|
| 1 | +# Build configuration |
| 2 | +ARG PHP_IMAGE_URL |
| 3 | +ARG COMPOSER_IMAGE_URL |
| 4 | + |
| 5 | +# ########################################################################### |
| 6 | +# Based on https://github.com/wikimedia/mediawiki-docker/blob/1161796f04d6a6bcbec9fb4c67a8ce7248392403/1.41/apache/Dockerfile |
| 7 | +# hadolint ignore=DL3006 |
| 8 | +FROM ${PHP_IMAGE_URL} as mediawiki |
| 9 | + |
| 10 | +SHELL ["/bin/bash", "-exu", "-c"] |
| 11 | + |
| 12 | +# System dependencies |
| 13 | +RUN apt-get update; \ |
| 14 | + apt-get install -y --no-install-recommends \ |
| 15 | + git \ |
| 16 | + gettext-base \ |
| 17 | + librsvg2-bin \ |
| 18 | + imagemagick \ |
| 19 | + # Required for SyntaxHighlighting |
| 20 | + python3 \ |
| 21 | + # Required for Scribunto |
| 22 | + lua5.1 \ |
| 23 | + ; \ |
| 24 | + rm -rf /var/lib/apt/lists/* |
| 25 | + |
| 26 | +# Install the PHP extensions we need |
| 27 | +# hadolint ignore=DL4006 |
| 28 | +RUN savedAptMark="$(apt-mark showmanual)"; \ |
| 29 | + \ |
| 30 | + apt-get update; \ |
| 31 | + apt-get install -y --no-install-recommends \ |
| 32 | + libicu-dev \ |
| 33 | + libonig-dev \ |
| 34 | + libbz2-dev=1.* \ |
| 35 | + ; \ |
| 36 | + \ |
| 37 | + docker-php-ext-install -j "$(nproc)" \ |
| 38 | + bz2 \ |
| 39 | + calendar \ |
| 40 | + intl \ |
| 41 | + mbstring \ |
| 42 | + mysqli \ |
| 43 | + opcache \ |
| 44 | + ; \ |
| 45 | + \ |
| 46 | + pecl install APCu-5.1.21; \ |
| 47 | + docker-php-ext-enable \ |
| 48 | + apcu \ |
| 49 | + ; \ |
| 50 | + rm -r /tmp/pear; \ |
| 51 | + \ |
| 52 | + # reset apt-mark's "manual" list so that "purge --auto-remove" will remove all build dependencies |
| 53 | + apt-mark auto '.*' > /dev/null; \ |
| 54 | + apt-mark manual $savedAptMark; \ |
| 55 | + ldd "$(php -r 'echo ini_get("extension_dir");')"/*.so \ |
| 56 | + | awk '/=>/ { print $3 }' \ |
| 57 | + | sort -u \ |
| 58 | + | xargs -r dpkg-query -S \ |
| 59 | + | cut -d: -f1 \ |
| 60 | + | sort -u \ |
| 61 | + | xargs -rt apt-mark manual; \ |
| 62 | + \ |
| 63 | + apt-get purge -y --auto-remove -o APT::AutoRemove::RecommendsImportant=false; \ |
| 64 | + rm -rf /var/lib/apt/lists/* |
| 65 | + |
| 66 | +# Enable Short URLs |
| 67 | +RUN a2enmod rewrite; \ |
| 68 | + { \ |
| 69 | + echo "<Directory /var/www/html>"; \ |
| 70 | + echo " RewriteEngine On"; \ |
| 71 | + echo " RewriteCond %{REQUEST_FILENAME} !-f"; \ |
| 72 | + echo " RewriteCond %{REQUEST_FILENAME} !-d"; \ |
| 73 | + echo " RewriteRule ^ %{DOCUMENT_ROOT}/index.php [L]"; \ |
| 74 | + echo "</Directory>"; \ |
| 75 | + } > "$APACHE_CONFDIR/conf-available/short-url.conf"; \ |
| 76 | + a2enconf short-url |
| 77 | + |
| 78 | +# Enable AllowEncodedSlashes for VisualEditor |
| 79 | +RUN sed -i "s/<\/VirtualHost>/\tAllowEncodedSlashes NoDecode\n<\/VirtualHost>/" "$APACHE_CONFDIR/sites-available/000-default.conf" |
| 80 | + |
| 81 | +# set recommended PHP.ini settings |
| 82 | +# see https://secure.php.net/manual/en/opcache.installation.php |
| 83 | +RUN { \ |
| 84 | + echo 'opcache.memory_consumption=128'; \ |
| 85 | + echo 'opcache.interned_strings_buffer=8'; \ |
| 86 | + echo 'opcache.max_accelerated_files=4000'; \ |
| 87 | + echo 'opcache.revalidate_freq=60'; \ |
| 88 | + } > /usr/local/etc/php/conf.d/opcache-recommended.ini |
| 89 | + |
| 90 | +# MediaWiki setup |
| 91 | +WORKDIR /var/www/html |
| 92 | +ARG MEDIAWIKI_VERSION |
| 93 | +# hadolint ignore=DL4006 |
| 94 | +RUN set -eux; \ |
| 95 | + curl -fSL "https://releases.wikimedia.org/mediawiki/$(echo ${MEDIAWIKI_VERSION} | cut -d. -f1,2)/mediawiki-${MEDIAWIKI_VERSION}.tar.gz" -o mediawiki.tar.gz; \ |
| 96 | + tar -x --strip-components=1 -f mediawiki.tar.gz; \ |
| 97 | + rm -r mediawiki.tar.gz; \ |
| 98 | + install -d /var/log/mediawiki -o www-data |
| 99 | + |
| 100 | +# ########################################################################### |
| 101 | +# hadolint ignore=DL3006 |
| 102 | +FROM ${COMPOSER_IMAGE_URL} as composer |
| 103 | + |
| 104 | +COPY --from=mediawiki --chown=nobody:nogroup /var/www/html /var/www/html |
| 105 | +WORKDIR /var/www/html |
| 106 | + |
| 107 | +COPY composer.local.json composer.local.json |
| 108 | + |
| 109 | +# WORKAROUND for https://phabricator.wikimedia.org/T372458 |
| 110 | +# Take wikibase submodules from github as phabricator rate limits us |
| 111 | +COPY --chown=nobody:nogroup --chmod=755 \ |
| 112 | + wikibase-submodules-from-github-instead-of-phabricator.patch \ |
| 113 | + /tmp/wikibase-submodules-from-github-instead-of-phabricator.patch |
| 114 | +USER root |
| 115 | +RUN apt-get update; \ |
| 116 | + apt-get install -y --no-install-recommends \ |
| 117 | + patch \ |
| 118 | + ; \ |
| 119 | + rm -rf /var/lib/apt/lists/* |
| 120 | +USER nobody |
| 121 | + |
| 122 | +ARG WIKIBASE_COMMIT |
| 123 | +SHELL ["/bin/bash", "-euo", "pipefail", "-c"] |
| 124 | +RUN set -x; \ |
| 125 | + git clone https://gerrit.wikimedia.org/r/mediawiki/extensions/Wikibase /var/www/html/extensions/Wikibase && \ |
| 126 | + git -C /var/www/html/extensions/Wikibase checkout ${WIKIBASE_COMMIT} && \ |
| 127 | + patch -d /var/www/html/extensions/Wikibase -Np1 </tmp/wikibase-submodules-from-github-instead-of-phabricator.patch && \ |
| 128 | + rm /tmp/wikibase-submodules-from-github-instead-of-phabricator.patch && \ |
| 129 | + git -C /var/www/html/extensions/Wikibase submodule update --init --recursive && \ |
| 130 | + rm -f /var/www/html/extensions/Wikibase/.travis.yml && \ |
| 131 | + find /var/www/html/extensions/Wikibase -name ".git*" -exec rm -rf {} + |
| 132 | + |
| 133 | +ARG ALL_EXTENSIONS="Babel,cldr,CirrusSearch,Elastica,EntitySchema,OAuth,UniversalLanguageSelector,WikibaseCirrusSearch,WikibaseManifest" |
| 134 | +ARG BABEL_COMMIT |
| 135 | +ARG CLDR_COMMIT |
| 136 | +ARG CIRRUSSEARCH_COMMIT |
| 137 | +ARG ELASTICA_COMMIT |
| 138 | +ARG ENTITYSCHEMA_COMMIT |
| 139 | +ARG OAUTH_COMMIT |
| 140 | +ARG UNIVERSALLANGUAGESELECTOR_COMMIT |
| 141 | +ARG WIKIBASECIRRUSSEARCH_COMMIT |
| 142 | +ARG WIKIBASEMANIFEST_COMMIT |
| 143 | +ARG WIKIBASEEDTF_COMMIT |
| 144 | +ARG WIKIBASELOCALMEDIA_COMMIT |
| 145 | + |
| 146 | +SHELL ["/bin/bash", "-euo", "pipefail", "-c"] |
| 147 | +RUN set -x; \ |
| 148 | + IFS=',' read -ra EXTENSIONS <<< ${ALL_EXTENSIONS}; \ |
| 149 | + for EXTENSION in "${EXTENSIONS[@]}"; do \ |
| 150 | + rm -rf "extensions/${EXTENSION}"; \ |
| 151 | + git clone "https://gerrit.wikimedia.org/r/mediawiki/extensions/${EXTENSION}" "extensions/${EXTENSION}"; \ |
| 152 | + EXTENSION_COMMIT_VAR="${EXTENSION^^}_COMMIT"; \ |
| 153 | + EXTENSION_COMMIT="${!EXTENSION_COMMIT_VAR}"; \ |
| 154 | + git -C "extensions/${EXTENSION}" checkout "${EXTENSION_COMMIT}"; \ |
| 155 | + git -C "extensions/${EXTENSION}" submodule update --init --recursive; \ |
| 156 | + rm -rf "extensions/${EXTENSION}/.git*"; \ |
| 157 | + find "extensions/${EXTENSION}" -name ".git*" -exec rm -rf {} +; \ |
| 158 | + done; \ |
| 159 | + \ |
| 160 | + git clone "https://github.com/ProfessionalWiki/WikibaseEdtf.git" "extensions/WikibaseEdtf"; \ |
| 161 | + git -C "extensions/WikibaseEdtf" checkout "${WIKIBASEEDTF_COMMIT}"; \ |
| 162 | + rm -rf "extensions/WikibaseEdtf/.git*"; \ |
| 163 | + \ |
| 164 | + git clone "https://github.com/ProfessionalWiki/WikibaseLocalMedia.git" "extensions/WikibaseLocalMedia"; \ |
| 165 | + git -C "extensions/WikibaseLocalMedia" checkout "${WIKIBASELOCALMEDIA_COMMIT}"; \ |
| 166 | + rm -rf "extensions/WikibaseLocalMedia/.git*"; \ |
| 167 | + \ |
| 168 | + rm -rf vendor && \ |
| 169 | + rm -rf composer.lock && \ |
| 170 | + ls -la && pwd && \ |
| 171 | + composer install --no-dev -vv -n |
| 172 | + |
| 173 | +# ########################################################################### |
| 174 | +# hadolint ignore=DL3006 |
| 175 | +FROM mediawiki AS wikibase |
| 176 | + |
| 177 | +LABEL org.opencontainers.image.source="https://github.com/wmde/wikibase-release-pipeline" |
| 178 | + |
| 179 | +ARG GIT_CURRENT_REVISION |
| 180 | + |
| 181 | +# Set error_reporting PHP.ini settings |
| 182 | +# This is needed with PHP8+ and MediaWiki 1.39, as Wikibase contains deprecated code |
| 183 | +# TODO: remove this and see how far we get |
| 184 | +RUN { \ |
| 185 | + echo 'error_reporting = E_ALL ^ E_DEPRECATED'; \ |
| 186 | +} > /usr/local/etc/php/conf.d/error_reporting.ini |
| 187 | + |
| 188 | +COPY --from=composer --chown=nobody:nogroup /var/www/html /var/www/html |
| 189 | + |
| 190 | +# Remove world writable flag, in combination with sticky bit it breaks the w link |
| 191 | +# https://github.com/wmde/wikibase-release-pipeline/commit/545c7aeec8d0245dc597d500afc934b40e656b3c |
| 192 | +# Make upload path writable for the webserver user |
| 193 | +RUN chmod o-w /var/www/html && \ |
| 194 | + ln -s /var/www/html/ /var/www/html/w && \ |
| 195 | + chown www-data /var/www/html/images -R |
| 196 | + |
| 197 | +COPY wikibase-php.ini /usr/local/etc/php/conf.d/wikibase-php.ini |
| 198 | +COPY entrypoint.sh /entrypoint.sh |
| 199 | +COPY jobrunner-entrypoint.sh /jobrunner-entrypoint.sh |
| 200 | +COPY htaccess /var/www/html/.htaccess |
| 201 | +COPY LocalSettings.d LocalSettings.d |
| 202 | +COPY default-extra-install.sh /default-extra-install.sh |
| 203 | +COPY oauth.ini /templates/oauth.ini |
| 204 | +COPY LocalSettings.wbs.php /templates/LocalSettings.wbs.php |
| 205 | + |
| 206 | +ENV DB_NAME=my_wiki \ |
| 207 | + MW_WG_SITENAME=wikibase \ |
| 208 | + MW_WG_LANGUAGE_CODE=en \ |
| 209 | + ELASTICSEARCH_PORT=9200 |
| 210 | + |
| 211 | +ENTRYPOINT ["/bin/bash"] |
| 212 | +CMD ["/entrypoint.sh"] |
0 commit comments