mirror of
https://github.com/ansible/awx.git
synced 2026-02-23 14:05:59 -03:30
a41766090e
Change django url dispatcher to serve up ui_next files instead of old ui files Old UI will not be served with this change Github CI still runs old ui tests (to be removed in another PR) Remove the Github workflows that build old UI --------- Signed-off-by: Seth Foster <fosterbseth@gmail.com>
331 lines
10 KiB
Django/Jinja
331 lines
10 KiB
Django/Jinja
### This file is generated from
|
|
### tools/ansible/roles/dockerfile/templates/Dockerfile.j2
|
|
###
|
|
### DO NOT EDIT
|
|
###
|
|
|
|
{% if not headless|bool %}
|
|
# UI_next build contaienr
|
|
FROM quay.io/centos/centos:stream9 AS ui-next-builder
|
|
USER root
|
|
RUN dnf -y update && dnf install -y nodejs make git
|
|
RUN npm install -g n && n 18
|
|
|
|
COPY . /tmp/src/
|
|
WORKDIR /tmp/src/
|
|
RUN make ui-next
|
|
{% endif %}
|
|
|
|
# Build container
|
|
FROM quay.io/centos/centos:stream9 AS builder
|
|
|
|
ENV LANG en_US.UTF-8
|
|
ENV LANGUAGE en_US:en
|
|
ENV LC_ALL en_US.UTF-8
|
|
ENV AWX_LOGGING_MODE stdout
|
|
|
|
|
|
USER root
|
|
|
|
# Import the gpg key for DNF to work
|
|
RUN rpm --import /etc/pki/rpm-gpg/RPM-GPG-KEY-centosofficial
|
|
|
|
# Install build dependencies
|
|
RUN dnf -y update && dnf install -y 'dnf-command(config-manager)' && \
|
|
dnf config-manager --set-enabled crb && \
|
|
dnf -y install \
|
|
iputils \
|
|
gcc \
|
|
gcc-c++ \
|
|
git-core \
|
|
gettext \
|
|
glibc-langpack-en \
|
|
libffi-devel \
|
|
libtool-ltdl-devel \
|
|
make \
|
|
nss \
|
|
openldap-devel \
|
|
# pin to older openssl, see jira AAP-23449
|
|
openssl-3.0.7 \
|
|
patch \
|
|
postgresql \
|
|
postgresql-devel \
|
|
python3.11 \
|
|
"python3.11-devel" \
|
|
"python3.11-pip" \
|
|
"python3.11-setuptools" \
|
|
"python3.11-packaging" \
|
|
"python3.11-psycopg2" \
|
|
swig \
|
|
unzip \
|
|
xmlsec1-devel \
|
|
xmlsec1-openssl-devel
|
|
|
|
RUN pip3.11 install -vv build
|
|
|
|
{% if image_architecture == 'ppc64le' %}
|
|
RUN dnf -y update && dnf install -y wget && \
|
|
wget https://static.rust-lang.org/dist/rust-1.41.0-powerpc64le-unknown-linux-gnu.tar.gz && \
|
|
tar -zxvf rust-1.41.0-powerpc64le-unknown-linux-gnu.tar.gz && \
|
|
cd rust-1.41.0-powerpc64le-unknown-linux-gnu && \
|
|
sh install.sh ;
|
|
{% endif %}
|
|
|
|
# Install & build requirements
|
|
ADD Makefile /tmp/Makefile
|
|
RUN mkdir /tmp/requirements
|
|
ADD requirements/requirements.txt \
|
|
requirements/requirements_tower_uninstall.txt \
|
|
requirements/requirements_git.txt \
|
|
/tmp/requirements/
|
|
|
|
RUN cd /tmp && make requirements_awx
|
|
|
|
ARG VERSION
|
|
ARG SETUPTOOLS_SCM_PRETEND_VERSION
|
|
|
|
{% if (build_dev|bool) or (kube_dev|bool) %}
|
|
ADD requirements/requirements_dev.txt /tmp/requirements
|
|
RUN cd /tmp && make requirements_awx_dev
|
|
{% else %}
|
|
|
|
# Copy source into builder, build sdist, install it into awx venv
|
|
COPY . /tmp/src/
|
|
WORKDIR /tmp/src/
|
|
|
|
{% if not headless|bool %}
|
|
COPY --from=ui-next-builder /tmp/src/awx/ui_next/build /tmp/src/awx/ui_next/build
|
|
{% endif %}
|
|
|
|
RUN make sdist && /var/lib/awx/venv/awx/bin/pip install dist/awx.tar.gz
|
|
|
|
{% if not headless|bool %}
|
|
RUN DJANGO_SETTINGS_MODULE=awx.settings.defaults SKIP_SECRET_KEY_CHECK=yes SKIP_PG_VERSION_CHECK=yes /var/lib/awx/venv/awx/bin/awx-manage collectstatic --noinput --clear
|
|
{% endif %}
|
|
|
|
{% endif %}
|
|
|
|
# Final container(s)
|
|
FROM quay.io/centos/centos:stream9
|
|
|
|
ENV LANG en_US.UTF-8
|
|
ENV LANGUAGE en_US:en
|
|
ENV LC_ALL en_US.UTF-8
|
|
ENV AWX_LOGGING_MODE stdout
|
|
|
|
USER root
|
|
|
|
# Import the gpg key for DNF to work
|
|
RUN rpm --import /etc/pki/rpm-gpg/RPM-GPG-KEY-centosofficial
|
|
|
|
ADD https://copr.fedorainfracloud.org/coprs/ansible/Rsyslog/repo/epel-9/ansible-Rsyslog-epel-9.repo /etc/yum.repos.d/ansible-Rsyslog-epel-9.repo
|
|
|
|
# Install runtime requirements
|
|
RUN dnf -y update && dnf install -y 'dnf-command(config-manager)' && \
|
|
dnf config-manager --set-enabled crb && \
|
|
dnf -y install acl \
|
|
git-core \
|
|
git-lfs \
|
|
glibc-langpack-en \
|
|
krb5-workstation \
|
|
nginx \
|
|
"openldap >= 2.6.2-3" \
|
|
# pin to older openssl, see jira AAP-23449
|
|
openssl-3.0.7 \
|
|
postgresql \
|
|
python3.11 \
|
|
"python3.11-devel" \
|
|
"python3.11-pip*" \
|
|
"python3.11-setuptools" \
|
|
"python3.11-packaging" \
|
|
"python3.11-psycopg2" \
|
|
rsync \
|
|
rsyslog-8.2102.0-106.el9 \
|
|
subversion \
|
|
sudo \
|
|
vim-minimal \
|
|
which \
|
|
unzip \
|
|
xmlsec1-openssl && \
|
|
dnf -y clean all
|
|
|
|
RUN pip3.11 install -vv virtualenv supervisor dumb-init build
|
|
|
|
RUN rm -rf /root/.cache && rm -rf /tmp/*
|
|
|
|
{% if (build_dev|bool) or (kube_dev|bool) %}
|
|
# Install development/test requirements
|
|
RUN dnf -y install \
|
|
crun \
|
|
gdb \
|
|
gtk3 \
|
|
gettext \
|
|
hostname \
|
|
procps \
|
|
alsa-lib \
|
|
libX11-xcb \
|
|
libXScrnSaver \
|
|
iproute \
|
|
strace \
|
|
vim \
|
|
nmap-ncat \
|
|
libpq-devel \
|
|
nodejs \
|
|
nss \
|
|
make \
|
|
patch \
|
|
socat \
|
|
tmux \
|
|
wget \
|
|
diffutils \
|
|
unzip && \
|
|
npm install -g n && n 16.13.1 && npm install -g npm@8.5.0 && dnf remove -y nodejs
|
|
|
|
RUN pip3.11 install -vv git+https://github.com/coderanger/supervisor-stdout.git@973ba19967cdaf46d9c1634d1675fc65b9574f6e
|
|
RUN pip3.11 install -vv black setuptools-scm build
|
|
|
|
# This package randomly fails to download.
|
|
# It is nice to have in the dev env, but not necessary.
|
|
# Add it back to the list above if the repo ever straighten up.
|
|
RUN dnf --enablerepo=baseos-debug -y install python3-debuginfo || :
|
|
|
|
RUN dnf install -y epel-next-release && dnf install -y inotify-tools && dnf remove -y epel-next-release
|
|
{% endif %}
|
|
|
|
# Copy app from builder
|
|
COPY --from=builder /var/lib/awx /var/lib/awx
|
|
|
|
RUN ln -s /var/lib/awx/venv/awx/bin/awx-manage /usr/bin/awx-manage
|
|
|
|
{% if build_dev|bool %}
|
|
COPY --from={{ receptor_image }} /usr/bin/receptor /usr/bin/receptor
|
|
|
|
RUN openssl req -nodes -newkey rsa:2048 -keyout /etc/nginx/nginx.key -out /etc/nginx/nginx.csr \
|
|
-subj "/C=US/ST=North Carolina/L=Durham/O=Ansible/OU=AWX Development/CN=awx.localhost" && \
|
|
openssl x509 -req -days 365 -in /etc/nginx/nginx.csr -signkey /etc/nginx/nginx.key -out /etc/nginx/nginx.crt && \
|
|
chmod 640 /etc/nginx/nginx.{csr,key,crt}
|
|
{% endif %}
|
|
|
|
{% if build_dev|bool %}
|
|
RUN dnf install -y podman && rpm --restore shadow-utils 2>/dev/null
|
|
|
|
# chmod containers.conf and adjust storage.conf to enable Fuse storage.
|
|
RUN sed -i -e 's|^#mount_program|mount_program|g' -e '/additionalimage.*/a "/var/lib/shared",' -e 's|^mountopt[[:space:]]*=.*$|mountopt = "nodev,fsync=0"|g' /etc/containers/storage.conf
|
|
|
|
ENV _CONTAINERS_USERNS_CONFIGURED=""
|
|
|
|
# Ensure we must use fully qualified image names
|
|
# This prevents podman prompt that hangs when trying to pull unqualified images
|
|
RUN mkdir -p /etc/containers/registries.conf.d/ && echo "unqualified-search-registries = []" >> /etc/containers/registries.conf.d/force-fully-qualified-images.conf && chmod 644 /etc/containers/registries.conf.d/force-fully-qualified-images.conf
|
|
{% endif %}
|
|
|
|
ADD tools/ansible/roles/dockerfile/files/rsyslog.conf /var/lib/awx/rsyslog/rsyslog.conf
|
|
ADD tools/ansible/roles/dockerfile/files/wait-for-migrations /usr/local/bin/wait-for-migrations
|
|
ADD tools/ansible/roles/dockerfile/files/stop-supervisor /usr/local/bin/stop-supervisor
|
|
|
|
ADD tools/ansible/roles/dockerfile/files/uwsgi.ini /etc/tower/uwsgi.ini
|
|
|
|
## File mappings
|
|
{% if build_dev|bool %}
|
|
ADD tools/docker-compose/launch_awx.sh /usr/bin/launch_awx.sh
|
|
ADD tools/docker-compose/start_tests.sh /start_tests.sh
|
|
ADD tools/docker-compose/bootstrap_development.sh /usr/bin/bootstrap_development.sh
|
|
ADD tools/docker-compose/entrypoint.sh /entrypoint.sh
|
|
ADD tools/scripts/config-watcher /usr/bin/config-watcher
|
|
{% elif kube_dev|bool %}
|
|
RUN ln -sf /awx_devel/tools/ansible/roles/dockerfile/files/launch_awx_web.sh /usr/bin/launch_awx_web.sh
|
|
RUN ln -sf /awx_devel/tools/ansible/roles/dockerfile/files/launch_awx_task.sh /usr/bin/launch_awx_task.sh
|
|
RUN ln -sf /awx_devel/tools/ansible/roles/dockerfile/files/launch_awx_rsyslog.sh /usr/bin/launch_awx_rsyslog.sh
|
|
RUN ln -sf /awx_devel/{{ template_dest }}/supervisor_web.conf /etc/supervisord_web.conf
|
|
RUN ln -sf /awx_devel/{{ template_dest }}/supervisor_task.conf /etc/supervisord_task.conf
|
|
RUN ln -sf /awx_devel/{{ template_dest }}/supervisor_rsyslog.conf /etc/supervisord_rsyslog.conf
|
|
{% else %}
|
|
ADD tools/ansible/roles/dockerfile/files/launch_awx_web.sh /usr/bin/launch_awx_web.sh
|
|
ADD tools/ansible/roles/dockerfile/files/launch_awx_task.sh /usr/bin/launch_awx_task.sh
|
|
ADD tools/ansible/roles/dockerfile/files/launch_awx_rsyslog.sh /usr/bin/launch_awx_rsyslog.sh
|
|
ADD tools/scripts/rsyslog-4xx-recovery /usr/bin/rsyslog-4xx-recovery
|
|
ADD {{ template_dest }}/supervisor_web.conf /etc/supervisord_web.conf
|
|
ADD {{ template_dest }}/supervisor_task.conf /etc/supervisord_task.conf
|
|
ADD {{ template_dest }}/supervisor_rsyslog.conf /etc/supervisord_rsyslog.conf
|
|
ADD tools/scripts/awx-python /usr/bin/awx-python
|
|
{% endif %}
|
|
|
|
{% if (build_dev|bool) or (kube_dev|bool) %}
|
|
RUN echo /awx_devel > /var/lib/awx/venv/awx/lib/python3.11/site-packages/awx.egg-link
|
|
RUN echo /awx_devel > /var/lib/awx/venv/awx/lib/python3.11/site-packages/awx.pth
|
|
RUN ln -sf /awx_devel/tools/docker-compose/awx-manage /usr/local/bin/awx-manage
|
|
RUN ln -sf /awx_devel/tools/scripts/awx-python /usr/bin/awx-python
|
|
RUN ln -sf /awx_devel/tools/scripts/rsyslog-4xx-recovery /usr/bin/rsyslog-4xx-recovery
|
|
{% endif %}
|
|
|
|
# Pre-create things we need to access
|
|
RUN for dir in \
|
|
/var/lib/awx \
|
|
/var/lib/awx/rsyslog \
|
|
/var/lib/awx/rsyslog/conf.d \
|
|
/var/lib/awx/.local/share/containers/storage \
|
|
/var/run/awx-rsyslog \
|
|
/var/log/nginx \
|
|
/var/lib/pgsql \
|
|
/var/run/supervisor \
|
|
/var/run/awx-receptor \
|
|
/var/lib/nginx ; \
|
|
do mkdir -m 0775 -p $dir ; chmod g+rwx $dir ; chgrp root $dir ; done && \
|
|
for file in \
|
|
/etc/subuid \
|
|
/etc/subgid \
|
|
/etc/group \
|
|
/etc/passwd \
|
|
/var/lib/awx/rsyslog/rsyslog.conf ; \
|
|
do touch $file ; chmod g+rw $file ; chgrp root $file ; done
|
|
|
|
{% if (build_dev|bool) or (kube_dev|bool) %}
|
|
RUN for dir in \
|
|
/var/lib/awx/.local \
|
|
/var/lib/awx/venv \
|
|
/var/lib/awx/venv/awx/bin \
|
|
/var/lib/awx/venv/awx/lib/python3.11 \
|
|
/var/lib/awx/venv/awx/lib/python3.11/site-packages \
|
|
/var/lib/awx/projects \
|
|
/var/lib/awx/rsyslog \
|
|
/var/run/awx-rsyslog \
|
|
/.ansible \
|
|
/var/lib/shared/overlay-images \
|
|
/var/lib/shared/overlay-layers \
|
|
/var/lib/shared/vfs-images \
|
|
/var/lib/shared/vfs-layers \
|
|
/var/lib/awx/vendor ; \
|
|
do mkdir -m 0775 -p $dir ; chmod g+rwx $dir ; chgrp root $dir ; done && \
|
|
for file in \
|
|
/var/lib/shared/overlay-images/images.lock \
|
|
/var/lib/shared/overlay-layers/layers.lock \
|
|
/var/lib/shared/vfs-images/images.lock \
|
|
/var/lib/shared/vfs-layers/layers.lock \
|
|
/var/run/nginx.pid; \
|
|
do touch $file ; chmod g+rw $file ; done && \
|
|
echo "\setenv PAGER 'less -SXF'" > /var/lib/awx/.psqlrc
|
|
{% endif %}
|
|
|
|
{% if not build_dev|bool %}
|
|
RUN ln -sf /dev/stdout /var/log/nginx/access.log && \
|
|
ln -sf /dev/stderr /var/log/nginx/error.log
|
|
{% endif %}
|
|
|
|
ENV HOME="/var/lib/awx"
|
|
|
|
{% if build_dev|bool %}
|
|
ENV PATH="/var/lib/awx/venv/awx/bin/:${PATH}"
|
|
|
|
EXPOSE 8043 8013 8080 22
|
|
|
|
ENTRYPOINT ["/entrypoint.sh"]
|
|
CMD ["/bin/bash"]
|
|
{% else %}
|
|
USER 1000
|
|
EXPOSE 8052
|
|
|
|
ENTRYPOINT ["dumb-init", "--"]
|
|
VOLUME /var/lib/nginx
|
|
VOLUME /var/lib/awx/.local/share/containers
|
|
{% endif %}
|