mirror of
https://github.com/opf/openproject.git
synced 2026-06-13 19:20:00 +00:00
Cyril Rohr
d482f1f708
* Refactor Docker build/runtime stages for slimmer images Split runtime and build dependencies into separate stages and build the app in a dedicated stage before runtime copy. Add a slim prune stage that removes non-runtime source trees, source maps, duplicate enterprise source videos, module test/doc folders, and extra vendored gem artifacts. This ensures bytes are removed before the final slim copy, so layer size actually decreases while keeping runtime behavior intact. * Add target-specific Docker image validation in CI Introduce script/ci/docker_validate_image.sh with validations for slim, slim-bim, and all-in-one images. Checks include runtime binary presence/absence, plugin asset/module integrity, slim pruning expectations, BIM tooling, and all-in-one API startup/embedded services. Update docker workflow to run the validator for every matrix target before push. * fix * Generate YAML-safe auto Hocuspocus secret All-in-one startup auto-generates OPENPROJECT_COLLABORATIVE__EDITING__HOCUSPOCUS__SECRET in the entrypoint. Environment overrides are parsed through YAML, so leading punctuation in the previous charset (e.g. %) could trigger Psych parsing errors and abort boot. Restrict generated secret characters to alphanumeric to keep parsing stable while preserving high entropy. * Fix all-in-one hocuspocus runtime and validation * Fix all-in-one memcached startup handover
103 lines
2.8 KiB
Bash
Executable File
103 lines
2.8 KiB
Bash
Executable File
#!/bin/bash
|
|
set -euxo pipefail
|
|
|
|
get_architecture() {
|
|
if command -v uname > /dev/null; then
|
|
ARCHITECTURE=$(uname -m)
|
|
case $ARCHITECTURE in
|
|
aarch64|arm64)
|
|
echo "arm64"
|
|
return 0
|
|
;;
|
|
ppc64le)
|
|
echo "ppc64le"
|
|
return 0
|
|
;;
|
|
esac
|
|
fi
|
|
|
|
echo "x64"
|
|
return 0
|
|
}
|
|
|
|
ARCHITECTURE=$(get_architecture)
|
|
|
|
apt-get update -qq
|
|
# make sure all dependencies are up to date
|
|
apt-get upgrade -y
|
|
|
|
apt-get install -yq --no-install-recommends \
|
|
ca-certificates \
|
|
curl \
|
|
wget \
|
|
file \
|
|
gnupg2 \
|
|
lsb-release
|
|
|
|
wget --quiet -O- https://www.postgresql.org/media/keys/ACCC4CF8.asc | gpg --dearmor -o /usr/share/keyrings/postgresql.gpg -
|
|
echo "deb [signed-by=/usr/share/keyrings/postgresql.gpg] http://apt.postgresql.org/pub/repos/apt $(lsb_release -cs)-pgdg main" > /etc/apt/sources.list.d/pgdg.list
|
|
|
|
apt-get update -qq
|
|
apt-get install -yq --no-install-recommends \
|
|
libpq5 \
|
|
libffi8 \
|
|
unrtf \
|
|
tesseract-ocr \
|
|
poppler-utils \
|
|
catdoc \
|
|
imagemagick \
|
|
libjemalloc2
|
|
|
|
for version in $PGVERSION_CHOICES ; do
|
|
apt-get install -yq --no-install-recommends postgresql-client-$version
|
|
done
|
|
|
|
# Specifics for BIM edition
|
|
if [ ! "$BIM_SUPPORT" = "false" ]; then
|
|
apt-get install -yq --no-install-recommends unzip
|
|
|
|
# Install node + npm for BIM runtime tools.
|
|
curl -s https://nodejs.org/dist/v${NODE_VERSION}/node-v${NODE_VERSION}-linux-${ARCHITECTURE}.tar.gz | tar xzf - -C /usr/local --strip-components=1
|
|
|
|
tmpdir=$(mktemp -d)
|
|
cd $tmpdir
|
|
|
|
# Install XKT converter
|
|
npm install -g @xeokit/xeokit-gltf-to-xkt@1.3.1
|
|
|
|
# Install COLLADA2GLTF
|
|
wget --no-verbose --tries 3 https://github.com/KhronosGroup/COLLADA2GLTF/releases/download/v2.1.5/COLLADA2GLTF-v2.1.5-linux.zip
|
|
unzip -q COLLADA2GLTF-v2.1.5-linux.zip
|
|
mv COLLADA2GLTF-bin "/usr/local/bin/COLLADA2GLTF"
|
|
|
|
# IFCconvert
|
|
wget --no-verbose --tries 3 https://s3.amazonaws.com/ifcopenshell-builds/IfcConvert-v0.7.11-fea8e3a-linux64.zip
|
|
unzip -q IfcConvert-v0.7.11-fea8e3a-linux64.zip
|
|
mv IfcConvert "/usr/local/bin/IfcConvert"
|
|
|
|
wget --no-verbose --tries 3 https://github.com/opf/xeokit-metadata/releases/download/v1.1.0/xeokit-metadata-linux-x64.tar.gz
|
|
tar -zxvf xeokit-metadata-linux-x64.tar.gz
|
|
chmod +x xeokit-metadata-linux-x64/xeokit-metadata
|
|
cp -r xeokit-metadata-linux-x64/ "/usr/lib/xeokit-metadata"
|
|
ln -s /usr/lib/xeokit-metadata/xeokit-metadata /usr/local/bin/xeokit-metadata
|
|
|
|
cd /
|
|
rm -rf $tmpdir
|
|
fi
|
|
|
|
id $APP_USER || useradd -d /home/$APP_USER -m $APP_USER
|
|
|
|
# Purge helper packages used only while building this stage.
|
|
apt-get purge -yq --auto-remove \
|
|
file \
|
|
gnupg2 \
|
|
lsb-release
|
|
|
|
# curl/wget are only needed during installation in this stage.
|
|
apt-get purge -yq --auto-remove \
|
|
curl \
|
|
wget
|
|
|
|
rm -rf /var/lib/apt/lists/* /tmp/* /var/tmp/*
|
|
truncate -s 0 /var/log/*log
|