postgres/Dockerfile at main · colibri-hq/postgres · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
# syntax=docker/dockerfile:1
ARG POSTGRES_VERSION=17
FROM postgres:${POSTGRES_VERSION} AS base
FROM base AS builder
ARG VAULT_VERSION=0.3.1
ENV VAULT_VERSION=${VAULT_VERSION}

WORKDIR /build

RUN --mount=type=cache,target=/var/cache/apt,sharing=locked \
    --mount=type=cache,target=/var/lib/apt,sharing=locked \
  <<EOF
  set -eux
  apt-get update
  apt-get install --yes --no-install-recommends \
    "postgresql-server-dev-${PG_MAJOR}" \
    ca-certificates \
    build-essential \
    libsodium-dev \
    wget \
  ;
  wget --quiet --output-document=- \
    "https://github.com/supabase/vault/archive/refs/tags/v${VAULT_VERSION}.tar.gz" \
      | tar \
        --strip-components=1 \
        --directory=./ \
        --extract \
        --file=- \
        --gzip
  make --jobs=$(nproc)
EOF

FROM base
ENV POSTGRES_INITDB_ARGS="--set=shared_preload_libraries='supabase_vault, pg_cron' --set=include_dir='/etc/postgresql/'"

# Install runtime dependencies
RUN --mount=type=cache,target=/var/cache/apt,sharing=locked \
    --mount=type=cache,target=/var/lib/apt,sharing=locked \
  <<EOF
  set -eux
  apt-get update
  apt-get install --yes --no-install-recommends \
    "postgresql-${PG_MAJOR}-cron" \
    "postgresql-${PG_MAJOR}-pgvector" \
    libsodium23 \
  ;
EOF

COPY --link ./init.sh /docker-entrypoint-initdb.d/00__init__.sh
COPY --link ./init.sql /docker-entrypoint-initdb.d/00__init__.sql

# region Cron Extension
COPY --link ./pg_cron/pg_cron.conf /etc/postgresql/pg_cron.conf
# endregion

# region Supabase Vault Extension
COPY --link --from=builder /build/sql /usr/share/postgresql/${PG_MAJOR}/extension/
COPY --link --from=builder /build/*.so /usr/lib/postgresql/${PG_MAJOR}/lib/
COPY --link --from=builder /build/*.control* /usr/share/postgresql/${PG_MAJOR}/extension/
COPY --link ./supabase_vault/supabase_vault.conf /etc/postgresql/supabase_vault.conf
COPY --link --chown=999:999 ./supabase_vault/pgsodium_get_key.sh /opt/pgsodium_get_key.sh
# endregion

STOPSIGNAL SIGINT
EXPOSE 5432
CMD ["postgres"]