blob: 017c2553018cd46879b0d3f16de8454fbe9210bc (
plain) (
blame)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
|
# allow multiarch builds
ARG TARGETOS
ARG TARGETARCH
ARG TARGETVARIANT=""
ARG ALPINE_VER="latest"
FROM alpine:"$ALPINE_VER" AS builder
RUN apk add gcc g++ git curl make linux-headers tar gzip geoip-dev gd-dev libxslt-dev pcre-dev perl-dev
WORKDIR /src/pcre2/
ARG PCRE2_VER="10.40"
RUN curl -L -O "https://github.com/PCRE2Project/pcre2/releases/download/pcre2-$PCRE2_VER/pcre2-$PCRE2_VER.tar.gz"
RUN tar xzf "/src/pcre2/pcre2-$PCRE2_VER.tar.gz"
WORKDIR /src/nginx
ARG NGINX_VER
RUN curl -L -O "http://nginx.org/download/nginx-$NGINX_VER.tar.gz"
RUN tar xzf "/src/nginx/nginx-$NGINX_VER.tar.gz"
# configure and build nginx
WORKDIR /src/nginx/nginx-"$NGINX_VER"
RUN ./configure --prefix=/usr/share/nginx \
--sbin-path=/usr/sbin/nginx \
--conf-path=/etc/nginx/nginx.conf \
--error-log-path=/var/log/nginx/error.log \
--http-log-path=/var/log/nginx/access.log \
--pid-path=/run/nginx.pid \
--lock-path=/run/lock/subsys/nginx \
--http-client-body-temp-path=/tmp/nginx/client \
--http-proxy-temp-path=/tmp/nginx/proxy \
--user=www-data \
--group=www-data \
--with-threads \
--with-file-aio \
--with-pcre="/src/pcre2/pcre2-$PCRE2_VER" \
--with-pcre-jit \
--with-http_addition_module \
--without-http_fastcgi_module \
--without-http_uwsgi_module \
--without-http_scgi_module \
--without-http_gzip_module \
--without-select_module \
--without-poll_module \
--without-mail_pop3_module \
--without-mail_imap_module \
--without-mail_smtp_module \
--with-cc-opt="-Wl,--gc-sections -static -static-libgcc -O2 -ffunction-sections -fdata-sections -fPIE -fstack-protector-all -D_FORTIFY_SOURCE=2 -Wformat -Werror=format-security"
ARG CORE_COUNT="1"
RUN make -j"$CORE_COUNT"
RUN make install
FROM alpine:"$ALPINE_VER"
# setup nginx folders and files
RUN adduser www-data -D -H -G www-data \
&& mkdir -p /tmp/nginx/ \
&& mkdir -p /var/log/nginx \
&& mkdir -p /var/www/html \
&& ln -sf /dev/stdout /var/log/nginx/access.log \
&& ln -sf /dev/stderr /var/log/nginx/error.log \
&& mkdir -p /etc/nginx \
&& chmod g+rwx /var/run /var/log/nginx /tmp/nginx
# copy in default nginx configs
COPY conf/ etc/nginx/
# add nginx binary
COPY --from=builder /usr/sbin/nginx /usr/sbin/nginx
EXPOSE 8080
# configure CMD
CMD ["/usr/sbin/nginx","-g","daemon off;"]
|
