|
| 1 | +FROM alpine:3.12 |
| 2 | +# add our user and group first to make sure their IDs get assigned consistently, regardless of whatever dependencies get added |
| 3 | +RUN addgroup -S -g 1000 keydb && adduser -S -G keydb -u 999 keydb |
| 4 | +RUN mkdir -p /etc/keydb |
| 5 | +ARG BRANCH |
| 6 | +RUN set -eux; \ |
| 7 | + \ |
| 8 | + apk add --no-cache su-exec; \ |
| 9 | + apk add --no-cache --virtual .build-deps \ |
| 10 | + coreutils \ |
| 11 | + gcc \ |
| 12 | + linux-headers \ |
| 13 | + make \ |
| 14 | + musl-dev \ |
| 15 | + openssl-dev \ |
| 16 | + git \ |
| 17 | + util-linux-dev \ |
| 18 | + curl-dev \ |
| 19 | + g++ \ |
| 20 | + libunwind-dev \ |
| 21 | + bash \ |
| 22 | + perl \ |
| 23 | + git \ |
| 24 | + ; \ |
| 25 | + cd /tmp && git clone --branch $BRANCH https://github.com/Snapchat/KeyDB.git --recursive; \ |
| 26 | + cd /tmp/KeyDB; \ |
| 27 | + # disable protected mode as it relates to docker |
| 28 | + grep -E '^ *createBoolConfig[(]"protected-mode",.*, *1 *,.*[)],$' ./src/config.cpp; \ |
| 29 | + sed -ri 's!^( *createBoolConfig[(]"protected-mode",.*, *)1( *,.*[)],)$!\10\2!' ./src/config.cpp; \ |
| 30 | + grep -E '^ *createBoolConfig[(]"protected-mode",.*, *0 *,.*[)],$' ./src/config.cpp; \ |
| 31 | + make -j$(nproc) BUILD_TLS=yes; \ |
| 32 | + cd src; \ |
| 33 | + strip keydb-cli keydb-benchmark keydb-check-rdb keydb-check-aof keydb-diagnostic-tool keydb-sentinel keydb-server; \ |
| 34 | + mv keydb-server keydb-cli keydb-benchmark keydb-check-rdb keydb-check-aof keydb-diagnostic-tool keydb-sentinel /usr/local/bin/; \ |
| 35 | + runDeps="$( \ |
| 36 | + scanelf --needed --nobanner --format '%n#p' --recursive /usr/local \ |
| 37 | + | tr ',' '\n' \ |
| 38 | + | sort -u \ |
| 39 | + | awk 'system("[ -e /usr/local/lib/" $1 " ]") == 0 { next } { print "so:" $1 }' \ |
| 40 | + )"; \ |
| 41 | + apk add --no-network --virtual .keydb-rundeps $runDeps; \ |
| 42 | + apk del --no-network .build-deps; \ |
| 43 | + # create working directories and organize files |
| 44 | + mkdir /data && chown keydb:keydb /data; \ |
| 45 | + mkdir /flash && chown keydb:keydb /flash; \ |
| 46 | + mkdir -p /etc/keydb; \ |
| 47 | + cp /tmp/KeyDB/keydb.conf /etc/keydb/; \ |
| 48 | + sed -i 's/^\(daemonize .*\)$/# \1/' /etc/keydb/keydb.conf; \ |
| 49 | + sed -i 's/^\(dir .*\)$/# \1\ndir \/data/' /etc/keydb/keydb.conf; \ |
| 50 | + sed -i 's/^\(logfile .*\)$/# \1/' /etc/keydb/keydb.conf; \ |
| 51 | + sed -i 's/protected-mode yes/protected-mode no/g' /etc/keydb/keydb.conf; \ |
| 52 | + sed -i 's/^\(bind .*\)$/# \1/' /etc/keydb/keydb.conf; \ |
| 53 | + ln -s keydb-cli redis-cli; \ |
| 54 | + cd /etc/keydb; \ |
| 55 | + ln -s keydb.conf redis.conf; \ |
| 56 | + rm -rf /tmp/* |
| 57 | +# generate entrypoint script |
| 58 | +RUN set -eux; \ |
| 59 | + echo '#!/bin/sh' > /usr/local/bin/docker-entrypoint.sh; \ |
| 60 | + echo 'set -e' >> /usr/local/bin/docker-entrypoint.sh; \ |
| 61 | + echo "# first arg is '-f' or '--some-option'" >> /usr/local/bin/docker-entrypoint.sh; \ |
| 62 | + echo "# or first arg is `something.conf`" >> /usr/local/bin/docker-entrypoint.sh; \ |
| 63 | + echo 'if [ "${1#-}" != "$1" ] || [ "${1%.conf}" != "$1" ]; then' >> /usr/local/bin/docker-entrypoint.sh; \ |
| 64 | + echo ' set -- keydb-server "$@"' >> /usr/local/bin/docker-entrypoint.sh; \ |
| 65 | + echo 'fi' >> /usr/local/bin/docker-entrypoint.sh; \ |
| 66 | + echo "# allow the container to be started with `--user`" >> /usr/local/bin/docker-entrypoint.sh; \ |
| 67 | + echo 'if [ "$1" = "keydb-server" -a "$(id -u)" = "0" ]; then' >> /usr/local/bin/docker-entrypoint.sh; \ |
| 68 | + echo " find . \! -user keydb -exec chown keydb '{}' +" >> /usr/local/bin/docker-entrypoint.sh; \ |
| 69 | + echo ' exec su-exec keydb "$0" "$@"' >> /usr/local/bin/docker-entrypoint.sh; \ |
| 70 | + echo 'fi' >> /usr/local/bin/docker-entrypoint.sh; \ |
| 71 | + echo 'exec "$@"' >> /usr/local/bin/docker-entrypoint.sh; \ |
| 72 | + chmod +x /usr/local/bin/docker-entrypoint.sh |
| 73 | +VOLUME /data |
| 74 | +WORKDIR /data |
| 75 | +ENTRYPOINT ["docker-entrypoint.sh"] |
| 76 | +EXPOSE 6379 |
| 77 | +CMD ["keydb-server", "/etc/keydb/keydb.conf"] |
0 commit comments