feat(registry): prepare images and compose file to be able to use a docker registry for cache

Author: joelwurtz

.castor/docker.php

@@ -269,6 +269,24 @@ function workers_stop(): void
     ]);
 }
 
+#[AsTask(description: 'Push images cache to the registry', namespace: 'docker', name: 'push', aliases: ['push'])]
+function push(): void
+{
+    // Ensure docker buildx is enabled
+
+    // Generate bake file
+    $composeFile = context()->data['docker_compose_files'];
+
+    foreach ($composeFile as $file) {
+        $path = variable('root_dir') . '/infrastructure/docker/' . $file;
+        $content = file_get_contents($path);
+        // This does not work as we don't have a yaml parser
+        $data = \yaml_parse($content);
+    }
+
+    // Run bake
+}
+
 #[AsContext(default: true)]
 function create_default_context(): Context
 {

.home/.gitignore

@@ -0,0 +1,2 @@
+/*
+!.gitignore

infrastructure/docker/docker-compose.builder.yml

@@ -1,15 +1,15 @@
 version: '3.7'
 
-volumes:
-    builder-data: {}
-
 services:
     builder:
         build:
             context: services/php
             target: builder
+            cache_from:
+                - "type=registry,ref=${REGISTRY:-}builder:cache"
         depends_on:
             - postgres
+        user: "${USER_ID}:${USER_ID}"
         environment:
             - COMPOSER_MEMORY_LIMIT=-1
             - UID=${USER_ID}
@@ -19,7 +19,8 @@ services:
             - CONTINUOUS_INTEGRATION # Travis CI, Cirrus CI
             - BUILD_NUMBER # Jenkins, TeamCity
             - RUN_ID # TaskCluster, dsari
+            - HOME=/home/app
         volumes:
-            - "builder-data:/home/app"
             - "${COMPOSER_CACHE_DIR}:/home/app/.composer/cache"
             - "../..:/var/www:cached"
+            - "../../.home:/home/app:cached"

infrastructure/docker/docker-compose.worker.yml

@@ -6,13 +6,19 @@ x-services-templates:
         build:
             context: services/php
             target: worker
+            cache_from:
+                - "${REGISTRY:-}worker:cache"
         depends_on:
             - postgres
             #- rabbitmq
+        user: "${USER_ID}:${USER_ID}"
         volumes:
             - "../..:/var/www:cached"
+            - "../../.home:/home/app:cached"
         labels:
             - "docker-starter.worker.${PROJECT_NAME}=true"
+        environment:
+            - HOME=/home/app
 
 # services:
 #    worker_messenger:

infrastructure/docker/docker-compose.yml

@@ -15,12 +15,17 @@ services:
         build:
             context: services/php
             target: frontend
+            cache_from:
+                - "type=registry,ref=${REGISTRY:-}frontend:cache"
+        user: "${USER_ID}:${USER_ID}"
         depends_on:
             - postgres
         volumes:
             - "../..:/var/www:cached"
+            - "../../.home:/home/app:cached"
         environment:
             - "PHP_VERSION=${PHP_VERSION}"
+            - HOME=/home/app
         labels:
             - "traefik.enable=true"
             - "traefik.http.routers.${PROJECT_NAME}-frontend.rule=Host(${PROJECT_DOMAINS})"

infrastructure/docker/services/php/Dockerfile

@@ -40,20 +40,10 @@ RUN apt-get update \
     && apt-get clean \
     && rm -rf /var/lib/apt/lists/* /tmp/* /var/tmp/* /usr/share/doc/*
 
-# Fake user to maps with the one on the host
-ARG USER_ID
-COPY entrypoint /
-RUN addgroup --gid $USER_ID app && \
-    adduser --system --uid $USER_ID --home /home/app --shell /bin/bash app && \
-    curl -Ls https://github.com/tianon/gosu/releases/download/1.17/gosu-amd64 | \
-        install /dev/stdin /usr/local/bin/gosu && \
-    sed "s/{{ application_user }}/app/g" -i /entrypoint
-
 # Configuration
 COPY base/php-configuration /etc/php/${PHP_VERSION}
 
 WORKDIR /var/www
-ENTRYPOINT [ "/entrypoint" ]
 
 FROM php-base as frontend
 
@@ -77,7 +67,7 @@ RUN phpenmod app-default \
 
 EXPOSE 80
 
-CMD ["runsvdir", "-P", "/etc/service"]
+CMD ["runsvdir", "-P", "/var/www/infrastructure/docker/services/php/frontend/etc/service"]
 
 FROM php-base as worker
 
@@ -104,16 +94,9 @@ RUN apt-get update \
 # Config
 COPY builder/etc/. /etc/
 COPY builder/php-configuration /etc/php/${PHP_VERSION}
-RUN adduser app sudo \
-    && mkdir /var/log/php \
-    && chmod 777 /var/log/php \
-    && phpenmod app-default \
-    && phpenmod app-builder
 
 # Composer
 COPY --from=composer/composer:2.7.1 /usr/bin/composer /usr/bin/composer
-RUN mkdir -p "/home/app/.composer/cache" \
-    && chown app: /home/app/.composer -R
 
 # Third party tools
 ENV PATH="$PATH:/var/www/tools/bin"

infrastructure/docker/services/php/entrypoint

@@ -1,5 +1,4 @@
-user      nginx;
-pid       /var/run/nginx.pid;
+pid       /tmp/nginx.pid;
 daemon    off;
 error_log /proc/self/fd/2;
 include /etc/nginx/modules-enabled/*.conf;
@@ -25,6 +24,12 @@ http {
     gzip_http_version 1.1;
     gzip_types text/plain text/css application/json application/x-javascript text/xml application/xml application/xml+rss text/javascript image/svg+xml;
 
+    client_body_temp_path /tmp/nginx-client_body_temp_path;
+    fastcgi_temp_path /tmp/nginx-fastcgi_temp_path;
+    proxy_temp_path /tmp/nginx-proxy_temp_path;
+    scgi_temp_path /tmp/nginx-scgi_temp_path;
+    uwsgi_temp_path /tmp/nginx-uwsgi_temp_path;
+
     server {
         listen 0.0.0.0:80;
         root /var/www/application/public;

infrastructure/docker/services/php/frontend/etc/nginx/nginx.conf

@@ -0,0 +1 @@
+*/supervise

infrastructure/docker/services/php/frontend/etc/service/.gitignore

@@ -1,11 +1,8 @@
 [global]
-pid        = /var/run/php-fpm.pid
 error_log  = /proc/self/fd/2
 daemonize  = no
 
 [www]
-user   = app
-group  = app
 listen = 127.0.0.1:9000
 pm = dynamic
 pm.max_children = 25