mirror of
https://github.com/php/frankenphp.git
synced 2026-03-24 00:52:11 +01:00
bbbfdb31b5
* add ./create-rpm.sh file to build a "frankenphp" rpm package * also build a deb package * renamed to build-packages * linter... * add depends * linter again? * linter number 3 * linter number 4 * set default locations for ini file, conf files and extensions * set unified path for modules that should be ok on all dists * add default content into "package" folder * make file executable * worker is in public folder * what on earth did I do x) * use same FRANKENPHP_VERSION and make sure to let pr's run the rpm generation too (version 0.0.0) to see issues * install ruby, fpm and rpm-build * move to after changing base urls because it would fail with packages not found * ruby 3 build needs gcc 10 * rpm-build is necessary too... * and I forgot to link the package folder * create directories if they don't exist * copy out all frankenphp* files? * lint fix * only copy frankenphp-* files * only copy frankenphp-* files * the .deb file is name frankenphp_1.5.0... - create output folder instead and upload all things inside that will simplify things when later adding xdebug.so and ffi.so * update the last two steps to use the gh-output directory * add post install script to set frankenphp able to bind to port 80 for non-root users * dnf over yum, I think the yum alias was removed in RH 9.5 * newlines * newlines * add text what missing libcap means * copy php.ini-production from php-src, linter, update ruby version * move Caddyfile to /etc/frankenphp/Caddyfile * linter * fix a copy and paste error * better describe fallback to 0.0.0 * linter * copy installation scripts from official caddy packages, change user to frankenphp too * bombombom * make files executable * tabs * linter * linter again * use empty directory for three different destinations instead of keeping three empty local directories * caddy says the file is incorrectly formatted without these spaces * remove wildcard matcher from root directive * Apply suggestions from code review commit suggested changes to preinstall/postinstall scripts Co-authored-by: Kévin Dunglas <kevin@dunglas.fr> * Update dev.Dockerfile Co-authored-by: Kévin Dunglas <kevin@dunglas.fr> * remove misleading comment * update documentation for paths * update documentation for paths some more * fix musl opcache-jit issue * markdown linter * the damn tab * Apply suggestions from code review Co-authored-by: Kévin Dunglas <kevin@dunglas.fr> * drop dev.Dockerfile php location from config.md * add php config note to CONTRIBUTING.md * dashes instead of asterisks in chinese docs * fix package building * create frankenphp user in case it doesn't exist for deb packages * create users if they don't exist, delete them again if they didn't exist * satisfy linter * create the user with the same commands as the postinst/preinstall scripts * Removes toolchain requirements. * trigger * Removes explicit calls to go get * trigger * setcap by default * simplify example project * bring page more in line with the caddy / apache / nginx default page * update to html 5 * oopsies * revert style to original * remove https:// (caddy uses http:// on RHEL, :80 on Debian) --------- Co-authored-by: Kévin Dunglas <kevin@dunglas.fr> Co-authored-by: Alliballibaba <alliballibaba@gmail.com>
139 lines
3.8 KiB
Docker
139 lines
3.8 KiB
Docker
# syntax=docker/dockerfile:1
|
|
#checkov:skip=CKV_DOCKER_2
|
|
#checkov:skip=CKV_DOCKER_3
|
|
#checkov:skip=CKV_DOCKER_7
|
|
FROM php-base AS common
|
|
|
|
ARG TARGETARCH
|
|
|
|
WORKDIR /app
|
|
|
|
RUN apk add --no-cache \
|
|
ca-certificates \
|
|
libcap \
|
|
mailcap
|
|
|
|
RUN set -eux; \
|
|
mkdir -p \
|
|
/app/public \
|
|
/config/caddy \
|
|
/data/caddy \
|
|
/etc/frankenphp; \
|
|
sed -i 's/php/frankenphp run/g' /usr/local/bin/docker-php-entrypoint; \
|
|
echo '<?php phpinfo();' > /app/public/index.php
|
|
|
|
COPY --link caddy/frankenphp/Caddyfile /etc/frankenphp/Caddyfile
|
|
RUN curl -sSLf \
|
|
-o /usr/local/bin/install-php-extensions \
|
|
https://github.com/mlocati/docker-php-extension-installer/releases/latest/download/install-php-extensions && \
|
|
chmod +x /usr/local/bin/install-php-extensions
|
|
|
|
CMD ["--config", "/etc/frankenphp/Caddyfile", "--adapter", "caddyfile"]
|
|
HEALTHCHECK CMD curl -f http://localhost:2019/metrics || exit 1
|
|
|
|
# See https://caddyserver.com/docs/conventions#file-locations for details
|
|
ENV XDG_CONFIG_HOME=/config
|
|
ENV XDG_DATA_HOME=/data
|
|
|
|
EXPOSE 80
|
|
EXPOSE 443
|
|
EXPOSE 443/udp
|
|
EXPOSE 2019
|
|
|
|
LABEL org.opencontainers.image.title=FrankenPHP
|
|
LABEL org.opencontainers.image.description="The modern PHP app server"
|
|
LABEL org.opencontainers.image.url=https://frankenphp.dev
|
|
LABEL org.opencontainers.image.source=https://github.com/dunglas/frankenphp
|
|
LABEL org.opencontainers.image.licenses=MIT
|
|
LABEL org.opencontainers.image.vendor="Kévin Dunglas"
|
|
|
|
|
|
FROM common AS builder
|
|
|
|
ARG FRANKENPHP_VERSION='dev'
|
|
ARG NO_COMPRESS=''
|
|
SHELL ["/bin/ash", "-eo", "pipefail", "-c"]
|
|
|
|
COPY --link --from=golang-base /usr/local/go /usr/local/go
|
|
|
|
ENV PATH=/usr/local/go/bin:$PATH
|
|
ENV GOTOOLCHAIN=local
|
|
|
|
# hadolint ignore=SC2086
|
|
RUN apk add --no-cache --virtual .build-deps \
|
|
$PHPIZE_DEPS \
|
|
argon2-dev \
|
|
# Needed for the custom Go build
|
|
bash \
|
|
brotli-dev \
|
|
coreutils \
|
|
curl-dev \
|
|
# Needed for the custom Go build
|
|
git \
|
|
gnu-libiconv-dev \
|
|
libsodium-dev \
|
|
# Needed for the file watcher \
|
|
cmake \
|
|
libstdc++ \
|
|
libxml2-dev \
|
|
linux-headers \
|
|
oniguruma-dev \
|
|
openssl-dev \
|
|
readline-dev \
|
|
sqlite-dev \
|
|
upx
|
|
|
|
# Install e-dant/watcher (necessary for file watching)
|
|
WORKDIR /usr/local/src/watcher
|
|
RUN curl -s https://api.github.com/repos/e-dant/watcher/releases/latest | \
|
|
grep tarball_url | \
|
|
awk '{ print $2 }' | \
|
|
sed 's/,$//' | \
|
|
sed 's/"//g' | \
|
|
xargs curl -L | \
|
|
tar xz --strip-components 1 && \
|
|
cmake -S . -B build -DCMAKE_BUILD_TYPE=Release && \
|
|
cmake --build build && \
|
|
cmake --install build
|
|
|
|
WORKDIR /go/src/app
|
|
|
|
COPY --link go.mod go.sum ./
|
|
RUN go mod download
|
|
|
|
WORKDIR /go/src/app/caddy
|
|
COPY caddy/go.mod caddy/go.sum ./
|
|
RUN go mod download
|
|
|
|
WORKDIR /go/src/app
|
|
COPY --link . ./
|
|
|
|
# See https://github.com/docker-library/php/blob/master/8.3/alpine3.20/zts/Dockerfile#L53-L55
|
|
ENV CGO_CFLAGS="-DFRANKENPHP_VERSION=$FRANKENPHP_VERSION $PHP_CFLAGS"
|
|
ENV CGO_CPPFLAGS=$PHP_CPPFLAGS
|
|
ENV CGO_LDFLAGS="-lssl -lcrypto -lreadline -largon2 -lcurl -lonig -lz $PHP_LDFLAGS"
|
|
|
|
WORKDIR /go/src/app/caddy/frankenphp
|
|
RUN GOBIN=/usr/local/bin go install -tags 'nobadger,nomysql,nopgx' -ldflags "-w -s -extldflags '-Wl,-z,stack-size=0x80000' -X 'github.com/caddyserver/caddy/v2.CustomVersion=FrankenPHP $FRANKENPHP_VERSION PHP $PHP_VERSION Caddy'" -buildvcs=true && \
|
|
setcap cap_net_bind_service=+ep /usr/local/bin/frankenphp && \
|
|
([ -z "${NO_COMPRESS}" ] && upx --best /usr/local/bin/frankenphp || true) && \
|
|
frankenphp version && \
|
|
frankenphp build-info
|
|
|
|
WORKDIR /go/src/app
|
|
|
|
|
|
FROM common AS runner
|
|
|
|
ENV GODEBUG=cgocheck=0
|
|
|
|
# copy watcher shared library (libgcc and libstdc++ are needed for the watcher)
|
|
COPY --from=builder /usr/local/lib/libwatcher* /usr/local/lib/
|
|
RUN apk add --no-cache libstdc++ && \
|
|
ldconfig /usr/local/lib
|
|
|
|
COPY --from=builder /usr/local/bin/frankenphp /usr/local/bin/frankenphp
|
|
RUN setcap cap_net_bind_service=+ep /usr/local/bin/frankenphp && \
|
|
frankenphp version && \
|
|
frankenphp build-info
|