php8.0 does not support openssl 3

Author: kwatson

.github/workflows/litespeed-8.0.yml

@@ -0,0 +1,76 @@
+name: "Litespeed 8.0"
+
+on:
+  workflow_dispatch:
+  schedule:
+    - cron: '35 23 * * 2'
+
+env:
+  # The default repo env will be 'ComputeStacks'; uppercase is not allowed.
+  GH_REPO: computestacks/cs-docker-php
+
+jobs:
+  build:
+    strategy:
+      matrix:
+        image: [ "ghcr.io/computestacks/cs-docker-php", "cmptstks/php" ]
+    runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      packages: write
+
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v4
+
+      - name: Set up Docker Buildx
+        uses: docker/setup-buildx-action@v3
+
+      - name: Log into Github Registry
+        if: github.event_name != 'pull_request'
+        uses: docker/login-action@v3
+        with:
+          registry: ghcr.io
+          username: ${{ github.actor }}
+          password: ${{ secrets.GITHUB_TOKEN }}
+
+      - name: Log into DockerHub
+        if: github.event_name != 'pull_request'
+        uses: docker/login-action@v3
+        with:
+          username: ${{ secrets.DOCKERHUB_USERNAME }}
+          password: ${{ secrets.DOCKERHUB_TOKEN }}
+
+      - name: Extract metadata (tags, labels) for Docker
+        id: meta
+        uses: docker/metadata-action@v5
+        with:
+          images: ${{ matrix.image }}
+          tags: |
+            8.0-litespeed
+
+      - name: Build and prepare to test
+        uses: docker/build-push-action@v5
+        with:
+          context: litespeed/8.0/
+          load: true
+          tags: ${{ steps.meta.outputs.tags }}
+          labels: ${{ steps.meta.outputs.labels }}
+
+      - name: Test container image
+        run: >
+          docker run --name=testphp -d \
+            -e CS_AUTH_KEY=FcUpBTaoi746JbAdhWqJwtmXC0en1M3u -e METADATA_SERVICE=http://localhost \
+            -e METADATA_AUTH=foobar123 -e LS_ADMIN_PW=ch3ngm3 ${{ matrix.image }}:8.0-litespeed
+          bash ./scripts/container-health.sh testphp
+
+      - name: Build and push
+        id: build-and-push
+        uses: docker/build-push-action@v5
+        with:
+          context: litespeed/8.0/
+          push: ${{ github.event_name != 'pull_request' }}
+          tags: ${{ steps.meta.outputs.tags }}
+          labels: ${{ steps.meta.outputs.labels }}
+          cache-from: type=gha
+          cache-to: type=gha,mode=max

.github/workflows/litespeed-8.yml

@@ -13,13 +13,6 @@ jobs:
   build:
     strategy:
       matrix:
-        include:
-          - php_version: "8.0"
-            lsphp_version: "80"
-            image: "ghcr.io/computestacks/cs-docker-php"
-          - php_version: "8.0"
-            lsphp_version: "80"
-            image: "cmptstks/php"
           - php_version: "8.1"
             lsphp_version: "81"
             image: "ghcr.io/computestacks/cs-docker-php"

litespeed/8.0/Dockerfile

@@ -0,0 +1,199 @@
+FROM ghcr.io/computestacks/cs-docker-base:ubuntu-focal
+
+ENV PHP_VERSION="8.0"
+
+LABEL maintainer="https://computestacks.com"
+LABEL org.opencontainers.image.authors="https://computestacks.com"
+LABEL org.opencontainers.image.source="https://github.com/ComputeStacks/cs-docker-php/tree/main/litespeed/8.0"
+LABEL org.opencontainers.image.url="https://github.com/ComputeStacks/cs-docker-php/tree/main/litespeed/8.0"
+LABEL org.opencontainers.image.title="PHP 8.0 with OpenLiteSpeed"
+
+COPY root/monarx-agent.sh /tmp/
+COPY root/postfix-run.sh /tmp/
+COPY root/postfix-log-run.sh /tmp/
+COPY root/40-ls-config.sh /etc/my_init.d/
+COPY root/50-entrypoint.sh /etc/my_init.d/
+COPY root/51-ls-env.sh /etc/my_init.d/
+COPY root/60-litespeed-upgrade.sh /etc/my_init.d/
+COPY root/60-php-config.sh /etc/my_init.d/
+COPY root/61-newrelic.sh /etc/my_init.d/
+COPY root/90-litespeed-password.sh /etc/my_init.d/
+COPY root/91-litespeed-config.sh /etc/my_init.d/
+COPY root/90-monarx-entry.sh /etc/my_init.d/
+COPY root/90-postfix.sh /etc/my_init.d/
+COPY root/90-relay.sh /etc/my_init.d/
+COPY root/99-litespeed.sh /etc/my_init.d/
+COPY root/migrate_php.sh /usr/local/bin/migrate_php_version
+
+RUN set -ex; \
+    \
+    apt-get update; \
+    apt-get install -y --no-install-recommends \
+      autoconf \
+      build-essential \
+      wget \
+      dpkg-dev \
+      file \
+      g++ \
+      gcc \
+      libc-dev \
+      make \
+      pkg-config \
+      re2c \
+      dirmngr \
+      gnupg \
+      libcurl4-openssl-dev \
+      libedit-dev \
+      libsodium-dev \
+      libsqlite3-dev \
+      libssl-dev \
+      libxml2-dev \
+      zlib1g-dev \
+      procps \
+      vim \
+      tree \
+      zip \
+      unzip \
+      libpng-dev \
+      libbz2-dev \
+      libmemcached-dev \
+      libfreetype6-dev \
+      libc-client-dev \
+      libkrb5-dev \
+      libxslt-dev \
+      libicu-dev \
+      imagemagick \
+      libmagickwand-dev \
+      libmariadb-dev \
+      mariadb-client \
+      libmcrypt-dev \
+      mcrypt \
+      expect \
+      net-tools \
+      ca-certificates \
+      curl \
+      xz-utils \
+      inotify-tools \
+      mailutils \
+      apt-utils \
+      libzstd-dev \
+      liblzf-dev \
+      git \
+    ; \
+    echo "postfix postfix/mailname string docker.local" | debconf-set-selections \
+    && echo "postfix postfix/main_mailer_type string 'Internet Site'" | debconf-set-selections \
+    && apt-get -y install postfix postfix-pcre libsasl2-modules \
+    ; \
+    wget -O - http://rpms.litespeedtech.com/debian/enable_lst_debain_repo.sh | bash \
+    ; \
+    apt-get install -y --no-install-recommends \
+      lsphp80 \
+      lsphp80-common \
+      lsphp80-curl \
+      lsphp80-dev \
+      lsphp80-imap \
+      lsphp80-imagick \
+      lsphp80-intl \
+      lsphp80-memcached \
+      lsphp80-msgpack \
+      lsphp80-mysql \
+      lsphp80-opcache \
+      lsphp80-pgsql \
+      lsphp80-sqlite3 \
+      lsphp80-modules-source \
+      php-cli \
+      php-mysql \
+      openlitespeed \
+      rcs \
+      sudo \
+      libonig-dev \
+      libzip-dev \
+    ; \
+    mkdir -p /var/www && mkdir /usr/src/default \
+    ; \
+    ln -s /usr/local/lsws/lsphp80/bin/phpize /usr/local/bin/phpize; \
+    ln -s /usr/local/lsws/lsphp80/bin/php-config /usr/local/bin/php-config \
+    ; \
+    curl https://repository.monarx.com/repository/monarx/publickey/monarxpub.gpg | gpg -o /usr/share/keyrings/monarx-archive-keyring.gpg --dearmor \
+    && echo "deb [signed-by=/usr/share/keyrings/monarx-archive-keyring.gpg] https://repository.monarx.com/repository/ubuntu-jammy/ jammy main" > /etc/apt/sources.list.d/monarx.list \
+    ; \
+    apt-get update \
+    && apt-get -y install monarx-agent monarx-protect \
+    ; \
+    mkdir -p /etc/service/monarx \
+    && mv /tmp/monarx-agent.sh /etc/service/monarx/run \
+    && touch /etc/service/monarx/down \
+    && chmod +x /etc/service/monarx/run \
+    && chmod +x /usr/local/bin/migrate_php_version \
+    ; \
+    apt-get clean \
+    && rm -rf /var/lib/apt/lists/*
+
+RUN cd /usr/src; \
+    git clone https://github.com/phpredis/phpredis.git \
+        && cd /usr/src/phpredis \
+        && git checkout $(curl -fs -L https://api.github.com/repos/phpredis/phpredis/releases/latest | grep -i "tag_name" | awk -F '"' '{print $4}') \
+        && phpize \
+        && ./configure --enable-redis-igbinary --enable-redis-zstd --with-liblzf --enable-redis-msgpack \
+        && make \
+        && make install \
+        && echo "extension=redis.so" > /usr/local/lsws/lsphp80/etc/php/8.0/mods-available/redis.ini \
+    ; \
+    RELAY_VERSION=$(curl -fs -L https://builds.r2.relay.so/meta/latest | awk -F '"' '{print $1}') \
+        && wget -O /tmp/relay.tar.gz "https://builds.r2.relay.so/$RELAY_VERSION/relay-$RELAY_VERSION-php8.0-debian-x86-64.tar.gz" \
+        && tar -xzf /tmp/relay.tar.gz -C /usr/src \
+        && mv /usr/src/relay-* /usr/src/relay \
+        && sed -i "s/00000000-0000-0000-0000-000000000000/$(cat /proc/sys/kernel/random/uuid)/" /usr/src/relay/relay-pkg.so \
+        && rm /tmp/relay.tar.gz \
+    ; \
+    wget -O /tmp/newrelic.tar.gz https://download.newrelic.com$(curl -fs -L https://download.newrelic.com/php_agent/release/ | grep -Eo "/\S+-linux.tar.gz\"" | tr -d '"') \
+        && tar -xzvf /tmp/newrelic.tar.gz -C /usr/src \
+        && mv /usr/src/newrelic-php5-*-linux /usr/src/newrelic \
+        && mv /usr/src/newrelic/daemon/newrelic-daemon.x64 /usr/bin/newrelic-daemon \
+        && chown root: /usr/bin/newrelic-daemon \
+        && mkdir -p /var/log/newrelic \
+        && touch /var/log/newrelic/newrelic-daemon.log \
+        && chmod 666 /var/log/newrelic/newrelic-daemon.log \
+        && touch /var/log/newrelic/php_agent.log \
+        && chmod 644 /var/log/newrelic/php_agent.log \
+        && rm /tmp/newrelic.tar.gz
+
+COPY root/www /usr/src/default/
+COPY root/vhosts /usr/local/lsws/conf/vhosts/
+
+RUN mkdir -p /etc/service/postfix \
+    && mkdir -p /etc/service/postfix-log \
+    && mv /tmp/postfix-run.sh /etc/service/postfix/run \
+    && mv /tmp/postfix-log-run.sh /etc/service/postfix-log/run \
+    && chmod +x /etc/service/postfix/run \
+    && chmod +x /etc/service/postfix-log/run \
+    && touch /etc/service/postfix/down \
+    && touch /etc/service/postfix-log/down \
+    ; \
+    cd /usr/local/lsws/fcgi-bin/ \
+    && rm lsphp \
+    && ln -s /usr/local/lsws/lsphp80/bin/lsphp lsphp \
+    && cd /usr/local/lsws/lsphp80/bin \
+    && chmod +x /etc/my_init.d/*.sh \
+    && rm /usr/local/lsws/conf/httpd_config.conf \
+    ; \
+    mv /usr/local/lsws /usr/src \
+    && chown -R lsadm:lsadm /usr/src/lsws/conf \
+    && echo "max_input_vars = 3000" >> /usr/src/lsws/lsphp80/etc/php/8.0/litespeed/php.ini \
+    && sed -i 's/memory_limit = .*/memory_limit = 192M/g' /usr/src/lsws/lsphp80/etc/php/8.0/litespeed/php.ini \
+    && sed -i 's/upload_max_filesize = .*/upload_max_filesize = 250M/g' /usr/src/lsws/lsphp80/etc/php/8.0/litespeed/php.ini \
+    && sed -i 's/max_input_time = .*/max_input_time = 300/g' /usr/src/lsws/lsphp80/etc/php/8.0/litespeed/php.ini \
+    && sed -i 's/max_execution_time = .*/max_execution_time = 300/g' /usr/src/lsws/lsphp80/etc/php/8.0/litespeed/php.ini \
+    && echo "date.timezone = 'UTC'" >> /usr/src/lsws/lsphp80/etc/php/8.0/litespeed/php.ini \
+    && echo "post_max_size = 250M" >> /usr/src/lsws/lsphp80/etc/php/8.0/litespeed/php.ini \
+    ; \
+    usermod -u 1001 www-data && groupmod -g 1001 www-data
+
+COPY root/lswsctrl.sh /usr/local/bin/lswsctrl
+COPY root/httpd_config.conf /usr/src/lsws/conf/httpd_config.conf
+COPY root/monarx-agent.conf /etc/monarx-agent.conf
+
+HEALTHCHECK --interval=30s --timeout=3s \
+  CMD curl --get --fail http://localhost/healthcheck/ || exit 1
+
+EXPOSE 80 7080

litespeed/8.0/README.md

@@ -0,0 +1,49 @@
+# PHP 8.0 with OpenLiteSpeed
+
+> NOTE! IonCube is not included in this release. Once they release a version for php 8.2, we will update our image to support that.
+
+## SMTP Configuration
+
+<table>
+  <thead>
+    <tr>
+      <th>Name</th>
+      <th>Value</th>
+      <th>Default</th>
+    </tr>
+  </thead>
+  <tbody>
+    <tr>
+      <td>SMTP_SERVER</td>
+      <td>IP or Hostname of the SMTP server</td>
+      <td><pre>null</pre></td>
+    </tr>
+    <tr>
+      <td>SMTP_PASSWORD</td>
+      <td>SMTP Password</td>
+      <td><pre>null</pre></td>
+    </tr>
+    <tr>
+      <td>SMTP_USERNAME</td>
+      <td>Username</td>
+      <td><pre>null</pre></td>
+    </tr>
+    <tr>
+      <td>SMTP_PORT</td>
+      <td>smtp port</td>
+      <td><pre>null</pre></td>
+    </tr>
+    <tr>
+      <td>PM_STREAM</td>
+      <td>Postmark Message Stream ID</td>
+      <td><pre>null</pre></td>
+    </tr>
+  </tbody>
+</table>
+
+## Monarx Support
+
+This image includes support for [Monarx](https://www.monarx.com). By default it's _**disabled**_ unless you include the following environmental variables at boot (_can be enabled after initial install_):
+
+* `MONARX_ID`
+* `MONARX_SECRET`

litespeed/8.0/root/40-ls-config.sh

@@ -0,0 +1,22 @@
+#!/usr/bin/env bash
+
+mkdir -p /usr/local/lsws
+
+if ! [ "$(ls -A /usr/local/lsws)" ]; then
+  echo >&2 "OpenLiteSpeed not configured, setting configuration..."
+  
+  if [ -z ${PHP_LSAPI_CHILDREN} ]; then
+    echo >&2 "SET_PHP_CHILDREN not set, setting default of 50."
+    sed -i "s/SET_PHP_CHILDREN/50/g" /usr/src/lsws/conf/httpd_config.conf
+  else
+    sed -i "s/SET_PHP_CHILDREN/$PHP_LSAPI_CHILDREN/g" /usr/src/lsws/conf/httpd_config.conf
+  fi
+  
+  if [ -z ${PHP_MAX_CONN} ]; then
+    echo >&2 "PHP_MAX_CONN not set, setting default of 50."
+    sed -i "s/SET_PHP_MAX_CONN/50/g" /usr/src/lsws/conf/httpd_config.conf
+  else
+    sed -i "s/SET_PHP_MAX_CONN/$PHP_MAX_CONN/g" /usr/src/lsws/conf/httpd_config.conf
+  fi  
+  
+fi

litespeed/8.0/root/50-entrypoint.sh

@@ -0,0 +1,28 @@
+#!/usr/bin/env bash
+
+if ! [ "$(ls -A /var/www)" ]; then
+  echo >&2 "No files found in volume - copying default files..."
+  mv /usr/src/default/* /var/www/
+  chown -R www-data:www-data /var/www
+  echo >&2 "Complete! Sample files have been successfully copied to /var/www/"
+fi
+
+mkdir -p /var/www/logs && chown www-data:www-data /var/www/logs
+
+if [ -f /var/www/crontab ]; then
+  echo >&2 "Crontab found, moving to cron.d directory..."
+  cp /var/www/crontab /etc/cron.d/myapp && chown root:root /etc/cron.d/myapp
+else
+  if [ -f /etc/cron.d/myapp ]; then
+    echo >&2 "Removing stale crontab..."
+    rm /etc/cron.d/myapp
+  fi
+fi
+
+if ! [ "$(ls -A /usr/local/lsws)" ]; then
+  echo >&2 "No files found in config volume - copying files..."
+  mkdir -p /usr/local/lsws
+  mv /usr/src/lsws/* /usr/local/lsws/  
+  chown -R lsadm: /usr/local/lsws/conf/vhosts
+  echo >&2 "Complete! Configuration files have been successfully copied to /usr/local/lsws/"
+fi