forked from google/appengine-phabricator
-
Notifications
You must be signed in to change notification settings - Fork 0
/
Dockerfile
147 lines (133 loc) · 6.78 KB
/
Dockerfile
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
# Copyright 2015 Google Inc. All Rights Reserved.
#
# Licensed under the Apache License, Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
# You may obtain a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.
FROM debian:jessie
# Install the dependencies.
RUN apt-get update && apt-get upgrade -y && \
apt-get install -y -qq --no-install-recommends \
# Install MySQL
mysql-client libmysqlclient-dev \
# Install Apache
apache2 \
# Install php
php5 libapache2-mod-php5 php5-mcrypt php5-mysql php5-gd php5-dev \
php5-curl php-apc php5-cli php5-json php5-cgi \
# Install Git
git \
# Curl for reading from the metadata server
curl \
# Supervisor
supervisor \
# Python pip for Pygment
python-pip \
# Mercurial to support hosted hg repos
mercurial && \
apt-get clean && \
pip install Pygments
# Setup Apache and Supervisord
ADD supervisord.conf /etc/supervisor/conf.d/supervisord.conf
RUN mkdir -p /var/log/supervisor && \
# Enable mod rewrite for Phabricator
a2enmod rewrite && \
# Switch Apache to listen to port 8080
sed -i -e 's/80/8080/' /etc/apache2/ports.conf && \
# Disable the default virtual host bundled with Apache.
rm -f /etc/apache2/sites-enabled/000-default && \
# Disable apc.stat as per the Phabricator recommendations.
echo "apc.stat = 0" >> /etc/php5/apache2/php.ini && \
# Disable apc.slam_defense as per the Phabricator recommendations.
echo "apc.slam_defense = 0" >> /etc/php5/apache2/php.ini && \
# Configure OPcache to never revalidate code as per the Phabricator recommendations.
echo "opcache.validate_timestamps = 0" >> /etc/php5/apache2/php.ini && \
# Increase the max post size to 32M as per the Phabricator recommendations.
sed -i -e "s/post_max_size = 8M/post_max_size = 32M/" /etc/php5/apache2/php.ini && \
ulimit -c 10000
# Add Phabricator and all of its dependencies from the frozen versions
# in the corresponding git submodules.
ADD third_party/libphutil /opt/libphutil/
ADD third_party/arcanist /opt/arcanist/
ADD third_party/phabricator /opt/phabricator/
# Setup the mail implementation adapter for App Engine
ADD https://github.com/GoogleCloudPlatform/appengine-python-vm-runtime/releases/download/v0.1/appengine-python-vm-runtime-0.1.tar.gz /home/vmagent/python-runtime.tar.gz
ADD ./PhabricatorMailImplementationPythonCLIAdapter.php /opt/phabricator/src/applications/metamta/adapter/PhabricatorMailImplementationPythonCLIAdapter.php
ADD ./send_mail.py /opt/send_mail.py
# TODO(ckerur): Split the configuration of the mail implementation adapter away from the compile_time_config.sh script,
# since this is only specific to AppEngine; not the base commands needed. Then we can move the below command after the base Phabricator setup
RUN pip install --upgrade pip>=6.1.1 && \
pip install click && \
pip install /home/vmagent/python-runtime.tar.gz && \
chmod +x /opt/send_mail.py && \
# Add Google App Engine email class for sending out email. This is a Python implementation
chmod +x /opt/phabricator/src/applications/metamta/adapter/PhabricatorMailImplementationPythonCLIAdapter.php && \
# build-essential gives us "make", which is required by the "arc liberate" command below.
apt-get install -y build-essential && \
# Run liberate to build a new library map so the class is found by phabricator
/opt/arcanist/bin/arc liberate /opt/phabricator/
# Configure the base Phabricator setup.
ADD phabricator.conf /etc/apache2/sites-available/phabricator.conf
ADD ./compile_time_config.sh /opt/compile_time_config.sh
RUN ln -s /etc/apache2/sites-available/phabricator.conf /etc/apache2/sites-enabled/phabricator.conf && \
mkdir -p /opt/phabricator/webroot/_ah && \
echo ok > /opt/phabricator/webroot/_ah/health && \
echo ok > /opt/phabricator/webroot/_ah/stop && \
chmod a+x /opt && chmod a+x /opt/phabricator && chmod -R a+rx /opt/phabricator/webroot/ && \
mkdir -p /var/tmp/phd/pid && \
mkdir -p /var/repo && \
chown www-data:www-data /var/repo && \
mkdir -p /usr/local/apache/logs && chown www-data:www-data /usr/local/apache/logs && \
chmod +x /opt/compile_time_config.sh
RUN /opt/compile_time_config.sh
# Configure the external Docker environment, including environment variables.
EXPOSE 8080
ENV SQL_INSTANCE phabricator
ENV PHABRICATOR_BASE_URI PHABRICATOR_BASE_URI
ENV ALTERNATE_FILE_DOMAIN ALTERNATE_FILE_DOMAIN
# Install the Google Cloud SDK.
RUN apt-get install unzip && \
curl -O https://dl.google.com/dl/cloudsdk/release/google-cloud-sdk.zip && \
unzip google-cloud-sdk.zip -d /google/ && \
rm google-cloud-sdk.zip && \
echo PATH=/google/google-cloud-sdk/bin:$PATH >> /etc/profile && \
/google/google-cloud-sdk/install.sh \
--rc-path=/etc/bash.bashrc \
--disable-installation-options && \
/google/google-cloud-sdk/bin/gcloud config set \
--scope installation \
component_manager/disable_update_check True
# Support Gerrit
ADD git-credential-gerrit.sh /google/google-cloud-sdk/bin/git-credential-gerrit.sh
RUN chmod +x /google/google-cloud-sdk/bin/git-credential-gerrit.sh
# Tell git to use our installed credential helpers for Gerrit and Cloud Repos.
ADD gitconfig /etc/gitconfig
RUN ln -s /google/google-cloud-sdk/bin/git-credential-gcloud.sh /usr/local/bin/git-credential-gcloud.sh && \
ln -s /google/google-cloud-sdk/bin/git-credential-gerrit.sh /usr/local/bin/git-credential-gerrit.sh
# Apply our customizations to the Phabricator environment.
ADD create_bot.php /opt/phabricator/scripts/user/
ADD ./.arcrc /opt/.arcrc
ADD ./run_time_config.sh /opt/run_time_config.sh
ADD ./setup_arcrc.sh /opt/setup_arcrc.sh
ADD ./backup.sh /opt/backup.sh
ADD ./kill-hanging-git-commands.sh /opt/kill-hanging-git-commands.sh
ADD ./shutdown-check.sh /opt/shutdown-check.sh
ADD https://storage.googleapis.com/golang/go1.4.2.linux-amd64.tar.gz /opt/go1.4.2.linux-amd64.tar.gz
RUN chmod +x /opt/run_time_config.sh && \
chmod +x /opt/setup_arcrc.sh && \
chmod ug+x /opt/phabricator/scripts/user/create_bot.php && \
ln -s /opt/arcanist/bin/arc /usr/local/bin/arc && \
tar -C /usr/local -xzf /opt/go1.4.2.linux-amd64.tar.gz && \
export PATH=${PATH}:/usr/local/go/bin/ && \
export GOPATH=/opt/ && \
go get github.com/google/git-phabricator-mirror/git-phabricator-mirror
# Install uuidgen and jq, so that the run-time setup script can setup the Cloud SQL instance.
RUN apt-get install -y --no-install-recommends uuid-runtime jq
CMD ["/bin/sh", "-c", "echo One time config && /opt/run_time_config.sh && echo Upgrading the SQL database && /opt/phabricator/bin/storage upgrade --force && /usr/bin/supervisord"]