canvas-lms/build/ubuntu.Dockerfile.template

135 lines
4.7 KiB
Plaintext

<% ruby_passenger = '2.6' -%>
<%= generation_message %>
# For documentation, please check doc/docker/README.md in
# this local repo which is also published at:
# https://github.com/instructure/canvas-lms/tree/master/doc/docker
<% if production? -%>
FROM instructure/ruby-passenger:<%= ruby_passenger %>
<% else -%>
ARG RUBY_PASSENGER=<%= ruby_passenger %>
FROM instructure/ruby-passenger:$RUBY_PASSENGER
ARG POSTGRES=9.5
<% end -%>
ENV APP_HOME /usr/src/app/
ENV RAILS_ENV "production"
ENV NGINX_MAX_UPLOAD_SIZE 10g
ENV YARN_VERSION 1.19.1-1
USER root
WORKDIR /root
RUN curl -sL https://deb.nodesource.com/setup_14.x | bash - \
&& curl -sS https://dl.yarnpkg.com/debian/pubkey.gpg | apt-key add - \
&& echo "deb https://dl.yarnpkg.com/debian/ stable main" > /etc/apt/sources.list.d/yarn.list \
&& printf 'path-exclude /usr/share/doc/*\npath-exclude /usr/share/man/*' > /etc/dpkg/dpkg.cfg.d/01_nodoc \
<% if development? -%>
&& echo "deb http://apt.postgresql.org/pub/repos/apt/ $(lsb_release -cs)-pgdg main" > /etc/apt/sources.list.d/pgdg.list \
&& curl -sS https://www.postgresql.org/media/keys/ACCC4CF8.asc | apt-key add - \
<% end -%>
&& apt-get update -qq \
&& apt-get install -qqy --no-install-recommends \
nodejs \
yarn="$YARN_VERSION" \
libxmlsec1-dev \
python-lxml \
libicu-dev \
<% if development? -%>
parallel \
postgresql-client-$POSTGRES \
unzip \
pbzip2 \
fontforge \
<% end -%>
&& rm -rf /var/lib/apt/lists/* \
&& mkdir -p /home/docker/.gem/ruby/$RUBY_MAJOR.0
RUN if [ -e /var/lib/gems/$RUBY_MAJOR.0/gems/bundler-* ]; then BUNDLER_INSTALL="-i /var/lib/gems/$RUBY_MAJOR.0"; fi \
&& gem uninstall --all --ignore-dependencies --force $BUNDLER_INSTALL bundler \
&& gem install bundler --no-document -v 1.17.3 \
&& find $GEM_HOME ! -user docker | xargs chown docker:docker
<% if development? -%>
# We will need sfnt2woff in order to build fonts
COPY --chown=docker:docker build/vendor/woff-code-latest.zip ./
RUN unzip woff-code-latest.zip -d woff \
&& cd woff \
&& make \
&& cp sfnt2woff /usr/local/bin \
&& cd - \
&& rm -rf woff*
<% end -%>
WORKDIR $APP_HOME
<% if production? -%>
COPY --chown=docker:docker . $APP_HOME
# optimizing for size here ... get all the dev dependencies so we can
# compile assets, then throw away everything we don't need
#
# the privilege dropping could be slightly less verbose if we ever add
# gosu (here or upstream)
#
# TODO: once we have docker 17.05+ everywhere, do this via multi-stage
# build
RUN bash -c ' \
# bash cuz better globbing and comments \
set -e; \
\
sudo -u docker -E env HOME=/home/docker PATH=$PATH bundle install --jobs 8; \
yarn install --pure-lockfile; \
COMPILE_ASSETS_NPM_INSTALL=0 bundle exec rake canvas:compile_assets; \
\
# downgrade to prod dependencies \
sudo -u docker -E env HOME=/home/docker PATH=$PATH bundle install --without test development; \
sudo -u docker -E env HOME=/home/docker PATH=$PATH bundle clean --force; \
yarn install --prod; \
\
# now some cleanup... \
rm -rf \
/home/docker/.bundle/cache \
$GEM_HOME/cache \
$GEM_HOME/bundler/gems/*/{.git,spec,test,features} \
$GEM_HOME/gems/*/{spec,test,features} \
`yarn cache dir` \
/root/.node-gyp \
/tmp/phantomjs \
.yardoc \
config/locales/generated \
gems/*/node_modules \
gems/plugins/*/node_modules \
log \
public/dist/maps \
public/doc/api/*.json \
public/javascripts/translations \
tmp-*.tmp'
USER docker
<% else -%>
COPY --chown=docker:docker Gemfile ${APP_HOME}
COPY --chown=docker:docker Gemfile.d ${APP_HOME}Gemfile.d
COPY --chown=docker:docker babel.config.js ${APP_HOME}
COPY --chown=docker:docker config ${APP_HOME}config
COPY --chown=docker:docker gems ${APP_HOME}gems
COPY --chown=docker:docker package.json ${APP_HOME}
COPY --chown=docker:docker packages ${APP_HOME}packages
COPY --chown=docker:docker script ${APP_HOME}script
COPY --chown=docker:docker yarn.lock ${APP_HOME}
USER docker
# if yarn hits a snag try one more time with concurrency set to 1
# https://github.com/yarnpkg/yarn/issues/2629
RUN bundle install --jobs 8 \
&& (yarn install --pure-lockfile || yarn install --pure-lockfile --network-concurrency 1)
COPY --chown=docker:docker . $APP_HOME
RUN mkdir -p <%= docker_compose_volume_paths.join(" \\\n ") %>
# update Gemfile.lock in cases where a lock file was pulled in during the `COPY --chown=docker:docker . $APP_HOME` step
RUN bundle lock --local --conservative
# TODO: switch to canvas:compile_assets_dev once we stop using this Dockerfile in production/e2e
RUN COMPILE_ASSETS_NPM_INSTALL=0 bundle exec rake canvas:compile_assets
<% end -%>