mirror of
https://github.com/openSUSE/osem.git
synced 2026-02-05 19:51:11 -05:00
5a2c87630c
This commit updates directory permissions to be compatible with OpenShift which starts the container with an arbitrary uid which is member of the root group. For more information please consult https://docs.openshift.org/latest/creating_images/guidelines.html. dumb-init is added to have a proper PID 1. bash should not run as PID 1 as this could lead to improper container shutdown.
56 lines
1.8 KiB
Docker
56 lines
1.8 KiB
Docker
FROM ruby:2.3
|
|
|
|
MAINTAINER TheAssassin <theassassin@users.noreply.github.com>
|
|
|
|
# required for compiling assets
|
|
RUN apt-get update && \
|
|
apt-get install -y nodejs nodejs-legacy mariadb-client imagemagick
|
|
|
|
# used to run the container without root permissions
|
|
RUN adduser --home /osem/ --system --group --disabled-login --disabled-password osem
|
|
|
|
# required to detect when the database is up and running in init.sh
|
|
RUN cd /usr/bin && \
|
|
wget https://github.com/jwilder/dockerize/releases/download/v0.3.0/dockerize-linux-amd64-v0.3.0.tar.gz -O dockerize.tar.gz && \
|
|
echo "36e8319cdf9d2b07340f456ec61cfa0f495ec6c130b02ad9c116fd55a5c43fa1 dockerize.tar.gz" | sha256sum -c && \
|
|
tar -xf dockerize.tar.gz && \
|
|
rm dockerize.tar.gz
|
|
|
|
# dumb-init for a proper PID 1
|
|
RUN cd /tmp && \
|
|
wget https://github.com/Yelp/dumb-init/releases/download/v1.2.0/dumb-init_1.2.0_amd64.deb && \
|
|
dpkg -i dumb-init_1.2.0_amd64.deb && \
|
|
rm dumb-init_1.2.0_amd64.deb
|
|
|
|
# explicitly add Gemfile and install dependencies using bundler to make use of
|
|
# Docker's caching
|
|
WORKDIR /osem/
|
|
COPY Gemfile /osem/
|
|
COPY Gemfile.lock /osem/
|
|
RUN bundle install --without test development
|
|
|
|
# add OSEM files and prepare them for use inside a Docker container
|
|
COPY . /osem/
|
|
RUN chown -R osem.root /osem/ && \
|
|
chmod -R g=u /osem/ && \
|
|
mv /osem/config/database.yml.docker /osem/config/database.yml
|
|
|
|
# data directory is used to cache the secret key in a file
|
|
ENV DATA_DIR /data
|
|
RUN install -d -m 0770 -o osem -g root $DATA_DIR
|
|
VOLUME ["$DATA_DIR"]
|
|
|
|
USER osem
|
|
EXPOSE 9292
|
|
|
|
COPY docker/init.sh /init.sh
|
|
|
|
# a user could override this if they wanted to serve the static files directly
|
|
# from a webserver
|
|
ENV RAILS_SERVE_STATIC_FILES 1
|
|
|
|
# Runs "/usr/bin/dumb-init -- /my/script --with --args"
|
|
ENTRYPOINT ["/usr/bin/dumb-init", "--"]
|
|
|
|
CMD ["bash", "/init.sh"]
|