Protei/PromucFlow_constructor
2
0
Fork 0
Code Issues Pull Requests Actions 2 Packages Projects Releases Wiki Activity
8d5b389f38
PromucFlow_constructor/Dockerfile

47 lines
1.6 KiB
Docker
Raw Normal View History

chore: Use Docker base images to build (#28198) This will use the Appsmith base image which contains all the downloads needed, so the image build in daily CI should be much more reliable, and quite likely much faster. All workflows have already been updated to use the BASE build argument to set the base image. Once this is merged, building the Docker image will fail if `BASE` build argument is not passed. This is that the base is set explicitly everywhere to not cause any confusion. The deleted content has been moved to https://github.com/appsmithorg/appsmith/blob/8d34a2ac280e2263851fd24e720d26811545b625/deploy/docker/base.dockerfile, which builds the `base-*:*` images.
2023-10-19 01:28:16 +00:00
ARG BASE
FROM ${BASE}
chore: Place local MongoDB cluster key in `/tmp` instead of `/` (#26963) This is another step towards supporting running with readonly root FS, and only making runtime changes in the container in `/tmp` or in `/appsmith-stacks`, and nowhere else.
2023-09-11 07:24:50 +00:00
feat: Implement fat container for appsmith application (#6678) Adds a Dockerfile along with accompanying scripts and definitions for building a fat Docker image. This image, when run as a container, will include the server, client, RTS, and necessary vendor services running all within.
2021-09-01 05:32:08 +00:00
# Add backend server - Application Layer
ci: Fix server jar paths in fat container image (#7771)
2021-09-23 14:28:53 +00:00
ARG JAR_FILE=./app/server/dist/server-*.jar
ARG PLUGIN_JARS=./app/server/dist/plugins/*.jar
chore: Add APPSMITH_CLOUD_SERVICES_BASE_URL as build arg (#25721) This will allow us to set a separate cloud-services URL during build time.
2023-07-31 04:47:46 +00:00
ARG APPSMITH_CLOUD_SERVICES_BASE_URL
chore: Graceful handling for empty CS URL (#25843) This will allow us to 1. Bake different CS URLs for release and master builds. 2. Be resilient to the CS URL being set to empty string, as opposed to not being set at all.
2023-07-31 11:25:46 +00:00
ENV APPSMITH_CLOUD_SERVICES_BASE_URL=${APPSMITH_CLOUD_SERVICES_BASE_URL}
chore: Add APPSMITH_CLOUD_SERVICES_BASE_URL as build arg (#25721) This will allow us to set a separate cloud-services URL during build time.
2023-07-31 04:47:46 +00:00
feat: Implement fat container for appsmith application (#6678) Adds a Dockerfile along with accompanying scripts and definitions for building a fat Docker image. This image, when run as a container, will include the server, client, RTS, and necessary vendor services running all within.
2021-09-01 05:32:08 +00:00
ARG APPSMITH_SEGMENT_CE_KEY
ENV APPSMITH_SEGMENT_CE_KEY=${APPSMITH_SEGMENT_CE_KEY}
#Create the plugins directory
chore: Use single COPY command in Dockerfile for constant/static files (#27127) Move the files that are copied into the Docker image, into an `fs` folder, that reflects the folder structure of that in the image. This means two things right away: 1. A single `COPY` instruction in `Dockerfile` is enough to copy all the files to their places. 2. The structure of files in the repo reflects that in the Docker image. This makes working with the files/folders and troubleshooting with them much easier. ❗ Note: **There's actually only 3 files changed, rest are just moved.**
2023-09-11 03:13:09 +00:00
RUN mkdir -p ./editor ./rts ./backend/plugins
COPY deploy/docker/fs /
feat: Implement fat container for appsmith application (#6678) Adds a Dockerfile along with accompanying scripts and definitions for building a fat Docker image. This image, when run as a container, will include the server, client, RTS, and necessary vendor services running all within.
2021-09-01 05:32:08 +00:00
#Add the jar to the container
COPY ${JAR_FILE} backend/server.jar
COPY ${PLUGIN_JARS} backend/plugins/
# Add client UI - Application Layer
COPY ./app/client/build editor/
# Add RTS - Application Layer
ci: Use esbuild to build RTS (#27310) This fixes RTS build to use `esbuild`. 1. This means the whole `node_modules` won't need to be copied over to the Docker image. There's unused insignifant _test_ files in there, that don't add any value, but are causing irrelevant CVEs to be reported on our Docker image. See example at https://github.com/appsmithorg/appsmith-ee/pull/2349. 2. Much faster. Not that RTS build is our slow point, but still. Perhaps we can move client to `esbuild` too. 🙂 ## Why are we doing this? The current method of loading RTS into the Docker image means that _all_ contents of _all_ dependencies are copied over. The whole `node_modules`. But several of these packages include _test_ files too, that aren't needed at runtime at all. One of such test files is creating a false alert for a CVE on our Docker image. Has absolutely no relevance and impact, but it's there. To fix that, I [had to `rm -rf /opt/appsmith/rts/node_modules/*/test` in the Docker image](https://github.com/appsmithorg/appsmith-ee/pull/2349/files). This felt very hacky, and very dirty. It felt like we're introducing more debt and more duct tape around the current build process. So, `esbuild`. ## Where is `esbuild` coming from? We're using `esbuild` v0.18.20 only, while the latest is v0.19.3. We need to update `design-system`'s storybook dependency, I think, to get a more recent version of `esbuild`. I'm yet to figure this out and can use some help. 🙂
2023-10-03 01:30:40 +00:00
COPY ./app/client/packages/rts/dist rts/
feat: Implement fat container for appsmith application (#6678) Adds a Dockerfile along with accompanying scripts and definitions for building a fat Docker image. This image, when run as a container, will include the server, client, RTS, and necessary vendor services running all within.
2021-09-01 05:32:08 +00:00
chore: Install NodeJS manually instead of with the deprecated script (#27929) Fixes #26891.
2023-10-11 09:42:32 +00:00
ENV PATH /opt/appsmith/utils/node_modules/.bin:/opt/java/bin:/opt/node/bin:$PATH
chore: Use single COPY command in Dockerfile for constant/static files (#27127) Move the files that are copied into the Docker image, into an `fs` folder, that reflects the folder structure of that in the image. This means two things right away: 1. A single `COPY` instruction in `Dockerfile` is enough to copy all the files to their places. 2. The structure of files in the repo reflects that in the Docker image. This makes working with the files/folders and troubleshooting with them much easier. ❗ Note: **There's actually only 3 files changed, rest are just moved.**
2023-09-11 03:13:09 +00:00
RUN cd ./utils && npm install --only=prod && npm install --only=prod -g . && cd - \
&& chmod 0644 /etc/cron.d/* \
feat: Caddy (#28081) This PR replaces NGINX and Certbot with Caddy. 1. Auto-HTTPS when custom domain is set, is handled by Caddy. 2. If past certs exist, that were provisioned by Certbot in older Appsmith versions, we configure Caddy to make use of them. But this only applies if the certs aren't already expired. If they're expired, point 1 applies. 3. If custom certs are provided in `ssl` folder, Caddy will be configured to use them. 4. Incoming `Forwarded` header is not passed to any reverse proxies. So redirect URL is correctly computed on Google Cloud Run. 5. All other route configurations are exactly as they are in NGINX today. Caddy configuration file is generated in the `caddy-reconfigure.mjs` script, which will also reload Caddy with the new configuration.
2023-12-05 05:17:36 +00:00
&& chmod +x *.sh /watchtower-hooks/*.sh \
chore: Use single COPY command in Dockerfile for constant/static files (#27127) Move the files that are copied into the Docker image, into an `fs` folder, that reflects the folder structure of that in the image. This means two things right away: 1. A single `COPY` instruction in `Dockerfile` is enough to copy all the files to their places. 2. The structure of files in the repo reflects that in the Docker image. This makes working with the files/folders and troubleshooting with them much easier. ❗ Note: **There's actually only 3 files changed, rest are just moved.**
2023-09-11 03:13:09 +00:00
# Disable setuid/setgid bits for the files inside container.
chore: Run NGINX with readonly root FS support (#27453) Part of supporting readonly root filesystem, gets NGINX to start without doing any writes to the filesystem, except for in `/tmp`.
2023-09-27 08:08:47 +00:00
&& find / \( -path /proc -prune \) -o \( \( -perm -2000 -o -perm -4000 \) -print -exec chmod -s '{}' + \) || true \
feat: Support running as a non-root user (#28290) Running an Appsmith as a non-root user: ```sh docker run --name appsmith --user 70:70 ``` The `70:70` figures are the UID and GID respectively. It can mostly be any number, safe to user figures are 70 to 79, or anything above 200 and below 65000. The important bit, is that it shouldn't change on restart or manual updates etc. No product functionality should be affected when running as a non-root user.
2023-11-15 05:58:25 +00:00
&& mkdir -p /.mongodb/mongosh /appsmith-stacks \
&& chmod ugo+w /etc /appsmith-stacks \
feat: Caddy (#28081) This PR replaces NGINX and Certbot with Caddy. 1. Auto-HTTPS when custom domain is set, is handled by Caddy. 2. If past certs exist, that were provisioned by Certbot in older Appsmith versions, we configure Caddy to make use of them. But this only applies if the certs aren't already expired. If they're expired, point 1 applies. 3. If custom certs are provided in `ssl` folder, Caddy will be configured to use them. 4. Incoming `Forwarded` header is not passed to any reverse proxies. So redirect URL is correctly computed on Google Cloud Run. 5. All other route configurations are exactly as they are in NGINX today. Caddy configuration file is generated in the `caddy-reconfigure.mjs` script, which will also reload Caddy with the new configuration.
2023-12-05 05:17:36 +00:00
&& chmod -R ugo+w /var/run /usr/sbin/cron /.mongodb /etc/ssl /usr/local/share
Disable uid/gid bits for fat container (#13277)
2022-04-27 07:27:57 +00:00
Auto-backup and cleanup with appsmithctl (#15203) - Auto-cleanup of backup files using env variable APPSMITH_BACKUP_ARCHIVE_LIMIT (default value is 4) after every backup. - Updated docker file to include watchtower hook scripts. - Error mail interval to 6hrs.
2022-07-28 12:15:28 +00:00
LABEL com.centurylinklabs.watchtower.lifecycle.pre-check=/watchtower-hooks/pre-check.sh
LABEL com.centurylinklabs.watchtower.lifecycle.pre-update=/watchtower-hooks/pre-update.sh
feat: Implement fat container for appsmith application (#6678) Adds a Dockerfile along with accompanying scripts and definitions for building a fat Docker image. This image, when run as a container, will include the server, client, RTS, and necessary vendor services running all within.
2021-09-01 05:32:08 +00:00
EXPOSE 80
EXPOSE 443
ENTRYPOINT [ "/opt/appsmith/entrypoint.sh" ]
Add healthcheck to docker (#13154)
2022-05-06 06:15:56 +00:00
HEALTHCHECK --interval=15s --timeout=15s --start-period=45s CMD "/opt/appsmith/healthcheck.sh"
docs: Fat container documentation fixes (#7207) Added additional details about how to use the fat container, and how to manage / maintain it. Also includes some refactorings that shouldn't affect the functionality significantly.
2021-09-14 13:31:06 +00:00
CMD ["/usr/bin/supervisord", "-n"]
Reference in New Issue Copy Permalink