forgejo/Dockerfile

FROM alpine:3.6
MAINTAINER Thomas Boerger <thomas@webhippie.de>

EXPOSE 22 3000

RUN apk --no-cache add \
    su-exec \
    ca-certificates \
    sqlite \
    bash \
    git \
    linux-pam \
    s6 \
    curl \
    openssh \
    tzdata
RUN addgroup \
    -S -g 1000 \
    git && \
  adduser \
    -S -H -D \
    -h /data/git \
    -s /bin/bash \
    -u 1000 \
    -G git \
    git && \
  echo "git:$(dd if=/dev/urandom bs=24 count=1 status=none | base64)" | chpasswd

ENV USER git
ENV GITEA_CUSTOM /data/gitea
ENV GODEBUG=netdns=go

VOLUME ["/data"]

ENTRYPOINT ["/usr/bin/entrypoint"]
CMD ["/bin/s6-svscan", "/etc/s6"]

COPY docker /
COPY gitea /app/gitea/gitea
Dockerfile: Updated alpine image to 3.6. (#2486) Signed-off-by: Jonathan Davies <jpds@protonmail.com> 2017-09-13 06:37:42 +00:00			`FROM alpine:3.6`
Restructured docker building I have restructured the docker build process entirely, the binary gets built outside of the docker build command, now we are managing all dependencies with real Alpine packages and I have dropped features like socat or the cron daemon. Signed-off-by: Thomas Boerger <tboerger@suse.de> 2016-11-28 13:13:18 +00:00			`MAINTAINER Thomas Boerger <thomas@webhippie.de>`
#1521 reduce Docker image size 2015-08-25 04:41:01 +00:00
Restructured docker building I have restructured the docker build process entirely, the binary gets built outside of the docker build command, now we are managing all dependencies with real Alpine packages and I have dropped features like socat or the cron daemon. Signed-off-by: Thomas Boerger <tboerger@suse.de> 2016-11-28 13:13:18 +00:00			`EXPOSE 22 3000`
#1521 reduce Docker image size 2015-08-25 04:41:01 +00:00
Realy don't cache apk index Actualy the "-U --no-cache" effectivly is treated as --no-cache was never specified: / # apk -U --no-cache add sed fetch http://dl-cdn.alpinelinux.org/alpine/v3.5/main/x86_64/APKINDEX.tar.gz fetch http://dl-cdn.alpinelinux.org/alpine/v3.5/main/x86_64/APKINDEX.tar.gz fetch http://dl-cdn.alpinelinux.org/alpine/v3.5/community/x86_64/APKINDEX.tar.gz fetch http://dl-cdn.alpinelinux.org/alpine/v3.5/community/x86_64/APKINDEX.tar.gz (1/1) Installing sed (4.2.2-r0) Executing busybox-1.25.1-r0.trigger OK: 4 MiB in 12 packages / # ls -la /var/cache/apk/ total 1004 drwxr-xr-x 1 root root 70 May 8 11:08 . drwxr-xr-x 1 root root 29 Mar 3 11:20 .. -rw-r--r-- 1 root root 732807 May 5 07:11 APKINDEX.c51f8f92.tar.gz -rw-r--r-- 1 root root 293014 May 1 12:37 APKINDEX.d09172fd.tar.gz So removing the "-U" fix this behavior. 2017-05-08 11:09:20 +00:00			`RUN apk --no-cache add \`
Use su-exec instead of gosu, much smaller 2016-11-28 16:16:13 +00:00			`su-exec \`
Restructured docker building I have restructured the docker build process entirely, the binary gets built outside of the docker build command, now we are managing all dependencies with real Alpine packages and I have dropped features like socat or the cron daemon. Signed-off-by: Thomas Boerger <tboerger@suse.de> 2016-11-28 13:13:18 +00:00			`ca-certificates \`
			`sqlite \`
			`bash \`
			`git \`
			`linux-pam \`
			`s6 \`
			`curl \`
			`openssh \`
Revert "Reduce number of layer" (#2086) This reverts commit 789188f13c93e47b8a758c379bd463f7c2792f13. 2017-06-30 06:10:37 +00:00			`tzdata`
			`RUN addgroup \`
Added -S flag to addgroup command within Dockerfiles 2016-11-28 16:37:31 +00:00			`-S -g 1000 \`
Restructured docker building I have restructured the docker build process entirely, the binary gets built outside of the docker build command, now we are managing all dependencies with real Alpine packages and I have dropped features like socat or the cron daemon. Signed-off-by: Thomas Boerger <tboerger@suse.de> 2016-11-28 13:13:18 +00:00			`git && \`
Replaced shadow with addgroup and adduser 2016-11-28 16:22:22 +00:00			`adduser \`
			`-S -H -D \`
			`-h /data/git \`
Restructured docker building I have restructured the docker build process entirely, the binary gets built outside of the docker build command, now we are managing all dependencies with real Alpine packages and I have dropped features like socat or the cron daemon. Signed-off-by: Thomas Boerger <tboerger@suse.de> 2016-11-28 13:13:18 +00:00			`-s /bin/bash \`
			`-u 1000 \`
Replaced shadow with addgroup and adduser 2016-11-28 16:22:22 +00:00			`-G git \`
Fixing multiple docker issues (#386) * Added stupid docker task to makefile * Dropped unknown option PrintLastLog from docker ssh config * OpenSSH should log to docker stdout * Set random pw for docker git user, otherwise it is locked * Stop using templates and public within docker 2016-12-15 09:16:55 +00:00			`git && \`
Use /dev/urandom to create random password (#2298) * Make sure generated password is random Use /dev/urandom to get a 32 char password * Make sure generated password is random Use /dev/urandom to generate 32 char password * Make sure generated password is random 2017-08-13 06:18:05 +00:00			`echo "git:$(dd if=/dev/urandom bs=24 count=1 status=none \| base64)" \| chpasswd`
add missing file 2015-08-17 07:10:23 +00:00
Revert "Reduce number of layer" (#2086) This reverts commit 789188f13c93e47b8a758c379bd463f7c2792f13. 2017-06-30 06:10:37 +00:00			`ENV USER git`
			`ENV GITEA_CUSTOM /data/gitea`
			`ENV GODEBUG=netdns=go`
Update Dockerfile & build script and add /etc/nsswitch.conf: - Add nsswitch.conf to configure LibC Name Service inside the container - Change my email in the Dockerfile - Update build script to install software as a `build-deps` virtual package so that adding a package to it will be automatically removed at the end of the build script 2016-01-25 13:07:37 +00:00
New approach to Gogs Docker Container - VOLUME for ‘/data’ - Usage of S6 as PID 1 Process - Usage of ‘socat’ so linked container (like databases) are binded to localhost - OpenSSH, Socat Link and Gogs are supervised using S6 - Size of container reduced to ~75Mo 2015-10-02 09:56:36 +00:00			`VOLUME ["/data"]`
Restructured docker building I have restructured the docker build process entirely, the binary gets built outside of the docker build command, now we are managing all dependencies with real Alpine packages and I have dropped features like socat or the cron daemon. Signed-off-by: Thomas Boerger <tboerger@suse.de> 2016-11-28 13:13:18 +00:00
			`ENTRYPOINT ["/usr/bin/entrypoint"]`
			`CMD ["/bin/s6-svscan", "/etc/s6"]`

			`COPY docker /`
Copy gitea binary to docker from correct path (#325) Signed-off-by: Thomas Boerger <tboerger@suse.de> 2016-12-01 10:53:26 +00:00			`COPY gitea /app/gitea/gitea`