From 72c1c49da357a089598503c94f8b451a281bbf78 Mon Sep 17 00:00:00 2001 From: thewoosterisroot Date: Thu, 16 Apr 2020 19:30:50 +0200 Subject: Adding dockerfiles for multi-arch builds and manifest. --- Dockerfile | 294 ----------------------------------------- Dockerfile.amd64 | 294 +++++++++++++++++++++++++++++++++++++++++ Dockerfile.arm64v8 | 77 +++++++++++ wekan-dockerfile-manifest.yaml | 11 ++ 4 files changed, 382 insertions(+), 294 deletions(-) delete mode 100644 Dockerfile create mode 100644 Dockerfile.amd64 create mode 100644 Dockerfile.arm64v8 create mode 100644 wekan-dockerfile-manifest.yaml diff --git a/Dockerfile b/Dockerfile deleted file mode 100644 index 29248ca1..00000000 --- a/Dockerfile +++ /dev/null @@ -1,294 +0,0 @@ -FROM ubuntu:rolling -LABEL maintainer="wekan" - -# Set the environment variables (defaults where required) -# DOES NOT WORK: paxctl fix for alpine linux: https://github.com/wekan/wekan/issues/1303 -# ENV BUILD_DEPS="paxctl" -ENV BUILD_DEPS="apt-utils libarchive-tools gnupg gosu wget curl bzip2 g++ build-essential git ca-certificates python3" \ - DEBUG=false \ - NODE_VERSION=v12.16.1 \ - METEOR_RELEASE=1.10-rc.2 \ - USE_EDGE=false \ - METEOR_EDGE=1.5-beta.17 \ - NPM_VERSION=latest \ - FIBERS_VERSION=4.0.1 \ - ARCHITECTURE=linux-x64 \ - SRC_PATH=./ \ - WITH_API=true \ - ACCOUNTS_LOCKOUT_KNOWN_USERS_FAILURES_BEFORE=3 \ - ACCOUNTS_LOCKOUT_KNOWN_USERS_PERIOD=60 \ - ACCOUNTS_LOCKOUT_KNOWN_USERS_FAILURE_WINDOW=15 \ - ACCOUNTS_LOCKOUT_UNKNOWN_USERS_FAILURES_BERORE=3 \ - ACCOUNTS_LOCKOUT_UNKNOWN_USERS_LOCKOUT_PERIOD=60 \ - ACCOUNTS_LOCKOUT_UNKNOWN_USERS_FAILURE_WINDOW=15 \ - RICHER_CARD_COMMENT_EDITOR=false \ - CARD_OPENED_WEBHOOK_ENABLED=false \ - ATTACHMENTS_STORE_PATH="" \ - MAX_IMAGE_PIXEL="" \ - IMAGE_COMPRESS_RATIO="" \ - NOTIFICATION_TRAY_AFTER_READ_DAYS_BEFORE_REMOVE="" \ - BIGEVENTS_PATTERN=NONE \ - NOTIFY_DUE_DAYS_BEFORE_AND_AFTER="" \ - NOTIFY_DUE_AT_HOUR_OF_DAY="" \ - EMAIL_NOTIFICATION_TIMEOUT=30000 \ - MATOMO_ADDRESS="" \ - MATOMO_SITE_ID="" \ - MATOMO_DO_NOT_TRACK=true \ - MATOMO_WITH_USERNAME=false \ - BROWSER_POLICY_ENABLED=true \ - TRUSTED_URL="" \ - WEBHOOKS_ATTRIBUTES="" \ - OAUTH2_ENABLED=false \ - OAUTH2_LOGIN_STYLE=redirect \ - OAUTH2_CLIENT_ID="" \ - OAUTH2_SECRET="" \ - OAUTH2_SERVER_URL="" \ - OAUTH2_AUTH_ENDPOINT="" \ - OAUTH2_USERINFO_ENDPOINT="" \ - OAUTH2_TOKEN_ENDPOINT="" \ - OAUTH2_ID_MAP="" \ - OAUTH2_USERNAME_MAP="" \ - OAUTH2_FULLNAME_MAP="" \ - OAUTH2_ID_TOKEN_WHITELIST_FIELDS="" \ - OAUTH2_REQUEST_PERMISSIONS='openid profile email' \ - OAUTH2_EMAIL_MAP="" \ - LDAP_ENABLE=false \ - LDAP_PORT=389 \ - LDAP_HOST="" \ - LDAP_BASEDN="" \ - LDAP_LOGIN_FALLBACK=false \ - LDAP_RECONNECT=true \ - LDAP_TIMEOUT=10000 \ - LDAP_IDLE_TIMEOUT=10000 \ - LDAP_CONNECT_TIMEOUT=10000 \ - LDAP_AUTHENTIFICATION=false \ - LDAP_AUTHENTIFICATION_USERDN="" \ - LDAP_AUTHENTIFICATION_PASSWORD="" \ - LDAP_LOG_ENABLED=false \ - LDAP_BACKGROUND_SYNC=false \ - LDAP_BACKGROUND_SYNC_INTERVAL="" \ - LDAP_BACKGROUND_SYNC_KEEP_EXISTANT_USERS_UPDATED=false \ - LDAP_BACKGROUND_SYNC_IMPORT_NEW_USERS=false \ - LDAP_ENCRYPTION=false \ - LDAP_CA_CERT="" \ - LDAP_REJECT_UNAUTHORIZED=false \ - LDAP_USER_AUTHENTICATION=false \ - LDAP_USER_AUTHENTICATION_FIELD=uid \ - LDAP_USER_SEARCH_FILTER="" \ - LDAP_USER_SEARCH_SCOPE="" \ - LDAP_USER_SEARCH_FIELD="" \ - LDAP_SEARCH_PAGE_SIZE=0 \ - LDAP_SEARCH_SIZE_LIMIT=0 \ - LDAP_GROUP_FILTER_ENABLE=false \ - LDAP_GROUP_FILTER_OBJECTCLASS="" \ - LDAP_GROUP_FILTER_GROUP_ID_ATTRIBUTE="" \ - LDAP_GROUP_FILTER_GROUP_MEMBER_ATTRIBUTE="" \ - LDAP_GROUP_FILTER_GROUP_MEMBER_FORMAT="" \ - LDAP_GROUP_FILTER_GROUP_NAME="" \ - LDAP_UNIQUE_IDENTIFIER_FIELD="" \ - LDAP_UTF8_NAMES_SLUGIFY=true \ - LDAP_USERNAME_FIELD="" \ - LDAP_FULLNAME_FIELD="" \ - LDAP_MERGE_EXISTING_USERS=false \ - LDAP_EMAIL_FIELD="" \ - LDAP_EMAIL_MATCH_ENABLE=false \ - LDAP_EMAIL_MATCH_REQUIRE=false \ - LDAP_EMAIL_MATCH_VERIFIED=false \ - LDAP_SYNC_USER_DATA=false \ - LDAP_SYNC_USER_DATA_FIELDMAP="" \ - LDAP_SYNC_GROUP_ROLES="" \ - LDAP_DEFAULT_DOMAIN="" \ - LDAP_SYNC_ADMIN_STATUS="" \ - LDAP_SYNC_ADMIN_GROUPS="" \ - HEADER_LOGIN_ID="" \ - HEADER_LOGIN_FIRSTNAME="" \ - HEADER_LOGIN_LASTNAME="" \ - HEADER_LOGIN_EMAIL="" \ - LOGOUT_WITH_TIMER=false \ - LOGOUT_IN="" \ - LOGOUT_ON_HOURS="" \ - LOGOUT_ON_MINUTES="" \ - CORS="" \ - CORS_ALLOW_HEADERS="" \ - CORS_EXPOSE_HEADERS="" \ - DEFAULT_AUTHENTICATION_METHOD="" \ - SCROLLINERTIA="0" \ - SCROLLAMOUNT="auto" - -# Copy the app to the image -COPY ${SRC_PATH} /home/wekan/app - -RUN \ - set -o xtrace && \ - # Add non-root user wekan - useradd --user-group --system --home-dir /home/wekan wekan && \ - \ - # OS dependencies - apt-get update -y && apt-get install -y --no-install-recommends ${BUILD_DEPS} && \ - #pip3 install -U pip setuptools wheel && \ - \ - # Meteor installer doesn't work with the default tar binary, so using bsdtar while installing. - # https://github.com/coreos/bugs/issues/1095#issuecomment-350574389 - cp $(which tar) $(which tar)~ && \ - ln -sf $(which bsdtar) $(which tar) && \ - \ - # Download nodejs - wget https://nodejs.org/dist/${NODE_VERSION}/node-${NODE_VERSION}-${ARCHITECTURE}.tar.gz && \ - wget https://nodejs.org/dist/${NODE_VERSION}/SHASUMS256.txt.asc && \ - #--------------------------------------------------------------------------------------------- - # Node Fibers 100% CPU usage issue: - # https://github.com/wekan/wekan-mongodb/issues/2#issuecomment-381453161 - # https://github.com/meteor/meteor/issues/9796#issuecomment-381676326 - # https://github.com/sandstorm-io/sandstorm/blob/0f1fec013fe7208ed0fd97eb88b31b77e3c61f42/shell/server/00-startup.js#L99-L129 - # Also see beginning of wekan/server/authentication.js - # import Fiber from "fibers"; - # Fiber.poolSize = 1e9; - # OLD: Download node version 8.12.0 prerelease that has fix included, => Official 8.12.0 has been released - # Description at https://releases.wekan.team/node.txt - #wget https://releases.wekan.team/node-${NODE_VERSION}-${ARCHITECTURE}.tar.gz && \ - #echo "1ed54adb8497ad8967075a0b5d03dd5d0a502be43d4a4d84e5af489c613d7795 node-v8.12.0-linux-x64.tar.gz" >> SHASUMS256.txt.asc && \ - \ - # Verify nodejs authenticity - grep ${NODE_VERSION}-${ARCHITECTURE}.tar.gz SHASUMS256.txt.asc | shasum -a 256 -c - && \ - #export GNUPGHOME="$(mktemp -d)" && \ - #\ - # Try other key servers if ha.pool.sks-keyservers.net is unreachable - # Code from https://github.com/chorrell/docker-node/commit/2b673e17547c34f17f24553db02beefbac98d23c - # gpg keys listed at https://github.com/nodejs/node#release-team - # and keys listed here from previous version of this Dockerfile - #for key in \ - #9554F04D7259F04124DE6B476D5A82AC7E37093B \ - #94AE36675C464D64BAFA68DD7434390BDBE9B9C5 \ - #FD3A5288F042B6850C66B31F09FE44734EB7990E \ - #71DCFD284A79C3B38668286BC97EC7A07EDE3FC1 \ - #DD8F2338BAE7501E3DD5AC78C273792F7D83545D \ - #C4F0DFFF4E8C1A8236409D08E73BC641CC11F4C8 \ - #B9AE9905FFD7803F25714661B63B535A4C206CA9 \ - #; do \ - #gpg --keyserver ha.pool.sks-keyservers.net --recv-keys "$key" || \ - #gpg --keyserver pgp.mit.edu --recv-keys "$key" || \ - #gpg --keyserver keyserver.pgp.com --recv-keys "$key" ; \ - #done && \ - #gpg --verify SHASUMS256.txt.asc && \ - # Ignore socket files then delete files then delete directories - #find "$GNUPGHOME" -type f | xargs rm -f && \ - #find "$GNUPGHOME" -type d | xargs rm -fR && \ - rm -f SHASUMS256.txt.asc && \ - \ - # Install Node - tar xvzf node-${NODE_VERSION}-${ARCHITECTURE}.tar.gz && \ - rm node-${NODE_VERSION}-${ARCHITECTURE}.tar.gz && \ - mv node-${NODE_VERSION}-${ARCHITECTURE} /opt/nodejs && \ - ln -s /opt/nodejs/bin/node /usr/bin/node && \ - ln -s /opt/nodejs/bin/npm /usr/bin/npm && \ - mkdir -p /opt/nodejs/lib/node_modules/fibers/.node-gyp /root/.node-gyp/8.16.1 /home/wekan/.config && \ - chown wekan --recursive /home/wekan/.config && \ - \ - #DOES NOT WORK: paxctl fix for alpine linux: https://github.com/wekan/wekan/issues/1303 - #paxctl -mC `which node` && \ - \ - # Install Node dependencies. Python path for node-gyp. - npm install -g npm@${NPM_VERSION} && \ - #npm config set python python2.7 && \ - #npm install -g node-gyp && \ - #npm install -g fibers@${FIBERS_VERSION} && \ - \ - # Change user to wekan and install meteor - cd /home/wekan/ && \ - chown wekan --recursive /home/wekan && \ - #curl "https://install.meteor.com" -o /home/wekan/install_meteor.sh && \ - #curl "https://install.meteor.com/?release=${METEOR_RELEASE}" -o /home/wekan/install_meteor.sh && \ - # OLD: sed -i "s|RELEASE=.*|RELEASE=${METEOR_RELEASE}\"\"|g" ./install_meteor.sh && \ - # Install Meteor forcing its progress - #sed -i 's/VERBOSITY="--silent"/VERBOSITY="--progress-bar"/' ./install_meteor.sh && \ - echo "Starting meteor ${METEOR_RELEASE} installation... \n" && \ - gosu wekan:wekan curl https://install.meteor.com/ | /bin/sh && \ - mv /root/.meteor /home/wekan/ && \ - chown wekan --recursive /home/wekan/.meteor && \ - \ - # Check if opting for a release candidate instead of major release - #if [ "$USE_EDGE" = false ]; then \ - #gosu wekan:wekan sh /home/wekan/install_meteor.sh; \ - # gosu wekan:wekan curl https://install.meteor.com/ | sh; \ - #else \ - # gosu wekan:wekan git clone --recursive --depth 1 -b release/METEOR@${METEOR_EDGE} https://github.com/meteor/meteor.git /home/wekan/.meteor; \ - #fi; \ - #\ - # Get additional packages - #mkdir -p /home/wekan/app/packages && \ - #chown wekan:wekan --recursive /home/wekan && \ - # REPOS BELOW ARE INCLUDED TO WEKAN REPO - #cd /home/wekan/app/packages && \ - #gosu wekan:wekan git clone --depth 1 -b master https://github.com/wekan/flow-router.git kadira-flow-router && \ - #gosu wekan:wekan git clone --depth 1 -b master https://github.com/meteor-useraccounts/core.git meteor-useraccounts-core && \ - #gosu wekan:wekan git clone --depth 1 -b master https://github.com/wekan/meteor-accounts-cas.git && \ - #gosu wekan:wekan git clone --depth 1 -b master https://github.com/wekan/wekan-ldap.git && \ - #gosu wekan:wekan git clone --depth 1 -b master https://github.com/wekan/wekan-scrollbar.git && \ - #gosu wekan:wekan git clone --depth 1 -b master https://github.com/wekan/meteor-accounts-oidc.git && \ - #gosu wekan:wekan git clone --depth 1 -b master --recurse-submodules https://github.com/wekan/markdown.git && \ - #gosu wekan:wekan mv meteor-accounts-oidc/packages/switch_accounts-oidc wekan-accounts-oidc && \ - #gosu wekan:wekan mv meteor-accounts-oidc/packages/switch_oidc wekan-oidc && \ - #gosu wekan:wekan rm -rf meteor-accounts-oidc && \ - sed -i 's/api\.versionsFrom/\/\/api.versionsFrom/' /home/wekan/app/packages/meteor-useraccounts-core/package.js && \ - cd /home/wekan/.meteor && \ - gosu wekan:wekan /home/wekan/.meteor/meteor -- help; \ - \ - # extract the OpenAPI specification - #npm install -g api2html@0.3.3 && \ - #mkdir -p /home/wekan/python && \ - #chown wekan --recursive /home/wekan/python && \ - #cd /home/wekan/python && \ - #gosu wekan:wekan git clone --depth 1 -b master https://github.com/Kronuz/esprima-python && \ - #cd /home/wekan/python/esprima-python && \ - #python3 setup.py install --record files.txt && \ - #cd /home/wekan/app && \ - #mkdir -p /home/wekan/app/public/api && \ - #chown wekan --recursive /home/wekan/app && \ - #gosu wekan:wekan python3 ./openapi/generate_openapi.py --release $(git describe --tags --abbrev=0) > ./public/api/wekan.yml && \ - #gosu wekan:wekan /opt/nodejs/bin/api2html -c ./public/logo-header.png -o ./public/api/wekan.html ./public/api/wekan.yml; \ - # Build app - cd /home/wekan/app && \ - mkdir -p /home/wekan/.npm && \ - chown wekan --recursive /home/wekan/.npm /home/wekan/.config /home/wekan/.meteor && \ - #gosu wekan:wekan /home/wekan/.meteor/meteor add standard-minifier-js && \ - gosu wekan:wekan npm install && \ - gosu wekan:wekan /home/wekan/.meteor/meteor build --directory /home/wekan/app_build && \ - cp /home/wekan/app/fix-download-unicode/cfs_access-point.txt /home/wekan/app_build/bundle/programs/server/packages/cfs_access-point.js && \ - #rm /home/wekan/app_build/bundle/programs/server/npm/node_modules/meteor/rajit_bootstrap3-datepicker/lib/bootstrap-datepicker/node_modules/phantomjs-prebuilt/lib/phantom/bin/phantomjs && \ - chown wekan /home/wekan/app_build/bundle/programs/server/packages/cfs_access-point.js && \ - #Removed binary version of bcrypt because of security vulnerability that is not fixed yet. - #https://github.com/wekan/wekan/commit/4b2010213907c61b0e0482ab55abb06f6a668eac - #https://github.com/wekan/wekan/commit/7eeabf14be3c63fae2226e561ef8a0c1390c8d3c - #cd /home/wekan/app_build/bundle/programs/server/npm/node_modules/meteor/npm-bcrypt && \ - #gosu wekan:wekan rm -rf node_modules/bcrypt && \ - #gosu wekan:wekan npm install bcrypt && \ - # - # Delete phantomjs - #cd /home/wekan/app_build/bundle && \ - #find . -name "*phantomjs*" | xargs rm -rf && \ - # - cd /home/wekan/app_build/bundle/programs/server/ && \ - gosu wekan:wekan npm install && \ - #gosu wekan:wekan npm install bcrypt && \ - mv /home/wekan/app_build/bundle /build && \ - \ - # Put back the original tar - mv $(which tar)~ $(which tar) && \ - \ - # Cleanup - apt-get remove --purge -y ${BUILD_DEPS} && \ - apt-get autoremove -y && \ - npm uninstall -g api2html &&\ - rm -R /var/lib/apt/lists/* && \ - rm -R /home/wekan/.meteor && \ - rm -R /home/wekan/app && \ - rm -R /home/wekan/app_build - #cat /home/wekan/python/esprima-python/files.txt | xargs rm -R && \ - #rm -R /home/wekan/python - #rm /home/wekan/install_meteor.sh - -ENV PORT=8080 -EXPOSE $PORT -USER wekan - -CMD ["node", "/build/main.js"] diff --git a/Dockerfile.amd64 b/Dockerfile.amd64 new file mode 100644 index 00000000..29248ca1 --- /dev/null +++ b/Dockerfile.amd64 @@ -0,0 +1,294 @@ +FROM ubuntu:rolling +LABEL maintainer="wekan" + +# Set the environment variables (defaults where required) +# DOES NOT WORK: paxctl fix for alpine linux: https://github.com/wekan/wekan/issues/1303 +# ENV BUILD_DEPS="paxctl" +ENV BUILD_DEPS="apt-utils libarchive-tools gnupg gosu wget curl bzip2 g++ build-essential git ca-certificates python3" \ + DEBUG=false \ + NODE_VERSION=v12.16.1 \ + METEOR_RELEASE=1.10-rc.2 \ + USE_EDGE=false \ + METEOR_EDGE=1.5-beta.17 \ + NPM_VERSION=latest \ + FIBERS_VERSION=4.0.1 \ + ARCHITECTURE=linux-x64 \ + SRC_PATH=./ \ + WITH_API=true \ + ACCOUNTS_LOCKOUT_KNOWN_USERS_FAILURES_BEFORE=3 \ + ACCOUNTS_LOCKOUT_KNOWN_USERS_PERIOD=60 \ + ACCOUNTS_LOCKOUT_KNOWN_USERS_FAILURE_WINDOW=15 \ + ACCOUNTS_LOCKOUT_UNKNOWN_USERS_FAILURES_BERORE=3 \ + ACCOUNTS_LOCKOUT_UNKNOWN_USERS_LOCKOUT_PERIOD=60 \ + ACCOUNTS_LOCKOUT_UNKNOWN_USERS_FAILURE_WINDOW=15 \ + RICHER_CARD_COMMENT_EDITOR=false \ + CARD_OPENED_WEBHOOK_ENABLED=false \ + ATTACHMENTS_STORE_PATH="" \ + MAX_IMAGE_PIXEL="" \ + IMAGE_COMPRESS_RATIO="" \ + NOTIFICATION_TRAY_AFTER_READ_DAYS_BEFORE_REMOVE="" \ + BIGEVENTS_PATTERN=NONE \ + NOTIFY_DUE_DAYS_BEFORE_AND_AFTER="" \ + NOTIFY_DUE_AT_HOUR_OF_DAY="" \ + EMAIL_NOTIFICATION_TIMEOUT=30000 \ + MATOMO_ADDRESS="" \ + MATOMO_SITE_ID="" \ + MATOMO_DO_NOT_TRACK=true \ + MATOMO_WITH_USERNAME=false \ + BROWSER_POLICY_ENABLED=true \ + TRUSTED_URL="" \ + WEBHOOKS_ATTRIBUTES="" \ + OAUTH2_ENABLED=false \ + OAUTH2_LOGIN_STYLE=redirect \ + OAUTH2_CLIENT_ID="" \ + OAUTH2_SECRET="" \ + OAUTH2_SERVER_URL="" \ + OAUTH2_AUTH_ENDPOINT="" \ + OAUTH2_USERINFO_ENDPOINT="" \ + OAUTH2_TOKEN_ENDPOINT="" \ + OAUTH2_ID_MAP="" \ + OAUTH2_USERNAME_MAP="" \ + OAUTH2_FULLNAME_MAP="" \ + OAUTH2_ID_TOKEN_WHITELIST_FIELDS="" \ + OAUTH2_REQUEST_PERMISSIONS='openid profile email' \ + OAUTH2_EMAIL_MAP="" \ + LDAP_ENABLE=false \ + LDAP_PORT=389 \ + LDAP_HOST="" \ + LDAP_BASEDN="" \ + LDAP_LOGIN_FALLBACK=false \ + LDAP_RECONNECT=true \ + LDAP_TIMEOUT=10000 \ + LDAP_IDLE_TIMEOUT=10000 \ + LDAP_CONNECT_TIMEOUT=10000 \ + LDAP_AUTHENTIFICATION=false \ + LDAP_AUTHENTIFICATION_USERDN="" \ + LDAP_AUTHENTIFICATION_PASSWORD="" \ + LDAP_LOG_ENABLED=false \ + LDAP_BACKGROUND_SYNC=false \ + LDAP_BACKGROUND_SYNC_INTERVAL="" \ + LDAP_BACKGROUND_SYNC_KEEP_EXISTANT_USERS_UPDATED=false \ + LDAP_BACKGROUND_SYNC_IMPORT_NEW_USERS=false \ + LDAP_ENCRYPTION=false \ + LDAP_CA_CERT="" \ + LDAP_REJECT_UNAUTHORIZED=false \ + LDAP_USER_AUTHENTICATION=false \ + LDAP_USER_AUTHENTICATION_FIELD=uid \ + LDAP_USER_SEARCH_FILTER="" \ + LDAP_USER_SEARCH_SCOPE="" \ + LDAP_USER_SEARCH_FIELD="" \ + LDAP_SEARCH_PAGE_SIZE=0 \ + LDAP_SEARCH_SIZE_LIMIT=0 \ + LDAP_GROUP_FILTER_ENABLE=false \ + LDAP_GROUP_FILTER_OBJECTCLASS="" \ + LDAP_GROUP_FILTER_GROUP_ID_ATTRIBUTE="" \ + LDAP_GROUP_FILTER_GROUP_MEMBER_ATTRIBUTE="" \ + LDAP_GROUP_FILTER_GROUP_MEMBER_FORMAT="" \ + LDAP_GROUP_FILTER_GROUP_NAME="" \ + LDAP_UNIQUE_IDENTIFIER_FIELD="" \ + LDAP_UTF8_NAMES_SLUGIFY=true \ + LDAP_USERNAME_FIELD="" \ + LDAP_FULLNAME_FIELD="" \ + LDAP_MERGE_EXISTING_USERS=false \ + LDAP_EMAIL_FIELD="" \ + LDAP_EMAIL_MATCH_ENABLE=false \ + LDAP_EMAIL_MATCH_REQUIRE=false \ + LDAP_EMAIL_MATCH_VERIFIED=false \ + LDAP_SYNC_USER_DATA=false \ + LDAP_SYNC_USER_DATA_FIELDMAP="" \ + LDAP_SYNC_GROUP_ROLES="" \ + LDAP_DEFAULT_DOMAIN="" \ + LDAP_SYNC_ADMIN_STATUS="" \ + LDAP_SYNC_ADMIN_GROUPS="" \ + HEADER_LOGIN_ID="" \ + HEADER_LOGIN_FIRSTNAME="" \ + HEADER_LOGIN_LASTNAME="" \ + HEADER_LOGIN_EMAIL="" \ + LOGOUT_WITH_TIMER=false \ + LOGOUT_IN="" \ + LOGOUT_ON_HOURS="" \ + LOGOUT_ON_MINUTES="" \ + CORS="" \ + CORS_ALLOW_HEADERS="" \ + CORS_EXPOSE_HEADERS="" \ + DEFAULT_AUTHENTICATION_METHOD="" \ + SCROLLINERTIA="0" \ + SCROLLAMOUNT="auto" + +# Copy the app to the image +COPY ${SRC_PATH} /home/wekan/app + +RUN \ + set -o xtrace && \ + # Add non-root user wekan + useradd --user-group --system --home-dir /home/wekan wekan && \ + \ + # OS dependencies + apt-get update -y && apt-get install -y --no-install-recommends ${BUILD_DEPS} && \ + #pip3 install -U pip setuptools wheel && \ + \ + # Meteor installer doesn't work with the default tar binary, so using bsdtar while installing. + # https://github.com/coreos/bugs/issues/1095#issuecomment-350574389 + cp $(which tar) $(which tar)~ && \ + ln -sf $(which bsdtar) $(which tar) && \ + \ + # Download nodejs + wget https://nodejs.org/dist/${NODE_VERSION}/node-${NODE_VERSION}-${ARCHITECTURE}.tar.gz && \ + wget https://nodejs.org/dist/${NODE_VERSION}/SHASUMS256.txt.asc && \ + #--------------------------------------------------------------------------------------------- + # Node Fibers 100% CPU usage issue: + # https://github.com/wekan/wekan-mongodb/issues/2#issuecomment-381453161 + # https://github.com/meteor/meteor/issues/9796#issuecomment-381676326 + # https://github.com/sandstorm-io/sandstorm/blob/0f1fec013fe7208ed0fd97eb88b31b77e3c61f42/shell/server/00-startup.js#L99-L129 + # Also see beginning of wekan/server/authentication.js + # import Fiber from "fibers"; + # Fiber.poolSize = 1e9; + # OLD: Download node version 8.12.0 prerelease that has fix included, => Official 8.12.0 has been released + # Description at https://releases.wekan.team/node.txt + #wget https://releases.wekan.team/node-${NODE_VERSION}-${ARCHITECTURE}.tar.gz && \ + #echo "1ed54adb8497ad8967075a0b5d03dd5d0a502be43d4a4d84e5af489c613d7795 node-v8.12.0-linux-x64.tar.gz" >> SHASUMS256.txt.asc && \ + \ + # Verify nodejs authenticity + grep ${NODE_VERSION}-${ARCHITECTURE}.tar.gz SHASUMS256.txt.asc | shasum -a 256 -c - && \ + #export GNUPGHOME="$(mktemp -d)" && \ + #\ + # Try other key servers if ha.pool.sks-keyservers.net is unreachable + # Code from https://github.com/chorrell/docker-node/commit/2b673e17547c34f17f24553db02beefbac98d23c + # gpg keys listed at https://github.com/nodejs/node#release-team + # and keys listed here from previous version of this Dockerfile + #for key in \ + #9554F04D7259F04124DE6B476D5A82AC7E37093B \ + #94AE36675C464D64BAFA68DD7434390BDBE9B9C5 \ + #FD3A5288F042B6850C66B31F09FE44734EB7990E \ + #71DCFD284A79C3B38668286BC97EC7A07EDE3FC1 \ + #DD8F2338BAE7501E3DD5AC78C273792F7D83545D \ + #C4F0DFFF4E8C1A8236409D08E73BC641CC11F4C8 \ + #B9AE9905FFD7803F25714661B63B535A4C206CA9 \ + #; do \ + #gpg --keyserver ha.pool.sks-keyservers.net --recv-keys "$key" || \ + #gpg --keyserver pgp.mit.edu --recv-keys "$key" || \ + #gpg --keyserver keyserver.pgp.com --recv-keys "$key" ; \ + #done && \ + #gpg --verify SHASUMS256.txt.asc && \ + # Ignore socket files then delete files then delete directories + #find "$GNUPGHOME" -type f | xargs rm -f && \ + #find "$GNUPGHOME" -type d | xargs rm -fR && \ + rm -f SHASUMS256.txt.asc && \ + \ + # Install Node + tar xvzf node-${NODE_VERSION}-${ARCHITECTURE}.tar.gz && \ + rm node-${NODE_VERSION}-${ARCHITECTURE}.tar.gz && \ + mv node-${NODE_VERSION}-${ARCHITECTURE} /opt/nodejs && \ + ln -s /opt/nodejs/bin/node /usr/bin/node && \ + ln -s /opt/nodejs/bin/npm /usr/bin/npm && \ + mkdir -p /opt/nodejs/lib/node_modules/fibers/.node-gyp /root/.node-gyp/8.16.1 /home/wekan/.config && \ + chown wekan --recursive /home/wekan/.config && \ + \ + #DOES NOT WORK: paxctl fix for alpine linux: https://github.com/wekan/wekan/issues/1303 + #paxctl -mC `which node` && \ + \ + # Install Node dependencies. Python path for node-gyp. + npm install -g npm@${NPM_VERSION} && \ + #npm config set python python2.7 && \ + #npm install -g node-gyp && \ + #npm install -g fibers@${FIBERS_VERSION} && \ + \ + # Change user to wekan and install meteor + cd /home/wekan/ && \ + chown wekan --recursive /home/wekan && \ + #curl "https://install.meteor.com" -o /home/wekan/install_meteor.sh && \ + #curl "https://install.meteor.com/?release=${METEOR_RELEASE}" -o /home/wekan/install_meteor.sh && \ + # OLD: sed -i "s|RELEASE=.*|RELEASE=${METEOR_RELEASE}\"\"|g" ./install_meteor.sh && \ + # Install Meteor forcing its progress + #sed -i 's/VERBOSITY="--silent"/VERBOSITY="--progress-bar"/' ./install_meteor.sh && \ + echo "Starting meteor ${METEOR_RELEASE} installation... \n" && \ + gosu wekan:wekan curl https://install.meteor.com/ | /bin/sh && \ + mv /root/.meteor /home/wekan/ && \ + chown wekan --recursive /home/wekan/.meteor && \ + \ + # Check if opting for a release candidate instead of major release + #if [ "$USE_EDGE" = false ]; then \ + #gosu wekan:wekan sh /home/wekan/install_meteor.sh; \ + # gosu wekan:wekan curl https://install.meteor.com/ | sh; \ + #else \ + # gosu wekan:wekan git clone --recursive --depth 1 -b release/METEOR@${METEOR_EDGE} https://github.com/meteor/meteor.git /home/wekan/.meteor; \ + #fi; \ + #\ + # Get additional packages + #mkdir -p /home/wekan/app/packages && \ + #chown wekan:wekan --recursive /home/wekan && \ + # REPOS BELOW ARE INCLUDED TO WEKAN REPO + #cd /home/wekan/app/packages && \ + #gosu wekan:wekan git clone --depth 1 -b master https://github.com/wekan/flow-router.git kadira-flow-router && \ + #gosu wekan:wekan git clone --depth 1 -b master https://github.com/meteor-useraccounts/core.git meteor-useraccounts-core && \ + #gosu wekan:wekan git clone --depth 1 -b master https://github.com/wekan/meteor-accounts-cas.git && \ + #gosu wekan:wekan git clone --depth 1 -b master https://github.com/wekan/wekan-ldap.git && \ + #gosu wekan:wekan git clone --depth 1 -b master https://github.com/wekan/wekan-scrollbar.git && \ + #gosu wekan:wekan git clone --depth 1 -b master https://github.com/wekan/meteor-accounts-oidc.git && \ + #gosu wekan:wekan git clone --depth 1 -b master --recurse-submodules https://github.com/wekan/markdown.git && \ + #gosu wekan:wekan mv meteor-accounts-oidc/packages/switch_accounts-oidc wekan-accounts-oidc && \ + #gosu wekan:wekan mv meteor-accounts-oidc/packages/switch_oidc wekan-oidc && \ + #gosu wekan:wekan rm -rf meteor-accounts-oidc && \ + sed -i 's/api\.versionsFrom/\/\/api.versionsFrom/' /home/wekan/app/packages/meteor-useraccounts-core/package.js && \ + cd /home/wekan/.meteor && \ + gosu wekan:wekan /home/wekan/.meteor/meteor -- help; \ + \ + # extract the OpenAPI specification + #npm install -g api2html@0.3.3 && \ + #mkdir -p /home/wekan/python && \ + #chown wekan --recursive /home/wekan/python && \ + #cd /home/wekan/python && \ + #gosu wekan:wekan git clone --depth 1 -b master https://github.com/Kronuz/esprima-python && \ + #cd /home/wekan/python/esprima-python && \ + #python3 setup.py install --record files.txt && \ + #cd /home/wekan/app && \ + #mkdir -p /home/wekan/app/public/api && \ + #chown wekan --recursive /home/wekan/app && \ + #gosu wekan:wekan python3 ./openapi/generate_openapi.py --release $(git describe --tags --abbrev=0) > ./public/api/wekan.yml && \ + #gosu wekan:wekan /opt/nodejs/bin/api2html -c ./public/logo-header.png -o ./public/api/wekan.html ./public/api/wekan.yml; \ + # Build app + cd /home/wekan/app && \ + mkdir -p /home/wekan/.npm && \ + chown wekan --recursive /home/wekan/.npm /home/wekan/.config /home/wekan/.meteor && \ + #gosu wekan:wekan /home/wekan/.meteor/meteor add standard-minifier-js && \ + gosu wekan:wekan npm install && \ + gosu wekan:wekan /home/wekan/.meteor/meteor build --directory /home/wekan/app_build && \ + cp /home/wekan/app/fix-download-unicode/cfs_access-point.txt /home/wekan/app_build/bundle/programs/server/packages/cfs_access-point.js && \ + #rm /home/wekan/app_build/bundle/programs/server/npm/node_modules/meteor/rajit_bootstrap3-datepicker/lib/bootstrap-datepicker/node_modules/phantomjs-prebuilt/lib/phantom/bin/phantomjs && \ + chown wekan /home/wekan/app_build/bundle/programs/server/packages/cfs_access-point.js && \ + #Removed binary version of bcrypt because of security vulnerability that is not fixed yet. + #https://github.com/wekan/wekan/commit/4b2010213907c61b0e0482ab55abb06f6a668eac + #https://github.com/wekan/wekan/commit/7eeabf14be3c63fae2226e561ef8a0c1390c8d3c + #cd /home/wekan/app_build/bundle/programs/server/npm/node_modules/meteor/npm-bcrypt && \ + #gosu wekan:wekan rm -rf node_modules/bcrypt && \ + #gosu wekan:wekan npm install bcrypt && \ + # + # Delete phantomjs + #cd /home/wekan/app_build/bundle && \ + #find . -name "*phantomjs*" | xargs rm -rf && \ + # + cd /home/wekan/app_build/bundle/programs/server/ && \ + gosu wekan:wekan npm install && \ + #gosu wekan:wekan npm install bcrypt && \ + mv /home/wekan/app_build/bundle /build && \ + \ + # Put back the original tar + mv $(which tar)~ $(which tar) && \ + \ + # Cleanup + apt-get remove --purge -y ${BUILD_DEPS} && \ + apt-get autoremove -y && \ + npm uninstall -g api2html &&\ + rm -R /var/lib/apt/lists/* && \ + rm -R /home/wekan/.meteor && \ + rm -R /home/wekan/app && \ + rm -R /home/wekan/app_build + #cat /home/wekan/python/esprima-python/files.txt | xargs rm -R && \ + #rm -R /home/wekan/python + #rm /home/wekan/install_meteor.sh + +ENV PORT=8080 +EXPOSE $PORT +USER wekan + +CMD ["node", "/build/main.js"] diff --git a/Dockerfile.arm64v8 b/Dockerfile.arm64v8 new file mode 100644 index 00000000..35440ddc --- /dev/null +++ b/Dockerfile.arm64v8 @@ -0,0 +1,77 @@ +FROM amd64/alpine:3.7 AS builder + +# Set the environment variables for builder +ENV QEMU_VERSION=v4.2.0-6 \ + QEMU_ARCHITECTURE=aarch64 \ + NODE_ARCHITECTURE=linux-arm64 \ + NODE_VERSION=v12.16.1 \ + WEKAN_VERSION=3.96 \ + WEKAN_ARCHITECTURE=arm64 + + # Install dependencies +RUN apk update && apk add ca-certificates outils-sha1 && \ + \ + # Download qemu static for our architecture + wget https://github.com/multiarch/qemu-user-static/releases/download/${QEMU_VERSION}/qemu-${QEMU_ARCHITECTURE}-static.tar.gz -O - | tar -xz && \ + \ + # Download wekan and shasum + wget https://releases.wekan.team/raspi3/wekan-${WEKAN_VERSION}-${WEKAN_ARCHITECTURE}.zip && \ + wget https://releases.wekan.team/raspi3/SHA256SUMS.txt && \ + # Verify wekan + grep wekan-${WEKAN_VERSION}-${WEKAN_ARCHITECTURE}.zip SHA256SUMS.txt | sha256sum -c - && \ + \ + # Unzip wekan + unzip wekan-${WEKAN_VERSION}-${WEKAN_ARCHITECTURE}.zip && \ + \ + # Download node and shasums + wget https://nodejs.org/dist/${NODE_VERSION}/node-${NODE_VERSION}-${NODE_ARCHITECTURE}.tar.gz && \ + wget https://nodejs.org/dist/${NODE_VERSION}/SHASUMS256.txt.asc && \ + \ + # Verify nodejs authenticity + grep node-${NODE_VERSION}-${NODE_ARCHITECTURE}.tar.gz SHASUMS256.txt.asc | sha256sum -c - && \ + \ + # Extract node and remove tar.gz + tar xvzf node-${NODE_VERSION}-${NODE_ARCHITECTURE}.tar.gz + +# Build wekan dockerfile +FROM arm64v8/ubuntu:19.10 +LABEL maintainer="wekan" + +# Set the environment variables (defaults where required) +ENV QEMU_ARCHITECTURE=aarch64 \ + NODE_ARCHITECTURE=linux-arm64 \ + NODE_VERSION=v12.16.1 \ + NODE_ENV=production \ + NPM_VERSION=latest \ + WITH_API=true \ + PORT=8080 \ + ROOT_URL=http://localhost \ + MONGO_URL=mongodb://127.0.0.1:27017/wekan + +# Copy qemu-static to image +COPY --from=builder qemu-${QEMU_ARCHITECTURE}-static /usr/bin + +# Copy the app to the image +COPY --from=builder bundle /home/wekan/bundle + +# Copy +COPY --from=builder node-${NODE_VERSION}-${NODE_ARCHITECTURE} /opt/nodejs + +RUN \ + set -o xtrace && \ + # Add non-root user wekan + useradd --user-group --system --home-dir /home/wekan wekan && \ + \ + # Install Node + ln -s /opt/nodejs/bin/node /usr/bin/node && \ + ln -s /opt/nodejs/bin/npm /usr/bin/npm && \ + mkdir -p /opt/nodejs/lib/node_modules/fibers/.node-gyp /root/.node-gyp/8.16.1 /home/wekan/.config && \ + chown wekan --recursive /home/wekan/.config && \ + \ + # Install Node dependencies + npm install -g npm@${NPM_VERSION} + +EXPOSE $PORT +USER wekan + +CMD ["node", "/home/wekan/bundle/main.js"] diff --git a/wekan-dockerfile-manifest.yaml b/wekan-dockerfile-manifest.yaml new file mode 100644 index 00000000..9242f7d7 --- /dev/null +++ b/wekan-dockerfile-manifest.yaml @@ -0,0 +1,11 @@ +image: quay.io/wekan/wekan +manifests: + - image: quay.io/wekan/wekan:amd64 + platform: + architecture: amd64 + os: linux + - image: quay.io/wekan/wekan:arm64v8 + platform: + architecture: arm64 + os: linux + variant: v8 -- cgit v1.2.3-1-g7c22