-
Notifications
You must be signed in to change notification settings - Fork 1
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
Use DRO Dockerfile, move to .docker folder
- Loading branch information
Showing
9 changed files
with
217 additions
and
160 deletions.
There are no files selected for viewing
File renamed without changes.
File renamed without changes.
File renamed without changes.
File renamed without changes.
File renamed without changes.
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,193 @@ | ||
################################# | ||
# Variables # | ||
################################# | ||
|
||
# Versioning | ||
ARG RUBY_VERSION="3.0.6" | ||
ARG BUNDLER_VERSION="2.3.20" | ||
ARG NODEJS_VERSION="16" | ||
ARG YARN_VERSION="1.22.22" | ||
|
||
# Packages | ||
ARG BUILD_PACKAGES="git libicu-dev libpq-dev ca-certificates curl gnupg" | ||
ARG RUN_PACKAGES="git graphicsmagick libicu-dev libpq5 poppler-utils libgeos-dev libpaper1" | ||
|
||
# Scripts | ||
ARG PRE_INSTALL_SCRIPT="curl -sL https://deb.nodesource.com/setup_${NODEJS_VERSION}.x -o /tmp/nodesource_setup.sh && bash /tmp/nodesource_setup.sh" | ||
ARG INSTALL_SCRIPT="node -v && npm -v && npm install -g yarn && yarn set version ${YARN_VERSION}" | ||
ARG PRE_BUILD_SCRIPT | ||
ARG BUILD_SCRIPT="yarn install && bundle exec rake assets:precompile" | ||
ARG POST_BUILD_SCRIPT="echo \"(built at: $(date '+%Y-%m-%d %H:%M:%S'))\" > /app-src/BUILD_INFO" | ||
|
||
# Bundler specific | ||
ARG BUNDLE_WITHOUT="development:metrics:test" | ||
|
||
# App specific | ||
ARG RAILS_ENV="production" | ||
ARG RACK_ENV="production" | ||
ARG NODE_ENV="production" | ||
ARG RAILS_HOST_NAME="needs-to-be-set.example.net" | ||
ARG SECRET_KEY_BASE="needs-to-be-set" | ||
ARG SKIP_MEMCACHE_CHECK="true" | ||
|
||
# Github specific | ||
ARG GITHUB_SHA | ||
ARG GITHUB_REPOSITORY | ||
ARG GITHUB_REF_NAME | ||
ARG BUILD_COMMIT="$GITHUB_SHA" | ||
ARG BUILD_REPO="$GITHUB_REPOSITORY" | ||
ARG BUILD_REF="$GITHUB_REF_NAME" | ||
|
||
# Runtime ENV vars | ||
ARG SENTRY_CURRENT_ENV | ||
ARG PS1="$SENTRY_CURRENT_ENV > " | ||
ARG TZ="Europe/Zurich" | ||
|
||
|
||
################################# | ||
# Build Stage # | ||
################################# | ||
|
||
FROM ruby:${RUBY_VERSION} AS build | ||
|
||
# arguments for steps | ||
ARG PRE_INSTALL_SCRIPT | ||
ARG BUILD_PACKAGES | ||
ARG INSTALL_SCRIPT | ||
ARG BUNDLER_VERSION | ||
ARG PRE_BUILD_SCRIPT | ||
ARG BUNDLE_WITHOUT | ||
ARG BUILD_SCRIPT | ||
ARG POST_BUILD_SCRIPT | ||
|
||
# arguments potentially used by steps | ||
ARG NODE_ENV | ||
ARG RACK_ENV | ||
ARG RAILS_ENV | ||
ARG RAILS_HOST_NAME | ||
ARG SECRET_KEY_BASE | ||
ARG TZ | ||
|
||
# Set build shell | ||
SHELL ["/bin/bash", "-c"] | ||
|
||
# Use root user | ||
USER root | ||
|
||
RUN bash -vxc "${PRE_INSTALL_SCRIPT:-"echo 'no PRE_INSTALL_SCRIPT provided'"}" | ||
|
||
# Install dependencies | ||
RUN export DEBIAN_FRONTEND=noninteractive \ | ||
&& apt-get update \ | ||
&& apt-get upgrade -y \ | ||
&& apt-get install -y --no-install-recommends ${BUILD_PACKAGES} \ | ||
|
||
RUN bash -vxc "${INSTALL_SCRIPT:-"echo 'no INSTALL_SCRIPT provided'"}" | ||
|
||
# Install specific versions of dependencies | ||
RUN gem install bundler:${BUNDLER_VERSION} --no-document | ||
|
||
# TODO: Load artifacts | ||
|
||
# set up app-src directory | ||
WORKDIR /app-src | ||
COPY Gemfile Gemfile.lock ./ | ||
|
||
RUN bash -vxc "${PRE_BUILD_SCRIPT:-"echo 'no PRE_BUILD_SCRIPT provided'"}" | ||
|
||
# install gems and build the app | ||
RUN bundle config set --local deployment 'true' \ | ||
&& bundle config set --local without ${BUNDLE_WITHOUT} \ | ||
&& bundle package \ | ||
&& bundle install \ | ||
&& bundle clean | ||
|
||
COPY . . | ||
|
||
RUN bash -vxc "${BUILD_SCRIPT:-"echo 'no BUILD_SCRIPT provided'"}" | ||
|
||
RUN bash -vxc "${POST_BUILD_SCRIPT:-"echo 'no POST_BUILD_SCRIPT provided'"}" | ||
|
||
# TODO: Save artifacts | ||
|
||
RUN rm -rf vendor/cache/ .git spec/ node_modules/ | ||
|
||
|
||
################################# | ||
# Run Stage # | ||
################################# | ||
|
||
# This image will be replaced by Openshift | ||
FROM ruby:${RUBY_VERSION}-slim AS app | ||
|
||
# Set runtime shell | ||
SHELL ["/bin/bash", "-c"] | ||
|
||
# Add user | ||
RUN adduser --disabled-password --uid 1001 --gid 0 --gecos "" app | ||
|
||
# arguments for steps | ||
ARG RUN_PACKAGES | ||
ARG BUNDLER_VERSION | ||
ARG BUNDLE_WITHOUT | ||
|
||
# arguments potentially used by steps | ||
ARG NODE_ENV | ||
ARG RACK_ENV | ||
ARG RAILS_ENV | ||
|
||
# data persisted in the image | ||
ARG PS1 | ||
ARG TZ | ||
ARG BUILD_COMMIT | ||
ARG BUILD_REPO | ||
ARG BUILD_REF | ||
|
||
ENV PS1="${PS1}" \ | ||
TZ="${TZ}" \ | ||
BUILD_REPO="${BUILD_REPO}" \ | ||
BUILD_REF="${BUILD_REF}" \ | ||
BUILD_COMMIT="${BUILD_COMMIT}" \ | ||
NODE_ENV="${NODE_ENV}" \ | ||
RAILS_ENV="${RAILS_ENV}" \ | ||
RACK_ENV="${RACK_ENV}" \ | ||
# support bin-stubs \ | ||
HOME="/app-src" \ | ||
PATH="/app-src/bin:${PATH}" | ||
|
||
# Install dependencies, remove apt! | ||
RUN export DEBIAN_FRONTEND=noninteractive \ | ||
&& apt-get update \ | ||
&& apt-get upgrade -y \ | ||
&& apt-get install -y ${RUN_PACKAGES} vim curl less \ | ||
&& apt-get clean \ | ||
&& rm -rf /var/cache/apt/archives/* /var/lib/apt/lists/* /tmp/* /var/tmp/* \ | ||
&& truncate -s 0 /var/log/*log | ||
|
||
# Copy deployment ready source code from build | ||
COPY --from=build /app-src /app-src | ||
WORKDIR /app-src | ||
|
||
# Create pids folder for puma and | ||
# set group permissions to folders that need write permissions | ||
RUN mkdir -p tmp/pids \ | ||
&& chgrp 0 /app-src \ | ||
&& chgrp -R 0 /app-src/tmp \ | ||
&& chgrp -R 0 /app-src/log \ | ||
&& chmod u+w,g=u /app-src \ | ||
&& chmod -R u+w,g=u /app-src/tmp \ | ||
&& chmod -R u+w,g=u /app-src/log | ||
|
||
# Install specific versions of dependencies | ||
RUN gem install bundler:${BUNDLER_VERSION} --no-document | ||
|
||
# Use cached gems | ||
RUN bundle config set --local deployment 'true' \ | ||
&& bundle config set --local without ${BUNDLE_WITHOUT} \ | ||
&& bundle install | ||
|
||
USER 1001 | ||
|
||
ENTRYPOINT ["entrypoint.sh"] | ||
CMD ["puma"] | ||
|
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,19 @@ | ||
#!/bin/bash | ||
|
||
set -euo pipefail | ||
|
||
# Run deface compilation. | ||
if [ "$RAILS_ENV" = "production" ] && [ ! -d "app/compiled_views" ]; then | ||
SKIP_MEMCACHE_CHECK=1 DEFACE_ENABLED=1 bundle exec rails deface:precompile | ||
else | ||
echo "Skipping deface compilation because it is already done or not needed." | ||
fi | ||
|
||
# Run deface compilation. | ||
if [ "$RAILS_ENV" = "production" ] && [ ! -d "app/compiled_views" ]; then | ||
SKIP_MEMCACHE_CHECK=1 DEFACE_ENABLED=1 bundle exec rails deface:precompile | ||
else | ||
echo "Skipping deface compilation because it is already done or not needed." | ||
fi | ||
|
||
exec "$@" |
This file was deleted.
Oops, something went wrong.
Oops, something went wrong.