem: --no-document' >> /usr/local/etc/gemrc &&\
  75     mkdir /src && cd /src && git clone https://github.com/sstephenson/ruby-build.git &&\
  76     cd /src/ruby-build && ./install.sh &&\
  77     cd / && rm -rf /src/ruby-build && (ruby-build 2.7.2 /usr/local)
  78
  79 RUN gem update --system
  80
  81 RUN gem install bundler --force &&\
  82     rm -rf /usr/local/share/ri/2.7.2/system &&\
  83     cd / && git clone https://github.com/discourse/pups.git
  84
  85 ADD install-redis /tmp/install-redis
  86 RUN /tmp/install-redis
  87
  88 ADD install-imagemagick /tmp/install-imagemagick
  89 RUN /tmp/install-imagemagick
  90
  91 # Validate install
  92 RUN ruby -Eutf-8 -e "v = \`convert -version\`; %w{png tiff jpeg freetype heic}.each { |f| unless v.include?(f); STDERR.puts('no ' + f +  ' support in imagemagick'); exit(-1); end }"
  93
  94 # This tool allows us to disable huge page support for our current process
  95 # since the flag is preserved through forks and execs it can be used on any
  96 # process
  97 ADD thpoff.c /src/thpoff.c
  98 RUN gcc -o /usr/local/sbin/thpoff /src/thpoff.c && rm /src/thpoff.c
  99
 100 # clean up for docker squash
 101 RUN   rm -fr /usr/share/man &&\
 102       rm -fr /usr/share/doc &&\
 103       rm -fr /usr/share/vim/vim74/tutor &&\
 104       rm -fr /usr/share/vim/vim74/doc &&\
 105       rm -fr /usr/share/vim/vim74/lang &&\
 106       rm -fr /usr/local/share/doc &&\
 107       rm -fr /usr/local/share/ruby-build &&\
 108       rm -fr /root/.gem &&\
 109       rm -fr /root/.npm &&\
 110       rm -fr /tmp/* &&\
 111       rm -fr /usr/share/vim/vim74/spell/en*
 112
 113
 114 # this can probably be done, but I worry that people changing PG locales will have issues
 115 # cd /usr/share/locale && rm -fr `ls -d */ | grep -v en`
 116
 117 RUN mkdir -p /etc/runit/3.d
 118
 119 ADD runit-1 /etc/runit/1
 120 ADD runit-1.d-cleanup-pids /etc/runit/1.d/cleanup-pids
 121 ADD runit-1.d-anacron /etc/runit/1.d/anacron
 122 ADD runit-1.d-00-fix-var-logs /etc/runit/1.d/00-fix-var-logs
 123 ADD runit-2 /etc/runit/2
 124 ADD runit-3 /etc/runit/3
 125 ADD boot /sbin/boot
 126
 127 ADD cron /etc/service/cron/run
 128 ADD rsyslog /etc/service/rsyslog/run
 129 ADD cron.d_anacron /etc/cron.d/anacron
 130
 131 # Discourse specific bits
 132 RUN useradd discourse -s /bin/bash -m -U &&\
 133     mkdir -p /var/www &&\
 134     cd /var/www &&\
 135     git clone --depth 1 https://github.com/discourse/discourse.git &&\
 136     cd discourse &&\
 137     git remote set-branches --add origin tests-passed &&\
 138     chown -R discourse:discourse /var/www/discourse &&\
 139     cd /var/www/discourse &&\
 140     sudo -u discourse bundle install --deployment --jobs 4 --without test development &&\
 141     bundle exec rake maxminddb:get &&\
 142     find /var/www/discourse/vendor/bundle -name tmp -type d -exec rm -rf {} +