initial

Author: redgeoff

Dockerfile

@@ -0,0 +1,57 @@
+FROM debian:jessie
+
+# Update distro
+RUN apt-get update -y && apt-get -y upgrade && apt-get -y dist-upgrade
+
+# Install CouchDB from source
+RUN apt-get --no-install-recommends -y install \
+            build-essential pkg-config erlang \
+            libicu-dev libmozjs185-dev libcurl4-openssl-dev \
+            wget curl ca-certificates \
+  && cd /usr/src \
+  && wget http://www-eu.apache.org/dist/couchdb/source/2.0.0/apache-couchdb-2.0.0.tar.gz \
+  && tar xfz apache-couchdb-2.0.0.tar.gz \
+  && cd apache-couchdb-2.0.0 \
+  && ./configure \
+  && make release \
+  && adduser --system \
+             --shell /bin/bash \
+             --group --gecos \
+             "CouchDB Administrator" couchdb \
+  && cp -R ./rel/couchdb /home/couchdb \
+  && chown -R couchdb:couchdb /home/couchdb/couchdb \
+  && find /home/couchdb/couchdb -type d -exec chmod 0770 {} \; \
+  && chmod 0644 /home/couchdb/couchdb/etc/*
+
+# grab gosu for easy step-down from root and tini for signal handling
+RUN gpg --keyserver ha.pool.sks-keyservers.net --recv-keys B42F6819007F00F88E364FD4036A9C25BF357DD4 \
+  && curl -o /usr/local/bin/gosu -fSL "https://github.com/tianon/gosu/releases/download/1.7/gosu-$(dpkg --print-architecture)" \
+  && curl -o /usr/local/bin/gosu.asc -fSL "https://github.com/tianon/gosu/releases/download/1.7/gosu-$(dpkg --print-architecture).asc" \
+  && gpg --verify /usr/local/bin/gosu.asc \
+  && rm /usr/local/bin/gosu.asc \
+  && chmod +x /usr/local/bin/gosu \
+  && gpg --keyserver ha.pool.sks-keyservers.net --recv-keys 6380DC428747F6C393FEACA59A84159D7001A4E5 \
+  && curl -o /usr/local/bin/tini -fSL "https://github.com/krallin/tini/releases/download/v0.14.0/tini" \
+  && curl -o /usr/local/bin/tini.asc -fSL "https://github.com/krallin/tini/releases/download/v0.14.0/tini.asc" \
+  && gpg --verify /usr/local/bin/tini.asc \
+  && rm /usr/local/bin/tini.asc \
+  && chmod +x /usr/local/bin/tini
+
+# Add config files
+COPY local.ini /home/couchdb/couchdb/etc/local.d/
+COPY vm.args /home/couchdb/couchdb/etc/
+
+COPY ./docker-entrypoint.sh /
+
+# Setup directories and permissions
+RUN mkdir /home/couchdb/couchdb/data /home/couchdb/couchdb/etc/default.d \
+  && chown -R couchdb:couchdb /home/couchdb/couchdb/
+
+WORKDIR /home/couchdb/couchdb
+
+EXPOSE 5984 4369 9100-9200
+
+VOLUME ["/home/couchdb/couchdb/data"]
+
+ENTRYPOINT ["tini", "--", "/docker-entrypoint.sh"]
+CMD ["/home/couchdb/couchdb/bin/couchdb"]

docker-entrypoint.sh

@@ -0,0 +1,37 @@
+#!/bin/bash
+
+set -e
+
+if [ "$1" = '/home/couchdb/couchdb/bin/couchdb' ]; then
+
+	# Use sname so that we can specify a short name, like those used by docker, instead of a host
+	if [ ! -z "$NODENAME" ] && ! grep "couchdb@" /home/couchdb/couchdb/etc/vm.args; then
+		# Cookie is needed so that the nodes can connect to each other using Erlang clustering
+		if [ -z "$COUCHDB_COOKIE" ]; then
+			echo "-sname couchdb@$NODENAME" >> /home/couchdb/couchdb/etc/vm.args
+		else
+			echo "-sname couchdb@$NODENAME -setcookie '$COUCHDB_COOKIE'" >> /home/couchdb/couchdb/etc/vm.args
+		fi
+	fi
+
+	if [ "$COUCHDB_USER" ] && [ "$COUCHDB_PASSWORD" ] && [ -z "$COUCHDB_SYNC_ADMINS_NODE" ]; then
+		# Create admin
+		printf "[admins]\n%s = %s\n" "$COUCHDB_USER" "$COUCHDB_PASSWORD" > /home/couchdb/couchdb/etc/local.d/docker.ini
+		chown couchdb:couchdb /home/couchdb/couchdb/etc/local.d/docker.ini
+	fi
+
+	if [ "$COUCHDB_USER" ] && [ "$COUCHDB_HASHED_PASSWORD" ]; then
+		printf "[admins]\n%s = %s\n" "$COUCHDB_USER" "$COUCHDB_HASHED_PASSWORD" > /home/couchdb/couchdb/etc/local.d/docker.ini
+		chown couchdb:couchdb /home/couchdb/couchdb/etc/local.d/docker.ini
+	fi
+
+	if [ "$COUCHDB_SECRET" ]; then
+		# Set secret
+		printf "[couch_httpd_auth]\nsecret = %s\n" "$COUCHDB_SECRET" > /home/couchdb/couchdb/etc/local.d/secret.ini
+		chown couchdb:couchdb /home/couchdb/couchdb/etc/local.d/secret.ini
+	fi
+
+	exec gosu couchdb "$@"
+fi
+
+exec "$@"

local.ini

@@ -0,0 +1,11 @@
+; CouchDB Configuration Settings
+
+; Custom settings should be made in this file. They will override settings
+; in default.ini, but unlike changes made to default.ini, this file won't be
+; overwritten on server upgrade.
+
+[chttpd]
+bind_address = any
+
+[httpd]
+bind_address = any

vm.args

@@ -0,0 +1,28 @@
+# Licensed under the Apache License, Version 2.0 (the "License"); you may not
+# use this file except in compliance with the License. You may obtain a copy of
+# the License at
+#
+#   http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
+# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
+# License for the specific language governing permissions and limitations under
+# the License.
+
+# Ensure that the Erlang VM listens on a known port
+-kernel inet_dist_listen_min 9100
+-kernel inet_dist_listen_max 9200
+
+# Tell kernel and SASL not to log anything
+-kernel error_logger silent
+-sasl sasl_error_logger false
+
+# Use kernel poll functionality if supported by emulator
++K true
+
+# Start a pool of asynchronous IO threads
++A 16
+
+# Comment this line out to enable the interactive Erlang shell on startup
++Bd -noinput