ADD alpine-minirootfs-3.24.1-aarch64.tar.gz / # buildkit

CMD ["/bin/sh"]

ENV PHPIZE_DEPS=autoconf dpkg-dev dpkg file g++ gcc libc-dev make pkgconf re2c

RUN /bin/sh -c apk add --no-cache ca-certificates curl openssl tar xz # buildkit

RUN /bin/sh -c set -eux; adduser -u 82 -D -S -G www-data www-data # buildkit

ENV PHP_INI_DIR=/usr/local/etc/php

RUN /bin/sh -c set -eux; mkdir -p "$PHP_INI_DIR/conf.d"; [ ! -d /var/www/html ]; mkdir -p /var/www/html; chown www-data:www-data /var/www/html; chmod 1777 /var/www/html # buildkit

ENV PHP_CFLAGS=-fstack-protector-strong -fpic -fpie -O2 -D_LARGEFILE_SOURCE -D_FILE_OFFSET_BITS=64

ENV PHP_CPPFLAGS=-fstack-protector-strong -fpic -fpie -O2 -D_LARGEFILE_SOURCE -D_FILE_OFFSET_BITS=64

ENV PHP_LDFLAGS=-Wl,-O1 -pie

ENV GPG_KEYS=1198C0117593497A5EC5C199286AF1F9897469DC 49D9AF6BC72A80D6691719C8AA23F5BE9C7097D4 D95C03BC702BE9515344AE3374E44BC9067701A5

ENV PHP_VERSION=8.5.8

ENV PHP_URL=https://www.php.net/distributions/php-8.5.8.tar.xz PHP_ASC_URL=https://www.php.net/distributions/php-8.5.8.tar.xz.asc

ENV PHP_SHA256=58910198d19e873048fe87cdfe16bc790025417ede3d1651bfa1c4b533d573f2

RUN /bin/sh -c set -eux; apk add --no-cache --virtual .fetch-deps gnupg; mkdir -p /usr/src; cd /usr/src; curl -fsSL -o php.tar.xz "$PHP_URL"; if [ -n "$PHP_SHA256" ]; then echo "$PHP_SHA256 *php.tar.xz" | sha256sum -c -; fi; curl -fsSL -o php.tar.xz.asc "$PHP_ASC_URL"; export GNUPGHOME="$(mktemp -d)"; for key in $GPG_KEYS; do gpg --batch --keyserver keyserver.ubuntu.com --recv-keys "$key"; done; gpg --batch --verify php.tar.xz.asc php.tar.xz; gpgconf --kill all; rm -rf "$GNUPGHOME"; apk del --no-network .fetch-deps # buildkit

COPY docker-php-source /usr/local/bin/ # buildkit

RUN /bin/sh -c set -eux; apk add --no-cache --virtual .build-deps $PHPIZE_DEPS argon2-dev coreutils curl-dev gnu-libiconv-dev libsodium-dev libxml2-dev linux-headers oniguruma-dev openssl-dev readline-dev sqlite-dev ; rm -vf /usr/include/iconv.h; export CFLAGS="$PHP_CFLAGS" CPPFLAGS="$PHP_CPPFLAGS" LDFLAGS="$PHP_LDFLAGS" PHP_BUILD_PROVIDER='https://github.com/docker-library/php' PHP_UNAME='Linux - Docker' ; docker-php-source extract; cd /usr/src/php; gnuArch="$(dpkg-architecture --query DEB_BUILD_GNU_TYPE)"; test "$PHP_INI_DIR" != "${PHP_INI_DIR%/php}"; ./configure --build="$gnuArch" --sysconfdir="${PHP_INI_DIR%/php}" --with-config-file-path="$PHP_INI_DIR" --with-config-file-scan-dir="$PHP_INI_DIR/conf.d" --enable-option-checking=fatal --with-mhash --with-pic --enable-mbstring --enable-mysqlnd --with-password-argon2 --with-sodium=shared --with-pdo-sqlite=/usr --with-sqlite3=/usr --with-curl --with-iconv=/usr --with-openssl --with-readline --with-zlib --disable-phpdbg --with-pear --disable-cgi --enable-fpm --with-fpm-user=www-data --with-fpm-group=www-data ; make -j "$(nproc)"; find -type f -name '*.a' -delete; make install; find /usr/local -type f -perm '/0111' -exec sh -euxc ' strip --strip-all "$@" || : ' -- '{}' + ; make clean; cp -v php.ini-* "$PHP_INI_DIR/"; cd /; docker-php-source delete; runDeps="$( scanelf --needed --nobanner --format '%n#p' --recursive /usr/local | tr ',' '\n' | sort -u | awk 'system("[ -e /usr/local/lib/" $1 " ]") == 0 { next } { print "so:" $1 }' )"; apk add --no-cache $runDeps; apk del --no-network .build-deps; pecl update-channels; rm -rf /tmp/pear ~/.pearrc; php --version # buildkit

COPY docker-php-ext-* docker-php-entrypoint /usr/local/bin/ # buildkit

RUN /bin/sh -c docker-php-ext-enable sodium # buildkit

ENTRYPOINT ["docker-php-entrypoint"]

WORKDIR /var/www/html

RUN /bin/sh -c set -eux; cd "${PHP_INI_DIR%/php}"; cp -v php-fpm.conf.default php-fpm.conf; cp -v php-fpm.d/www.conf.default php-fpm.d/www.conf; grep -E '^listen = 127.0.0.1:9000' php-fpm.d/www.conf; sed -ri 's/^(listen = 127.0.0.1:9000)/;\1/' php-fpm.d/www.conf; grep -E '^;listen = 127.0.0.1:9000' php-fpm.d/www.conf; { echo '[global]'; echo 'error_log = /proc/self/fd/2'; echo; echo '; https://github.com/docker-library/php/pull/725#issuecomment-443540114'; echo 'log_limit = 8192'; echo; echo '[www]'; echo '; php-fpm closes STDOUT on startup, so sending logs to /proc/self/fd/1 does not work.'; echo '; https://bugs.php.net/bug.php?id=73886'; echo 'access.log = /proc/self/fd/2'; echo; echo 'clear_env = no'; echo; echo '; Ensure worker stdout and stderr are sent to the main error log.'; echo 'catch_workers_output = yes'; echo 'decorate_workers_output = no'; echo; echo '; default listen address for easy override in later php-fpm.d/*.conf files'; echo 'listen = 9000'; } | tee php-fpm.d/docker.conf; { echo '[global]'; echo 'daemonize = no'; echo; echo '; the [www] ini section below is for backwards compatibility and will be removed in 8.6+'; echo '[www]'; } | tee php-fpm.d/zz-docker.conf; mkdir -p "$PHP_INI_DIR/conf.d"; { echo '; https://github.com/docker-library/php/issues/878#issuecomment-938595965'; echo 'fastcgi.logging = Off'; } > "$PHP_INI_DIR/conf.d/docker-fpm.ini" # buildkit

STOPSIGNAL SIGQUIT

EXPOSE map[9000/tcp:{}]

CMD ["php-fpm"]

RUN /bin/sh -c set -ex; addgroup -g 101 -S nginx && adduser -S -D -H -u 101 -h /var/cache/nginx -s /sbin/nologin -G nginx nginx && apk update && apk upgrade && apk add --no-cache bash rsync supervisor imagemagick imagemagick-pdf imagemagick-jpeg imagemagick-raw imagemagick-tiff imagemagick-heic imagemagick-webp imagemagick-svg ffmpeg tzdata unzip p7zip nginx coreutils openjdk25 poppler-utils && ln -sf /dev/stdout /var/log/nginx/access.log && ln -sf /dev/stderr /var/log/nginx/error.log && mkdir -p /run/nginx && mkdir -p /var/log/supervisor && cp /usr/share/zoneinfo/Asia/Shanghai /etc/localtime && echo "Asia/Shanghai" > /etc/timezone # buildkit

ADD conf/supervisord.conf /etc/supervisord.conf # buildkit

RUN /bin/sh -c rm -Rf /etc/nginx/nginx.conf # buildkit

ADD conf/nginx.conf /etc/nginx/nginx.conf # buildkit

RUN /bin/sh -c mkdir -p /etc/nginx/sites-available/; mkdir -p /etc/nginx/sites-enabled/; mkdir -p /etc/nginx/ssl/; mkdir /var/www/html/; mkdir -p /docker-entrypoint-hooks.d/pre-installation /docker-entrypoint-hooks.d/post-installation /docker-entrypoint-hooks.d/pre-upgrade /docker-entrypoint-hooks.d/post-upgrade /docker-entrypoint-hooks.d/before-starting; chown -R nginx:root /var/www; chmod -R g=u /var/www # buildkit

ADD conf/private-ssl.conf /etc/nginx/sites-available/private-ssl.conf # buildkit

RUN /bin/sh -c set -ex; apk add --no-cache --virtual .build-deps $PHPIZE_DEPS autoconf freetype-dev icu-dev libevent-dev libjpeg-turbo-dev libmcrypt-dev libpng-dev libmemcached-dev libxml2-dev libzip-dev openldap-dev pcre-dev libwebp-dev bzip2-dev gettext-dev curl-dev imagemagick-dev ; docker-php-ext-configure gd --with-freetype --with-jpeg --with-webp; docker-php-ext-configure intl; docker-php-ext-configure ldap; docker-php-ext-install -j "$(nproc)" bcmath exif ftp gd intl ldap pcntl pdo_mysql mysqli zip bz2 gettext ; pecl install imagick-3.8.1; pecl install memcached-3.4.0 --configureoptions 'enable-memcached-igbinary="yes"'; pecl install redis-6.3.0 --configureoptions 'enable-redis-igbinary="yes" enable-redis-zstd="yes" enable-redis-lz4="yes"'; docker-php-ext-enable imagick memcached redis ; rm -r /tmp/pear; runDeps="$( scanelf --needed --nobanner --format '%n#p' --recursive /usr/local/lib/php/extensions | tr ',' '\n' | sort -u | awk 'system("[ -e /usr/local/lib/" $1 " ]") == 0 { next } { print "so:" $1 }' )"; apk add --no-network --virtual .kodbox-phpext-rundeps $runDeps; apk del --no-network .build-deps # buildkit

ENV fpm_conf=/usr/local/etc/php-fpm.d/www.conf

ENV php_vars=/usr/local/etc/php/conf.d/docker-vars.ini

RUN /bin/sh -c { echo 'opcache.enable=1'; echo 'opcache.interned_strings_buffer=32'; echo 'opcache.max_accelerated_files=10000'; echo 'opcache.memory_consumption=128'; echo 'opcache.save_comments=1'; echo 'opcache.revalidate_freq=60'; echo 'opcache.jit=1255'; echo 'opcache.jit_buffer_size=128M'; } > "${PHP_INI_DIR}/conf.d/opcache-recommended.ini"; echo "cgi.fix_pathinfo=1" > ${php_vars} && echo "upload_max_filesize = 512M" >> ${php_vars} && echo "post_max_size = 512M" >> ${php_vars} && echo "memory_limit = 512M" >> ${php_vars} && echo "max_execution_time = 3600" >> ${php_vars} && echo "max_input_time = 3600" >> ${php_vars} && sed -i -e "s/;catch_workers_output\s*=\s*yes/catch_workers_output = yes/g" -e "s/pm.max_children = */pm.max_children = 50/g" -e "s/pm.start_servers = */pm.start_servers = 10/g" -e "s/pm.min_spare_servers = */pm.min_spare_servers = 10/g" -e "s/pm.max_spare_servers = */pm.max_spare_servers = 30/g" -e "s/;pm.max_requests = 500/pm.max_requests = 500/g" -e "s/user = www-data/user = nginx/g" -e "s/group = www-data/group = nginx/g" -e "s/;listen.mode = 0660/listen.mode = 0666/g" -e "s/;listen.owner = www-data/listen.owner = nginx/g" -e "s/;listen.group = www-data/listen.group = nginx/g" -e "s/;listen = 127.0.0.1:9000/listen = \/var\/run\/php-fpm.sock/g" -e "s/^;clear_env = no$/clear_env = no/" ${fpm_conf} # buildkit

VOLUME [/var/www/html]

RUN /bin/sh -c set -ex; curl -fsSL -o kodbox.zip "https://api.box.kodcloud.com/?app/version&download=server.link"; unzip kodbox.zip -d /usr/src/kodbox/; curl -fsSL -o update.zip "https://api.box.kodcloud.com/?app/version&download=server.linkUpdate"; mv update.zip /usr/src/kodbox/; sed -i "s/MyISAM/InnoDB/g" /usr/src/kodbox/app/controller/install/data/mysql.sql; rm kodbox.zip # buildkit

COPY webdavNextcloud /usr/src/kodbox/plugins/webdavNextcloud # buildkit

COPY entrypoint.sh / # buildkit

EXPOSE [443/tcp 80/tcp]

ENTRYPOINT ["/entrypoint.sh"]

CMD ["supervisord" "-n" "-c" "/etc/supervisord.conf"]