controller/Dockerfile at main · ComputeStacks/controller · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
FROM ruby:3.4

LABEL maintainer="https://github.com/ComputeStacks"
LABEL org.opencontainers.image.authors="https://github.com/ComputeStacks"
LABEL org.opencontainers.image.source="https://github.com/ComputeStacks/controller"
LABEL org.opencontainers.image.url="https://github.com/ComputeStacks/controller"
LABEL org.opencontainers.image.title="ComputeStacks Controller"

ARG db_url="postgresql://cstacks:cstacks@localhost/cstacks?pool=30"
ARG redis_host="localhost"

ENV DATABASE_URL=$db_url
ENV REDIS_HOST=$redis_host

ENV RACK_ENV=production
ENV RAILS_ENV=production
ENV SECRET_KEY_BASE=3a698257a1e32f1bb9b3fd861640c3b53cc9c57dd40b3fa360fed44d2e5da3fdb3351db2f8c881f2a04e6a7ca7e721de67d98061ffa7d394d3ad1c24ce9e09ec
ENV USER_AUTH_SECRET=3a698257a1e32f1bb9b3fd861640c3b53cc9c57dd40b3fa360fed44d2e5da3fdb3351db2f8c881f2a04e6a7ca7e721de67d98061ffa7d394d3ad1c24ce9e09ec
ENV LOCALE=en
ENV CURRENCY=USD
ENV RUBYOPT='-W:no-deprecated'
ENV APP_ID=build

RUN set -ex; \
    \
    apt-get update \
      && apt-get upgrade -y \
      && apt-get install -y \
            ca-certificates \
            wget \
            lsb-release \
            iputils-ping \
            vim \
            git \
            supervisor \
            nginx-light \
            libjemalloc2 \
            patchelf \
    ; \
    # Patch Ruby to use jemalloc
    patchelf --add-needed libjemalloc.so.2 /usr/local/bin/ruby \
      # Discard patchelf after use
      && apt-get purge -y patchelf \
    ; \
    echo "set_real_ip_from 127.0.0.1;" > /etc/nginx/conf.d/restore_ip.conf \
    ; \
    curl -fsSL https://deb.nodesource.com/gpgkey/nodesource-repo.gpg.key | gpg --dearmor -o /etc/apt/keyrings/nodesource.gpg \
      && echo "deb [signed-by=/etc/apt/keyrings/nodesource.gpg] https://deb.nodesource.com/node_20.x nodistro main" | tee /etc/apt/sources.list.d/nodesource.list \
    ; \
    apt-get update \
      && apt-get install -y nodejs \
      && corepack enable \
      && gem install -N puma sassc nokogiri \
      && mkdir -p /usr/src/app/vendor \
      && apt-get clean \
      && rm -rf /var/lib/apt/lists/* /tmp/* /var/tmp/*

WORKDIR /usr/src/app

COPY lib/build/nginx.conf /etc/nginx/sites-enabled/default
COPY lib/build/supervisord.conf /etc/supervisord.conf
COPY . /usr/src/app

# Both halves of the version string are captured into variables rather than interpolated
# straight into the `echo`: inside `echo "$(...)"` a failing substitution still exits 0,
# so a missing .git or an unreadable VERSION would silently ship "9.7.0-" or "-8702913"
# into the API version field, the Sentry release tag and the admin UI. As assignments
# they fail the build instead.
RUN cd /usr/src/app \
      && CS_VERSION="$(cat VERSION)" \
      && [ -n "$CS_VERSION" ] \
      && CS_GIT_SHA="$(git rev-parse --short --verify HEAD)" \
      && [ -n "$CS_GIT_SHA" ] \
      && echo "$CS_VERSION-$CS_GIT_SHA" > VERSION \
      && bundle config set without 'test development' \
      && if [ ! -f Gemfile ]; then mv Gemfile.common Gemfile; fi \
      && bundle install \
      && bundle exec rails db:schema:load \
      && bundle exec rake generate_changelog \
      && bundle exec rake assets:precompile \
      && mkdir -p /usr/src/app/tmp/pids

EXPOSE 3000

CMD ["/usr/bin/supervisord", "-c", "/etc/supervisord.conf"]