-FROM ruby:2.5.0-alpine3.7
+FROM ubuntu:18.04 as build-dep
-LABEL maintainer="https://github.com/tootsuite/mastodon" \
- description="Your self-hosted, globally interconnected microblogging community"
+# Use bash for the shell
+SHELL ["bash", "-c"]
+# Install Node
+ENV NODE_VER="12.9.1"
+RUN echo "Etc/UTC" > /etc/localtime && \
+ apt update && \
+ apt -y install wget python && \
+ cd ~ && \
+ wget https://nodejs.org/download/release/v$NODE_VER/node-v$NODE_VER-linux-x64.tar.gz && \
+ tar xf node-v$NODE_VER-linux-x64.tar.gz && \
+ rm node-v$NODE_VER-linux-x64.tar.gz && \
+ mv node-v$NODE_VER-linux-x64 /opt/node
+
+# Install jemalloc
+ENV JE_VER="5.2.1"
+RUN apt update && \
+ apt -y install make autoconf gcc g++ && \
+ cd ~ && \
+ wget https://github.com/jemalloc/jemalloc/archive/$JE_VER.tar.gz && \
+ tar xf $JE_VER.tar.gz && \
+ cd jemalloc-$JE_VER && \
+ ./autogen.sh && \
+ ./configure --prefix=/opt/jemalloc && \
+ make -j$(nproc) > /dev/null && \
+ make install_bin install_include install_lib
+
+# Install ruby
+ENV RUBY_VER="2.6.4"
+ENV CPPFLAGS="-I/opt/jemalloc/include"
+ENV LDFLAGS="-L/opt/jemalloc/lib/"
+RUN apt update && \
+ apt -y install build-essential \
+ bison libyaml-dev libgdbm-dev libreadline-dev \
+ libncurses5-dev libffi-dev zlib1g-dev libssl-dev && \
+ cd ~ && \
+ wget https://cache.ruby-lang.org/pub/ruby/${RUBY_VER%.*}/ruby-$RUBY_VER.tar.gz && \
+ tar xf ruby-$RUBY_VER.tar.gz && \
+ cd ruby-$RUBY_VER && \
+ ./configure --prefix=/opt/ruby \
+ --with-jemalloc \
+ --with-shared \
+ --disable-install-doc && \
+ ln -s /opt/jemalloc/lib/* /usr/lib/ && \
+ make -j$(nproc) > /dev/null && \
+ make install
+
+ENV PATH="${PATH}:/opt/ruby/bin:/opt/node/bin"
+
+RUN npm install -g yarn && \
+ gem install bundler && \
+ apt update && \
+ apt -y install git libicu-dev libidn11-dev \
+ libpq-dev libprotobuf-dev protobuf-compiler
+
+COPY Gemfile* package.json yarn.lock /opt/mastodon/
+
+RUN cd /opt/mastodon && \
+ bundle install -j$(nproc) --deployment --without development test && \
+ yarn install --pure-lockfile
+
+FROM ubuntu:18.04
+
+# Copy over all the langs needed for runtime
+COPY --from=build-dep /opt/node /opt/node
+COPY --from=build-dep /opt/ruby /opt/ruby
+COPY --from=build-dep /opt/jemalloc /opt/jemalloc
+
+# Add more PATHs to the PATH
+ENV PATH="${PATH}:/opt/ruby/bin:/opt/node/bin:/opt/mastodon/bin"
+
+# Create the mastodon user
ARG UID=991
ARG GID=991
+RUN apt update && \
+ echo "Etc/UTC" > /etc/localtime && \
+ ln -s /opt/jemalloc/lib/* /usr/lib/ && \
+ apt install -y whois wget && \
+ addgroup --gid $GID mastodon && \
+ useradd -m -u $UID -g $GID -d /opt/mastodon mastodon && \
+ echo "mastodon:`head /dev/urandom | tr -dc A-Za-z0-9 | head -c 24 | mkpasswd -s -m sha-256`" | chpasswd
+
+# Install mastodon runtime deps
+RUN apt -y --no-install-recommends install \
+ libssl1.1 libpq5 imagemagick ffmpeg \
+ libicu60 libprotobuf10 libidn11 libyaml-0-2 \
+ file ca-certificates tzdata libreadline7 && \
+ apt -y install gcc && \
+ ln -s /opt/mastodon /mastodon && \
+ gem install bundler && \
+ rm -rf /var/cache && \
+ rm -rf /var/lib/apt/lists/*
+
+# Add tini
+ENV TINI_VERSION="0.18.0"
+ENV TINI_SUM="12d20136605531b09a2c2dac02ccee85e1b874eb322ef6baf7561cd93f93c855"
+ADD https://github.com/krallin/tini/releases/download/v${TINI_VERSION}/tini /tini
+RUN echo "$TINI_SUM tini" | sha256sum -c -
+RUN chmod +x /tini
-ENV RAILS_SERVE_STATIC_FILES=true \
- RAILS_ENV=production NODE_ENV=production
-
-ARG YARN_VERSION=1.5.1
-ARG YARN_DOWNLOAD_SHA256=cd31657232cf48d57fdbff55f38bfa058d2fb4950450bd34af72dac796af4de1
-ARG LIBICONV_VERSION=1.15
-ARG LIBICONV_DOWNLOAD_SHA256=ccf536620a45458d26ba83887a983b96827001e92a13847b45e4925cc8913178
-
-EXPOSE 3000 4000
-
-WORKDIR /mastodon
-
-RUN apk -U upgrade \
- && apk add -t build-dependencies \
- build-base \
- icu-dev \
- libidn-dev \
- libressl \
- libtool \
- postgresql-dev \
- protobuf-dev \
- python \
- && apk add \
- ca-certificates \
- ffmpeg \
- file \
- icu-libs \
- imagemagick \
- libidn \
- libpq \
- nodejs \
- protobuf \
- su-exec \
- tini \
- tzdata \
- && update-ca-certificates \
- && mkdir -p /tmp/src /opt \
- && wget -O yarn.tar.gz "https://github.com/yarnpkg/yarn/releases/download/v$YARN_VERSION/yarn-v$YARN_VERSION.tar.gz" \
- && echo "$YARN_DOWNLOAD_SHA256 *yarn.tar.gz" | sha256sum -c - \
- && tar -xzf yarn.tar.gz -C /tmp/src \
- && rm yarn.tar.gz \
- && mv /tmp/src/yarn-v$YARN_VERSION /opt/yarn \
- && ln -s /opt/yarn/bin/yarn /usr/local/bin/yarn \
- && wget -O libiconv.tar.gz "https://ftp.gnu.org/pub/gnu/libiconv/libiconv-$LIBICONV_VERSION.tar.gz" \
- && echo "$LIBICONV_DOWNLOAD_SHA256 *libiconv.tar.gz" | sha256sum -c - \
- && tar -xzf libiconv.tar.gz -C /tmp/src \
- && rm libiconv.tar.gz \
- && cd /tmp/src/libiconv-$LIBICONV_VERSION \
- && ./configure --prefix=/usr/local \
- && make -j$(getconf _NPROCESSORS_ONLN)\
- && make install \
- && libtool --finish /usr/local/lib \
- && cd /mastodon \
- && rm -rf /tmp/* /var/cache/apk/*
-
-COPY Gemfile Gemfile.lock package.json yarn.lock .yarnclean /mastodon/
-
-RUN bundle config build.nokogiri --with-iconv-lib=/usr/local/lib --with-iconv-include=/usr/local/include \
- && bundle install -j$(getconf _NPROCESSORS_ONLN) --deployment --without test development \
- && yarn --pure-lockfile \
- && yarn cache clean
-
-RUN addgroup -g ${GID} mastodon && adduser -h /mastodon -s /bin/sh -D -G mastodon -u ${UID} mastodon \
- && mkdir -p /mastodon/public/system /mastodon/public/assets /mastodon/public/packs \
- && chown -R mastodon:mastodon /mastodon/public
-
-COPY . /mastodon
-
-RUN chown -R mastodon:mastodon /mastodon
-
-VOLUME /mastodon/public/system /mastodon/public/assets /mastodon/public/packs
+# Copy over mastodon source, and dependencies from building, and set permissions
+COPY --chown=mastodon:mastodon . /opt/mastodon
+COPY --from=build-dep --chown=mastodon:mastodon /opt/mastodon /opt/mastodon
+# Run mastodon services in prod mode
+ENV RAILS_ENV="production"
+ENV NODE_ENV="production"
+
+# Tell rails to serve static files
+ENV RAILS_SERVE_STATIC_FILES="true"
+ENV BIND="0.0.0.0"
+
+# Set the run user
USER mastodon
-ENTRYPOINT ["/sbin/tini", "--"]
+# Precompile assets
+RUN cd ~ && \
+ OTP_SECRET=precompile_placeholder SECRET_KEY_BASE=precompile_placeholder rails assets:precompile && \
+ yarn cache clean
+
+# Set the work dir and the container entry point
+WORKDIR /opt/mastodon
+ENTRYPOINT ["/tini", "--"]
git-æsc / mastodon.git / blobdiff