feat: refactor Dockerfile, optimize for size & less

layers, also check sha256sums
This commit is contained in:
teutat3s 2023-11-16 19:51:26 +01:00
parent 70b4d8c9b5
commit ca6cecb47f
Signed by: teutat3s
GPG key ID: 4FA1D3FA524F22C1

View file

@ -1,21 +1,29 @@
FROM mediawiki:stable FROM mediawiki:1.40.1
RUN apt-get update && apt-get install -y wget tar unzip libpq-dev RUN apt-get update && apt-get install --yes curl libpq-dev tar unzip
RUN docker-php-ext-configure pgsql --with-pgsql=/usr/local/pgsql
RUN docker-php-ext-install pgsql
RUN docker-php-ext-configure pgsql --with-pgsql=/usr/local/pgsql && \
docker-php-ext-install pgsql
RUN wget https://extdist.wmflabs.org/dist/extensions/PluggableAuth-REL1_40-eb10a76.tar.gz ENV PLUGGABLE_AUTH_VERSION=REL1_40-eb10a76
RUN tar -xzf PluggableAuth-REL1_40-eb10a76.tar.gz -C /var/www/html/extensions ENV OPENID_CONNECT_VERSION=REL1_40-e97e0b1
RUN rm PluggableAuth-REL1_40-eb10a76.tar.gz
RUN wget https://extdist.wmflabs.org/dist/extensions/OpenIDConnect-REL1_40-e97e0b1.tar.gz RUN export PLUGGABLE_AUTH_SHA256SUM=d412cb788d8a931cb3fee5b89354d6f5ef6f3c544d340a63f1cb61cad08b524a && \
RUN tar -xzf OpenIDConnect-REL1_40-e97e0b1.tar.gz -C /var/www/html/extensions export archive=PluggableAuth-${PLUGGABLE_AUTH_VERSION}.tar.gz && \
RUN rm OpenIDConnect-REL1_40-e97e0b1.tar.gz curl --location --silent --output /tmp/${archive} https://extdist.wmflabs.org/dist/extensions/${archive} && \
echo "${PLUGGABLE_AUTH_SHA256SUM} /tmp/${archive}" | sha256sum --check && \
tar --extract --gzip --file /tmp/${archive} --directory /var/www/html/extensions && \
rm /tmp/${archive}
RUN echo '{ "extra": { "merge-plugin": { "include": [ "extensions/OpenIDConnect/composer.json" ] } } }' > /var/www/html/composer.local.json RUN export OPENID_CONNECT_SHA256SUM=0797347c1ee3cab55de2debb63c85b1a7679c647ecba0f97dd62ff6f7a336f9e && \
export archive=OpenIDConnect-${OPENID_CONNECT_VERSION}.tar.gz && \
curl --location --silent --output /tmp/${archive} https://extdist.wmflabs.org/dist/extensions/${archive} && \
echo "${OPENID_CONNECT_SHA256SUM} /tmp/${archive}" | sha256sum --check && \
tar --extract --gzip --file /tmp/${archive} --directory /var/www/html/extensions && \
rm /tmp/${archive}
RUN php -r "copy('https://getcomposer.org/installer', '/tmp/composer-setup.php');" RUN echo '{ "extra": { "merge-plugin": { "include": [ "extensions/OpenIDConnect/composer.json" ] } } }' \
RUN php /tmp/composer-setup.php --install-dir=/usr/local/bin --filename=composer > /var/www/html/composer.local.json && \
php -r "copy('https://getcomposer.org/installer', '/tmp/composer-setup.php');" && \
RUN composer update php /tmp/composer-setup.php --install-dir=/usr/local/bin --filename=composer && \
composer update