3b609da9bd
[Rkt](https://coreos.com/rkt) doesn't allow ports to be exposed to containers unless they are declared in the container manifest. Re-adding EXPOSE back in (removed in 1dbf993bce) allows the container to be used on rkt based systems.
127 lines
3.7 KiB
Docker
127 lines
3.7 KiB
Docker
FROM ubuntu:18.04 as build-dep
|
|
|
|
# Use bash for the shell
|
|
SHELL ["bash", "-c"]
|
|
|
|
# Install Node
|
|
ENV NODE_VER="12.11.1"
|
|
RUN echo "Etc/UTC" > /etc/localtime && \
|
|
apt update && \
|
|
apt -y install wget python && \
|
|
cd ~ && \
|
|
wget https://nodejs.org/download/release/v$NODE_VER/node-v$NODE_VER-linux-x64.tar.gz && \
|
|
tar xf node-v$NODE_VER-linux-x64.tar.gz && \
|
|
rm node-v$NODE_VER-linux-x64.tar.gz && \
|
|
mv node-v$NODE_VER-linux-x64 /opt/node
|
|
|
|
# Install jemalloc
|
|
ENV JE_VER="5.2.1"
|
|
RUN apt update && \
|
|
apt -y install make autoconf gcc g++ && \
|
|
cd ~ && \
|
|
wget https://github.com/jemalloc/jemalloc/archive/$JE_VER.tar.gz && \
|
|
tar xf $JE_VER.tar.gz && \
|
|
cd jemalloc-$JE_VER && \
|
|
./autogen.sh && \
|
|
./configure --prefix=/opt/jemalloc && \
|
|
make -j$(nproc) > /dev/null && \
|
|
make install_bin install_include install_lib
|
|
|
|
# Install ruby
|
|
ENV RUBY_VER="2.6.5"
|
|
ENV CPPFLAGS="-I/opt/jemalloc/include"
|
|
ENV LDFLAGS="-L/opt/jemalloc/lib/"
|
|
RUN apt update && \
|
|
apt -y install build-essential \
|
|
bison libyaml-dev libgdbm-dev libreadline-dev \
|
|
libncurses5-dev libffi-dev zlib1g-dev libssl-dev && \
|
|
cd ~ && \
|
|
wget https://cache.ruby-lang.org/pub/ruby/${RUBY_VER%.*}/ruby-$RUBY_VER.tar.gz && \
|
|
tar xf ruby-$RUBY_VER.tar.gz && \
|
|
cd ruby-$RUBY_VER && \
|
|
./configure --prefix=/opt/ruby \
|
|
--with-jemalloc \
|
|
--with-shared \
|
|
--disable-install-doc && \
|
|
ln -s /opt/jemalloc/lib/* /usr/lib/ && \
|
|
make -j$(nproc) > /dev/null && \
|
|
make install
|
|
|
|
ENV PATH="${PATH}:/opt/ruby/bin:/opt/node/bin"
|
|
|
|
RUN npm install -g yarn && \
|
|
gem install bundler && \
|
|
apt update && \
|
|
apt -y install git libicu-dev libidn11-dev \
|
|
libpq-dev libprotobuf-dev protobuf-compiler
|
|
|
|
COPY Gemfile* package.json yarn.lock /opt/mastodon/
|
|
|
|
RUN cd /opt/mastodon && \
|
|
bundle install -j$(nproc) --deployment --without development test && \
|
|
yarn install --pure-lockfile
|
|
|
|
FROM ubuntu:18.04
|
|
|
|
# Copy over all the langs needed for runtime
|
|
COPY --from=build-dep /opt/node /opt/node
|
|
COPY --from=build-dep /opt/ruby /opt/ruby
|
|
COPY --from=build-dep /opt/jemalloc /opt/jemalloc
|
|
|
|
# Add more PATHs to the PATH
|
|
ENV PATH="${PATH}:/opt/ruby/bin:/opt/node/bin:/opt/mastodon/bin"
|
|
|
|
# Create the mastodon user
|
|
ARG UID=991
|
|
ARG GID=991
|
|
RUN apt update && \
|
|
echo "Etc/UTC" > /etc/localtime && \
|
|
ln -s /opt/jemalloc/lib/* /usr/lib/ && \
|
|
apt install -y whois wget && \
|
|
addgroup --gid $GID mastodon && \
|
|
useradd -m -u $UID -g $GID -d /opt/mastodon mastodon && \
|
|
echo "mastodon:`head /dev/urandom | tr -dc A-Za-z0-9 | head -c 24 | mkpasswd -s -m sha-256`" | chpasswd
|
|
|
|
# Install mastodon runtime deps
|
|
RUN apt -y --no-install-recommends install \
|
|
libssl1.1 libpq5 imagemagick ffmpeg \
|
|
libicu60 libprotobuf10 libidn11 libyaml-0-2 \
|
|
file ca-certificates tzdata libreadline7 && \
|
|
apt -y install gcc && \
|
|
ln -s /opt/mastodon /mastodon && \
|
|
gem install bundler && \
|
|
rm -rf /var/cache && \
|
|
rm -rf /var/lib/apt/lists/*
|
|
|
|
# Add tini
|
|
ENV TINI_VERSION="0.18.0"
|
|
ENV TINI_SUM="12d20136605531b09a2c2dac02ccee85e1b874eb322ef6baf7561cd93f93c855"
|
|
ADD https://github.com/krallin/tini/releases/download/v${TINI_VERSION}/tini /tini
|
|
RUN echo "$TINI_SUM tini" | sha256sum -c -
|
|
RUN chmod +x /tini
|
|
|
|
# Copy over mastodon source, and dependencies from building, and set permissions
|
|
COPY --chown=mastodon:mastodon . /opt/mastodon
|
|
COPY --from=build-dep --chown=mastodon:mastodon /opt/mastodon /opt/mastodon
|
|
|
|
# Run mastodon services in prod mode
|
|
ENV RAILS_ENV="production"
|
|
ENV NODE_ENV="production"
|
|
|
|
# Tell rails to serve static files
|
|
ENV RAILS_SERVE_STATIC_FILES="true"
|
|
ENV BIND="0.0.0.0"
|
|
|
|
# Set the run user
|
|
USER mastodon
|
|
|
|
# Precompile assets
|
|
RUN cd ~ && \
|
|
OTP_SECRET=precompile_placeholder SECRET_KEY_BASE=precompile_placeholder rails assets:precompile && \
|
|
yarn cache clean
|
|
|
|
# Set the work dir and the container entry point
|
|
WORKDIR /opt/mastodon
|
|
ENTRYPOINT ["/tini", "--"]
|
|
EXPOSE 3000 4000
|