Dockerfile

FROM buildpack-deps:stretch

# Setup .bashrc
SHELL ["/bin/bash", "-lc"]
COPY extra.bashrc /tmp
RUN cat /tmp/extra.bashrc | tee -a /root/.bashrc

# Update and install some tools useful for debugging in production
ARG DEBIAN_FRONTEND=noninteractive
RUN apt-get update && \
    apt-get install -y \
        apt-utils \
        && \
    dpkg --configure -a && \
    apt-get upgrade -y && \
    apt-get install -y \
        build-essential \
        procps \
        sysstat \
        htop \
        net-tools \
        dnsutils \
        tcpdump \
        python-pip \
        python-openssl \
        gnupg \
        rsync \
        # These need `--cap-add SYS_PTRACE`, and maybe `--security-opt seccomp:unconfined`
        strace \
        ltrace \
        && \
    apt-get autoremove -y && \
    apt-get autoclean && \
    apt-get clean && \
    rm -rf /var/lib/apt/lists/* && \
    pip install awscli

# Pre-setup some Golang
ENV GOPATH /go
ENV PATH $GOPATH/bin:/usr/local/go/bin:$PATH
RUN mkdir -p "$GOPATH/src" "$GOPATH/bin" && \
    chmod -R 777 "$GOPATH"

# Pre-setup some Nginx
RUN set -x && \
	NGINX_GPGKEY=573BFD6B3D8FBC641079A6ABABF5BD827BD9BF62; \
	NGINX_GPGFOUND=''; \
	for server in \
		ha.pool.sks-keyservers.net \
		hkp://keyserver.ubuntu.com:80 \
		hkp://p80.pool.sks-keyservers.net:80 \
		pgp.mit.edu \
	; do \
		echo "Fetching GPG key $NGINX_GPGKEY from $server"; \
		apt-key adv --keyserver "$server" --recv-keys "$NGINX_GPGKEY" && NGINX_GPGFOUND=yes && break; \
	done; \
	test -z "$NGINX_GPGFOUND" && echo >&2 "error: failed to fetch GPG key $NGINX_GPGKEY" && exit 1; \
    echo "deb http://nginx.org/packages/mainline/debian/ stretch nginx" >> /etc/apt/sources.list

# Pre-setup some Node
RUN mkdir -p /usr/src/app && \
    chmod -R 777 /usr/src/app

# Install nvm
ENV NVM_VERSION 0.33.8
ENV NVM_DIR /usr/local/nvm
RUN curl -o- "https://raw.githubusercontent.com/creationix/nvm/v$NVM_VERSION/install.sh" | NVM_DIR=$NVM_DIR bash
COPY default-packages $NVM_DIR

# Copy install scripts to root
COPY install*.sh /

# HACK - Load extra env vars
# RUN rm -f /bin/sh
# COPY sh.sh /bin/sh

# Automatically update packages in child images
ONBUILD ARG DEBIAN_FRONTEND=noninteractive
ONBUILD RUN \
    apt-get update && \
    apt-get upgrade -y && \
    apt-get autoremove -y && \
    apt-get autoclean && \
    apt-get clean && \
    rm -rf /var/lib/apt/lists/* && \
    pip install --upgrade awscli