| # debian.sh --arch 'amd64' out/ 'trixie' '@1775433600' |
| RUN /bin/sh -c set -eux; apt-get update; apt-get install -y --no-install-recommends ca-certificates ; apt-get dist-clean # buildkit |
| RUN /bin/sh -c set -eux; mkdir -p /usr/local/etc; echo 'gem: --no-document' >> /usr/local/etc/gemrc # buildkit |
| ENV LANG=C.UTF-8 |
| ENV RUBY_VERSION=4.0.2 |
| ENV RUBY_DOWNLOAD_URL=https://cache.ruby-lang.org/pub/ruby/4.0/ruby-4.0.2.tar.xz |
| ENV RUBY_DOWNLOAD_SHA256=4618db85bb9ec04d8152d0099db488694a3d3c4f52106625e4ad547f1318db87 |
| RUN /bin/sh -c set -eux; savedAptMark="$(apt-mark showmanual)"; apt-get update; apt-get install -y --no-install-recommends dpkg-dev libgdbm-dev ruby autoconf bzip2 g++ gcc libbz2-dev libffi-dev libgdbm-compat-dev libglib2.0-dev libgmp-dev libncurses-dev libssl-dev libxml2-dev libxslt-dev libyaml-dev make wget xz-utils zlib1g-dev ; rustArch=; dpkgArch="$(dpkg --print-architecture)"; case "$dpkgArch" in 'amd64') rustArch='x86_64-unknown-linux-gnu'; rustupUrl='https://static.rust-lang.org/rustup/archive/1.28.2/x86_64-unknown-linux-gnu/rustup-init'; rustupSha256='20a06e644b0d9bd2fbdbfd52d42540bdde820ea7df86e92e533c073da0cdd43c' ;; 'arm64') rustArch='aarch64-unknown-linux-gnu'; rustupUrl='https://static.rust-lang.org/rustup/archive/1.28.2/aarch64-unknown-linux-gnu/rustup-init'; rustupSha256='e3853c5a252fca15252d07cb23a1bdd9377a8c6f3efa01531109281ae47f841c' ;; esac; if [ -n "$rustArch" ]; then mkdir -p /tmp/rust; wget -O /tmp/rust/rustup-init "$rustupUrl"; echo "$rustupSha256 */tmp/rust/rustup-init" | sha256sum --check --strict; chmod +x /tmp/rust/rustup-init; export RUSTUP_HOME='/tmp/rust/rustup' CARGO_HOME='/tmp/rust/cargo'; export PATH="$CARGO_HOME/bin:$PATH"; /tmp/rust/rustup-init -y --no-modify-path --profile minimal --default-toolchain '1.91.1' --default-host "$rustArch"; rustc --version; cargo --version; fi; wget -O ruby.tar.xz "$RUBY_DOWNLOAD_URL"; echo "$RUBY_DOWNLOAD_SHA256 *ruby.tar.xz" | sha256sum --check --strict; mkdir -p /usr/src/ruby; tar -xJf ruby.tar.xz -C /usr/src/ruby --strip-components=1; rm ruby.tar.xz; cd /usr/src/ruby; autoconf; gnuArch="$(dpkg-architecture --query DEB_BUILD_GNU_TYPE)"; ./configure --build="$gnuArch" --disable-install-doc --enable-shared ${rustArch:+--enable-yjit} ${rustArch:+--enable-zjit} ; make -j "$(nproc)"; make install; rm -rf /tmp/rust; apt-mark auto '.*' > /dev/null; apt-mark manual $savedAptMark > /dev/null; find /usr/local -type f -executable -not \( -name '*tkinter*' \) -exec ldd '{}' ';' | awk '/=>/ { so = $(NF-1); if (index(so, "/usr/local/") == 1) { next }; gsub("^/(usr/)?", "", so); printf "*%s\n", so }' | sort -u | xargs -r dpkg-query --search | awk 'sub(":$", "", $1) { print $1 }' | sort -u | xargs -r apt-mark manual ; apt-get purge -y --auto-remove -o APT::AutoRemove::RecommendsImportant=false; apt-get dist-clean; cd /; rm -r /usr/src/ruby; if dpkg -l | grep -i ruby; then exit 1; fi; [ "$(command -v ruby)" = '/usr/local/bin/ruby' ]; ruby --version; gem --version; bundle --version # buildkit |
| ENV GEM_HOME=/usr/local/bundle |
| ENV BUNDLE_SILENCE_ROOT_WARNING=1 BUNDLE_APP_CONFIG=/usr/local/bundle |
| ENV PATH=/usr/local/bundle/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin |
| RUN /bin/sh -c set -eux; mkdir "$GEM_HOME"; chmod 1777 "$GEM_HOME" # buildkit |
| CMD ["irb"] |
| LABEL maintainer=operations@openproject.com |
| ARG NODE_VERSION=22.21.0 |
| ARG BIM_SUPPORT=true |
| ENV USE_JEMALLOC=false |
| ENV DEBIAN_FRONTEND=noninteractive |
| ENV BUNDLE_JOBS=8 |
| ENV BUNDLE_RETRY=3 |
| ENV BUNDLE_WITHOUT=development:test |
| ENV DOCKER=1 |
| ENV APP_USER=app |
| ENV APP_PATH=/app |
| ENV APP_DATA_PATH=/var/openproject/assets |
| ENV BUNDLE_PATH=/app/vendor/bundle |
| ENV BUNDLE_APP_CONFIG=/app/.bundle |
| ENV PGVERSION=17 |
| ENV PGVERSION_CHOICES=13 15 17 |
| ENV PGBIN=/usr/lib/postgresql/17/bin |
| ENV PATH=/usr/lib/postgresql/17/bin:/usr/local/bundle/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin |
| ENV BUNDLE_WITHOUT=development:test |
| ENV SECRET_KEY_BASE=OVERWRITE_ME |
| ENV RAILS_ENV=production |
| ENV RAILS_LOG_TO_STDOUT=1 |
| ENV RAILS_SERVE_STATIC_FILES=1 |
| ENV OPENPROJECT_EDITION=standard |
| ENV OPENPROJECT_INSTALLATION__TYPE=docker |
| ENV OPENPROJECT_ATTACHMENTS__STORAGE__PATH=/var/openproject/assets/files |
| ENV OPENPROJECT_RAILS__CACHE__STORE=file_store |
| ENV OPENPROJECT_ANGULAR_UGLIFY=true |
| ENV OPENPROJECT_COLLABORATIVE__EDITING__HOCUSPOCUS__URL=auto |
| ENV OPENPROJECT_COLLABORATIVE__EDITING__HOCUSPOCUS__SECRET= |
| RUN |2 NODE_VERSION=22.21.0 BIM_SUPPORT=true /bin/sh -c useradd -d /home/$APP_USER -m $APP_USER && mkdir -p $APP_PATH && chown $APP_USER:$APP_USER $APP_PATH && mkdir -p $APP_DATA_PATH && chown $APP_USER:$APP_USER $APP_DATA_PATH && chmod g+rwx $APP_DATA_PATH # buildkit |
| WORKDIR /app |
| RUN |2 NODE_VERSION=22.21.0 BIM_SUPPORT=true /bin/sh -c gem install bundler --no-document # buildkit |
| COPY ./docker/prod/setup/preinstall-common.sh ./docker/prod/setup/preinstall-common.sh # buildkit |
| RUN |2 NODE_VERSION=22.21.0 BIM_SUPPORT=true /bin/sh -c ./docker/prod/setup/preinstall-common.sh # buildkit |
| COPY --chown=app:app /app /app # buildkit |
| RUN |2 NODE_VERSION=22.21.0 BIM_SUPPORT=true /bin/sh -c ./docker/prod/setup/postinstall-common.sh && cp ./config/database.production.yml config/database.yml && ln -s $APP_PATH/docker/prod/setup/.irbrc /home/$APP_USER/ # buildkit |
| ENV OPENPROJECT_RAILS__CACHE__STORE=memcache |
| ENV DATABASE_URL=postgres://openproject:openproject@127.0.0.1/openproject |
| ENV PGDATA=/var/openproject/pgdata |
| COPY /go/bin/gosu /usr/local/bin/gosu # buildkit |
| RUN |2 NODE_VERSION=22.21.0 BIM_SUPPORT=true /bin/sh -c chmod +x /usr/local/bin/gosu && gosu nobody true # buildkit |
| COPY --chown=app:app /app /opt/hocuspocus # buildkit |
| COPY /usr/local/bin/node /usr/local/bin/node # buildkit |
| COPY /usr/local/lib/node_modules /usr/local/lib/node_modules # buildkit |
| RUN |2 NODE_VERSION=22.21.0 BIM_SUPPORT=true /bin/sh -c ./docker/prod/setup/postinstall-onprem.sh && ln -sf ../lib/node_modules/npm/bin/npm-cli.js /usr/local/bin/npm && ln -sf ../lib/node_modules/npm/bin/npx-cli.js /usr/local/bin/npx && ln -sf ../lib/node_modules/corepack/dist/corepack.js /usr/local/bin/corepack && ln -s /app/docker/prod/setup/.irbrc /root/ # buildkit |
| EXPOSE [80/tcp] |
| VOLUME [/var/openproject/pgdata /var/openproject/assets] |
| ENTRYPOINT ["./docker/prod/entrypoint.sh"] |
| CMD ["./docker/prod/supervisord"] |
