Skip to content

Commit

Permalink
chore: refactor docker-entrypoint.sh scripts
Browse files Browse the repository at this point in the history
  • Loading branch information
@janosmiko
janosmiko committed Dec 2, 2024
1 parent 4a8da59 commit 485ea65
Show file tree
Hide file tree
Showing 9 changed files with 1,391 additions and 610 deletions.
216 changes: 149 additions & 67 deletions images/php-fpm-rootless/base/context/rootfs/docker-entrypoint.sh
View file
Original file line number Diff line number Diff line change
Expand Up @@ -4,121 +4,203 @@ set -e
version_gt() { test "$(printf "%s\n" "${@#v}" | sort -V | head -n 1)" != "${1#v}"; }

shopt -s expand_aliases
if [ -f "${HOME}/.bash_alias" ]; then
if [[ -f "${HOME}/.bash_alias" ]]; then
source "${HOME}/.bash_alias"
fi

# PHP
PHP_PREFIX="$HOME/.local/etc/php"
PHP_PREFIX_LONG="${PHP_PREFIX}/${PHP_VERSION}"

mkdir -p "${PHP_PREFIX_LONG}/mods-available" "${PHP_PREFIX_LONG}/cli/conf.d" "${PHP_PREFIX_LONG}/fpm/conf.d" "${PHP_PREFIX_LONG}/fpm/pool.d"
configure_php() {
local PHP_PREFIX="${PHP_PREFIX:-$HOME/.local/etc/php}"
local PHP_PREFIX_LONG="${PHP_PREFIX}/${PHP_VERSION?required}"

prepare_php_directories
configure_php_settings
configure_php_opcache
configure_php_cli
configure_php_fpm
configure_php_fpm_pool
configure_php_xdebug
configure_php_blackfire
configure_php_spx
}

prepare_php_directories() {
mkdir -p "${PHP_PREFIX_LONG}/mods-available" "${PHP_PREFIX_LONG}/cli/conf.d" "${PHP_PREFIX_LONG}/fpm/conf.d" "${PHP_PREFIX_LONG}/fpm/pool.d"
}

configure_php_settings() {
if [[ ! -f "${PHP_PREFIX}/mods-available/docker.ini.template" ]]; then
return 0
fi

# Configure PHP Global Settings
if [ -f "${PHP_PREFIX}/mods-available/docker.ini.template" ]; then
gomplate <"${PHP_PREFIX}/mods-available/docker.ini.template" >"${PHP_PREFIX_LONG}/mods-available/docker.ini"
phpenmod docker
fi
}

configure_php_opcache() {
if [[ ! -f "${PHP_PREFIX}/mods-available/opcache.ini.template" ]]; then
return 0
fi

# Configure PHP Opcache
if [ -f "${PHP_PREFIX}/mods-available/opcache.ini.template" ]; then
gomplate <"${PHP_PREFIX}/mods-available/opcache.ini.template" >"${PHP_PREFIX_LONG}/mods-available/opcache.ini"
phpenmod opcache
fi
}

configure_php_cli() {
if [[ ! -f "${PHP_PREFIX}/cli/conf.d/php-cli.ini.template" ]]; then
return 0
fi

# Configure PHP Cli
if [ -f "${PHP_PREFIX}/cli/conf.d/php-cli.ini.template" ]; then
gomplate <"${PHP_PREFIX}/cli/conf.d/php-cli.ini.template" >"${PHP_PREFIX_LONG}/cli/conf.d/php-cli.ini"
fi
}

configure_php_fpm() {
if [[ ! -f "${PHP_PREFIX}/fpm/conf.d/php-fpm.ini.template" ]]; then
return 0
fi

# Configure PHP-FPM
if [ -f "${PHP_PREFIX}/fpm/conf.d/php-fpm.ini.template" ]; then
gomplate <"${PHP_PREFIX}/fpm/conf.d/php-fpm.ini.template" >"${PHP_PREFIX_LONG}/fpm/conf.d/php-fpm.ini"
fi
}

configure_php_fpm_pool() {
if [[ ! -f "${PHP_PREFIX}/fpm/pool.d/zz-docker.conf.template" ]]; then
return 0
fi

# Configure PHP-FPM Pool
if [ -f "${PHP_PREFIX}/fpm/pool.d/zz-docker.conf.template" ]; then
gomplate <"${PHP_PREFIX}/fpm/pool.d/zz-docker.conf.template" >"${PHP_PREFIX_LONG}/fpm/pool.d/zz-docker.conf"
fi
}

configure_php_xdebug() {
if [[ ! -f "${PHP_PREFIX}/mods-available/xdebug.ini.template" ]]; then
return 0
fi

# Configure PHP XDebug
if [ -f "${PHP_PREFIX}/mods-available/xdebug.ini.template" ]; then
gomplate <"${PHP_PREFIX}/mods-available/xdebug.ini.template" >"${PHP_PREFIX_LONG}/mods-available/xdebug.ini"
phpenmod xdebug
fi
}

configure_php_blackfire() {
if [[ ! -f "${PHP_PREFIX}/mods-available/blackfire.ini.template" ]]; then
return 0
fi

# Configure PHP Blackfire
if [ -f "${PHP_PREFIX}/mods-available/blackfire.ini.template" ]; then
gomplate <"${PHP_PREFIX}/mods-available/blackfire.ini.template" >"${PHP_PREFIX_LONG}/mods-available/blackfire.ini"
phpenmod blackfire
fi
}

configure_php_spx() {
if [[ ! -f "${PHP_PREFIX}/mods-available/spx.ini.template" ]]; then
return 0
fi

# Configure PHP SPX
if [ -f "${PHP_PREFIX}/mods-available/spx.ini.template" ]; then
gomplate <"${PHP_PREFIX}/mods-available/spx.ini.template" >"${PHP_PREFIX_LONG}/mods-available/spx.ini"
phpenmod spx
fi
}

configure_reward_root_certificate() {
if [[ ! -f /etc/ssl/reward-rootca-cert/ca.cert.pem ]]; then
return 0
fi

# Update Reward Root Certificate if exist
if [ -f /etc/ssl/reward-rootca-cert/ca.cert.pem ]; then
cp /etc/ssl/reward-rootca-cert/ca.cert.pem /usr/local/share/ca-certificates/reward-rootca-cert.pem
update-ca-certificates
fi
}

configure_msmtp() {
if [[ ! -f "${HOME}/msmtprc.template" ]]; then
return 0
fi

if [ -f "${HOME}/msmtprc.template" ]; then
gomplate <"${HOME}/msmtprc.template" >"${HOME}/.msmtprc"
chmod 600 "${HOME}/.msmtprc"
fi
}

# Start Cron
cron

# start socat process in background to connect sockets used for agent access within container environment
# shellcheck disable=SC2039
if [ -S /run/host-services/ssh-auth.sock ] && [ "${SSH_AUTH_SOCK}" != "/run/host-services/ssh-auth.sock" ]; then
bash -c "nohup socat UNIX-CLIENT:/run/host-services/ssh-auth.sock \
UNIX-LISTEN:${SSH_AUTH_SOCK},fork,user=www-data,group=www-data 1>/var/log/socat-ssh-auth.log 2>&1 &"
fi
configure_node_version() {
NODE_INSTALLED="$(node -v | perl -pe 's/^v([0-9]+)\..*$/$1/')"
if [[ "${NODE_INSTALLED}" == "${NODE_VERSION}" ]]; then
return 0
fi

# Install requested node version if not already installed
NODE_INSTALLED="$(node -v | perl -pe 's/^v([0-9]+)\..*$/$1/')"
if [ "${NODE_INSTALLED}" -ne "${NODE_VERSION}" ] || [ "${NODE_VERSION}" = "latest" ] || [ "${NODE_VERSION}" = "lts" ]; then
n install "${NODE_VERSION}"
fi
}

configure_composer_version() {
if [[ "${COMPOSER_VERSION:-}" == "1" ]]; then
alternatives --altdir ~/.local/etc/alternatives --admindir ~/.local/var/lib/alternatives --set composer "${HOME}/.local/bin/composer1"
return $?
fi

if [[ "${COMPOSER_VERSION:-}" == "2" ]]; then
alternatives --altdir ~/.local/etc/alternatives --admindir ~/.local/var/lib/alternatives --set composer "${HOME}/.local/bin/composer2"
return $?
fi

# Configure composer version
if [ "${COMPOSER_VERSION:-}" = "1" ]; then
alternatives --altdir ~/.local/etc/alternatives --admindir ~/.local/var/lib/alternatives --set composer "${HOME}/.local/bin/composer1"
elif [ "${COMPOSER_VERSION:-}" = "2" ]; then
alternatives --altdir ~/.local/etc/alternatives --admindir ~/.local/var/lib/alternatives --set composer "${HOME}/.local/bin/composer2"
else
if version_gt "${COMPOSER_VERSION:-}" "2.0"; then
alternatives --altdir ~/.local/etc/alternatives --admindir ~/.local/var/lib/alternatives --set composer "${HOME}/.local/bin/composer2"
composer self-update "${COMPOSER_VERSION:-}"
fi
fi
}

start_socat() {
# start socat process in background to connect sockets used for agent access within container environment
# shellcheck disable=SC2039
if [[ ! -S /run/host-services/ssh-auth.sock ]] || [[ "${SSH_AUTH_SOCK}" == "/run/host-services/ssh-auth.sock" ]]; then
return 0
fi

bash -c "nohup socat UNIX-CLIENT:/run/host-services/ssh-auth.sock \
UNIX-LISTEN:${SSH_AUTH_SOCK},fork,user=www-data,group=www-data 1>/var/log/socat-ssh-auth.log 2>&1 &"
}

configure_cron() {
if [[ "${CRON_ENABLED:-false}" != "true" ]]; then
return 0
fi

if [ "${CRON_ENABLED:-false}" = "true" ]; then
printf "PATH=/home/www-data/.composer/vendor/bin:/home/www-data/bin:/home/www-data/.local/bin:/var/www/html/node_modules/.bin:/home/www-data/node_modules/.bin:/home/www-data/.local/bin:/usr/local/sbin:/usr/local/bin:/sbin:/bin:/usr/sbin:/usr/bin\nSHELL=/bin/bash\n" |
crontab -u www-data -

# If CRONJOBS is set, write it to the crontab
if [ -n "${CRONJOBS}" ]; then
if [[ -n "${CRONJOBS:-}" ]]; then
crontab -l -u www-data |
{
cat
printf "%s\n" "${CRONJOBS}"
printf "%s\n" "${CRONJOBS:-}"
} |
crontab -u www-data -
fi
fi
}

# If the first arg is `-D` or `--some-option` pass it to php-fpm.
if [ "${1#-}" != "$1" ] || [ "${1#-}" != "$1" ]; then
set -- php-fpm "$@"
# If the first arg is php-fpm call it normally.
else
set -- "$@"
fi
start_cron() {
if [[ "${CRON_ENABLED:-false}" == "true" ]]; then
cron
fi
}

main() {
configure_php
configure_reward_root_certificate
configure_msmtp
configure_node_version
configure_composer_version

start_socat

configure_cron
start_cron

# If the first arg is `-D` or `--some-option` pass it to php-fpm.
if [[ "${1#-}" != "$1" ]] || [[ "${1#-}" != "$1" ]]; then
set -- php-fpm "$@"
# If the first arg is php-fpm call it normally.
else
set -- "$@"
fi

exec "$@"
exec "$@"
}

(return 0 2>/dev/null) && sourced=1

if [[ -z "${sourced:-}" ]]; then
main "$@"
fi
Loading

0 comments on commit 485ea65

Please sign in to comment.