157 lines
4.5 KiB
Docker
157 lines
4.5 KiB
Docker
# Ver: 1.8 by Endial Fang (endial@126.com)
|
|
#
|
|
|
|
# 可变参数 ========================================================================
|
|
|
|
# 设置当前应用名称及版本
|
|
ARG app_name=test
|
|
ARG app_version=1.0.0
|
|
|
|
# 设置默认仓库地址，默认为 阿里云 仓库
|
|
ARG registry_url="registry.cn-shenzhen.aliyuncs.com"
|
|
|
|
# 设置 apt-get 源：default / tencent / ustc / aliyun / huawei
|
|
ARG apt_source=aliyun
|
|
|
|
# 编译镜像时指定用于加速的本地服务器地址
|
|
ARG local_url=""
|
|
|
|
|
|
# 0. 预处理 ======================================================================
|
|
FROM ${registry_url}/colovu/dbuilder as builder
|
|
|
|
# 声明需要使用的全局可变参数
|
|
ARG app_name
|
|
ARG app_version
|
|
ARG registry_url
|
|
ARG apt_source
|
|
ARG local_url
|
|
|
|
# 选择软件包源(Optional)，以加速后续软件包安装
|
|
RUN select_source ${apt_source};
|
|
|
|
# 安装依赖的软件包及库(Optional)
|
|
#RUN install_pkg xz-utils
|
|
|
|
# 设置工作目录
|
|
WORKDIR /tmp
|
|
|
|
# 下载并解压软件包
|
|
#RUN set -eux; \
|
|
# appName=${app_name}-${app_version}.tgz; \
|
|
# appKeys="0xB42F6819007F00F88E364FD4036A9C25BF357DD4"; \
|
|
# sha256="04fa1fddc39bd1aecb6739dd5dd73858a3515b427acd1e2947a66dadce868d68"; \
|
|
# [ ! -z ${local_url} ] && localURL=${local_url}/${app_name}; \
|
|
# appUrls="${localURL:-} \
|
|
# https://github.com/tianon/gosu/releases/download/${appVersion} \
|
|
# "; \
|
|
# download_pkg install ${appName} "${appUrls}" -g "${appKeys}" -s "${sha256}"; \
|
|
# download_pkg unpack ${appName} "${appUrls}"; \
|
|
# chmod +x /usr/local/bin/${appName};
|
|
|
|
# 源码编译
|
|
#RUN set -eux; \
|
|
# APP_SRC="/tmp/${app_name}-${app_version}"; \
|
|
# cd ${APP_SRC}; \
|
|
# ./configure \
|
|
# --prefix=/usr/local/${app_name} \
|
|
# CPPFLAGS="-I/usr/local/include -D_GNU_SOURCE" \
|
|
# LDFLAGS="-L/usr/local/lib" \
|
|
# ; \
|
|
# make -j "$(nproc)"; \
|
|
# make install;
|
|
|
|
# 删除编译生成的多余文件
|
|
RUN set -eux; \
|
|
find /usr/local -name '*.a' -delete; \
|
|
rm -rf /usr/local/${app_name}/share; \
|
|
rm -rf /usr/local/${app_name}/include;
|
|
|
|
# 检测并生成依赖文件记录
|
|
RUN set -eux; \
|
|
find /usr/local/${app_name} -type f -executable -exec ldd '{}' ';' | \
|
|
awk '/=>/ { print $(NF-1) }' | \
|
|
sort -u | \
|
|
xargs -r dpkg-query --search 2>/dev/null | \
|
|
cut -d: -f1 | \
|
|
sort -u >/usr/local/${app_name}/runDeps;
|
|
|
|
|
|
# 1. 生成镜像 =====================================================================
|
|
FROM ${registry_url}/colovu/debian:buster
|
|
FROM ${registry_url}/colovu/openjre:8
|
|
|
|
# 声明需要使用的全局可变参数
|
|
ARG app_name
|
|
ARG app_version
|
|
ARG registry_url
|
|
ARG apt_source
|
|
ARG local_url
|
|
|
|
# 镜像所包含应用的基础信息，定义环境变量，供后续脚本使用
|
|
ENV APP_NAME=${app_name} \
|
|
APP_EXEC=${app_name} \
|
|
APP_VERSION=${app_version}
|
|
|
|
ENV APP_HOME_DIR=/usr/local/${APP_NAME} \
|
|
APP_DEF_DIR=/etc/${APP_NAME}
|
|
|
|
ENV PATH="${APP_HOME_DIR}/sbin:${APP_HOME_DIR}/bin:${PATH}" \
|
|
LD_LIBRARY_PATH="${APP_HOME_DIR}/lib"
|
|
|
|
LABEL \
|
|
"Version"="v${app_version}" \
|
|
"Description"="Docker image for ${app_name}(v${app_version})." \
|
|
"Dockerfile"="https://github.com/colovu/docker-${app_name}" \
|
|
"Vendor"="Endial Fang (endial@126.com)"
|
|
|
|
# 从预处理过程中拷贝软件包(Optional)，可以使用阶段编号或阶段命名定义来源
|
|
COPY --from=0 /usr/local/${APP_NAME} /usr/local/${APP_NAME}
|
|
|
|
# 拷贝应用使用的客制化脚本，并创建对应的用户及数据存储目录
|
|
COPY customer /
|
|
RUN set -eux; \
|
|
prepare_env; \
|
|
/bin/bash -c "ln -sf /usr/local/${APP_NAME}/etc/${APP_NAME} /etc/";
|
|
|
|
# 选择软件包源(Optional)，以加速后续软件包安装
|
|
RUN select_source ${apt_source}
|
|
|
|
# 安装依赖的软件包及库(Optional)
|
|
RUN install_pkg `cat /usr/local/${APP_NAME}/runDeps`;
|
|
#RUN install_pkg bash sudo libssl1.1
|
|
|
|
# 执行预处理脚本，并验证安装的软件包
|
|
RUN set -eux; \
|
|
override_file="/usr/local/overrides/overrides-${APP_VERSION}.sh"; \
|
|
[ -e "${override_file}" ] && /bin/bash "${override_file}"; \
|
|
${APP_EXEC} --version ;
|
|
|
|
# 默认提供的数据卷
|
|
VOLUME ["/srv/conf", "/srv/data", "/srv/datalog", "/srv/cert", "/var/log"]
|
|
|
|
# 默认non-root用户启动，必须保证端口在1024之上
|
|
EXPOSE 8080 8443
|
|
|
|
# 关闭基础镜像的健康检查
|
|
#HEALTHCHECK NONE
|
|
|
|
# 应用健康状态检查
|
|
#HEALTHCHECK --interval=30s --timeout=30s --retries=3 \
|
|
# CMD curl -fs http://localhost:8080/ || exit 1
|
|
#HEALTHCHECK --interval=10s --timeout=10s --retries=3 \
|
|
# CMD netstat -ltun | grep 8080
|
|
|
|
# 使用 non-root 用户运行后续的命令
|
|
USER 1001
|
|
|
|
# 设置工作目录
|
|
WORKDIR /srv/conf
|
|
|
|
# 容器初始化命令
|
|
ENTRYPOINT ["/usr/local/bin/entry.sh"]
|
|
|
|
# 应用程序的启动命令，必须使用非守护进程方式运行
|
|
CMD ["/usr/local/bin/run.sh"]
|
|
|