forked from AtomGraph/LinkedDataHub
-
Notifications
You must be signed in to change notification settings - Fork 0
/
Dockerfile
179 lines (97 loc) · 4.07 KB
/
Dockerfile
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
FROM maven:3.8.4-openjdk-17 as maven
# download and extract Jena
ARG JENA_VERSION=4.3.2
ARG JENA_TAR_URL="https://archive.apache.org/dist/jena/binaries/apache-jena-${JENA_VERSION}.tar.gz"
RUN mkdir /jena && \
curl -SL "$JENA_TAR_URL" | \
tar -xzf - -C /jena
# copy platform source code and POM
WORKDIR /usr/src/platform
COPY src /usr/src/platform/src
COPY pom.xml /usr/src/platform/pom.xml
RUN mvn -Pstandalone clean install
# ==============================
FROM atomgraph/letsencrypt-tomcat:10.1.4
LABEL maintainer="[email protected]"
# hash of the current commit
ARG SOURCE_COMMIT=
ARG UPLOAD_ROOT=/var/www/linkeddatahub/uploads
ARG UPLOAD_CONTAINER_PATH=uploads
ENV SOURCE_COMMIT=$SOURCE_COMMIT
WORKDIR $CATALINA_HOME
# add XSLT stylesheet that makes changes to ROOT.xml
COPY platform/context.xsl conf/context.xsl
ENV CACHE_MODEL_LOADS=true
ENV STYLESHEET=static/com/atomgraph/linkeddatahub/xsl/bootstrap/2.3.2/layout.xsl
ENV CACHE_STYLESHEET=true
ENV UPLOAD_ROOT=$UPLOAD_ROOT
ENV PROXY_HOST=
ENV PROXY_HTTP_PORT=
ENV PROXY_HTTPS_PORT=
ENV TIMEOUT=20
ENV PROTOCOL=https
ENV HOST=localhost
ENV ABS_PATH=/
ENV HTTP_REDIRECT_PORT=443
ENV HTTP_COMPRESSION=on
ENV HTTPS=false
ENV SERVER_CERT=/var/linkeddatahub/ssl/server/server.crt
ENV SECRETARY_CERT=/var/linkeddatahub/ssl/secretary/cert.pem
ENV SECRETARY_CERT_ALIAS=secretary
ENV CLIENT_KEYSTORE_MOUNT=/var/linkeddatahub/ssl/secretary/keystore.p12
ENV CLIENT_KEYSTORE="$CATALINA_HOME/webapps/ROOT/ssl/keystore.p12"
ENV CLIENT_TRUSTSTORE="$CATALINA_HOME/webapps/ROOT/ssl/client.truststore"
ENV OWNER_PUBLIC_KEY=/var/linkeddatahub/ssl/owner/public.pem
ENV LOAD_DATASETS=
ENV CONTEXT_DATASET_URL=file:///var/linkeddatahub/datasets/system.trig
ENV ADMIN_DATASET_URL=file:///var/linkeddatahub/datasets/admin.trig
ENV END_USER_DATASET_URL=file:///var/linkeddatahub/datasets/end-user.trig
ENV UPLOAD_CONTAINER_PATH=$UPLOAD_CONTAINER_PATH
ENV OIDC_REFRESH_TOKENS=/var/linkeddatahub/oidc/refresh_tokens.properties
ENV MAX_CONTENT_LENGTH=
ENV MAX_CONN_PER_ROUTE=20
ENV MAX_TOTAL_CONN=40
ENV IMPORT_KEEPALIVE=
ENV GOOGLE_CLIENT_ID=
ENV GOOGLE_CLIENT_SECRET=
# HEALTHCHECK --start-period=80s CMD curl -f http://localhost:$HTTP_PORT || exit 1
# remove default Tomcat webapps and install xmlstarlet (used for XPath queries) and envsubst (for variable substitution)
RUN apt-get update --allow-releaseinfo-change && \
apt-get install -y acl && \
apt-get install -y xmlstarlet && \
apt-get install -y gettext-base && \
apt-get install -y uuid-runtime && \
rm -rf webapps/* && \
rm -rf /var/lib/apt/lists/*
# copy entrypoint
COPY platform/entrypoint.sh entrypoint.sh
# copy certificate import script
COPY platform/import-letsencrypt-stg-roots.sh import-letsencrypt-stg-roots.sh
# copy SPARQL query used to get metadata of the root app service from the system dataset
COPY platform/select-root-services.rq select-root-services.rq
# copy the metadata of the built-in secretary agent
COPY platform/root-secretary.trig.template root-secretary.trig.template
COPY platform/root-owner.trig.template root-owner.trig.template
# copy default datasets
COPY platform/datasets/admin.trig /var/linkeddatahub/datasets/admin.trig
COPY platform/datasets/end-user.trig /var/linkeddatahub/datasets/end-user.trig
# copy webapp config
COPY platform/conf/ROOT.xml conf/Catalina/localhost/ROOT.xml
# copy platform webapp (exploded) from the maven stage of the build
COPY --from=maven /usr/src/platform/target/ROOT webapps/ROOT/
# copy extracted Jena from the maven stage of the build
COPY --from=maven /jena/* /jena
# setup Jena
ENV JENA_HOME=/jena
ENV PATH="${PATH}:${JENA_HOME}/bin"
# add non-root user "ldh" and give it access to $CATALINA_HOME
RUN useradd --no-log-init -U ldh && \
chown -R ldh:ldh . && \
chown -R ldh:ldh /var/linkeddatahub && \
mkdir -p "${UPLOAD_ROOT}/${UPLOAD_CONTAINER_PATH}" && \
chown -R ldh:ldh "$UPLOAD_ROOT" && \
mkdir -p /etc/letsencrypt/staging && \
chown -R ldh:ldh /etc/letsencrypt/staging
RUN ./import-letsencrypt-stg-roots.sh
USER ldh
ENTRYPOINT ["/bin/bash", "entrypoint.sh"]