Add strong_migrations gem to warn when creating unsafe migrations (#5078)

[mastodon.git] / Dockerfile

diff --git a/Dockerfile b/Dockerfile
index 57a8f34e97e3f04fff8b89289bac31040d782b3b..3ad2ad7efe9639fdf5f300650a9379ce3f4212c9 100644 (file)
--- a/Dockerfile
+++ b/Dockerfile
@@ -1,39 +1,69 @@
-FROM ruby:2.3.1-alpine
+FROM ruby:2.4.2-alpine3.6
 
 LABEL maintainer="https://github.com/tootsuite/mastodon" \
       description="A GNU Social-compatible microblogging server"
 
-ENV RAILS_ENV=production \
-    NODE_ENV=production
+ENV UID=991 GID=991 \
+    RAILS_SERVE_STATIC_FILES=true \
+    RAILS_ENV=production NODE_ENV=production
+
+ARG LIBICONV_VERSION=1.15
+ARG LIBICONV_DOWNLOAD_SHA256=ccf536620a45458d26ba83887a983b96827001e92a13847b45e4925cc8913178
 
 EXPOSE 3000 4000
 
 WORKDIR /mastodon
 
-COPY Gemfile Gemfile.lock package.json yarn.lock /mastodon/
-
-RUN BUILD_DEPS=" \
+RUN apk -U upgrade \
+ && apk add -t build-dependencies \
+    build-base \
+    icu-dev \
+    libidn-dev \
+    libtool \
     postgresql-dev \
-    libxml2-dev \
-    libxslt-dev \
-    build-base" \
- && apk -U upgrade && apk add \
-    $BUILD_DEPS \
-    nodejs \
-    libpq \
-    libxml2 \
-    libxslt \
+    protobuf-dev \
+    python \
+ && apk add \
+    ca-certificates \
     ffmpeg \
     file \
+    git \
+    icu-libs \
     imagemagick \
- && npm install -g npm@3 && npm install -g yarn \
- && bundle install --deployment --without test development \
- && yarn \
- && yarn cache clean \
- && npm -g cache clean \
- && apk del $BUILD_DEPS \
+    libidn \
+    libpq \
+    nodejs-npm \
+    nodejs \
+    protobuf \
+    su-exec \
+    tini \
+    yarn \
+ && update-ca-certificates \
+ && wget -O libiconv.tar.gz "http://ftp.gnu.org/pub/gnu/libiconv/libiconv-$LIBICONV_VERSION.tar.gz" \
+ && echo "$LIBICONV_DOWNLOAD_SHA256 *libiconv.tar.gz" | sha256sum -c - \
+ && mkdir -p /tmp/src \
+ && tar -xzf libiconv.tar.gz -C /tmp/src \
+ && rm libiconv.tar.gz \
+ && cd /tmp/src/libiconv-$LIBICONV_VERSION \
+ && ./configure --prefix=/usr/local \
+ && make -j$(getconf _NPROCESSORS_ONLN)\
+ && make install \
+ && libtool --finish /usr/local/lib \
+ && cd /mastodon \
  && rm -rf /tmp/* /var/cache/apk/*
 
+COPY Gemfile Gemfile.lock package.json yarn.lock /mastodon/
+
+RUN bundle config build.nokogiri --with-iconv-lib=/usr/local/lib --with-iconv-include=/usr/local/include \
+ && bundle install -j$(getconf _NPROCESSORS_ONLN) --deployment --without test development \
+ && yarn --ignore-optional --pure-lockfile
+
 COPY . /mastodon
 
-VOLUME /mastodon/public/system /mastodon/public/assets
+COPY docker_entrypoint.sh /usr/local/bin/run
+
+RUN chmod +x /usr/local/bin/run
+
+VOLUME /mastodon/public/system /mastodon/public/assets /mastodon/public/packs
+
+ENTRYPOINT ["/usr/local/bin/run"]