mirror of
https://github.com/bunkerity/bunkerweb
synced 2026-05-24 09:28:37 +00:00
41 lines
1.8 KiB
Text
41 lines
1.8 KiB
Text
FROM debian:bookworm-slim@sha256:d5d3f9c23164ea16f31852f95bd5959aad1c5e854332fe00f7b3a20fcc9f635c
|
|
|
|
ENV container=docker
|
|
ENV LC_ALL=C
|
|
ENV DEBIAN_FRONTEND=noninteractive
|
|
ENV OS=debian
|
|
ENV NGINX_VERSION=1.30.2
|
|
ENV EXPECTED_FPR=573BFD6B3D8FBC641079A6ABABF5BD827BD9BF62
|
|
|
|
RUN apt-get update \
|
|
&& apt-get install -y systemd systemd-sysv \
|
|
&& apt-get clean \
|
|
&& rm -rf /var/lib/apt/lists/* /tmp/* /var/tmp/*
|
|
|
|
RUN cd /lib/systemd/system/sysinit.target.wants/ \
|
|
&& rm $(ls | grep -v systemd-tmpfiles-setup)
|
|
|
|
RUN rm -f /lib/systemd/system/multi-user.target.wants/* \
|
|
/etc/systemd/system/*.wants/* \
|
|
/lib/systemd/system/local-fs.target.wants/* \
|
|
/lib/systemd/system/sockets.target.wants/*udev* \
|
|
/lib/systemd/system/sockets.target.wants/*initctl* \
|
|
/lib/systemd/system/basic.target.wants/* \
|
|
/lib/systemd/system/anaconda.target.wants/* \
|
|
/lib/systemd/system/plymouth* \
|
|
/lib/systemd/system/systemd-update-utmp*
|
|
|
|
RUN apt update && \
|
|
apt-get install php-fpm curl gnupg2 ca-certificates python3-pip -y && \
|
|
curl -fsSL https://nginx.org/keys/nginx_signing.key | gpg --dearmor --output /usr/share/keyrings/nginx-archive-keyring.gpg && \
|
|
gpg --batch --no-default-keyring --keyring /usr/share/keyrings/nginx-archive-keyring.gpg --list-keys --with-colons | awk -F: '/^fpr:/ { print $10 }' | grep -qx "$EXPECTED_FPR" || { echo "ERROR: expected fingerprint $EXPECTED_FPR not found in keyring" >&2; exit 1; } && \
|
|
. /etc/os-release && \
|
|
echo "deb [signed-by=/usr/share/keyrings/nginx-archive-keyring.gpg] https://nginx.org/packages/${OS} ${VERSION_CODENAME} nginx" | tee /etc/apt/sources.list.d/nginx.list && \
|
|
apt-get update && \
|
|
apt-get install -y --no-install-recommends nginx=${NGINX_VERSION}-1~${VERSION_CODENAME}
|
|
|
|
COPY ./package-debian-bookworm/*.deb /opt
|
|
|
|
VOLUME ["/sys/fs/cgroup"]
|
|
|
|
CMD ["/lib/systemd/systemd"]
|