|
@@ -1,20 +1,24 @@
|
|
-FROM ubuntu:21.10
|
|
|
|
-LABEL maintainer="sgr"
|
|
|
|
|
|
+FROM ubuntu:24.04
|
|
|
|
+LABEL maintainer="wekan"
|
|
|
|
+LABEL org.opencontainers.image.ref.name="ubuntu"
|
|
|
|
+LABEL org.opencontainers.image.version="24.04"
|
|
|
|
+LABEL org.opencontainers.image.source="https://github.com/wekan/wekan"
|
|
|
|
|
|
# 2022-04-25:
|
|
# 2022-04-25:
|
|
# - gyp does not yet work with Ubuntu 22.04 ubuntu:rolling,
|
|
# - gyp does not yet work with Ubuntu 22.04 ubuntu:rolling,
|
|
# so changing to 21.10. https://github.com/wekan/wekan/issues/4488
|
|
# so changing to 21.10. https://github.com/wekan/wekan/issues/4488
|
|
|
|
|
|
-ENV BUILD_DEPS="gnupg gosu libarchive-tools wget curl bzip2 g++ build-essential python3 git ca-certificates iproute2"
|
|
|
|
-ENV DEBIAN_FRONTEND=noninteractive
|
|
|
|
|
|
+ENV BUILD_DEPS="apt-utils gnupg gosu wget bzip2 g++ iproute2 apt-transport-https libarchive-tools git"
|
|
|
|
+ENV DEV_DEPS="curl python3 ca-certificates build-essential"
|
|
|
|
+ARG DEBIAN_FRONTEND=noninteractive
|
|
|
|
|
|
ENV \
|
|
ENV \
|
|
DEBUG=false \
|
|
DEBUG=false \
|
|
NODE_VERSION=v14.21.4 \
|
|
NODE_VERSION=v14.21.4 \
|
|
- METEOR_RELEASE=METEOR@2.13 \
|
|
|
|
|
|
+ METEOR_RELEASE=METEOR@2.14 \
|
|
USE_EDGE=false \
|
|
USE_EDGE=false \
|
|
METEOR_EDGE=1.5-beta.17 \
|
|
METEOR_EDGE=1.5-beta.17 \
|
|
- NPM_VERSION=latest \
|
|
|
|
|
|
+ NPM_VERSION=6.14.17 \
|
|
FIBERS_VERSION=4.0.1 \
|
|
FIBERS_VERSION=4.0.1 \
|
|
ARCHITECTURE=linux-x64 \
|
|
ARCHITECTURE=linux-x64 \
|
|
SRC_PATH=./ \
|
|
SRC_PATH=./ \
|
|
@@ -28,15 +32,14 @@ ENV \
|
|
ACCOUNTS_LOCKOUT_UNKNOWN_USERS_LOCKOUT_PERIOD=60 \
|
|
ACCOUNTS_LOCKOUT_UNKNOWN_USERS_LOCKOUT_PERIOD=60 \
|
|
ACCOUNTS_LOCKOUT_UNKNOWN_USERS_FAILURE_WINDOW=15 \
|
|
ACCOUNTS_LOCKOUT_UNKNOWN_USERS_FAILURE_WINDOW=15 \
|
|
ACCOUNTS_COMMON_LOGIN_EXPIRATION_IN_DAYS=90 \
|
|
ACCOUNTS_COMMON_LOGIN_EXPIRATION_IN_DAYS=90 \
|
|
- RICHER_CARD_COMMENT_EDITOR=false \
|
|
|
|
- CARD_OPENED_WEBHOOK_ENABLED=false \
|
|
|
|
- ATTACHMENTS_STORE_PATH="" \
|
|
|
|
ATTACHMENTS_UPLOAD_EXTERNAL_PROGRAM="" \
|
|
ATTACHMENTS_UPLOAD_EXTERNAL_PROGRAM="" \
|
|
ATTACHMENTS_UPLOAD_MIME_TYPES="" \
|
|
ATTACHMENTS_UPLOAD_MIME_TYPES="" \
|
|
ATTACHMENTS_UPLOAD_MAX_SIZE=0 \
|
|
ATTACHMENTS_UPLOAD_MAX_SIZE=0 \
|
|
AVATARS_UPLOAD_EXTERNAL_PROGRAM="" \
|
|
AVATARS_UPLOAD_EXTERNAL_PROGRAM="" \
|
|
AVATARS_UPLOAD_MIME_TYPES="" \
|
|
AVATARS_UPLOAD_MIME_TYPES="" \
|
|
AVATARS_UPLOAD_MAX_SIZE=0 \
|
|
AVATARS_UPLOAD_MAX_SIZE=0 \
|
|
|
|
+ RICHER_CARD_COMMENT_EDITOR=false \
|
|
|
|
+ CARD_OPENED_WEBHOOK_ENABLED=false \
|
|
MAX_IMAGE_PIXEL="" \
|
|
MAX_IMAGE_PIXEL="" \
|
|
IMAGE_COMPRESS_RATIO="" \
|
|
IMAGE_COMPRESS_RATIO="" \
|
|
NOTIFICATION_TRAY_AFTER_READ_DAYS_BEFORE_REMOVE="" \
|
|
NOTIFICATION_TRAY_AFTER_READ_DAYS_BEFORE_REMOVE="" \
|
|
@@ -48,10 +51,12 @@ ENV \
|
|
MATOMO_SITE_ID="" \
|
|
MATOMO_SITE_ID="" \
|
|
MATOMO_DO_NOT_TRACK=true \
|
|
MATOMO_DO_NOT_TRACK=true \
|
|
MATOMO_WITH_USERNAME=false \
|
|
MATOMO_WITH_USERNAME=false \
|
|
|
|
+ METRICS_ALLOWED_IP_ADDRESSES="" \
|
|
BROWSER_POLICY_ENABLED=true \
|
|
BROWSER_POLICY_ENABLED=true \
|
|
TRUSTED_URL="" \
|
|
TRUSTED_URL="" \
|
|
WEBHOOKS_ATTRIBUTES="" \
|
|
WEBHOOKS_ATTRIBUTES="" \
|
|
OAUTH2_ENABLED=false \
|
|
OAUTH2_ENABLED=false \
|
|
|
|
+ OIDC_REDIRECTION_ENABLED=false \
|
|
OAUTH2_CA_CERT="" \
|
|
OAUTH2_CA_CERT="" \
|
|
OAUTH2_ADFS_ENABLED=false \
|
|
OAUTH2_ADFS_ENABLED=false \
|
|
OAUTH2_B2C_ENABLED=false \
|
|
OAUTH2_B2C_ENABLED=false \
|
|
@@ -71,6 +76,9 @@ ENV \
|
|
LDAP_ENABLE=false \
|
|
LDAP_ENABLE=false \
|
|
LDAP_PORT=389 \
|
|
LDAP_PORT=389 \
|
|
LDAP_HOST="" \
|
|
LDAP_HOST="" \
|
|
|
|
+ LDAP_AD_SIMPLE_AUTH="" \
|
|
|
|
+ LDAP_USER_AUTHENTICATION=false \
|
|
|
|
+ LDAP_USER_AUTHENTICATION_FIELD=uid \
|
|
LDAP_BASEDN="" \
|
|
LDAP_BASEDN="" \
|
|
LDAP_LOGIN_FALLBACK=false \
|
|
LDAP_LOGIN_FALLBACK=false \
|
|
LDAP_RECONNECT=true \
|
|
LDAP_RECONNECT=true \
|
|
@@ -88,8 +96,6 @@ ENV \
|
|
LDAP_ENCRYPTION=false \
|
|
LDAP_ENCRYPTION=false \
|
|
LDAP_CA_CERT="" \
|
|
LDAP_CA_CERT="" \
|
|
LDAP_REJECT_UNAUTHORIZED=false \
|
|
LDAP_REJECT_UNAUTHORIZED=false \
|
|
- LDAP_USER_AUTHENTICATION=false \
|
|
|
|
- LDAP_USER_AUTHENTICATION_FIELD=uid \
|
|
|
|
LDAP_USER_SEARCH_FILTER="" \
|
|
LDAP_USER_SEARCH_FILTER="" \
|
|
LDAP_USER_SEARCH_SCOPE="" \
|
|
LDAP_USER_SEARCH_SCOPE="" \
|
|
LDAP_USER_SEARCH_FIELD="" \
|
|
LDAP_USER_SEARCH_FIELD="" \
|
|
@@ -144,69 +150,32 @@ ENV \
|
|
SAML_IDENTIFIER_FORMAT="" \
|
|
SAML_IDENTIFIER_FORMAT="" \
|
|
SAML_LOCAL_PROFILE_MATCH_ATTRIBUTE="" \
|
|
SAML_LOCAL_PROFILE_MATCH_ATTRIBUTE="" \
|
|
SAML_ATTRIBUTES="" \
|
|
SAML_ATTRIBUTES="" \
|
|
- DEFAULT_WAIT_SPINNER="" \
|
|
|
|
|
|
+ ORACLE_OIM_ENABLED=false \
|
|
|
|
+ WAIT_SPINNER="" \
|
|
|
|
+ WRITABLE_PATH=/data \
|
|
S3=""
|
|
S3=""
|
|
-# \
|
|
|
|
-# NODE_OPTIONS="--max_old_space_size=4096"
|
|
|
|
|
|
|
|
-#---------------------------------------------------------------------
|
|
|
|
-# https://github.com/wekan/wekan/issues/3585#issuecomment-1021522132
|
|
|
|
-# Add more Node heap:
|
|
|
|
# NODE_OPTIONS="--max_old_space_size=4096"
|
|
# NODE_OPTIONS="--max_old_space_size=4096"
|
|
-# Add more stack:
|
|
|
|
-# bash -c "ulimit -s 65500; exec node --stack-size=65500 main.js"
|
|
|
|
-#---------------------------------------------------------------------
|
|
|
|
-
|
|
|
|
-# Install OS
|
|
|
|
-RUN set -o xtrace \
|
|
|
|
- && useradd --user-group -m --system --home-dir /home/wekan wekan \
|
|
|
|
- && apt-get update \
|
|
|
|
- && apt-get install --assume-yes --no-install-recommends apt-utils apt-transport-https ca-certificates 2>&1 \
|
|
|
|
- && apt-get install --assume-yes --no-install-recommends ${BUILD_DEPS}
|
|
|
|
-
|
|
|
|
-# OLD:
|
|
|
|
-# && curl -fsSLO --compressed "https://nodejs.org/dist/$NODE_VERSION/node-$NODE_VERSION-$ARCHITECTURE.tar.xz" \
|
|
|
|
-# && curl -fsSLO --compressed "https://nodejs.org/dist/$NODE_VERSION/SHASUMS256.txt.asc" \
|
|
|
|
-
|
|
|
|
-# Install NodeJS
|
|
|
|
-RUN set -o xtrace \
|
|
|
|
- && cd /tmp \
|
|
|
|
- && curl -fsSLO --compressed "https://github.com/wekan/node-v14-esm/releases/download/${NODE_VERSION}/node-${NODE_VERSION}-${ARCHITECTURE}.tar.xz" \
|
|
|
|
- && curl -fsSLO --compressed "https://github.com/wekan/node-v14-esm/releases/download/${NODE_VERSION}/SHASUMS256.txt" \
|
|
|
|
- && grep " node-$NODE_VERSION-$ARCHITECTURE.tar.xz\$" SHASUMS256.txt | sha256sum -c - \
|
|
|
|
- && tar -xJf "node-$NODE_VERSION-$ARCHITECTURE.tar.xz" -C /usr/local --strip-components=1 --no-same-owner \
|
|
|
|
- && rm "node-$NODE_VERSION-$ARCHITECTURE.tar.xz" SHASUMS256.txt \
|
|
|
|
- && ln -s /usr/local/bin/node /usr/local/bin/nodejs \
|
|
|
|
- && mkdir -p /usr/local/lib/node_modules/fibers/.node-gyp /root/.node-gyp/${NODE_VERSION} /home/wekan/.config \
|
|
|
|
- && npm install -g npm@${NPM_VERSION} \
|
|
|
|
- && chown wekan:wekan --recursive /home/wekan/.config
|
|
|
|
-
|
|
|
|
-ENV DEBIAN_FRONTEND=dialog
|
|
|
|
-
|
|
|
|
-USER wekan
|
|
|
|
|
|
|
|
-# Install Meteor
|
|
|
|
-RUN set -o xtrace \
|
|
|
|
- && cd /home/wekan \
|
|
|
|
- && curl https://install.meteor.com/?release=$METEOR_VERSION --output /home/wekan/install-meteor.sh \
|
|
|
|
- # Replace tar with bsdtar in the install script; https://github.com/jshimko/meteor-launchpad/issues/39
|
|
|
|
- && sed --in-place "s/tar -xzf.*/bsdtar -xf \"\$TARBALL_FILE\" -C \"\$INSTALL_TMPDIR\"/g" /home/wekan/install-meteor.sh \
|
|
|
|
- && sed --in-place 's/VERBOSITY="--silent"/VERBOSITY="--progress-bar"/' /home/wekan/install-meteor.sh \
|
|
|
|
- && printf "\n[-] Installing Meteor $METEOR_VERSION...\n\n" \
|
|
|
|
- && sh /home/wekan/install-meteor.sh
|
|
|
|
|
|
+#---------------------------------------------
|
|
|
|
+# == at docker-compose.yml: AUTOLOGIN WITH OIDC/OAUTH2 ====
|
|
|
|
+# https://github.com/wekan/wekan/wiki/autologin
|
|
|
|
+#- OIDC_REDIRECTION_ENABLED=true
|
|
|
|
+#---------------------------------------------------------------------
|
|
|
|
|
|
ENV PATH=$PATH:/home/wekan/.meteor/
|
|
ENV PATH=$PATH:/home/wekan/.meteor/
|
|
|
|
|
|
-USER root
|
|
|
|
-
|
|
|
|
-RUN echo "export PATH=$PATH" >> /etc/environment
|
|
|
|
-
|
|
|
|
-USER wekan
|
|
|
|
|
|
+RUN <<EOR
|
|
|
|
+echo "export PATH=$PATH" >> /etc/environment
|
|
|
|
+EOR
|
|
|
|
|
|
# Copy source dir
|
|
# Copy source dir
|
|
-RUN set -o xtrace \
|
|
|
|
- && mkdir -p /home/wekan/app/.meteor \
|
|
|
|
- && mkdir -p /home/wekan/app/packages
|
|
|
|
|
|
+RUN <<EOR
|
|
|
|
+set -o xtrace
|
|
|
|
+
|
|
|
|
+mkdir -p /home/wekan/app/.meteor
|
|
|
|
+mkdir -p /home/wekan/app/packages
|
|
|
|
+EOR
|
|
|
|
|
|
COPY \
|
|
COPY \
|
|
.meteor/.finished-upgraders \
|
|
.meteor/.finished-upgraders \
|
|
@@ -231,44 +200,83 @@ COPY \
|
|
packages \
|
|
packages \
|
|
/home/wekan/app/packages/
|
|
/home/wekan/app/packages/
|
|
|
|
|
|
-USER root
|
|
|
|
|
|
+# Install OS
|
|
|
|
+RUN <<EOR
|
|
|
|
+set -o xtrace
|
|
|
|
|
|
-RUN set -o xtrace \
|
|
|
|
- && chown -R wekan:wekan /home/wekan/app /home/wekan/.meteor
|
|
|
|
|
|
+# Add non-root user wekan
|
|
|
|
+useradd --user-group --system --home-dir /home/wekan wekan
|
|
|
|
+# OS dependencies
|
|
|
|
+apt-get update --assume-yes
|
|
|
|
+apt-get install --assume-yes --no-install-recommends ${BUILD_DEPS} ${DEV_DEPS}
|
|
|
|
|
|
-USER wekan
|
|
|
|
|
|
+# Meteor installer doesn't work with the default tar binary, so using bsdtar while installing.
|
|
|
|
+# https://github.com/coreos/bugs/issues/1095#issuecomment-350574389
|
|
|
|
+cp $(which tar) $(which tar)~
|
|
|
|
+ln -sf $(which bsdtar) $(which tar)
|
|
|
|
+
|
|
|
|
+# Install NodeJS
|
|
|
|
+cd /tmp
|
|
|
|
+
|
|
|
|
+# Download nodejs
|
|
|
|
+wget "https://github.com/wekan/node-v14-esm/releases/download/${NODE_VERSION}/node-${NODE_VERSION}-${ARCHITECTURE}.tar.gz"
|
|
|
|
+wget "https://github.com/wekan/node-v14-esm/releases/download/${NODE_VERSION}/SHASUMS256.txt"
|
|
|
|
+
|
|
|
|
+# Verify nodejs authenticity
|
|
|
|
+grep "node-${NODE_VERSION}-${ARCHITECTURE}.tar.gz" "SHASUMS256.txt" | shasum -a 256 -c -
|
|
|
|
+rm -f "SHASUMS256.txt"
|
|
|
|
+
|
|
|
|
+# Install Node
|
|
|
|
+tar xzf "node-$NODE_VERSION-$ARCHITECTURE.tar.gz" -C /usr/local --strip-components=1 --no-same-owner
|
|
|
|
+rm "node-$NODE_VERSION-$ARCHITECTURE.tar.gz" "SHASUMS256.txt"
|
|
|
|
+ln -s "/usr/local/bin/node" "/usr/local/bin/nodejs"
|
|
|
|
+mkdir -p "/opt/nodejs/lib/node_modules/fibers/.node-gyp" "/root/.node-gyp/${NODE_VERSION} /home/wekan/.config"
|
|
|
|
+
|
|
|
|
+# Install node dependencies
|
|
|
|
+npm install -g npm@${NPM_VERSION}
|
|
|
|
+chown --recursive wekan:wekan /home/wekan/.config
|
|
|
|
+
|
|
|
|
+# Install Meteor
|
|
|
|
+cd /home/wekan
|
|
|
|
+chown --recursive wekan:wekan /home/wekan
|
|
|
|
+echo "Starting meteor ${METEOR_RELEASE} installation... \n"
|
|
|
|
+gosu wekan:wekan curl https://install.meteor.com/ | /bin/sh
|
|
|
|
+mv /root/.meteor /home/wekan/
|
|
|
|
+chown --recursive wekan:wekan /home/wekan/.meteor
|
|
|
|
+
|
|
|
|
+# sed -i 's/api\.versionsFrom/\/\/api.versionsFrom/' /home/wekan/app/packages/meteor-useraccounts-core/package.js
|
|
|
|
+cd /home/wekan/.meteor
|
|
|
|
+gosu wekan:wekan /home/wekan/.meteor/meteor -- help
|
|
|
|
+
|
|
|
|
+# Build app (Development)
|
|
|
|
+cd /home/wekan/app
|
|
|
|
+gosu wekan:wekan /home/wekan/.meteor/meteor add standard-minifier-js
|
|
|
|
+gosu wekan:wekan /home/wekan/.meteor/meteor npm install
|
|
|
|
+
|
|
|
|
+# Put back the original tar
|
|
|
|
+mv $(which tar)~ $(which tar)
|
|
|
|
|
|
-RUN \
|
|
|
|
- set -o xtrace && \
|
|
|
|
- # Build app
|
|
|
|
- cd /home/wekan/app && \
|
|
|
|
- /home/wekan/.meteor/meteor add standard-minifier-js && \
|
|
|
|
- /home/wekan/.meteor/meteor npm install && \
|
|
|
|
- /home/wekan/.meteor/meteor build --directory /home/wekan/app_build
|
|
|
|
-
|
|
|
|
-RUN \
|
|
|
|
- set -o xtrace && \
|
|
|
|
- cd /home/wekan/app_build/bundle/programs/server/ && \
|
|
|
|
- chmod u+w package.json npm-shrinkwrap.json && \
|
|
|
|
- npm install && \
|
|
|
|
- cd node_modules/fibers && \
|
|
|
|
- node build.js
|
|
|
|
-
|
|
|
|
-USER root
|
|
|
|
# Cleanup
|
|
# Cleanup
|
|
-RUN \
|
|
|
|
- set -o xtrace && \
|
|
|
|
- apt-get clean -y && \
|
|
|
|
- apt-get autoremove -y && \
|
|
|
|
- rm -Rf /tmp/* && \
|
|
|
|
- rm -Rf /home/wekan/app_build && \
|
|
|
|
- rm -Rf /var/cache/apt /var/lib/apt/lists && \
|
|
|
|
- rm -Rf /var/lib/apt/lists/*
|
|
|
|
|
|
+apt-get remove --purge --assume-yes ${BUILD_DEPS}
|
|
|
|
+apt-get install --assume-yes --no-install-recommends build-essential
|
|
|
|
+apt-get autoremove --assume-yes
|
|
|
|
+apt-get clean --assume-yes
|
|
|
|
+rm -Rf /tmp/*
|
|
|
|
+rm -Rf /var/lib/apt/lists/*
|
|
|
|
+rm -Rf /var/cache/apt
|
|
|
|
+rm -Rf /var/lib/apt/lists
|
|
|
|
+rm -Rf /home/wekan/app_build
|
|
|
|
+
|
|
|
|
+mkdir /data
|
|
|
|
+chown wekan --recursive /data
|
|
|
|
+EOR
|
|
|
|
|
|
USER wekan
|
|
USER wekan
|
|
|
|
|
|
ENV PORT=3000
|
|
ENV PORT=3000
|
|
EXPOSE $PORT
|
|
EXPOSE $PORT
|
|
|
|
+
|
|
|
|
+STOPSIGNAL SIGKILL
|
|
WORKDIR /home/wekan/app
|
|
WORKDIR /home/wekan/app
|
|
|
|
|
|
#---------------------------------------------------------------------
|
|
#---------------------------------------------------------------------
|
|
@@ -278,7 +286,6 @@ WORKDIR /home/wekan/app
|
|
# Add more stack:
|
|
# Add more stack:
|
|
# bash -c "ulimit -s 65500; exec node --stack-size=65500 main.js"
|
|
# bash -c "ulimit -s 65500; exec node --stack-size=65500 main.js"
|
|
#---------------------------------------------------------------------
|
|
#---------------------------------------------------------------------
|
|
-#TODO:
|
|
|
|
-#CMD ["bash", "-c", "ulimit -s 65500; exec node --stack-size=65500 /build/main.js"]
|
|
|
|
|
|
+#
|
|
|
|
|
|
CMD ["/home/wekan/.meteor/meteor", "run", "--verbose", "--settings", "settings.json"]
|
|
CMD ["/home/wekan/.meteor/meteor", "run", "--verbose", "--settings", "settings.json"]
|