blob: 858e23723b8527cabd1f1055634f7f1895191efa (
plain) (
blame)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
|
FROM docker.io/alpine:latest AS base
WORKDIR /root
# Packages we'll keep
RUN apk upgrade --no-cache && \
apk add --no-cache \
git openssh \
python3 py3-pygments \
py3-markdown \
libintl musl-libintl \
zlib \
caddy \
cgit gitolite \
openssl \
dumb-init \
fcgiwrap \
sudo zsh openrc \
libcap
ADD image/prepare-container.sh /usr/local/bin/prepare-container.sh
ADD image/fcgiwrap-launcher /usr/local/bin/fcgiwrap-launcher
RUN chmod +x /usr/local/bin/prepare-container.sh /usr/local/bin/fcgiwrap-launcher
# SSHD config : no password, no strict mode
# Moved by prepare-container.sh
ADD image/sshd_config /etc/sshd_config
# CGIT Config
# Copied by prepare-container.sh
ADD image/cgitrc /etc/cgitrc.default
# Caddy config
ADD image/Caddyfile /etc/caddy/Caddyfile
# Remove SSH keyes, fresh keys will be generated at container startup by prepare-container.sh
RUN rm -rf /etc/ssh/ssh_host_rsa_key /etc/ssh/ssh_host_dsa_key
# Gitolis / Gitolite
RUN adduser -D -g "" -s "/bin/ash" http
RUN addgroup git www-data && addgroup git http
RUN addgroup http www-data && addgroup http git
# We need a password set, otherwise pubkey auth doesn't work... why ?? /sbin/nologin doesn't work either
RUN echo "git:$(openssl rand -hex 4096)" | chpasswd
# Caddy needs CAP_NET_BIND_SERVICE
RUN setcap CAP_NET_BIND_SERVICE=+eip /usr/sbin/caddy
RUN ln -s /var/lib/git/cgitrc /etc/cgitrc
# SSH Keys, Config
VOLUME ["/etc/ssh"]
# Git Directories
VOLUME ["/var/lib/git"]
# CGit
EXPOSE 80
# SSH
EXPOSE 22
ENTRYPOINT ["/usr/bin/dumb-init", "--"]
CMD ["sh", "-c", "/usr/local/bin/prepare-container.sh && sh -c 'sleep 3 && chgrp www-data /run/fcgiwrap/fcgiwrap.sock && chmod g+w /run/fcgiwrap/fcgiwrap.sock && exec sudo -u http /usr/sbin/caddy run --config /etc/caddy/Caddyfile --adapter caddyfile' & /usr/local/bin/fcgiwrap-launcher"]
FROM base AS with-fmt
RUN apk add --no-cache py3-markdown py3-docutils groff
RUN echo 'about-filter=/usr/lib/cgit/filters/about-formatting.sh\
readme=:README.rst\
readme=:readme.rst\
readme=:README.md\
readme=:readme.md\
readme=:README\
readme=:readme\
' >> /etc/cgitrc.default
FROM with-fmt AS with-highlighting
RUN apk add --no-cache highlight
ADD image/syntax-highlighting.sh /usr/lib/cgit/filters/syntax-highlighting-uwu.sh
RUN chmod +x /usr/lib/cgit/filters/syntax-highlighting-uwu.sh
RUN echo 'source-filter=/usr/lib/cgit/filters/syntax-highlighting-uwu.sh' >> /etc/cgitrc.default
|
