import files

2021-02-09 17:05:00 +01:00
parent f5c4576411
commit 44a6d37ba5
425 changed files with 23195 additions and 0 deletions
@@ -0,0 +1,138 @@
+FROM alpine:latest as dist
+ARG DOCKER_BUILD_DIR
+
+LABEL maintainer 1001Pharmacies <technique+docker@1001pharmacies.com>
+
+arg GIT_AUTHOR_NAME
+arg GIT_AUTHOR_EMAIL
+
+env GIT_AUTHOR_NAME=${GIT_AUTHOR_NAME:-1001Pharmacies}
+env GIT_AUTHOR_EMAIL=${GIT_AUTHOR_EMAIL:-technique+docker@1001pharmacies.com}
+env GIT_COMMITTER_NAME=${GIT_AUTHOR_NAME}
+env GIT_COMMITTER_EMAIL=${GIT_AUTHOR_EMAIL}
+
+RUN apk upgrade --no-cache \
+ && apk add --no-cache \
+        bash \
+        docker \
+        gettext \
+        git \
+        make \
+        mysql-client \
+        openssh \
+        postgresql-client \
+        sudo \
+        zsh
+
+RUN git clone https://github.com/ingydotnet/git-subrepo \
+ && cd git-subrepo \
+ && git fetch origin +refs/heads/release/0.4.0: \
+ && git checkout release/0.4.0 \
+ && git fetch origin pull/314/head \
+ && git rebase 9cbe7ba2f61552ce97fb312c8133813f970ab4a5 \
+ && sed -i 's/install -C/install/' Makefile \
+ && make install \
+ && cd .. \
+ && rm -rf git-subrepo
+
+CMD ["bash"]
+
+FROM dist as local
+ARG DOCKER_BUILD_DIR
+ARG DOCKER_GID
+ARG SHELL=/bin/bash
+ARG SSH_BASTION_HOSTNAME
+ARG SSH_BASTION_USERNAME
+ARG SSH_PRIVATE_IP_RANGE
+ARG SSH_PUBLIC_HOST_KEYS
+ARG UID
+ARG USER
+ENV UID=${UID}
+ENV GID=${UID}
+ENV USER=${USER}
+LABEL com.1001pharmacies.uid=${UID}
+LABEL com.1001pharmacies.user=${USER}
+
+# If we provide a numeric UID
+RUN [ "$UID" -eq "$UID" ] 2>/dev/null \
+# Remove user with $UID if it is not our $USER
+ && if [ "$(getent passwd $UID |awk -F: '{print $1}')" != "$USER" ]; then \
+      sed -i '/^'$(getent passwd $UID |awk -F: '{print $1}')':x:'$UID':/d' /etc/passwd; \
+      sed -i '/^'$(getent group $GID |awk -F: '{print $1}')':x:'$GID':/d' /etc/group; \
+    fi \
+# Force $UID if our $USER already exists
+ && sed -i 's/^'$USER':x:[0-9]\+:[0-9]\+:/'$USER':x:'$UID':'$GID':/' /etc/passwd \
+ && sed -i 's/^'$USER':x:[0-9]\+:/'$USER':x:'$GID':/' /etc/group \
+# Create $USER if it does not exist
+ && if [ "$(getent passwd $UID)" = "" ]; then \
+      echo "$USER:x:$UID:$GID::/home/$USER:$SHELL" >> /etc/passwd; \
+      echo "$USER:\!:$(($(date +%s) / 60 / 60 / 24)):0:99999:7:::" >> /etc/shadow; \
+      echo "$USER:x:$GID:" >> /etc/group; \
+    fi \
+ && mkdir -p /home/$USER \
+ && chown $UID:$GID /home/$USER \
+ || true
+
+# If we provide a numeric DOCKER_GID
+RUN [ "$DOCKER_GID" -eq "$DOCKER_GID" ] 2>/dev/null \
+ && if [ "$(getent group docker |awk -F: '{print $3}')" != "$DOCKER_GID" ]; then \
+      sed -i 's/^docker:x:[0-9]\+:/docker:x:'$DOCKER_GID':/' /etc/group; \
+    fi \
+|| true
+
+## User groups
+RUN adduser $USER docker \
+ && adduser $USER wheel \
+ && echo '%wheel ALL=(ALL) NOPASSWD:ALL' >> /etc/sudoers
+
+RUN echo -e "\n\
+Host *\n\
+  LogLevel quiet\n\
+  Compression yes\n\
+" >> /etc/ssh/ssh_config \
+ && if [ -n "${SSH_PRIVATE_IP_RANGE}" ] && [ -n "${SSH_BASTION_HOSTNAME}" ]; then \
+      echo -e "\
+Host ${SSH_PRIVATE_IP_RANGE}\n\
+  ProxyCommand ssh -q ssh-bastion nc -q0 %h 22\n\
+  HostName %h\n\
+  StrictHostKeyChecking no\n\
+  UserKnownHostsFile /dev/null\n\
+Host ssh-bastion\n\
+  HostName ${SSH_BASTION_HOSTNAME}\
+" >> /etc/ssh/ssh_config; \
+      if [ -n "${SSH_BASTION_USERNAME}" ]; then \
+        echo -e "\
+  User ${SSH_BASTION_USERNAME}\n\
+" >> /etc/ssh/ssh_config; \
+      fi \
+    fi
+
+USER $USER
+ENV SHELL=${SHELL}
+WORKDIR /home/$USER
+
+# git config
+RUN mkdir -p ~/.ssh ~/.config/git \
+ && ssh-keyscan -t rsa -H ${SSH_PUBLIC_HOST_KEYS} >> ~/.ssh/known_hosts \
+ && echo -e "\
+.DS_Store\n\
+.idea/\n\
+.nfs*\n\
+.theia/settings.json\n\
+*~\n\
+*.log\n\
+*.swp\n\
+Thumbs.db\n\
+" > ~/.config/git/ignore
+
+FROM local as debug
+ARG DOCKER_BUILD_DIR
+
+FROM local as tests
+ARG DOCKER_BUILD_DIR
+
+FROM tests as preprod
+ARG DOCKER_BUILD_DIR
+
+FROM preprod as prod
+ARG DOCKER_BUILD_DIR