| ADD alpine-minirootfs-3.22.3-x86_64.tar.gz / # buildkit |
| CMD ["/bin/sh"] |
| LABEL maintainer=Evan Wies <evan@neomantra.net> |
| ARG RESTY_IMAGE_BASE=alpine |
| ARG RESTY_IMAGE_TAG=3.22.3 |
| ARG RESTY_VERSION=1.29.2.3 |
| ARG RESTY_OPENSSL_VERSION=3.5.5 |
| ARG RESTY_OPENSSL_PATCH_VERSION=3.5.5 |
| ARG RESTY_OPENSSL_URL_BASE=https://github.com/openssl/openssl/releases/download/openssl-3.5.5 |
| ARG RESTY_OPENSSL_BUILD_OPTIONS=enable-camellia enable-seed enable-rfc3779 enable-cms enable-md2 enable-rc5 enable-weak-ssl-ciphers enable-ssl3 enable-ssl3-method enable-md2 enable-ktls enable-fips |
| ARG RESTY_PCRE_VERSION=10.47 |
| ARG RESTY_PCRE_SHA256=c08ae2388ef333e8403e670ad70c0a11f1eed021fd88308d7e02f596fcd9dc16 |
| ARG RESTY_PCRE_BUILD_OPTIONS=--enable-jit --enable-pcre2grep-jit --disable-bsr-anycrlf --disable-coverage --disable-ebcdic --disable-fuzz-support --disable-jit-sealloc --disable-never-backslash-C --enable-newline-is-lf --enable-pcre2-8 --enable-pcre2-16 --enable-pcre2-32 --enable-pcre2grep-callout --enable-pcre2grep-callout-fork --disable-pcre2grep-libbz2 --disable-pcre2grep-libz --disable-pcre2test-libedit --enable-percent-zt --disable-rebuild-chartables --enable-shared --disable-static --disable-silent-rules --enable-unicode --disable-valgrind |
| ARG RESTY_J=1 |
| ARG RESTY_CONFIG_OPTIONS= --with-compat --without-http_rds_json_module --without-http_rds_csv_module --without-lua_rds_parser --without-mail_pop3_module --without-mail_imap_module --without-mail_smtp_module --with-http_addition_module --with-http_auth_request_module --with-http_dav_module --with-http_flv_module --with-http_geoip_module=dynamic --with-http_gunzip_module --with-http_gzip_static_module --with-http_image_filter_module=dynamic --with-http_mp4_module --with-http_random_index_module --with-http_realip_module --with-http_secure_link_module --with-http_slice_module --with-http_ssl_module --with-http_stub_status_module --with-http_sub_module --with-http_v2_module --with-http_v3_module --with-http_xslt_module=dynamic --with-ipv6 --with-mail --with-mail_ssl_module --with-md5-asm --with-sha1-asm --with-stream --with-stream_ssl_module --with-stream_ssl_preread_module --with-threads |
| ARG RESTY_CONFIG_OPTIONS_MORE= |
| ARG RESTY_LUAJIT_OPTIONS=--with-luajit-xcflags='-DLUAJIT_NUMMODE=2 -DLUAJIT_ENABLE_LUA52COMPAT' |
| ARG RESTY_PCRE_OPTIONS=--with-pcre-jit |
| ARG RESTY_ADD_PACKAGE_BUILDDEPS= |
| ARG RESTY_ADD_PACKAGE_RUNDEPS= |
| ARG RESTY_EVAL_PRE_CONFIGURE= |
| ARG RESTY_EVAL_POST_DOWNLOAD_PRE_CONFIGURE= |
| ARG RESTY_EVAL_PRE_MAKE= |
| ARG RESTY_EVAL_POST_MAKE= |
| ARG RESTY_STRIP_BINARIES= |
| ARG _RESTY_CONFIG_DEPS=--with-pcre --with-cc-opt='-DNGX_LUA_ABORT_AT_PANIC -I/usr/local/openresty/pcre2/include -I/usr/local/openresty/openssl3/include' --with-ld-opt='-L/usr/local/openresty/pcre2/lib -L/usr/local/openresty/openssl3/lib -Wl,-rpath,/usr/local/openresty/pcre2/lib:/usr/local/openresty/openssl3/lib' |
| LABEL resty_image_base=alpine |
| LABEL resty_image_tag=3.22.3 |
| LABEL resty_version=1.29.2.3 |
| LABEL resty_openssl_version=3.5.5 |
| LABEL resty_openssl_patch_version=3.5.5 |
| LABEL resty_openssl_url_base=https://github.com/openssl/openssl/releases/download/openssl-3.5.5 |
| LABEL resty_openssl_build_options=enable-camellia enable-seed enable-rfc3779 enable-cms enable-md2 enable-rc5 enable-weak-ssl-ciphers enable-ssl3 enable-ssl3-method enable-md2 enable-ktls enable-fips |
| LABEL resty_pcre_version=10.47 |
| LABEL resty_pcre_build_options=--enable-jit --enable-pcre2grep-jit --disable-bsr-anycrlf --disable-coverage --disable-ebcdic --disable-fuzz-support --disable-jit-sealloc --disable-never-backslash-C --enable-newline-is-lf --enable-pcre2-8 --enable-pcre2-16 --enable-pcre2-32 --enable-pcre2grep-callout --enable-pcre2grep-callout-fork --disable-pcre2grep-libbz2 --disable-pcre2grep-libz --disable-pcre2test-libedit --enable-percent-zt --disable-rebuild-chartables --enable-shared --disable-static --disable-silent-rules --enable-unicode --disable-valgrind |
| LABEL resty_pcre_sha256=c08ae2388ef333e8403e670ad70c0a11f1eed021fd88308d7e02f596fcd9dc16 |
| LABEL resty_config_options= --with-compat --without-http_rds_json_module --without-http_rds_csv_module --without-lua_rds_parser --without-mail_pop3_module --without-mail_imap_module --without-mail_smtp_module --with-http_addition_module --with-http_auth_request_module --with-http_dav_module --with-http_flv_module --with-http_geoip_module=dynamic --with-http_gunzip_module --with-http_gzip_static_module --with-http_image_filter_module=dynamic --with-http_mp4_module --with-http_random_index_module --with-http_realip_module --with-http_secure_link_module --with-http_slice_module --with-http_ssl_module --with-http_stub_status_module --with-http_sub_module --with-http_v2_module --with-http_v3_module --with-http_xslt_module=dynamic --with-ipv6 --with-mail --with-mail_ssl_module --with-md5-asm --with-sha1-asm --with-stream --with-stream_ssl_module --with-stream_ssl_preread_module --with-threads |
| LABEL resty_config_options_more= |
| LABEL resty_config_deps=--with-pcre --with-cc-opt='-DNGX_LUA_ABORT_AT_PANIC -I/usr/local/openresty/pcre2/include -I/usr/local/openresty/openssl3/include' --with-ld-opt='-L/usr/local/openresty/pcre2/lib -L/usr/local/openresty/openssl3/lib -Wl,-rpath,/usr/local/openresty/pcre2/lib:/usr/local/openresty/openssl3/lib' |
| LABEL resty_add_package_builddeps= |
| LABEL resty_add_package_rundeps= |
| LABEL resty_eval_pre_configure= |
| LABEL resty_eval_post_download_pre_configure= |
| LABEL resty_eval_pre_make= |
| LABEL resty_eval_post_make= |
| LABEL resty_strip_binaries= |
| LABEL resty_luajit_options=--with-luajit-xcflags='-DLUAJIT_NUMMODE=2 -DLUAJIT_ENABLE_LUA52COMPAT' |
| LABEL resty_pcre_options=--with-pcre-jit |
| RUN |23 RESTY_IMAGE_BASE=alpine RESTY_IMAGE_TAG=3.22.3 RESTY_VERSION=1.29.2.3 RESTY_OPENSSL_VERSION=3.5.5 RESTY_OPENSSL_PATCH_VERSION=3.5.5 RESTY_OPENSSL_URL_BASE=https://github.com/openssl/openssl/releases/download/openssl-3.5.5 RESTY_OPENSSL_BUILD_OPTIONS=enable-camellia enable-seed enable-rfc3779 enable-cms enable-md2 enable-rc5 enable-weak-ssl-ciphers enable-ssl3 enable-ssl3-method enable-md2 enable-ktls enable-fips RESTY_PCRE_VERSION=10.47 RESTY_PCRE_SHA256=c08ae2388ef333e8403e670ad70c0a11f1eed021fd88308d7e02f596fcd9dc16 RESTY_PCRE_BUILD_OPTIONS=--enable-jit --enable-pcre2grep-jit --disable-bsr-anycrlf --disable-coverage --disable-ebcdic --disable-fuzz-support --disable-jit-sealloc --disable-never-backslash-C --enable-newline-is-lf --enable-pcre2-8 --enable-pcre2-16 --enable-pcre2-32 --enable-pcre2grep-callout --enable-pcre2grep-callout-fork --disable-pcre2grep-libbz2 --disable-pcre2grep-libz --disable-pcre2test-libedit --enable-percent-zt --disable-rebuild-chartables --enable-shared --disable-static --disable-silent-rules --enable-unicode --disable-valgrind RESTY_J=1 RESTY_CONFIG_OPTIONS= --with-compat --without-http_rds_json_module --without-http_rds_csv_module --without-lua_rds_parser --without-mail_pop3_module --without-mail_imap_module --without-mail_smtp_module --with-http_addition_module --with-http_auth_request_module --with-http_dav_module --with-http_flv_module --with-http_geoip_module=dynamic --with-http_gunzip_module --with-http_gzip_static_module --with-http_image_filter_module=dynamic --with-http_mp4_module --with-http_random_index_module --with-http_realip_module --with-http_secure_link_module --with-http_slice_module --with-http_ssl_module --with-http_stub_status_module --with-http_sub_module --with-http_v2_module --with-http_v3_module --with-http_xslt_module=dynamic --with-ipv6 --with-mail --with-mail_ssl_module --with-md5-asm --with-sha1-asm --with-stream --with-stream_ssl_module --with-stream_ssl_preread_module --with-threads RESTY_CONFIG_OPTIONS_MORE= RESTY_LUAJIT_OPTIONS=--with-luajit-xcflags='-DLUAJIT_NUMMODE=2 -DLUAJIT_ENABLE_LUA52COMPAT' RESTY_PCRE_OPTIONS=--with-pcre-jit RESTY_ADD_PACKAGE_BUILDDEPS= RESTY_ADD_PACKAGE_RUNDEPS= RESTY_EVAL_PRE_CONFIGURE= RESTY_EVAL_POST_DOWNLOAD_PRE_CONFIGURE= RESTY_EVAL_PRE_MAKE= RESTY_EVAL_POST_MAKE= RESTY_STRIP_BINARIES= _RESTY_CONFIG_DEPS=--with-pcre --with-cc-opt='-DNGX_LUA_ABORT_AT_PANIC -I/usr/local/openresty/pcre2/include -I/usr/local/openresty/openssl3/include' --with-ld-opt='-L/usr/local/openresty/pcre2/lib -L/usr/local/openresty/openssl3/lib -Wl,-rpath,/usr/local/openresty/pcre2/lib:/usr/local/openresty/openssl3/lib' /bin/sh -c apk add --no-cache --virtual .build-deps build-base binutils coreutils curl gd-dev geoip-dev libxslt-dev linux-headers make perl-dev readline-dev zlib-dev ${RESTY_ADD_PACKAGE_BUILDDEPS} && apk add --no-cache gd geoip libgcc libxslt tzdata zlib ${RESTY_ADD_PACKAGE_RUNDEPS} && cd /tmp && if [ -n "${RESTY_EVAL_PRE_CONFIGURE}" ]; then eval $(echo ${RESTY_EVAL_PRE_CONFIGURE}); fi && cd /tmp && curl -fSL "${RESTY_OPENSSL_URL_BASE}/openssl-${RESTY_OPENSSL_VERSION}.tar.gz" -o openssl-${RESTY_OPENSSL_VERSION}.tar.gz && tar xzf openssl-${RESTY_OPENSSL_VERSION}.tar.gz && cd openssl-${RESTY_OPENSSL_VERSION} && if [ $(echo ${RESTY_OPENSSL_VERSION} | cut -c 1-2) = "3." ] ; then echo 'patching OpenSSL 3.x for OpenResty' && curl -s https://raw.githubusercontent.com/openresty/openresty/master/patches/openssl-${RESTY_OPENSSL_PATCH_VERSION}-sess_set_get_cb_yield.patch | patch -p1 ; fi && if [ $(echo ${RESTY_OPENSSL_VERSION} | cut -c 1-5) = "1.1.1" ] ; then echo 'patching OpenSSL 1.1.1 for OpenResty' && curl -s https://raw.githubusercontent.com/openresty/openresty/master/patches/openssl-${RESTY_OPENSSL_PATCH_VERSION}-sess_set_get_cb_yield.patch | patch -p1 ; fi && if [ $(echo ${RESTY_OPENSSL_VERSION} | cut -c 1-5) = "1.1.0" ] ; then echo 'patching OpenSSL 1.1.0 for OpenResty' && curl -s https://raw.githubusercontent.com/openresty/openresty/ed328977028c3ec3033bc25873ee360056e247cd/patches/openssl-1.1.0j-parallel_build_fix.patch | patch -p1 && curl -s https://raw.githubusercontent.com/openresty/openresty/master/patches/openssl-${RESTY_OPENSSL_PATCH_VERSION}-sess_set_get_cb_yield.patch | patch -p1 ; fi && ./config shared zlib -g --prefix=/usr/local/openresty/openssl3 --libdir=lib -Wl,-rpath,/usr/local/openresty/openssl3/lib ${RESTY_OPENSSL_BUILD_OPTIONS} && make -j${RESTY_J} && make -j${RESTY_J} install_sw && cd /tmp && curl -fSL "https://github.com/PCRE2Project/pcre2/releases/download/pcre2-${RESTY_PCRE_VERSION}/pcre2-${RESTY_PCRE_VERSION}.tar.gz" -o pcre2-${RESTY_PCRE_VERSION}.tar.gz && echo "${RESTY_PCRE_SHA256} pcre2-${RESTY_PCRE_VERSION}.tar.gz" | shasum -a 256 --check && tar xzf pcre2-${RESTY_PCRE_VERSION}.tar.gz && cd /tmp/pcre2-${RESTY_PCRE_VERSION} && CFLAGS="-g -O3" ./configure --prefix=/usr/local/openresty/pcre2 --libdir=/usr/local/openresty/pcre2/lib ${RESTY_PCRE_BUILD_OPTIONS} && CFLAGS="-g -O3" make -j${RESTY_J} && CFLAGS="-g -O3" make -j${RESTY_J} install && cd /tmp && curl -fSL https://openresty.org/download/openresty-${RESTY_VERSION}.tar.gz -o openresty-${RESTY_VERSION}.tar.gz && tar xzf openresty-${RESTY_VERSION}.tar.gz && cd /tmp/openresty-${RESTY_VERSION} && if [ -n "${RESTY_EVAL_POST_DOWNLOAD_PRE_CONFIGURE}" ]; then eval $(echo ${RESTY_EVAL_POST_DOWNLOAD_PRE_CONFIGURE}); fi && eval ./configure -j${RESTY_J} ${_RESTY_CONFIG_DEPS} ${RESTY_CONFIG_OPTIONS} ${RESTY_CONFIG_OPTIONS_MORE} ${RESTY_LUAJIT_OPTIONS} ${RESTY_PCRE_OPTIONS} && if [ -n "${RESTY_EVAL_PRE_MAKE}" ]; then eval $(echo ${RESTY_EVAL_PRE_MAKE}); fi && make -j${RESTY_J} && make -j${RESTY_J} install && cd /tmp && if [ -n "${RESTY_EVAL_POST_MAKE}" ]; then eval $(echo ${RESTY_EVAL_POST_MAKE}); fi && rm -rf openssl-${RESTY_OPENSSL_VERSION}.tar.gz openssl-${RESTY_OPENSSL_VERSION} pcre2-${RESTY_PCRE_VERSION}.tar.gz pcre2-${RESTY_PCRE_VERSION} openresty-${RESTY_VERSION}.tar.gz openresty-${RESTY_VERSION} && if [ -n "${RESTY_STRIP_BINARIES}" ]; then echo 'stripping OpenResty binaries' && rm -Rf /usr/local/openresty/openssl3/bin/c_rehash /usr/local/openresty/openssl3/lib/*.a /usr/local/openresty/openssl3/include && find /usr/local/openresty/openssl3 -type f -perm -u+x -exec strip --strip-unneeded '{}' \; && rm -Rf /usr/local/openresty/pcre2/bin /usr/local/openresty/pcre2/share && find /usr/local/openresty/pcre2 -type f -perm -u+x -exec strip --strip-unneeded '{}' \; && rm -Rf /usr/local/openresty/luajit/lib/*.a /usr/local/openresty/luajit/share/man && find /usr/local/openresty/luajit -type f -perm -u+x -exec strip --strip-unneeded '{}' \; && find /usr/local/openresty/nginx -type f -perm -u+x -exec strip --strip-unneeded '{}' \; ; fi && apk del .build-deps && mkdir -p /var/run/openresty && ln -sf /dev/stdout /usr/local/openresty/nginx/logs/access.log && ln -sf /dev/stderr /usr/local/openresty/nginx/logs/error.log # buildkit |
| ENV PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/usr/local/openresty/luajit/bin:/usr/local/openresty/nginx/sbin:/usr/local/openresty/bin |
| COPY nginx.conf /usr/local/openresty/nginx/conf/nginx.conf # buildkit |
| COPY nginx.vh.default.conf /etc/nginx/conf.d/default.conf # buildkit |
| CMD ["/usr/local/openresty/bin/openresty" "-g" "daemon off;"] |
| STOPSIGNAL SIGQUIT |
| WORKDIR /app |
| RUN /bin/sh -c apk add --no-cache openssl sqlite sqlite-dev # buildkit |
| COPY /usr/local/openresty/luajit/share/lua/ /usr/local/openresty/luajit/share/lua/ # buildkit |
| COPY /usr/local/openresty/luajit/lib/ /usr/local/openresty/luajit/lib/ # buildkit |
| COPY /usr/local/openresty/luajit/bin/lapis /usr/local/openresty/luajit/bin/lapis # buildkit |
| COPY . . # buildkit |
| RUN /bin/sh -c /usr/local/openresty/luajit/bin/lapis migrate # buildkit |
| RUN /bin/sh -c chown -R nobody:nobody /app # buildkit |
| EXPOSE [80/tcp] |
| CMD ["/usr/local/openresty/luajit/bin/lapis" "serve" "docker"] |
