mirror of
https://github.com/Suwayomi/docker-tachidesk.git
synced 2025-12-10 06:42:12 +01:00
29ee3410bc
* Merge basic install layers * Move `TACHIDESK_RELEASE_DOWNLOAD_URL` to where it's needed This improves cachability, because the `ARG` taints all layers following it. Since we change this arg for every release, the whole container had to be rebuilt and redownloaded, when only the layer with the actual jar file needs it. * Move `ARG`s to the latest layer we can `ARG`s taint every layer following, so move the `LABEL` to the last layer, and the JAR download to the second-to-last, allowing for caching of every layer except those two. * Merge user creation layers and move `chmod` The `chmod` needs to be after all copy and download if we want to avoid permission problems (previous commit was not functional at runtime due to insufficient permissions). This way, the files will be owned by the correct user, and readable by all, while not creating unnecessary layers.
103 lines
4.3 KiB
Docker
103 lines
4.3 KiB
Docker
FROM eclipse-temurin:21.0.8_9-jdk-noble AS build
|
|
|
|
ARG TACHIDESK_ABORT_HANDLER_DOWNLOAD_URL
|
|
|
|
# build abort handler
|
|
RUN if [ -n "$TACHIDESK_ABORT_HANDLER_DOWNLOAD_URL" ]; then \
|
|
cd /tmp && \
|
|
curl "$TACHIDESK_ABORT_HANDLER_DOWNLOAD_URL" -O && \
|
|
apt-get update && \
|
|
apt-get -y install gcc && \
|
|
gcc -fPIC -I$JAVA_HOME/include -I$JAVA_HOME/include/linux -shared catch_abort.c -lpthread -o /opt/catch_abort.so && \
|
|
rm -f catch_abort.c && \
|
|
apt-get -y purge gcc --auto-remove && \
|
|
apt-get clean && \
|
|
rm -rf /var/lib/apt/lists/* || exit 1; \
|
|
fi
|
|
|
|
FROM eclipse-temurin:21.0.8_9-jre-noble
|
|
|
|
ARG TARGETPLATFORM
|
|
ARG TACHIDESK_KCEF=y # y or n, leave empty for auto-detection
|
|
ARG TACHIDESK_KCEF_RELEASE_URL
|
|
|
|
# Install envsubst from GNU's gettext project
|
|
# install unzip to unzip the server-reference.conf from the jar
|
|
# Install tini for a tiny init system (handles orphan processes for graceful restart)
|
|
RUN apt-get update && \
|
|
apt-get -y install -y gettext-base unzip tini ca-certificates p11-kit && \
|
|
/usr/bin/p11-kit extract --format=java-cacerts --filter=certificates --overwrite --purpose server-auth $JAVA_HOME/lib/security/cacerts && \
|
|
apt-get clean && \
|
|
rm -rf /var/lib/apt/lists/*
|
|
|
|
COPY scripts/kcef_download.sh /root/kcef_download.sh
|
|
|
|
# install CEF dependencies
|
|
RUN if [ "$TACHIDESK_KCEF" = "y" ] || ([ "$TACHIDESK_KCEF" = "" ] && ([ "$TARGETPLATFORM" = "linux/amd64" ] || [ "$TARGETPLATFORM" = "linux/arm64" ])); then \
|
|
apt-get update && \
|
|
apt-get -y install --no-install-recommends -y libxss1 libxext6 libxrender1 libxcomposite1 libxdamage1 libxkbcommon0 libxtst6 \
|
|
libjogl2-jni libgluegen2-jni libglib2.0-0t64 libnss3 libdbus-1-3 libpango-1.0-0 libcairo2 libasound2t64 \
|
|
libatk-bridge2.0-0t64 libcups2t64 libdrm2 libgbm1 xvfb \
|
|
curl jq gawk findutils && \
|
|
/root/kcef_download.sh "$TACHIDESK_KCEF_RELEASE_URL" "$TARGETPLATFORM" && \
|
|
apt-get clean && \
|
|
rm -rf /var/lib/apt/lists/* || exit 1; \
|
|
fi
|
|
|
|
COPY --from=build /opt/*.so /opt/
|
|
|
|
# Create a user to run as
|
|
# .X11-unix must be created by root
|
|
# Ubuntu exposes libgluegen_rt.so as libgluegen2_rt.so for some reason, so rename it
|
|
# JCEF (or Java?) also does not search /usr/lib/jni, so copy them over into one it will search
|
|
RUN userdel -r ubuntu && \
|
|
groupadd --gid 1000 suwayomi && \
|
|
useradd --uid 1000 --gid suwayomi --no-log-init -G audio,video suwayomi && \
|
|
mkdir -p /home/suwayomi/.local/share/Tachidesk && \
|
|
if command -v Xvfb; then \
|
|
mkdir /tmp/.X11-unix && chmod 1777 /tmp/.X11-unix && \
|
|
cp /usr/lib/jni/libgluegen2_rt.so libgluegen_rt.so && \
|
|
cp /usr/lib/jni/*.so ./; \
|
|
fi
|
|
|
|
COPY scripts/create_server_conf.sh /home/suwayomi/create_server_conf.sh
|
|
COPY scripts/startup_script.sh /home/suwayomi/startup_script.sh
|
|
|
|
ARG TACHIDESK_RELEASE_DOWNLOAD_URL
|
|
# Copy the app into the container
|
|
# then update permissions of files.
|
|
# we grant o+rwx because we need to allow non default UIDs (eg via docker run ... --user)
|
|
# to write to the directory to generate the server.conf
|
|
RUN curl -s --create-dirs -L $TACHIDESK_RELEASE_DOWNLOAD_URL -o /home/suwayomi/startup/tachidesk_latest.jar && \
|
|
chmod 777 -R /home/suwayomi && \
|
|
chown -R suwayomi:suwayomi /home/suwayomi
|
|
|
|
ARG BUILD_DATE
|
|
ARG TACHIDESK_RELEASE_TAG
|
|
ARG TACHIDESK_FILENAME
|
|
ARG TACHIDESK_DOCKER_GIT_COMMIT
|
|
LABEL maintainer="suwayomi" \
|
|
org.opencontainers.image.title="Suwayomi Docker" \
|
|
org.opencontainers.image.authors="https://github.com/suwayomi" \
|
|
org.opencontainers.image.url="https://github.com/suwayomi/docker-tachidesk/pkgs/container/tachidesk" \
|
|
org.opencontainers.image.source="https://github.com/suwayomi/docker-tachidesk" \
|
|
org.opencontainers.image.description="This image is used to start suwayomi server in a container" \
|
|
org.opencontainers.image.vendor="suwayomi" \
|
|
org.opencontainers.image.created=$BUILD_DATE \
|
|
org.opencontainers.image.version=$TACHIDESK_RELEASE_TAG \
|
|
tachidesk.docker_commit=$TACHIDESK_DOCKER_GIT_COMMIT \
|
|
tachidesk.release_tag=$TACHIDESK_RELEASE_TAG \
|
|
tachidesk.filename=$TACHIDESK_FILENAME \
|
|
download_url=$TACHIDESK_RELEASE_DOWNLOAD_URL \
|
|
org.opencontainers.image.licenses="MPL-2.0"
|
|
|
|
ENV HOME=/home/suwayomi
|
|
WORKDIR /home/suwayomi
|
|
USER suwayomi
|
|
EXPOSE 4567
|
|
|
|
ENTRYPOINT ["tini", "--"]
|
|
CMD ["/home/suwayomi/startup_script.sh"]
|
|
|
|
# vim: set ft=dockerfile:
|