mirror of
https://github.com/ansible/awx.git
synced 2026-01-11 10:00:01 -03:30
4da0e0dd80
kubectl and synchronize are now part of community.kubernetes and ansible.posix collections, respectively. This change installs these collections to a local directory to be used in inventory and isolated management playbooks. awx issue #6930
142 lines
4.7 KiB
Docker
142 lines
4.7 KiB
Docker
FROM centos:8
|
|
|
|
ARG UID=0
|
|
|
|
ENV LANG en_US.UTF-8
|
|
ENV LANGUAGE en_US:en
|
|
ENV LC_ALL en_US.UTF-8
|
|
|
|
ADD tools/docker-compose/ansible_nightly.repo /etc/yum.repos.d/ansible_nightly.repo
|
|
ADD tools/docker-compose/google-cloud-sdk.repo /etc/yum.repos.d/
|
|
ADD tools/docker-compose/rsyslog.repo /etc/yum.repos.d/
|
|
|
|
# sync with installer/roles/image_build/templates/Dockerfile.j2
|
|
RUN dnf -y update && \
|
|
dnf -y install https://github.com/krallin/tini/releases/download/v0.18.0/tini_0.18.0.rpm && \
|
|
dnf -y install epel-release 'dnf-command(config-manager)' && \
|
|
dnf module -y enable 'postgresql:10' && \
|
|
dnf config-manager --set-enabled PowerTools && \
|
|
dnf -y install acl \
|
|
ansible \
|
|
bubblewrap \
|
|
curl \
|
|
diffutils \
|
|
dnf-utils \
|
|
gcc \
|
|
gcc-c++ \
|
|
gettext \
|
|
git-core \
|
|
glibc-langpack-en \
|
|
krb5-workstation \
|
|
kubectl \
|
|
libcurl-devel \
|
|
libffi-devel \
|
|
libstdc++.so.6 \
|
|
libtool-ltdl-devel \
|
|
libcgroup-tools \
|
|
make \
|
|
mercurial \
|
|
nginx \
|
|
nodejs \
|
|
nss \
|
|
openldap-devel \
|
|
openssh-server \
|
|
patch \
|
|
@postgresql:10 \
|
|
postgresql-devel \
|
|
python3-devel \
|
|
python3-libselinux \
|
|
python3-pip \
|
|
python3-psycopg2 \
|
|
python3-setuptools \
|
|
python3-pycurl \
|
|
rsync \
|
|
rsyslog-omhttp \
|
|
subversion \
|
|
sudo \
|
|
swig \
|
|
tmux \
|
|
unzip \
|
|
vim-minimal \
|
|
which \
|
|
xmlsec1 \
|
|
xmlsec1-devel \
|
|
xmlsec1-openssl \
|
|
xmlsec1-openssl-devel
|
|
|
|
# Dev dependencies / UI tests only, do not put in installer/roles/image_build/templates/Dockerfile.j2
|
|
RUN dnf -y install \
|
|
gtk3 \
|
|
alsa-lib \
|
|
libX11-xcb \
|
|
libXScrnSaver \
|
|
strace \
|
|
vim \
|
|
nmap-ncat
|
|
|
|
RUN /usr/bin/ssh-keygen -q -t rsa -N "" -f /root/.ssh/id_rsa && \
|
|
openssl req -nodes -newkey rsa:2048 -keyout /etc/nginx/nginx.key -out /etc/nginx/nginx.csr \
|
|
-subj "/C=US/ST=North Carolina/L=Durham/O=Ansible/OU=AWX Development/CN=awx.localhost" && \
|
|
openssl x509 -req -days 365 -in /etc/nginx/nginx.csr -signkey /etc/nginx/nginx.key -out /etc/nginx/nginx.crt && \
|
|
chmod 640 /etc/nginx/nginx.{csr,key,crt}
|
|
|
|
RUN python3 -m ensurepip && pip3 install "virtualenv < 20" flake8 supervisor
|
|
|
|
# Install Requirements
|
|
ADD Makefile /tmp/Makefile
|
|
RUN mkdir /tmp/requirements
|
|
ADD requirements/requirements.txt \
|
|
requirements/requirements_git.txt \
|
|
requirements/requirements_ansible.txt \
|
|
requirements/requirements_ansible_git.txt \
|
|
requirements/requirements_dev.txt \
|
|
requirements/requirements_ansible_uninstall.txt \
|
|
requirements/requirements_tower_uninstall.txt \
|
|
requirements/collections_requirements.yml \
|
|
/tmp/requirements/
|
|
RUN mkdir -p /venv && chmod g+w /venv
|
|
RUN cd /tmp && VENV_BASE="/venv" make requirements_dev
|
|
RUN mkdir -p /vendor/awx_ansible_collections && chmod g+w /vendor/awx_ansible_collections
|
|
RUN cd /tmp && COLLECTION_BASE="/vendor/awx_ansible_collections" make requirements_collections
|
|
|
|
# Use the distro provided npm to bootstrap our required version of node
|
|
RUN npm install -g n && n 10.15.0 && dnf remove -y nodejs
|
|
|
|
# Install OpenShift CLI
|
|
RUN cd /usr/local/bin && \
|
|
curl -L https://github.com/openshift/origin/releases/download/v3.9.0/openshift-origin-client-tools-v3.9.0-191fece-linux-64bit.tar.gz | \
|
|
tar -xz --strip-components=1 --wildcards --no-anchored 'oc'
|
|
|
|
RUN dnf -y clean all && rm -rf /root/.cache
|
|
|
|
# https://github.com/ansible/awx/issues/5224
|
|
RUN chmod u+s /usr/bin/bwrap
|
|
|
|
ADD tools/docker-compose/awx.egg-link /tmp/awx.egg-link
|
|
ADD tools/docker-compose/awx-manage /usr/local/bin/awx-manage
|
|
ADD tools/docker-compose/awx.egg-info /tmp/awx.egg-info
|
|
ADD tools/docker-compose/nginx.conf /etc/nginx/nginx.conf
|
|
ADD tools/docker-compose/nginx.vh.default.conf /etc/nginx/conf.d/nginx.vh.default.conf
|
|
ADD tools/docker-compose/launch_awx.sh /usr/bin/launch_awx.sh
|
|
ADD tools/docker-compose/start_tests.sh /start_tests.sh
|
|
ADD tools/docker-compose/bootstrap_development.sh /usr/bin/bootstrap_development.sh
|
|
ADD tools/docker-compose/entrypoint.sh /
|
|
ADD tools/docker-compose/rsyslog.conf /var/lib/awx/rsyslog/rsyslog.conf
|
|
ADD tools/scripts/awx-python /usr/bin/awx-python
|
|
|
|
# Pre-create things that we need to write to / fix up permissions
|
|
RUN for dir in /var/lib/awx /var/lib/awx/rsyslog /var/lib/awx/rsyslog/conf.d /var/run/awx-rsyslog /var/log/tower/ /var/lib/awx/projects /.ansible /var/log/nginx /var/lib/nginx /.local /vendor; \
|
|
do mkdir -p $dir; chmod -R g+rwx $dir; chgrp -R root $dir; done && \
|
|
\
|
|
for file in /etc/passwd /etc/supervisord.conf /venv/awx/lib/python3.6/site-packages/awx.egg-link /var/run/nginx.pid; \
|
|
do touch $file; chmod -R g+rwx $file; chgrp -R root $file; done
|
|
|
|
ENV HOME /var/lib/awx
|
|
ENV PATH="/usr/local/n/versions/node/10.15.0/bin:${PATH}"
|
|
ENV PATH="/usr/pgsql-10/bin:${PATH}"
|
|
|
|
EXPOSE 8043 8013 8080 22
|
|
|
|
ENTRYPOINT ["/entrypoint.sh"]
|
|
CMD ["/bin/bash"]
|