mirror of
https://github.com/ansible/awx.git
synced 2026-01-09 23:12:08 -03:30
71a11ea3ad
Linking launch script and supervisor conf file in kube development environment so we no longer have to rebuild kube devel images for superviosr conf file and launch script changes
317 lines
10 KiB
Django/Jinja
317 lines
10 KiB
Django/Jinja
### This file is generated from
|
|
### tools/ansible/roles/dockerfile/templates/Dockerfile.j2
|
|
###
|
|
### DO NOT EDIT
|
|
###
|
|
|
|
# Build container
|
|
FROM quay.io/centos/centos:stream9 as builder
|
|
|
|
ENV LANG en_US.UTF-8
|
|
ENV LANGUAGE en_US:en
|
|
ENV LC_ALL en_US.UTF-8
|
|
ENV AWX_LOGGING_MODE stdout
|
|
|
|
|
|
USER root
|
|
|
|
# Import the gpg key for DNF to work
|
|
RUN rpm --import /etc/pki/rpm-gpg/RPM-GPG-KEY-centosofficial
|
|
|
|
# Install build dependencies
|
|
RUN dnf -y update && dnf install -y 'dnf-command(config-manager)' && \
|
|
dnf config-manager --set-enabled crb && \
|
|
dnf -y install \
|
|
gcc \
|
|
gcc-c++ \
|
|
git-core \
|
|
gettext \
|
|
glibc-langpack-en \
|
|
libffi-devel \
|
|
libtool-ltdl-devel \
|
|
make \
|
|
{% if not headless|bool %}
|
|
nodejs \
|
|
{% endif %}
|
|
nss \
|
|
openldap-devel \
|
|
patch \
|
|
postgresql \
|
|
postgresql-devel \
|
|
python3-devel \
|
|
python3-pip \
|
|
python3-psycopg2 \
|
|
python3-setuptools \
|
|
swig \
|
|
unzip \
|
|
xmlsec1-devel \
|
|
xmlsec1-openssl-devel
|
|
|
|
RUN pip3 install virtualenv build
|
|
|
|
{% if image_architecture == 'ppc64le' %}
|
|
RUN dnf -y update && dnf install -y wget && \
|
|
wget https://static.rust-lang.org/dist/rust-1.41.0-powerpc64le-unknown-linux-gnu.tar.gz && \
|
|
tar -zxvf rust-1.41.0-powerpc64le-unknown-linux-gnu.tar.gz && \
|
|
cd rust-1.41.0-powerpc64le-unknown-linux-gnu && \
|
|
sh install.sh ;
|
|
{% endif %}
|
|
|
|
# Install & build requirements
|
|
ADD Makefile /tmp/Makefile
|
|
RUN mkdir /tmp/requirements
|
|
ADD requirements/requirements.txt \
|
|
requirements/requirements_tower_uninstall.txt \
|
|
requirements/requirements_git.txt \
|
|
/tmp/requirements/
|
|
|
|
RUN cd /tmp && make requirements_awx
|
|
|
|
ARG VERSION
|
|
ARG SETUPTOOLS_SCM_PRETEND_VERSION
|
|
ARG HEADLESS
|
|
|
|
{% if (build_dev|bool) or (kube_dev|bool) %}
|
|
ADD requirements/requirements_dev.txt /tmp/requirements
|
|
RUN cd /tmp && make requirements_awx_dev
|
|
{% else %}
|
|
# Use the distro provided npm to bootstrap our required version of node
|
|
|
|
{% if not headless|bool %}
|
|
RUN npm install -g n && n 16.13.1
|
|
{% endif %}
|
|
|
|
# Copy source into builder, build sdist, install it into awx venv
|
|
COPY . /tmp/src/
|
|
WORKDIR /tmp/src/
|
|
RUN make sdist && /var/lib/awx/venv/awx/bin/pip install dist/awx.tar.gz
|
|
|
|
{% if not headless|bool %}
|
|
RUN AWX_SETTINGS_FILE=/dev/null SKIP_SECRET_KEY_CHECK=yes SKIP_PG_VERSION_CHECK=yes /var/lib/awx/venv/awx/bin/awx-manage collectstatic --noinput --clear
|
|
{% endif %}
|
|
|
|
{% endif %}
|
|
|
|
# Final container(s)
|
|
FROM quay.io/centos/centos:stream9
|
|
|
|
ENV LANG en_US.UTF-8
|
|
ENV LANGUAGE en_US:en
|
|
ENV LC_ALL en_US.UTF-8
|
|
ENV AWX_LOGGING_MODE stdout
|
|
|
|
USER root
|
|
|
|
# Import the gpg key for DNF to work
|
|
RUN rpm --import /etc/pki/rpm-gpg/RPM-GPG-KEY-centosofficial
|
|
|
|
# Install runtime requirements
|
|
RUN dnf -y update && dnf install -y 'dnf-command(config-manager)' && \
|
|
dnf config-manager --set-enabled crb && \
|
|
dnf -y install acl \
|
|
git-core \
|
|
git-lfs \
|
|
glibc-langpack-en \
|
|
krb5-workstation \
|
|
nginx \
|
|
"openldap >= 2.6.2-3" \
|
|
postgresql \
|
|
python3-devel \
|
|
python3-libselinux \
|
|
python3-pip \
|
|
python3-psycopg2 \
|
|
python3-setuptools \
|
|
rsync \
|
|
rsyslog-8.2102.0-106.el9 \
|
|
subversion \
|
|
sudo \
|
|
vim-minimal \
|
|
which \
|
|
unzip \
|
|
xmlsec1-openssl && \
|
|
dnf -y clean all
|
|
|
|
RUN pip3 install virtualenv supervisor dumb-init
|
|
|
|
RUN rm -rf /root/.cache && rm -rf /tmp/*
|
|
|
|
{% if (build_dev|bool) or (kube_dev|bool) %}
|
|
# Install development/test requirements
|
|
RUN dnf -y install \
|
|
crun \
|
|
gdb \
|
|
gtk3 \
|
|
gettext \
|
|
hostname \
|
|
procps \
|
|
alsa-lib \
|
|
libX11-xcb \
|
|
libXScrnSaver \
|
|
iproute \
|
|
strace \
|
|
vim \
|
|
nmap-ncat \
|
|
libpq-devel \
|
|
nodejs \
|
|
nss \
|
|
make \
|
|
patch \
|
|
socat \
|
|
tmux \
|
|
wget \
|
|
diffutils \
|
|
unzip && \
|
|
npm install -g n && n 16.13.1 && npm install -g npm@8.5.0 && dnf remove -y nodejs
|
|
|
|
RUN pip3 install black git+https://github.com/coderanger/supervisor-stdout setuptools-scm
|
|
|
|
# This package randomly fails to download.
|
|
# It is nice to have in the dev env, but not necessary.
|
|
# Add it back to the list above if the repo ever straighten up.
|
|
RUN dnf --enablerepo=baseos-debug -y install python3-debuginfo || :
|
|
|
|
RUN dnf install -y epel-next-release && dnf install -y inotify-tools && dnf remove -y epel-next-release
|
|
{% endif %}
|
|
|
|
# Copy app from builder
|
|
COPY --from=builder /var/lib/awx /var/lib/awx
|
|
|
|
RUN ln -s /var/lib/awx/venv/awx/bin/awx-manage /usr/bin/awx-manage
|
|
|
|
{%if build_dev|bool %}
|
|
COPY --from={{ receptor_image }} /usr/bin/receptor /usr/bin/receptor
|
|
|
|
RUN openssl req -nodes -newkey rsa:2048 -keyout /etc/nginx/nginx.key -out /etc/nginx/nginx.csr \
|
|
-subj "/C=US/ST=North Carolina/L=Durham/O=Ansible/OU=AWX Development/CN=awx.localhost" && \
|
|
openssl x509 -req -days 365 -in /etc/nginx/nginx.csr -signkey /etc/nginx/nginx.key -out /etc/nginx/nginx.crt && \
|
|
chmod 640 /etc/nginx/nginx.{csr,key,crt}
|
|
{% endif %}
|
|
|
|
{% if build_dev|bool %}
|
|
RUN dnf install -y podman && rpm --restore shadow-utils 2>/dev/null
|
|
|
|
# chmod containers.conf and adjust storage.conf to enable Fuse storage.
|
|
RUN sed -i -e 's|^#mount_program|mount_program|g' -e '/additionalimage.*/a "/var/lib/shared",' -e 's|^mountopt[[:space:]]*=.*$|mountopt = "nodev,fsync=0"|g' /etc/containers/storage.conf
|
|
|
|
ENV _CONTAINERS_USERNS_CONFIGURED=""
|
|
|
|
# Ensure we must use fully qualified image names
|
|
# This prevents podman prompt that hangs when trying to pull unqualified images
|
|
RUN mkdir -p /etc/containers/registries.conf.d/ && echo "unqualified-search-registries = []" >> /etc/containers/registries.conf.d/force-fully-qualified-images.conf && chmod 644 /etc/containers/registries.conf.d/force-fully-qualified-images.conf
|
|
{% endif %}
|
|
|
|
ADD tools/ansible/roles/dockerfile/files/rsyslog.conf /var/lib/awx/rsyslog/rsyslog.conf
|
|
ADD tools/ansible/roles/dockerfile/files/wait-for-migrations /usr/local/bin/wait-for-migrations
|
|
ADD tools/ansible/roles/dockerfile/files/stop-supervisor /usr/local/bin/stop-supervisor
|
|
|
|
ADD tools/ansible/roles/dockerfile/files/uwsgi.ini /etc/tower/uwsgi.ini
|
|
|
|
## File mappings
|
|
{% if build_dev|bool %}
|
|
ADD tools/docker-compose/launch_awx.sh /usr/bin/launch_awx.sh
|
|
ADD tools/docker-compose/start_tests.sh /start_tests.sh
|
|
ADD tools/docker-compose/bootstrap_development.sh /usr/bin/bootstrap_development.sh
|
|
ADD tools/docker-compose/entrypoint.sh /entrypoint.sh
|
|
ADD tools/scripts/config-watcher /usr/bin/config-watcher
|
|
ADD tools/docker-compose/containers.conf /etc/containers/containers.conf
|
|
ADD tools/docker-compose/podman-containers.conf /var/lib/awx/.config/containers/containers.conf
|
|
{% elif kube_dev|bool %}
|
|
RUN ln -sf /awx_devel/tools/ansible/roles/dockerfile/files/launch_awx_web.sh /usr/bin/launch_awx_web.sh
|
|
RUN ln -sf /awx_devel/tools/ansible/roles/dockerfile/files/launch_awx_task.sh /usr/bin/launch_awx_task.sh
|
|
RUN ln -sf /awx_devel/tools/ansible/roles/dockerfile/files/launch_awx_rsyslog.sh /usr/bin/launch_awx_rsyslog.sh
|
|
RUN ln -sf /awx_devel/{{ template_dest }}/supervisor_web.conf /etc/supervisord_web.conf
|
|
RUN ln -sf /awx_devel/{{ template_dest }}/supervisor_task.conf /etc/supervisord_task.conf
|
|
RUN ln -sf /awx_devel/{{ template_dest }}/supervisor_rsyslog.conf /etc/supervisord_rsyslog.conf
|
|
{% else %}
|
|
ADD tools/ansible/roles/dockerfile/files/launch_awx_web.sh /usr/bin/launch_awx_web.sh
|
|
ADD tools/ansible/roles/dockerfile/files/launch_awx_task.sh /usr/bin/launch_awx_task.sh
|
|
ADD tools/ansible/roles/dockerfile/files/launch_awx_rsyslog.sh /usr/bin/launch_awx_rsyslog.sh
|
|
ADD {{ template_dest }}/supervisor_web.conf /etc/supervisord_web.conf
|
|
ADD {{ template_dest }}/supervisor_task.conf /etc/supervisord_task.conf
|
|
ADD {{ template_dest }}/supervisor_rsyslog.conf /etc/supervisord_rsyslog.conf
|
|
{% endif %}
|
|
|
|
{% if (build_dev|bool) or (kube_dev|bool) %}
|
|
ADD tools/docker-compose/awx.egg-link /tmp/awx.egg-link
|
|
ADD tools/docker-compose/awx-manage /usr/local/bin/awx-manage
|
|
ADD tools/scripts/awx-python /usr/bin/awx-python
|
|
{% endif %}
|
|
|
|
# Pre-create things we need to access
|
|
RUN for dir in \
|
|
/var/lib/awx \
|
|
/var/lib/awx/rsyslog \
|
|
/var/lib/awx/rsyslog/conf.d \
|
|
/var/lib/awx/.local/share/containers/storage \
|
|
/var/run/awx-rsyslog \
|
|
/var/log/nginx \
|
|
/var/lib/postgresql \
|
|
/var/run/supervisor \
|
|
/var/run/awx-receptor \
|
|
/var/lib/nginx ; \
|
|
do mkdir -m 0775 -p $dir ; chmod g+rwx $dir ; chgrp root $dir ; done && \
|
|
for file in \
|
|
/etc/subuid \
|
|
/etc/subgid \
|
|
/etc/group \
|
|
/etc/passwd \
|
|
/var/lib/awx/rsyslog/rsyslog.conf ; \
|
|
do touch $file ; chmod g+rw $file ; chgrp root $file ; done
|
|
|
|
{% if (build_dev|bool) or (kube_dev|bool) %}
|
|
RUN for dir in \
|
|
/etc/containers \
|
|
/var/lib/awx/.config/containers \
|
|
/var/lib/awx/.config/cni \
|
|
/var/lib/awx/.local \
|
|
/var/lib/awx/venv \
|
|
/var/lib/awx/venv/awx/bin \
|
|
/var/lib/awx/venv/awx/lib/python3.9 \
|
|
/var/lib/awx/venv/awx/lib/python3.9/site-packages \
|
|
/var/lib/awx/projects \
|
|
/var/lib/awx/rsyslog \
|
|
/var/run/awx-rsyslog \
|
|
/.ansible \
|
|
/var/lib/shared/overlay-images \
|
|
/var/lib/shared/overlay-layers \
|
|
/var/lib/shared/vfs-images \
|
|
/var/lib/shared/vfs-layers \
|
|
/var/lib/awx/vendor ; \
|
|
do mkdir -m 0775 -p $dir ; chmod g+rwx $dir ; chgrp root $dir ; done && \
|
|
for file in \
|
|
/etc/containers/containers.conf \
|
|
/var/lib/awx/.config/containers/containers.conf \
|
|
/var/lib/shared/overlay-images/images.lock \
|
|
/var/lib/shared/overlay-layers/layers.lock \
|
|
/var/lib/shared/vfs-images/images.lock \
|
|
/var/lib/shared/vfs-layers/layers.lock \
|
|
/var/run/nginx.pid \
|
|
/var/lib/awx/venv/awx/lib/python3.9/site-packages/awx.egg-link ; \
|
|
do touch $file ; chmod g+rw $file ; done && \
|
|
echo "\setenv PAGER 'less -SXF'" > /var/lib/awx/.psqlrc
|
|
{% endif %}
|
|
|
|
{% if not build_dev|bool %}
|
|
RUN ln -sf /dev/stdout /var/log/nginx/access.log && \
|
|
ln -sf /dev/stderr /var/log/nginx/error.log
|
|
{% endif %}
|
|
|
|
ENV HOME="/var/lib/awx"
|
|
ENV PATH="/usr/pgsql-12/bin:${PATH}"
|
|
|
|
{% if build_dev|bool %}
|
|
ENV PATH="/var/lib/awx/venv/awx/bin/:${PATH}"
|
|
|
|
EXPOSE 8043 8013 8080 22
|
|
|
|
ENTRYPOINT ["/entrypoint.sh"]
|
|
CMD ["/bin/bash"]
|
|
{% else %}
|
|
USER 1000
|
|
EXPOSE 8052
|
|
|
|
ENTRYPOINT ["dumb-init", "--"]
|
|
VOLUME /var/lib/nginx
|
|
VOLUME /var/lib/awx/.local/share/containers
|
|
{% endif %}
|