Skip to content

Commit

Permalink
repaired dockerfiles for aarch64 and armv7
Browse files Browse the repository at this point in the history
  • Loading branch information
Orbiter committed Oct 29, 2023
1 parent 68554ce commit b9912ff
Show file tree
Hide file tree
Showing 2 changed files with 30 additions and 82 deletions.
52 changes: 13 additions & 39 deletions docker/Dockerfile.aarch64
Original file line number Diff line number Diff line change
@@ -1,56 +1,30 @@
# Build a docker image from latest YaCy sources
# Docker image for YaCy

# Base image : latest Debian stable official jdk 17 image from Docker
FROM arm64v8/openjdk:17-buster
# build with
# docker build -t yacy/yacy_search_server:aarch64-latest -f Dockerfile.aarch64 ../

# run with
# docker run -d --name yacy -p 8090:8090 -p 8443:8443 -v yacy_data:/opt/yacy_search_server/DATA --log-opt max-size=200m --log-opt max-file=2 yacy/yacy_search_server:aarch64-latest

# Install needed packages not in base image
# (curl for sh scripts in /bin, and wkhtmltopdf,imagemagick,xvfb and ghostscript to enable PDF and image snapshot generation)
RUN apt-get update && apt-get install -yq curl wkhtmltopdf imagemagick xvfb ghostscript && \
rm -rf /var/lib/apt/lists/*
FROM arm64v8/openjdk:17-buster
LABEL maintainer="Michael Peter Christen <[email protected]>"

# trace java version
RUN apt-get update && \
apt-get install -yq ca-certificates ca-certificates-java curl wkhtmltopdf imagemagick xvfb ghostscript ant git
RUN java -version

# set current working dir
WORKDIR /opt

# All in one step to reduce image size growth :
# - install ant package
# - Compile with ant
# - remove unnecessary and size consuming .git directory
# - remove ant package

# copy sources
COPY . /opt/yacy_search_server/

RUN rm -rf /opt/yacy_search_server/.git && \
apt-get update && \
apt-get install -yq ant && \
ant compile -f /opt/yacy_search_server/build.xml && \
apt-get purge -yq --auto-remove ant && \
apt-get clean && \
rm -rf /var/lib/apt/lists/*

RUN \
# Set initial admin password: "yacy" (encoded with custom yacy md5 function net.yacy.cora.order.Digest.encodeMD5Hex())
# > java -classpath classes net.yacy.cora.order.Digest -strfhex "admin:The YaCy access is limited to administrators. If you don't know the password, you can change it using <yacy-home>/bin/passwd.sh <new-password>:docker"
sed -i "/adminAccountBase64MD5=/c\adminAccountBase64MD5=MD5:8cffbc0d66567a0987a4aba1ec46d63c" /opt/yacy_search_server/defaults/yacy.init && \
sed -i "/adminAccountForLocalhost=/c\adminAccountForLocalhost=false" /opt/yacy_search_server/defaults/yacy.init && \
# Intially enable HTTPS: this is the most secure option for remote administrator authentication
sed -i "/server.https=false/c\server.https=true" /opt/yacy_search_server/defaults/yacy.init && \
# Create user and group yacy: this user will be used to run YaCy main process
adduser --system --group --no-create-home --disabled-password yacy && \
# Set ownership of yacy install directory to yacy user/group
chown yacy:yacy -R /opt/yacy_search_server

# Expose HTTP and HTTPS default ports
EXPOSE 8090 8443

# Set data volume: yacy data and configuration will persist even after container stop or destruction
VOLUME ["/opt/yacy_search_server/DATA"]

# Next commands run as yacy as non-root user for improved security
RUN sed -i "/server.https=false/c\server.https=true" /opt/yacy_search_server/defaults/yacy.init && \
adduser --system --group --no-create-home --disabled-password yacy && \
chown -R yacy:yacy /opt/yacy_search_server
USER yacy

# Start yacy as a foreground process (-f) to display console logs and to wait for yacy process
CMD ["/bin/sh","/opt/yacy_search_server/startYACY.sh","-f"]
60 changes: 17 additions & 43 deletions docker/Dockerfile.armv7
Original file line number Diff line number Diff line change
@@ -1,56 +1,30 @@
# Build a docker image from latest YaCy sources
# Docker image for YaCy

# Base image : latest Debian stable official jdk 11 image from Docker
FROM arm32v7/openjdk:11-jdk
# build with
# docker build -t yacy/yacy_search_server:armv7-latest -f Dockerfile.armv7 ../

# Install needed packages not in base image
# (curl for sh scripts in /bin, and wkhtmltopdf,imagemagick,xvfb and ghostscript to enable PDF and image snapshot generation)
RUN apt-get update && apt-get install -yq curl wkhtmltopdf imagemagick xvfb ghostscript && \
rm -rf /var/lib/apt/lists/*
# run with
# docker run -d --name yacy -p 8090:8090 -p 8443:8443 -v yacy_data:/opt/yacy_search_server/DATA --log-opt max-size=200m --log-opt max-file=2 yacy/yacy_search_server:armv7-latest

# trace java version
FROM arm32v7/debian
LABEL maintainer="Michael Peter Christen <[email protected]>"

RUN apt-get update && \
apt-get install -yq ca-certificates ca-certificates-java curl wkhtmltopdf imagemagick xvfb ghostscript default-jdk ant git
RUN java -version

# set current working dir
WORKDIR /opt

# All in one step to reduce image size growth :
# - install ant package
# - Compile with ant
# - remove unnecessary and size consuming .git directory
# - remove ant package

# copy sources
COPY . /opt/yacy_search_server/

RUN rm -rf /opt/yacy_search_server/.git && \
apt-get update && \
apt-get install -yq ant && \
ant compile -f /opt/yacy_search_server/build.xml && \
apt-get purge -yq --auto-remove ant && \
apt-get clean && \
rm -rf /var/lib/apt/lists/*
ant compile -f /opt/yacy_search_server/build.xml && \
apt-get purge -yq --auto-remove ant && \
apt-get clean && \
rm -rf /var/lib/apt/lists/*

RUN \
# Set initial admin password: "yacy" (encoded with custom yacy md5 function net.yacy.cora.order.Digest.encodeMD5Hex())
# > java -classpath classes net.yacy.cora.order.Digest -strfhex "admin:The YaCy access is limited to administrators. If you don't know the password, you can change it using <yacy-home>/bin/passwd.sh <new-password>:docker"
sed -i "/adminAccountBase64MD5=/c\adminAccountBase64MD5=MD5:8cffbc0d66567a0987a4aba1ec46d63c" /opt/yacy_search_server/defaults/yacy.init && \
sed -i "/adminAccountForLocalhost=/c\adminAccountForLocalhost=false" /opt/yacy_search_server/defaults/yacy.init && \
# Intially enable HTTPS: this is the most secure option for remote administrator authentication
sed -i "/server.https=false/c\server.https=true" /opt/yacy_search_server/defaults/yacy.init && \
# Create user and group yacy: this user will be used to run YaCy main process
adduser --system --group --no-create-home --disabled-password yacy && \
# Set ownership of yacy install directory to yacy user/group
chown yacy:yacy -R /opt/yacy_search_server

# Expose HTTP and HTTPS default ports
EXPOSE 8090 8443

# Set data volume: yacy data and configuration will persist even after container stop or destruction
VOLUME ["/opt/yacy_search_server/DATA"]

# Next commands run as yacy as non-root user for improved security
RUN sed -i "/server.https=false/c\server.https=true" /opt/yacy_search_server/defaults/yacy.init && \
adduser --system --group --no-create-home --disabled-password yacy && \
chown -R yacy:yacy /opt/yacy_search_server
USER yacy

# Start yacy as a foreground process (-f) to display console logs and to wait for yacy process
CMD ["/bin/sh","/opt/yacy_search_server/startYACY.sh","-f"]

0 comments on commit b9912ff

Please sign in to comment.