batman

Dockerfile

@@ -1,63 +1,116 @@
-# Use Ubuntu as base image
-FROM ubuntu:22.04
-
-# Prevent interactive prompts during package installation
-ENV DEBIAN_FRONTEND=noninteractive
-
-# Install necessary dependencies
-RUN mkdir -p /var/lib/apt/lists/partial && \
-    apt-get clean && \
-    apt-get update && apt-get install -y \
-    curl \
-    gnupg \
-    supervisor \
-    gosu \
-    && rm -rf /var/lib/apt/lists/*
-
-# Install libssl1.1
-RUN curl -fsSL http://archive.ubuntu.com/ubuntu/pool/main/o/openssl/libssl1.1_1.1.1f-1ubuntu2_amd64.deb -o libssl1.1.deb && \
-    dpkg -i libssl1.1.deb && \
-    rm libssl1.1.deb
-
-# Add MongoDB repository and install MongoDB 6.0
-RUN curl -fsSL https://pgp.mongodb.com/server-6.0.asc | gpg --dearmor -o /usr/share/keyrings/mongodb-archive-keyring.gpg \
-    && echo "deb [signed-by=/usr/share/keyrings/mongodb-archive-keyring.gpg] http://repo.mongodb.org/apt/ubuntu focal/mongodb-org/6.0 multiverse" | tee /etc/apt/sources.list.d/mongodb-org-6.0.list \
+FROM debian:bullseye-slim
+
+## Installing Node.js
+ENV NODE_ENV production
+ENV NODE_VERSION 14.21.3
+
+# Node installation based on https://github.com/nodejs/docker-node/blob/66b46292a6e5dd5856b1d5204dc51547c80eb17a/12/buster-slim/Dockerfile
+RUN ARCH="x64" \
+  && set -eux \
+  && apt-get update && apt-get install -y --no-install-recommends ca-certificates curl wget gnupg dirmngr xz-utils \
+  && rm -rf /var/lib/apt/lists/* \
+  && for key in \
+  4ED778F539E3634C779C87C6D7062848A1AB005C \
+  94AE36675C464D64BAFA68DD7434390BDBE9B9C5 \
+  74F12602B6F1C4E913FAA37AD3A89613643B6201 \
+  71DCFD284A79C3B38668286BC97EC7A07EDE3FC1 \
+  8FCCA13FEF1D0C2E91008E09770F7A9A5AE15600 \
+  C4F0DFFF4E8C1A8236409D08E73BC641CC11F4C8 \
+  C82FA3AE1CBEDC6BE46B9360C43CEC45C17AB93C \
+  DD8F2338BAE7501E3DD5AC78C273792F7D83545D \
+  A48C2BEE680E841632CD4E44F07496B3EB3C1762 \
+  108F52B48DB57BB0CC439B2997B01419BD92F80A \
+  B9E2F5981AA6E0CD28160D9FF13993A75599653C \
+  ; do \
+  gpg --batch --keyserver hkps://keys.openpgp.org --recv-keys "$key" || \
+  gpg --batch --keyserver keyserver.ubuntu.com --recv-keys "$key" ; \
+  done \
+  && curl -fsSLO --compressed "https://nodejs.org/dist/v$NODE_VERSION/node-v$NODE_VERSION-linux-$ARCH.tar.xz" \
+  && curl -fsSLO --compressed "https://nodejs.org/dist/v$NODE_VERSION/SHASUMS256.txt.asc" \
+  && gpg --batch --decrypt --output SHASUMS256.txt SHASUMS256.txt.asc \
+  && grep " node-v$NODE_VERSION-linux-$ARCH.tar.xz\$" SHASUMS256.txt | sha256sum -c - \
+  && tar -xJf "node-v$NODE_VERSION-linux-$ARCH.tar.xz" -C /usr/local --strip-components=1 --no-same-owner \
+  && rm "node-v$NODE_VERSION-linux-$ARCH.tar.xz" SHASUMS256.txt.asc SHASUMS256.txt \
+  && apt-mark auto '.*' > /dev/null \
+  && find /usr/local -type f -executable -exec ldd '{}' ';' \
+  | awk '/=>/ { print $(NF-1) }' \
+  | sort -u \
+  | xargs -r dpkg-query --search \
+  | cut -d: -f1 \
+  | sort -u \
+  | xargs -r apt-mark manual \
+  && apt-get purge -y --auto-remove -o APT::AutoRemove::RecommendsImportant=false
+
+RUN groupadd -r rocketchat \
+  && useradd -r -g rocketchat rocketchat \
+  && mkdir -p /app/uploads \
+  && chown rocketchat:rocketchat /app/uploads
+
+VOLUME /app/uploads
+
+ENV RC_VERSION 6.11.1
+
+WORKDIR /app
+
+RUN set -eux \
+  && apt-get update \
+  && apt-get install -y --no-install-recommends fontconfig \
+  && aptMark="$(apt-mark showmanual)" \
+  && apt-get install -y --no-install-recommends g++ make python3 ca-certificates curl gnupg \
+  && rm -rf /var/lib/apt/lists/* \
+  # gpg: key 4FD08104: public key "Rocket.Chat Buildmaster <buildmaster@rocket.chat>" imported
+  && gpg --batch --keyserver keyserver.ubuntu.com --recv-keys 0E163286C20D07B9787EBE9FD7F9D0414FD08104 \
+  && curl -fSL "https://releases.rocket.chat/${RC_VERSION}/download" -o rocket.chat.tgz \
+  && curl -fSL "https://releases.rocket.chat/${RC_VERSION}/asc" -o rocket.chat.tgz.asc \
+  && gpg --batch --verify rocket.chat.tgz.asc rocket.chat.tgz \
+  && tar zxf rocket.chat.tgz \
+  && rm rocket.chat.tgz rocket.chat.tgz.asc \
+  && cd bundle/programs/server \
+  && npm install --unsafe-perm=true \
+  && apt-mark auto '.*' > /dev/null \
+  && apt-mark manual $aptMark > /dev/null \
+  && find /usr/local -type f -executable -exec ldd '{}' ';' \
+  | awk '/=>/ { print $(NF-1) }' \
+  | sort -u \
+  | xargs -r dpkg-query --search \
+  | cut -d: -f1 \
+  | sort -u \
+  | xargs -r apt-mark manual \
+  && apt-get purge -y --auto-remove -o APT::AutoRemove::RecommendsImportant=false \
+  && npm cache clear --force \
+  && chown -R rocketchat:rocketchat /app
+
+# Temporarily switch back to root for MongoDB installation
+USER root
+
+# Install MongoDB
+RUN apt-get update && apt-get install -y gnupg curl \
+    && curl -fsSL https://www.mongodb.org/static/pgp/server-8.0.asc | \
+       gpg -o /usr/share/keyrings/mongodb-server-8.0.gpg \
+       --dearmor \
+    && echo "deb [signed-by=/usr/share/keyrings/mongodb-server-8.0.gpg] https://repo.mongodb.org/apt/debian bullseye/mongodb-org/8.0 main" | \
+       tee /etc/apt/sources.list.d/mongodb-org-8.0.list \
     && apt-get update \
     && apt-get install -y mongodb-org \
-    && rm -rf /var/lib/apt/lists/*
+    && mkdir -p /data/db \
+    && chown -R rocketchat:rocketchat /data/db
 
-# Install Node.js
-RUN curl -fsSL https://deb.nodesource.com/setup_20.x | bash - \
-    && apt-get install -y nodejs
+# Create MongoDB startup script
+COPY start-mongodb.sh /usr/local/bin/
+RUN chmod +x /usr/local/bin/start-mongodb.sh
 
-# Create directories and set permissions
-RUN mkdir -p /data/db /.mongodb && \
-    useradd -ms /bin/bash rocketchat && \
-    chown -R mongodb:mongodb /data/db /.mongodb
+USER root
 
-# Create Rocket.Chat directory
-WORKDIR /app
+WORKDIR /app/bundle
+
+# needs a mongoinstance - defaults to container linking with alias 'db'
+ENV DEPLOY_METHOD=docker-official \
+  MONGO_URL=mongodb://localhost:27017/meteor \
+  HOME=/tmp \
+  PORT=7860 \
+  ROOT_URL=http://localhost:7860 \
+  Accounts_AvatarStorePath=/app/uploads
+
+EXPOSE 7860
 
-# Download and install Rocket.Chat
-RUN curl -L https://releases.rocket.chat/latest/download -o rocket.chat.tgz \
-    && tar zxvf rocket.chat.tgz \
-    && rm rocket.chat.tgz \
-    && cd bundle/programs/server \
-    && npm install --production \
-    && chown -R rocketchat:rocketchat /app
-
-# Set environment variables
-ENV PORT=3000 \
-    ROOT_URL=http://localhost:3000 \
-    MONGO_URL=mongodb://localhost:27017/rocketchat \
-    MONGO_OPLOG_URL=mongodb://localhost:27017/local
-
-# Copy startup script
-COPY start.sh /start.sh
-RUN chmod +x /start.sh
-
-# Expose port
-EXPOSE 3000
-
-# Start MongoDB and Rocket.Chat
-CMD ["/start.sh"]
+CMD ["/bin/bash", "/usr/local/bin/start-mongodb.sh"]

start-mongodb.sh

@@ -0,0 +1,14 @@
+#!/bin/bash
+
+# Start MongoDB
+mongod --fork --logpath /var/log/mongodb.log
+
+# Wait for MongoDB to be ready
+until mongosh --eval "print(\"waited for connection\")" > /dev/null 2>&1; do
+  echo "Waiting for MongoDB to be ready..."
+  sleep 1
+done
+
+su rocketchat
+# Start the Node.js application
+exec node /app/bundle/main.js