2021-09-29 09:03:27 +00:00
|
|
|
FROM ubuntu:20.04
|
2021-09-01 05:32:08 +00:00
|
|
|
|
|
|
|
|
LABEL maintainer="tech@appsmith.com"
|
|
|
|
|
|
|
|
|
|
# Set workdir to /opt/appsmith
|
|
|
|
|
WORKDIR /opt/appsmith
|
|
|
|
|
|
2021-09-28 05:04:33 +00:00
|
|
|
# The env variables are needed for Appsmith server to correctly handle non-roman scripts like Arabic.
|
2022-04-01 06:58:03 +00:00
|
|
|
ENV LANG C.UTF-8
|
|
|
|
|
ENV LC_ALL C.UTF-8
|
2021-09-28 05:04:33 +00:00
|
|
|
|
2021-09-29 09:03:27 +00:00
|
|
|
# Update APT packages - Base Layer
|
2022-03-31 11:05:11 +00:00
|
|
|
RUN apt-get update \
|
|
|
|
|
&& apt-get upgrade --yes \
|
2022-12-19 09:30:24 +00:00
|
|
|
&& DEBIAN_FRONTEND=noninteractive apt-get install --no-install-recommends --yes \
|
2023-08-31 06:29:28 +00:00
|
|
|
supervisor curl cron nfs-common nginx nginx-extras gnupg wget netcat openssh-client \
|
2023-09-06 08:20:23 +00:00
|
|
|
gettext \
|
2023-10-06 14:08:19 +00:00
|
|
|
python3-pip python3-venv git ca-certificates \
|
2021-10-19 07:29:55 +00:00
|
|
|
&& pip install --no-cache-dir git+https://github.com/coderanger/supervisor-stdout@973ba19967cdaf46d9c1634d1675fc65b9574f6e \
|
2023-08-31 06:29:28 +00:00
|
|
|
&& python3 -m venv --prompt certbot /opt/certbot/venv \
|
2023-09-14 04:56:01 +00:00
|
|
|
&& /opt/certbot/venv/bin/pip install --upgrade certbot setuptools pip \
|
2023-08-31 06:29:28 +00:00
|
|
|
&& ln -s /opt/certbot/venv/bin/certbot /usr/local/bin \
|
2023-09-06 08:20:23 +00:00
|
|
|
&& apt-get remove --yes git python3-pip python3-venv \
|
2023-09-04 10:27:04 +00:00
|
|
|
&& apt-get autoremove --yes
|
2022-12-19 09:30:24 +00:00
|
|
|
|
2023-10-11 09:42:32 +00:00
|
|
|
# Install MongoDB v5.0.14, Redis, PostgreSQL v13
|
2023-09-18 13:03:48 +00:00
|
|
|
RUN curl --silent --show-error --location https://www.mongodb.org/static/pgp/server-5.0.asc | apt-key add - \
|
|
|
|
|
&& echo "deb [ arch=amd64,arm64 ] https://repo.mongodb.org/apt/ubuntu focal/mongodb-org/5.0 multiverse" | tee /etc/apt/sources.list.d/mongodb-org-5.0.list \
|
2023-10-11 09:42:32 +00:00
|
|
|
&& echo "deb http://apt.postgresql.org/pub/repos/apt $(grep CODENAME /etc/lsb-release | cut -d= -f2)-pgdg main" | tee /etc/apt/sources.list.d/pgdg.list \
|
2023-07-31 11:25:46 +00:00
|
|
|
&& curl --silent --show-error --location https://www.postgresql.org/media/keys/ACCC4CF8.asc | apt-key add - \
|
2023-03-07 09:52:41 +00:00
|
|
|
&& apt update \
|
2023-10-11 09:42:32 +00:00
|
|
|
&& apt-get install --no-install-recommends --yes mongodb-org redis postgresql-13 \
|
|
|
|
|
&& apt-get clean
|
2021-09-01 05:32:08 +00:00
|
|
|
|
2023-10-06 14:08:19 +00:00
|
|
|
# Install Java
|
|
|
|
|
RUN set -o xtrace \
|
|
|
|
|
&& mkdir -p /opt/java \
|
|
|
|
|
# Assets from https://github.com/adoptium/temurin17-binaries/releases
|
|
|
|
|
&& version="$(curl --write-out '%{redirect_url}' 'https://github.com/adoptium/temurin17-binaries/releases/latest' | sed 's,.*jdk-,,')" \
|
|
|
|
|
&& curl --location --output /tmp/java.tar.gz "https://github.com/adoptium/temurin17-binaries/releases/download/jdk-$version/OpenJDK17U-jdk_$(uname -m | sed s/x86_64/x64/)_linux_hotspot_$(echo $version | tr + _).tar.gz" \
|
|
|
|
|
&& tar -xzf /tmp/java.tar.gz -C /opt/java --strip-components 1
|
|
|
|
|
|
2023-10-11 09:42:32 +00:00
|
|
|
# Install NodeJS
|
|
|
|
|
RUN set -o xtrace \
|
|
|
|
|
&& mkdir -p /opt/node \
|
|
|
|
|
&& file="$(curl -sS 'https://nodejs.org/dist/latest-v18.x/' | awk -F\" '$2 ~ /linux-'"$(uname -m | sed 's/x86_64/x64/; s/aarch64/arm64/')"'.tar.gz/ {print $2}')" \
|
|
|
|
|
&& curl "https://nodejs.org/dist/latest-v18.x/$file" | tar -xz -C /opt/node --strip-components 1
|
|
|
|
|
|
2021-09-01 05:32:08 +00:00
|
|
|
# Clean up cache file - Service layer
|
|
|
|
|
RUN rm -rf \
|
2021-09-29 09:03:27 +00:00
|
|
|
/root/.cache \
|
|
|
|
|
/root/.npm \
|
|
|
|
|
/root/.pip \
|
|
|
|
|
/usr/local/share/doc \
|
|
|
|
|
/usr/share/doc \
|
|
|
|
|
/usr/share/man \
|
|
|
|
|
/var/lib/apt/lists/* \
|
|
|
|
|
/tmp/*
|
2021-09-01 05:32:08 +00:00
|
|
|
|
|
|
|
|
# Define volumes - Service Layer
|
|
|
|
|
VOLUME [ "/appsmith-stacks" ]
|
|
|
|
|
|
|
|
|
|
# ------------------------------------------------------------------------
|
2023-09-27 08:08:47 +00:00
|
|
|
ENV TMP="/tmp/appsmith"
|
|
|
|
|
ENV NGINX_WWW_PATH="$TMP/www"
|
2023-09-11 07:24:50 +00:00
|
|
|
|
2021-09-01 05:32:08 +00:00
|
|
|
# Add backend server - Application Layer
|
2021-09-23 14:28:53 +00:00
|
|
|
ARG JAR_FILE=./app/server/dist/server-*.jar
|
|
|
|
|
ARG PLUGIN_JARS=./app/server/dist/plugins/*.jar
|
2023-07-31 04:47:46 +00:00
|
|
|
|
|
|
|
|
ARG APPSMITH_CLOUD_SERVICES_BASE_URL
|
2023-07-31 11:25:46 +00:00
|
|
|
ENV APPSMITH_CLOUD_SERVICES_BASE_URL=${APPSMITH_CLOUD_SERVICES_BASE_URL}
|
2023-07-31 04:47:46 +00:00
|
|
|
|
2021-09-01 05:32:08 +00:00
|
|
|
ARG APPSMITH_SEGMENT_CE_KEY
|
|
|
|
|
ENV APPSMITH_SEGMENT_CE_KEY=${APPSMITH_SEGMENT_CE_KEY}
|
|
|
|
|
#Create the plugins directory
|
2023-09-11 03:13:09 +00:00
|
|
|
RUN mkdir -p ./editor ./rts ./backend/plugins
|
|
|
|
|
|
|
|
|
|
COPY deploy/docker/fs /
|
2021-09-01 05:32:08 +00:00
|
|
|
|
|
|
|
|
#Add the jar to the container
|
|
|
|
|
COPY ${JAR_FILE} backend/server.jar
|
|
|
|
|
COPY ${PLUGIN_JARS} backend/plugins/
|
|
|
|
|
|
|
|
|
|
# Add client UI - Application Layer
|
|
|
|
|
COPY ./app/client/build editor/
|
|
|
|
|
|
|
|
|
|
# Add RTS - Application Layer
|
ci: Use esbuild to build RTS (#27310)
This fixes RTS build to use `esbuild`.
1. This means the whole `node_modules` won't need to be copied over to
the Docker image. There's unused insignifant _test_ files in there, that
don't add any value, but are causing irrelevant CVEs to be reported on
our Docker image. See example at
https://github.com/appsmithorg/appsmith-ee/pull/2349.
2. Much faster. Not that RTS build is our slow point, but still. Perhaps
we can move client to `esbuild` too. 🙂
## Why are we doing this?
The current method of loading RTS into the Docker image means that _all_
contents of _all_ dependencies are copied over. The whole
`node_modules`. But several of these packages include _test_ files too,
that aren't needed at runtime at all. One of such test files is creating
a false alert for a CVE on our Docker image. Has absolutely no relevance
and impact, but it's there.
To fix that, I [had to `rm -rf /opt/appsmith/rts/node_modules/*/test` in
the Docker
image](https://github.com/appsmithorg/appsmith-ee/pull/2349/files). This
felt very hacky, and very dirty. It felt like we're introducing more
debt and more duct tape around the current build process.
So, `esbuild`.
## Where is `esbuild` coming from?
We're using `esbuild` v0.18.20 only, while the latest is v0.19.3. We
need to update `design-system`'s storybook dependency, I think, to get a
more recent version of `esbuild`. I'm yet to figure this out and can use
some help. 🙂
2023-10-03 01:30:40 +00:00
|
|
|
COPY ./app/client/packages/rts/dist rts/
|
2021-09-01 05:32:08 +00:00
|
|
|
|
2023-10-11 09:42:32 +00:00
|
|
|
ENV PATH /opt/appsmith/utils/node_modules/.bin:/opt/java/bin:/opt/node/bin:$PATH
|
|
|
|
|
|
2023-09-11 03:13:09 +00:00
|
|
|
RUN cd ./utils && npm install --only=prod && npm install --only=prod -g . && cd - \
|
|
|
|
|
&& chmod 0644 /etc/cron.d/* \
|
2023-09-27 08:08:47 +00:00
|
|
|
&& chmod +x entrypoint.sh renew-certificate.sh healthcheck.sh templates/nginx-app.conf.sh /watchtower-hooks/*.sh \
|
2023-09-11 03:13:09 +00:00
|
|
|
# Disable setuid/setgid bits for the files inside container.
|
2023-09-27 08:08:47 +00:00
|
|
|
&& find / \( -path /proc -prune \) -o \( \( -perm -2000 -o -perm -4000 \) -print -exec chmod -s '{}' + \) || true \
|
|
|
|
|
&& node prepare-image.mjs
|
2022-04-27 07:27:57 +00:00
|
|
|
|
2022-07-28 12:15:28 +00:00
|
|
|
LABEL com.centurylinklabs.watchtower.lifecycle.pre-check=/watchtower-hooks/pre-check.sh
|
|
|
|
|
LABEL com.centurylinklabs.watchtower.lifecycle.pre-update=/watchtower-hooks/pre-update.sh
|
2021-09-01 05:32:08 +00:00
|
|
|
|
|
|
|
|
EXPOSE 80
|
|
|
|
|
EXPOSE 443
|
|
|
|
|
ENTRYPOINT [ "/opt/appsmith/entrypoint.sh" ]
|
2022-05-06 06:15:56 +00:00
|
|
|
HEALTHCHECK --interval=15s --timeout=15s --start-period=45s CMD "/opt/appsmith/healthcheck.sh"
|
2021-09-14 13:31:06 +00:00
|
|
|
CMD ["/usr/bin/supervisord", "-n"]
|