quay/Dockerfile

# vim:ft=dockerfile

FROM quay.io/jzelinskie/phusion-baseimage-xenial:e436d1c

ENV DEBIAN_FRONTEND noninteractive
ENV HOME /root

# Install system packages
RUN apt-get update # 02JUN2016
RUN apt-get install -y \
     g++               \
     gdebi-core        \
     git               \
     libevent-2.0.5    \
     libevent-dev      \
     libffi-dev        \
     libfreetype6-dev  \
     libgpgme11        \
     libgpgme11-dev    \
     libjpeg62         \
     libjpeg62-dev     \
     libjpeg8          \
     libldap-2.4-2     \
     libldap2-dev      \
     libmagic1         \
     libpq-dev         \
     libpq5            \
     libsasl2-dev      \
     libsasl2-modules  \
     nginx             \
     nodejs            \
     npm               \
     python-dev        \
     python-pip        \
     python-virtualenv

# Install python dependencies
ADD requirements.txt requirements.txt
RUN virtualenv --distribute venv
RUN venv/bin/pip install -r requirements.txt # 02JUN2016
RUN venv/bin/pip freeze

# Check python dependencies for the GPL
# Due to the following bug, pip results must be piped to a file before grepping:
# https://github.com/pypa/pip/pull/3304
RUN cat requirements.txt | grep -v "^-e" | awk -F'==' '{print $1}' | xargs venv/bin/pip --disable-pip-version-check show > pipinfo.txt && \
    test -z $(cat pipinfo.txt | grep GPL | grep -v LGPL) && \
    rm pipinfo.txt

# Install cfssl
RUN mkdir /gocode
ENV GOPATH /gocode
RUN curl -O https://storage.googleapis.com/golang/go1.6.linux-amd64.tar.gz && \
    tar -xvf go1.6.linux-amd64.tar.gz && \
    mv go /usr/local && \
    rm -rf go1.6.linux-amd64.tar.gz && \
    /usr/local/go/bin/go get -u github.com/cloudflare/cfssl/cmd/cfssl && \
    /usr/local/go/bin/go get -u github.com/cloudflare/cfssl/cmd/cfssljson && \
    cp /gocode/bin/cfssljson /bin/cfssljson && \
    cp /gocode/bin/cfssl /bin/cfssl && \
    rm -rf /gocode && rm -rf /usr/local/go

# Install jwtproxy
RUN curl -L -o /usr/local/bin/jwtproxy https://github.com/coreos/jwtproxy/releases/download/v0.0.1/jwtproxy-linux-x64
RUN chmod +x /usr/local/bin/jwtproxy

# Install Grunt
RUN ln -s /usr/bin/nodejs /usr/bin/node
RUN npm install -g grunt-cli

# Install Grunt depenencies
ADD grunt grunt
RUN cd grunt && npm install

# Run grunt
ADD static static
RUN cd grunt && grunt

RUN apt-get remove -y --auto-remove python-dev g++ libjpeg62-dev libevent-dev libldap2-dev  libsasl2-dev libpq-dev libffi-dev libgpgme11-dev nodejs npm
RUN apt-get autoremove -y
RUN apt-get clean && rm -rf /var/lib/apt/lists/* /tmp/* /var/tmp/*
RUN rm -rf grunt

# Set up the init system
ADD conf/init/copy_config_files.sh /etc/my_init.d/
ADD conf/init/doupdatelimits.sh /etc/my_init.d/
ADD conf/init/copy_syslog_config.sh /etc/my_init.d/
ADD conf/init/create_certs.sh /etc/my_init.d/
ADD conf/init/runmigration.sh /etc/my_init.d/
ADD conf/init/syslog-ng.conf /etc/syslog-ng/
ADD conf/init/zz_boot.sh /etc/my_init.d/
ADD conf/init/service/ /etc/service/
RUN rm -rf /etc/service/syslog-forwarder

# Download any external libs.
RUN mkdir static/fonts static/ldn
ADD external_libraries.py external_libraries.py
RUN venv/bin/python -m external_libraries
RUN mkdir -p /usr/local/nginx/logs/

# TODO(ssewell): only works on a detached head, make work with ref
ADD .git/HEAD GIT_HEAD

# Add all of the files!
ADD . .

# Run the tests
ARG RUN_TESTS=true
ENV RUN_TESTS ${RUN_TESTS}

RUN if [ "$RUN_TESTS" = true ]; then \
      TEST=true venv/bin/python -m unittest discover -f; \
    fi
RUN if [ "$RUN_TESTS" = true ]; then \
      TEST=true venv/bin/python -m test.registry_tests -f; \
    fi
RUN PYTHONPATH=. venv/bin/alembic heads | grep -E '^[0-9a-f]+ \(head\)$' > ALEMBIC_HEAD

VOLUME ["/conf/stack", "/var/log", "/datastorage", "/tmp", "/conf/etcd"]

EXPOSE 443 8443 80