diff --git a/phpmyadmin/Dockerfile b/phpmyadmin/Dockerfile new file mode 100644 index 00000000..8af37da1 --- /dev/null +++ b/phpmyadmin/Dockerfile @@ -0,0 +1,166 @@ +FROM php:8.2-apache + +ARG APACHE_PORT=8080 + +# Install dependencies +RUN set -ex; \ + \ + savedAptMark="$(apt-mark showmanual)"; \ + \ + apt-get update; \ + apt-get install -y --no-install-recommends \ + libbz2-dev \ + libfreetype6-dev \ + libjpeg-dev \ + libpng-dev \ + libwebp-dev \ + libxpm-dev \ + libzip-dev \ + ; \ + \ + docker-php-ext-configure gd --with-freetype --with-jpeg --with-webp --with-xpm; \ + docker-php-ext-install -j "$(nproc)" \ + bz2 \ + gd \ + mysqli \ + opcache \ + zip \ + bcmath \ + ; \ + \ + apt-mark auto '.*' > /dev/null; \ + apt-mark manual $savedAptMark; \ + extdir="$(php -r 'echo ini_get("extension_dir");')"; \ + ldd "$extdir"/*.so \ + | awk '/=>/ { so = $(NF-1); if (index(so, "/usr/local/") == 1) { next }; gsub("^/(usr/)?", "", so); print so }' \ + | sort -u \ + | xargs -r dpkg-query -S \ + | cut -d: -f1 \ + | sort -u \ + | xargs -rt apt-mark manual; \ + \ + # start: Apache specific build + a2enmod remoteip; \ + # end: Apache specific build + \ + apt-get purge -y --auto-remove -o APT::AutoRemove::RecommendsImportant=false; \ + rm -rf /var/lib/apt/lists/*; \ + ldd "$extdir"/*.so | grep -qzv "=> not found" || (echo "Sanity check failed: missing libraries:"; ldd "$extdir"/*.so | grep " => not found"; exit 1); \ + ldd "$extdir"/*.so | grep -q "libzip.so.* => .*/libzip.so.*" || (echo "Sanity check failed: libzip.so is not referenced"; ldd "$extdir"/*.so; exit 1); \ + err="$(php --version 3>&1 1>&2 2>&3)"; \ + [ -z "$err" ] || (echo "Sanity check failed: php returned errors; $err"; exit 1;); + +# set recommended PHP.ini settings +# see https://secure.php.net/manual/en/opcache.installation.php +ENV MAX_EXECUTION_TIME 600 +ENV MEMORY_LIMIT 512M +ENV UPLOAD_LIMIT 2048K +ENV TZ UTC +ENV SESSION_SAVE_PATH /sessions +RUN set -ex; \ + \ + { \ + echo 'opcache.memory_consumption=128'; \ + echo 'opcache.interned_strings_buffer=8'; \ + echo 'opcache.max_accelerated_files=4000'; \ + echo 'opcache.revalidate_freq=2'; \ + echo 'opcache.fast_shutdown=1'; \ + } > $PHP_INI_DIR/conf.d/opcache-recommended.ini; \ + \ + { \ + echo 'session.cookie_httponly=1'; \ + echo 'session.use_strict_mode=1'; \ + } > $PHP_INI_DIR/conf.d/session-strict.ini; \ + \ + { \ + echo 'allow_url_fopen=Off'; \ + echo 'max_execution_time=${MAX_EXECUTION_TIME}'; \ + echo 'max_input_vars=10000'; \ + echo 'memory_limit=${MEMORY_LIMIT}'; \ + echo 'post_max_size=${UPLOAD_LIMIT}'; \ + echo 'upload_max_filesize=${UPLOAD_LIMIT}'; \ + echo 'date.timezone=${TZ}'; \ + echo 'session.save_path=${SESSION_SAVE_PATH}'; \ + } > $PHP_INI_DIR/conf.d/phpmyadmin-misc.ini + +# Calculate download URL +ENV VERSION 5.2.1 +ENV SHA256 373f9599dfbd96d6fe75316d5dad189e68c305f297edf42377db9dd6b41b2557 +ENV URL https://files.phpmyadmin.net/phpMyAdmin/${VERSION}/phpMyAdmin-${VERSION}-all-languages.tar.xz + +LABEL org.opencontainers.image.title="Official phpMyAdmin Docker image" \ + org.opencontainers.image.description="Run phpMyAdmin with Alpine, Apache and PHP FPM." \ + org.opencontainers.image.authors="The phpMyAdmin Team " \ + org.opencontainers.image.vendor="phpMyAdmin" \ + org.opencontainers.image.documentation="https://github.com/phpmyadmin/docker#readme" \ + org.opencontainers.image.licenses="GPL-2.0-only" \ + org.opencontainers.image.version="${VERSION}" \ + org.opencontainers.image.url="https://github.com/phpmyadmin/docker#readme" \ + org.opencontainers.image.source="https://github.com/phpmyadmin/docker.git" + +# Download tarball, verify it using gpg and extract +RUN set -ex; \ + \ + savedAptMark="$(apt-mark showmanual)"; \ + \ + apt-get update; \ + apt-get install -y --no-install-recommends \ + gnupg \ + dirmngr \ + ; \ + mkdir $SESSION_SAVE_PATH; \ + chmod 1777 $SESSION_SAVE_PATH; \ + chown www-data:www-data $SESSION_SAVE_PATH; \ + \ + export GNUPGHOME="$(mktemp -d)"; \ + export GPGKEY="3D06A59ECE730EB71B511C17CE752F178259BD92"; \ + curl -fsSL -o phpMyAdmin.tar.xz $URL; \ + curl -fsSL -o phpMyAdmin.tar.xz.asc $URL.asc; \ + echo "$SHA256 *phpMyAdmin.tar.xz" | sha256sum -c -; \ + gpg --batch --keyserver keyserver.ubuntu.com --recv-keys "$GPGKEY" \ + || gpg --batch --keyserver pgp.mit.edu --recv-keys "$GPGKEY" \ + || gpg --batch --keyserver keyserver.pgp.com --recv-keys "$GPGKEY" \ + || gpg --batch --keyserver keys.openpgp.org --recv-keys "$GPGKEY"; \ + gpg --batch --verify phpMyAdmin.tar.xz.asc phpMyAdmin.tar.xz; \ + tar -xf phpMyAdmin.tar.xz -C /var/www/html --strip-components=1; \ + mkdir -p /var/www/html/tmp; \ + chown www-data:www-data /var/www/html/tmp; \ + gpgconf --kill all; \ + rm -r "$GNUPGHOME" phpMyAdmin.tar.xz phpMyAdmin.tar.xz.asc; \ + rm -r -v /var/www/html/setup/ /var/www/html/examples/ /var/www/html/js/src/ /var/www/html/babel.config.json /var/www/html/doc/html/_sources/ /var/www/html/RELEASE-DATE-$VERSION /var/www/html/CONTRIBUTING.md; \ + grep -q -F "'configFile' => ROOT_PATH . 'config.inc.php'," /var/www/html/libraries/vendor_config.php; \ + sed -i "s@'configFile' => .*@'configFile' => '/etc/phpmyadmin/config.inc.php',@" /var/www/html/libraries/vendor_config.php; \ + grep -q -F "'configFile' => '/etc/phpmyadmin/config.inc.php'," /var/www/html/libraries/vendor_config.php; \ + php -l /var/www/html/libraries/vendor_config.php; \ + chown -R www-data:www-data -R /var/www/html/; \ + \ + apt-mark auto '.*' > /dev/null; \ + apt-mark manual $savedAptMark; \ + apt-get purge -y --auto-remove -o APT::AutoRemove::RecommendsImportant=false; \ + rm -rf /var/lib/apt/lists/* + +# Change apache host to 8080, 80 requires root +RUN sed -i "/VirtualHost \*:80/c\\" /etc/apache2/sites-enabled/000-default.conf +RUN sed -i "/Listen 80/c\Listen ${APACHE_PORT}" /etc/apache2/ports.conf + +# Copy configuration and create blank user configuration +COPY config.inc.php /etc/phpmyadmin/config.inc.php +RUN touch /etc/phpmyadmin/config.user.inc.php + +# Set permissions for apache/php config files +RUN chown www-data:www-data -R /etc/phpmyadmin/ + +# Create cookie authentication secret file. Initialized at runtime +RUN touch /etc/phpmyadmin/config.secret.inc.php +RUN chgrp www-data /etc/phpmyadmin/config.secret.inc.php + +# The config secret file is given read+write permissions for everybody so docker-entrypoint can +# initialize the file at runtime. This is not optimal and is related to an open issue upstream (phpmyadmin/docker): +# https://github.com/phpmyadmin/docker/issues/187 +RUN chmod 666 /etc/phpmyadmin/config.secret.inc.php + +# Copy main script. Initializes user config and config secrets +COPY docker-entrypoint.sh /docker-entrypoint.sh + +ENTRYPOINT [ "/docker-entrypoint.sh" ] +CMD ["apache2-foreground"] diff --git a/phpmyadmin/config.inc.php b/phpmyadmin/config.inc.php new file mode 100644 index 00000000..9f5d2ac7 --- /dev/null +++ b/phpmyadmin/config.inc.php @@ -0,0 +1,175 @@ + /etc/phpmyadmin/config.secret.inc.php < $PHP_INI_DIR/conf.d/phpmyadmin-hide-php-version.ini +fi + +if [ ! -z "${PMA_CONFIG_BASE64}" ]; then + echo "Adding the custom config.inc.php from base64." + echo "${PMA_CONFIG_BASE64}" | base64 -d > /etc/phpmyadmin/config.inc.php +fi + +if [ ! -z "${PMA_USER_CONFIG_BASE64}" ]; then + echo "Adding the custom config.user.inc.php from base64." + echo "${PMA_USER_CONFIG_BASE64}" | base64 -d > /etc/phpmyadmin/config.user.inc.php +fi + +# CREATED IN DOCKERFILE +# start: Apache specific settings +# if [ -n "${APACHE_PORT+x}" ]; then +# echo "Setting apache port to ${APACHE_PORT}." +# sed -i "/VirtualHost \*:80/c\\" /etc/apache2/sites-enabled/000-default.conf +# sed -i "/Listen 80/c\Listen ${APACHE_PORT}" /etc/apache2/ports.conf +# apachectl configtest +# fi +# end: Apache specific settings + +get_docker_secret() { + local env_var="${1}" + local env_var_file="${env_var}_FILE" + + # Check if the variable with name $env_var_file (which is $PMA_PASSWORD_FILE for example) + # is not empty and export $PMA_PASSWORD as the password in the Docker secrets file + + if [[ -n "${!env_var_file}" ]]; then + export "${env_var}"="$(cat "${!env_var_file}")" + fi +} + +get_docker_secret PMA_USER +get_docker_secret PMA_PASSWORD +get_docker_secret MYSQL_ROOT_PASSWORD +get_docker_secret MYSQL_PASSWORD +get_docker_secret PMA_HOSTS +get_docker_secret PMA_HOST +get_docker_secret PMA_CONTROLHOST +get_docker_secret PMA_CONTROLUSER +get_docker_secret PMA_CONTROLPASS +get_docker_secret PMA_SSL +get_docker_secret PMA_SSLS + +exec "$@"