mirror of
https://github.com/dunglas/frankenphp
synced 2024-11-21 23:30:45 +00:00
127 lines
3.5 KiB
Docker
127 lines
3.5 KiB
Docker
# syntax=docker/dockerfile:1
|
|
#checkov:skip=CKV_DOCKER_2
|
|
#checkov:skip=CKV_DOCKER_3
|
|
#checkov:skip=CKV_DOCKER_7
|
|
FROM php-base AS common
|
|
|
|
ARG TARGETARCH
|
|
|
|
WORKDIR /app
|
|
|
|
RUN apk add --no-cache \
|
|
ca-certificates \
|
|
libcap \
|
|
mailcap
|
|
|
|
RUN set -eux; \
|
|
mkdir -p \
|
|
/app/public \
|
|
/config/caddy \
|
|
/data/caddy \
|
|
/etc/caddy; \
|
|
sed -i 's/php/frankenphp run/g' /usr/local/bin/docker-php-entrypoint; \
|
|
echo '<?php phpinfo();' > /app/public/index.php
|
|
|
|
COPY --link caddy/frankenphp/Caddyfile /etc/caddy/Caddyfile
|
|
COPY --from=mlocati/php-extension-installer /usr/bin/install-php-extensions /usr/local/bin/
|
|
|
|
CMD ["--config", "/etc/caddy/Caddyfile", "--adapter", "caddyfile"]
|
|
HEALTHCHECK CMD curl -f http://localhost:2019/metrics || exit 1
|
|
|
|
# See https://caddyserver.com/docs/conventions#file-locations for details
|
|
ENV XDG_CONFIG_HOME=/config
|
|
ENV XDG_DATA_HOME=/data
|
|
|
|
EXPOSE 80
|
|
EXPOSE 443
|
|
EXPOSE 443/udp
|
|
EXPOSE 2019
|
|
|
|
LABEL org.opencontainers.image.title=FrankenPHP
|
|
LABEL org.opencontainers.image.description="The modern PHP app server"
|
|
LABEL org.opencontainers.image.url=https://frankenphp.dev
|
|
LABEL org.opencontainers.image.source=https://github.com/dunglas/frankenphp
|
|
LABEL org.opencontainers.image.licenses=MIT
|
|
LABEL org.opencontainers.image.vendor="Kévin Dunglas"
|
|
|
|
|
|
FROM common AS builder
|
|
|
|
ARG FRANKENPHP_VERSION='dev'
|
|
SHELL ["/bin/ash", "-eo", "pipefail", "-c"]
|
|
|
|
COPY --link --from=golang-base /usr/local/go /usr/local/go
|
|
|
|
ENV PATH=/usr/local/go/bin:$PATH
|
|
|
|
# hadolint ignore=SC2086
|
|
RUN apk add --no-cache --virtual .build-deps \
|
|
$PHPIZE_DEPS \
|
|
argon2-dev \
|
|
brotli-dev \
|
|
coreutils \
|
|
curl-dev \
|
|
gnu-libiconv-dev \
|
|
libsodium-dev \
|
|
libxml2-dev \
|
|
linux-headers \
|
|
oniguruma-dev \
|
|
openssl-dev \
|
|
readline-dev \
|
|
sqlite-dev \
|
|
upx \
|
|
# Needed for the custom Go build
|
|
git \
|
|
bash
|
|
|
|
# FIXME: temporary workaround for https://github.com/golang/go/issues/68285
|
|
WORKDIR /
|
|
RUN git clone https://go.googlesource.com/go goroot
|
|
WORKDIR /goroot
|
|
# Revert https://github.com/golang/go/commit/3560cf0afb3c29300a6c88ccd98256949ca7a6f6 to prevent the crash with musl
|
|
RUN git config --global user.email "build@example.com" && \
|
|
git config --global user.name "Build" && \
|
|
git checkout "$(go env GOVERSION)" && \
|
|
git revert 3560cf0afb3c29300a6c88ccd98256949ca7a6f6
|
|
WORKDIR /goroot/src
|
|
ENV GOHOSTARCH="$TARGETARCH"
|
|
RUN ./make.bash
|
|
ENV PATH="/goroot/bin:$PATH"
|
|
RUN go version
|
|
|
|
WORKDIR /go/src/app
|
|
|
|
COPY --link go.mod go.sum ./
|
|
RUN go mod graph | awk '{if ($1 !~ "@") print $2}' | xargs go get
|
|
|
|
WORKDIR /go/src/app/caddy
|
|
COPY caddy/go.mod caddy/go.sum ./
|
|
RUN go mod graph | awk '{if ($1 !~ "@") print $2}' | xargs go get
|
|
|
|
WORKDIR /go/src/app
|
|
COPY --link *.* ./
|
|
COPY --link caddy caddy
|
|
COPY --link internal internal
|
|
COPY --link testdata testdata
|
|
|
|
# todo: automate this?
|
|
# see https://github.com/docker-library/php/blob/master/8.2/bookworm/zts/Dockerfile#L57-L59 for php values
|
|
ENV CGO_LDFLAGS="-lssl -lcrypto -lreadline -largon2 -lcurl -lonig -lz $PHP_LDFLAGS" CGO_CFLAGS="-DFRANKENPHP_VERSION=$FRANKENPHP_VERSION $PHP_CFLAGS" CGO_CPPFLAGS=$PHP_CPPFLAGS
|
|
|
|
WORKDIR /go/src/app/caddy/frankenphp
|
|
RUN GOBIN=/usr/local/bin go install -ldflags "-w -s -extldflags '-Wl,-z,stack-size=0x80000' -X 'github.com/caddyserver/caddy/v2.CustomVersion=FrankenPHP $FRANKENPHP_VERSION PHP $PHP_VERSION Caddy'" && \
|
|
setcap cap_net_bind_service=+ep /usr/local/bin/frankenphp && \
|
|
upx --best /usr/local/bin/frankenphp && \
|
|
frankenphp version
|
|
|
|
WORKDIR /go/src/app
|
|
|
|
|
|
FROM common AS runner
|
|
|
|
ENV GODEBUG=cgocheck=0
|
|
|
|
COPY --from=builder /usr/local/bin/frankenphp /usr/local/bin/frankenphp
|
|
RUN setcap cap_net_bind_service=+ep /usr/local/bin/frankenphp && \
|
|
frankenphp version
|