mirror of
https://github.com/nextcloud/all-in-one.git
synced 2026-05-28 06:20:14 +00:00
1039363de6
This converts some shell scripted commands to small golang tools
("aio-container-tools") in order to ensure proper string handling.
In effect database passwords now can contain all characters, even emojis
and quotes.
AI-assistant: Copilot v1.0.7 (Claude Sonnet 4.6)
Signed-off-by: Pablo Zmdl <pablo@nextcloud.com>
59 lines
1.9 KiB
Docker
59 lines
1.9 KiB
Docker
# syntax=docker/dockerfile:latest
|
|
FROM docker.io/library/golang:alpine AS aio-container-tools-builder
|
|
|
|
# hadolint ignore=DL3022
|
|
COPY --from=aio-container-tools . /tmp/aio-container-tools/
|
|
RUN cd /tmp/aio-container-tools \
|
|
&& go build -o /usr/local/bin/aio-pg-init ./cmd/aio-pg-init \
|
|
&& go build -o /usr/local/bin/aio-pg-healthcheck ./cmd/aio-pg-healthcheck
|
|
|
|
# From https://github.com/docker-library/postgres/blob/master/17/alpine3.23/Dockerfile
|
|
FROM postgres:17.9-alpine
|
|
|
|
COPY --chmod=775 start.sh /start.sh
|
|
COPY --from=aio-container-tools-builder /usr/local/bin/aio-pg-init /usr/local/bin/aio-pg-init
|
|
COPY --from=aio-container-tools-builder /usr/local/bin/aio-pg-healthcheck /usr/local/bin/aio-pg-healthcheck
|
|
COPY --chmod=775 healthcheck.sh /healthcheck.sh
|
|
COPY --chmod=775 init-user-db.sh /docker-entrypoint-initdb.d/init-user-db.sh
|
|
|
|
RUN set -ex; \
|
|
apk upgrade --no-cache -a; \
|
|
apk add --no-cache \
|
|
bash \
|
|
openssl \
|
|
shadow \
|
|
grep; \
|
|
\
|
|
# We need to use the same gid and uid as on old installations
|
|
deluser postgres; \
|
|
groupmod -g 9999 ping; \
|
|
addgroup -g 999 -S postgres; \
|
|
adduser -u 999 -S -D -G postgres -H -h /var/lib/postgresql -s /bin/sh postgres; \
|
|
apk del --no-cache shadow; \
|
|
\
|
|
# Fix default permissions
|
|
chown -R postgres:postgres /var/lib/postgresql; \
|
|
chown -R postgres:postgres /var/run/postgresql; \
|
|
chmod -R 777 /var/run/postgresql; \
|
|
chown -R postgres:postgres "$PGDATA"; \
|
|
\
|
|
mkdir /mnt/data; \
|
|
chown postgres:postgres /mnt/data; \
|
|
\
|
|
# Give root a random password
|
|
echo "root:$(openssl rand -base64 12)" | chpasswd; \
|
|
apk --no-cache del openssl; \
|
|
\
|
|
# Get rid of unused binaries
|
|
rm -f /usr/local/bin/gosu /usr/local/bin/su-exec;
|
|
|
|
VOLUME /mnt/data
|
|
|
|
USER 999
|
|
ENTRYPOINT ["/start.sh"]
|
|
|
|
HEALTHCHECK CMD /healthcheck.sh
|
|
LABEL com.centurylinklabs.watchtower.enable="false" \
|
|
wud.watch="false" \
|
|
org.label-schema.vendor="Nextcloud"
|