Dockerfile

# QIS Application server
#
# Runs a pre-configured instance of Apache+QIS on Ubuntu 16.04.
# Requires qis-postgres and qis-memcached containers at runtime.
#
# Environment variables:
#   HOSTNAME - Required - the host name for Apache to listen on
#   DB_USER - Required - the database username
#   DB_PASSWORD - Required - the database password
#
#   HTTP_PROCESSES - Optional - set the number of mod_wsgi processes for HTTP
#   HTTP_THREADS - Optional - set the number of mod_wsgi threads per process for HTTP
#   HTTPS_PROCESSES - Optional - set the number of mod_wsgi processes for HTTPS
#   HTTPS_THREADS - Optional - set the number of mod_wsgi threads per process for HTTPS
#
FROM ubuntu:16.04

LABEL maintainer="matt@quru.com" \
      description="QIS web application server"

# Base o/s + app layer
RUN apt-get update && \
    apt-get install -y apt-utils curl wget pwgen tar zip unzip vim \
            locales openssl ldap-utils libmemcached11 python3 \
            postgresql-client-9.5 ghostscript \
            imagemagick-6.q16 imagemagick-common libmagickwand-6.q16-2 \
            apache2 apache2-utils logrotate libapache2-mod-wsgi-py3 && \
    apt-get clean
RUN locale-gen en_GB.UTF-8 && update-locale LANG=en_GB.UTF-8 LC_ALL=en_GB.UTF-8

# Build variables
ARG QIS_VERSION=4.1.4
ARG QIS_USER=qis
ARG QIS_INSTALL_DIR=/opt/qis
ARG QIS_SAMPLES_DIR=/opt/qis-samples
ARG WEB_USER=www-data

# Ports
EXPOSE 80 443

# Runtime environment variables
ENV HOSTNAME=images.example.com \
    DB_USER=qis \
    DB_PASSWORD=qispass \
    QIS_HOME=$QIS_INSTALL_DIR \
    QIS_SAMPLES=$QIS_SAMPLES_DIR \
    HTTP_USER=$QIS_USER \
    HTTP_PROCESSES=2 \
    HTTP_THREADS=15 \
    HTTPS_PROCESSES=2 \
    HTTPS_THREADS=15

# Create the application user
RUN groupadd --gid 999 --system $QIS_USER
RUN useradd --comment "Quru Image Server" -g $QIS_USER --groups $WEB_USER --uid 999 --home $QIS_INSTALL_DIR --system --shell /sbin/nologin $QIS_USER

# Create the app dirs
RUN mkdir -p $QIS_INSTALL_DIR $QIS_SAMPLES_DIR

# Install scripts
COPY *.sh /
RUN chmod a+x /*.sh

# Download and install QIS files
RUN cd /tmp && \
    curl -L "https://github.com/quru/qis/archive/v$QIS_VERSION.tar.gz" -o qis.tar.gz && \
    tar -zxvf qis.tar.gz && \
    cd qis-$QIS_VERSION && \
    rm -rf src/tests src/*.sh src/runserver.py && \
    rm -rf deploy/docker/ci-build-* && \
    rm -rf doc/v* && \
    rm -rf images/test* && \
    cp LICENSE README.md $QIS_INSTALL_DIR && \
    cp -r conf $QIS_INSTALL_DIR && \
    cp -r deploy $QIS_INSTALL_DIR && \
    cp -r doc $QIS_INSTALL_DIR && \
    cp -r icc $QIS_INSTALL_DIR && \
    cp -r images $QIS_INSTALL_DIR && \
    cp -r images/* $QIS_SAMPLES_DIR && \
    cp -r licences $QIS_INSTALL_DIR && \
    cp -r logs $QIS_INSTALL_DIR && \
    cp -r src $QIS_INSTALL_DIR && \
    cp deploy/ubuntu16/wsgi.conf /etc/apache2/sites-available/qis-wsgi.conf && \
    cp deploy/ubuntu16/httpd.conf.sample /etc/apache2/sites-available/001-qis.conf && \
    cp deploy/ubuntu16/httpd-ssl.conf.sample /etc/apache2/sites-available/002-qis-ssl.conf && \
    cd - && \
    rm -rf /tmp/* && \
    chown -R $QIS_USER:$QIS_USER $QIS_INSTALL_DIR $QIS_SAMPLES_DIR

# Download and install Python libs
WORKDIR $QIS_INSTALL_DIR
RUN curl -L "https://github.com/quru/qis/releases/download/v$QIS_VERSION/QIS-libs-ubuntu-16-py35-x86_64.tar.gz" -o /tmp/qis-libs.tar.gz && \
    tar -zxvf /tmp/qis-libs.tar.gz && \
    rm /tmp/qis-libs.tar.gz && \
    chown -R $QIS_USER:$QIS_USER lib

# Configure Apache
RUN ln -s /etc/apache2/mods-available/ssl.load /etc/apache2/mods-enabled/ssl.load && \
    ln -s /etc/apache2/mods-available/ssl.conf /etc/apache2/mods-enabled/ssl.conf && \
    ln -s /etc/apache2/mods-available/socache_shmcb.load /etc/apache2/mods-enabled/socache_shmcb.load && \
    ln -s /etc/apache2/mods-available/expires.load /etc/apache2/mods-enabled/expires.load && \
    ln -s /etc/apache2/mods-available/headers.load /etc/apache2/mods-enabled/headers.load && \
    rm /etc/apache2/sites-enabled/000-default.conf && \
    ln -s /etc/apache2/sites-available/qis-wsgi.conf /etc/apache2/sites-enabled/qis-wsgi.conf && \
    ln -s /etc/apache2/sites-available/001-qis.conf /etc/apache2/sites-enabled/001-qis.conf && \
    ln -s /etc/apache2/sites-available/002-qis-ssl.conf /etc/apache2/sites-enabled/002-qis-ssl.conf

# Persistent storage volumes
VOLUME ["$QIS_INSTALL_DIR/images", "$QIS_INSTALL_DIR/logs", "/var/log/apache2"]

# Run regular health checks
HEALTHCHECK --interval=30s --timeout=10s --retries=3 \
    CMD ["/check-qis.sh"]

# Note the "exec" form of CMD allows docker stop signals to be sent to our run script
CMD ["/run-qis.sh"]