ensl.org/Dockerfile at master · ENSL/ensl.org · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
FROM ruby:3.4.8 AS ensl_base

ENV APP_PATH=/var/www
ENV WEB_UID=1000
ENV WEB_GID=1000
ENV NVM_DIR=/usr/local/nvm
ENV NVM_INSTALL_URL=https://raw.githubusercontent.com/nvm-sh/nvm/v0.39.6/install.sh
ENV GEM_HOME=/var/bundle
ENV GEM_PATH=/var/bundle
ENV PATH=/var/bundle/bin:/usr/local/bundle/bin:${PATH}
ENV BUNDLE_WITHOUT=
ENV BUNDLE_WITH=
ENV BUNDLER_VERSION=4.0.6

RUN \
    # Add web
    adduser web --uid $WEB_UID --home /home/web --shell /bin/bash \
                --disabled-password --gecos "" && \
    apt-get update && apt-get -y upgrade && \
    # Dependencies
    apt-get -y install --no-install-recommends --upgrade \
      # General tools
      curl build-essential \
      # For Rust bindgen-based native gems (e.g. commonmarker)
      clang libclang-dev \
      # For MySQL/MariaDB
      libmariadb-dev libmariadb-dev-compat \
      # SSL libs
      libssl-dev \
      # zlib, readline and libyaml
      zlib1g-dev libreadline-dev libyaml-dev \
      # For nokogiri
      libxslt1-dev libxml2-dev \
      # For carrierwave/rmagick
      imagemagick libmagickwand-dev \
      # Tools for media processing and metadata
      ffmpeg vlc screen libimage-exiftool-perl && \
    # Fix URI startup issue
    gem update --system && \
    # Install bundler and bundle path
    gem install bundler -v $BUNDLER_VERSION && \
    mkdir -p /var/bundle /usr/local/bundle && chown -R web:web /var/bundle /usr/local/bundle && \
    # Install nvm, Node (LTS) and yarn (installed via npm global)
    mkdir -p $NVM_DIR && \
    curl -fsSL "$NVM_INSTALL_URL" | bash && \
    # Make nvm available in this shell, install Node LTS and set default
    . $NVM_DIR/nvm.sh && \
    nvm install --lts && nvm alias default 'lts/*' && \
    NODE_VERSION=$(ls -1 $NVM_DIR/versions/node | tail -n 1) && \
    ln -s $NVM_DIR/versions/node/$NODE_VERSION/bin/node /usr/local/bin/node && \
    ln -s $NVM_DIR/versions/node/$NODE_VERSION/bin/npm /usr/local/bin/npm && \
    ln -s $NVM_DIR/versions/node/$NODE_VERSION/bin/npx /usr/local/bin/npx && \
    # Make nvm available for all users/shells
    echo "export NVM_DIR=$NVM_DIR" > /etc/profile.d/nvm.sh && \
    echo "[ -s $NVM_DIR/nvm.sh ] && . $NVM_DIR/nvm.sh" >> /etc/profile.d/nvm.sh && \
    chown -R web:web $NVM_DIR && \
    # Install yarn
    npm install -g yarn && \
    ln -s $NVM_DIR/versions/node/$NODE_VERSION/bin/yarn /usr/local/bin/yarn
    # Clean up
    # apt-get --purge autoremove && rm -rf /var/apt/lists/*

# Cache bundle installs
USER web
WORKDIR /var/www
COPY --chown=web Gemfile Gemfile.lock /var/www/

RUN bundle config set github.https true && \
    bundle config set path '/var/bundle' && \
    bundle config unset without && \
    bundle config unset with && \
    bundle config set with 'test' && \
    bundle install --jobs 8

#
# Development (includes test dependencies)
#

FROM ensl_base AS ensl_development

ENV RAILS_ENV=development

# Test-only system packages
USER root
RUN apt-get update && apt-get -y install --no-install-recommends \
      # For timing test runs
      time

# Install Playwright's own Chromium and its system dependencies
# (apt chromium is not used — Playwright manages its own browser binaries)
RUN npx playwright install-deps chromium

USER web

# Install Playwright browsers via Node CLI (independent of Ruby gem)
RUN npx playwright install chromium

#
# Production
#

FROM ensl_base AS ensl_production

ENV RAILS_ENV=production

# No need to copy files, using volume mounts in production
# ADD --chown=web . /var/www

# USER root
# RUN chown -R web:web /var/www
# USER web

# Generate rake secret
# RUN rake secret && rails credentials:edit --environment production

# Assets are only compiled for production
#RUN bundle exec rake assets:precompile && \
    # FIXME: Temporary fix for assets
    # Move assets to a temp dir here and move them back in entry script
#    cp -r /var/www/public/assets /home/web/assets

#
# Staging
#

FROM ensl_production AS ensl_staging

ENV RAILS_ENV=staging

# ENTRYPOINT ["/bin/bash"]
# CMD ["/var/www/bin/script/entry.sh"]