dockerfile_fswiki_local/alpine/Dockerfile at main · KazKobara/dockerfile_fswiki_local · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
# This Dockerfile is to launch FSWiki that is used only from a local web
# browser.
# Cf. https://github.com/KazKobara/dockerfile_fswiki_local
#
# CAUTION:
# To expose it to the public network, additional security considerations
# would be necessary including https use, load-balancing, permissions
# and so on.
#
# Operation is checked:
#  for TAG_VERSION=0.0.2 at:
#   FROM httpd:2.4.52-alpine
#   perl v5.34.0
#  for TAG_VERSION=0.0.1 at:
#   FROM httpd:2.4.46-alpine
#   perl v5.30.3
# ---
# THIS FILE COMES WITH ABSOLUTELY NO WARRANTY.

FROM httpd:alpine

ARG tag_version
LABEL maintainer="Kaz KOBARA <M-kaz-ml@aist.go.jp>"
LABEL version="${tag_version}"
LABEL description="FSWiki for local use only"

ARG owner_group
ARG require_ip
ARG fswiki_tmp_dir
ARG fswiki_version
# ENV DEBCONF_NOWARNINGS yes  # LegacyKeyValueFormat
ENV DEBCONF_NOWARNINGS=yes
# `&& git make gcc musl-dev perl-dev \` are for Text::Markdown::Discount 0.13 or later
# `&& git cherry-pick b002a5a \` is to fix https://github.com/Orc/discount/issues/189 .
# `&& git clone https://github.com/KazKobara/text-markdown-discount.git -b discount-2.2.7 --depth 1 \`
#   is tentative until
#   both https://github.com/sekimura/text-markdown-discount/pull/25
#   and  https://github.com/adamatousek/text-markdown-discount/pull/1 are accepted.
# `&& sed -r -i.bk "s/&& make && make test)/&& make/;" Makefile.PL \`
#   is needed earlier than Discount markdown 2.2.7b, which is newer than 2.2.7,
#   and at a631dde https://github.com/Orc/discount/pull/252 has solved.
#   Makefile.PL of "text-markdown-discount.git -b discount-2.2.7" uses
#   the newest Discount markdown within the v2maint branch.
# `&& adduser www-data xfs \`
#   or for Alpine Linux v3.21 and newer
# `&& addgroup --gid 33 www-data-ubuntu \
# `&& adduser www-data www-data-ubuntu \
#   are to share data volume with Ubuntu/Debian.
# `&& sed -i 's/cc -fPIC/cc -fPIC -Wno-incompatible-pointer-types/' Makefile.PL \` after `&& (cd text-markdown-discount \`
#   is for gcc version 14.2.0 (Alpine 14.2.0) on Alpine Linux v3.21.
# `&& sed -i 's/v2maint/v3.0.0d/' Makefile.PL \` after `&& (cd text-markdown-discount \`
#   to try another tag or branch.
RUN apk update \
    && apk add \
        perl \
        perl-cgi-fast \
        git make gcc musl-dev perl-dev \
    && addgroup --gid 33 www-data-ubuntu \
    && adduser www-data www-data-ubuntu \
    && mv /usr/local/apache2/htdocs /usr/local/apache2/htdocs_org \
    && git clone https://github.com/KazKobara/text-markdown-discount.git -b discount-2.2.7 --depth 1 \
    && (cd text-markdown-discount \
    && sed -i 's/cc -fPIC/cc -fPIC -Wno-incompatible-pointer-types/' Makefile.PL \
    && perl Makefile.PL && make && make install) \
    && apk del git make gcc musl-dev perl-dev
#
# For Text::Markdown::Discount 0.13
#    && git clone https://github.com/sekimura/text-markdown-discount.git -b 0.13 --depth 1 \
#    && (cd text-markdown-discount \
#    && git remote add -t v2maint discount https://github.com/Orc/discount.git \
#    && git fetch --depth 400 -n discount \
#    && git cherry-pick -n b002a5a \
#
#    && rm -rf text-markdown-discount \
#    && sed -r -i.bk 's/ && make test)/ )/;' Makefile.PL \
#
# httpd runs its sub-processes as a 'www-data' user for 2.4.52
# (or a 'daemon' user for older ones).
# ADD/COPY --chown is available at Docker 17.09 and later.
COPY --chown=${owner_group} ${fswiki_tmp_dir}/wiki${fswiki_version} /usr/local/apache2/htdocs

# Edit ${require_ip} to allow access from other or all IP addresses where
# ${require_ip} is given by docker-compose.yml or docker_build.sh.
RUN sed -r -i.bk \
    "s/Require all granted/Require all denied\n    Require ip ${require_ip}/g; \
     s/#ServerName www.example.com/ServerName fswiki.local/g; \
     s/#LoadModule cgid_module/LoadModule cgid_module/g; \
     s/DirectoryIndex index.html/DirectoryIndex wiki.cgi/g; \
     s/Options Indexes FollowSymLinks/Options ExecCGI/g; \
     s/#AddHandler cgi-script .cgi/AddHandler cgi-script .cgi/g" \
    /usr/local/apache2/conf/httpd.conf; \
    echo "Include conf/extra/httpd-security-fswiki-local.conf" >> /usr/local/apache2/conf/httpd.conf
# root:root 644
COPY ./data/httpd-security-fswiki-local.conf /usr/local/apache2/conf/extra/.

WORKDIR /usr/local/apache2/htdocs
# TODO: owner, group, and permissions should be harmonized with FSWiki setup.sh
#       and docker -v.
# Due to "AllowOverride None", append copied .htaccess to httpd.conf.
RUN sh ./setup.sh; \
    rm -rf ./setup.sh ./release.sh .git/ ./theme/kati_dark/.git/ ./theme/resources/jsdifflib/.git/; \
    chown -R ${owner_group} attach/ config/ data/ log/ backup/ pdf/; \
    chmod -R o-rwx ./; \
    chmod 444 /usr/local/apache2/conf/extra/httpd-security-fswiki-local.conf
# Despite `COPY --chown`, ./setup.sh creates missing folders as root.