Dockerfile

# syntax=docker/dockerfile:1.2
# Base user uid / gid keep 1000 on prod, align with your user on dev
ARG USER_UID=1000
ARG USER_GID=1000
# options for cpan installs
ARG CPANMOPTS=""

######################
# Base modperl image stage
######################
FROM debian:trixie-slim AS modperl

# Install cpm to install cpanfile dependencies
RUN --mount=type=cache,id=apt-cache,target=/var/cache/apt \
    --mount=type=cache,id=lib-apt-cache,target=/var/lib/apt set -x && \
    apt-get update && \
    apt-get install -y --no-install-recommends \
        apache2 \
        apt-utils \
        cpanminus \
        # being able to build things
        g++ \
        gcc \
        less \
        libapache2-mod-perl2 \
        make \
        gettext \
        wget \
        # images processing
        imagemagick \
        graphviz \
        tesseract-ocr \
        # ftp client
        lftp \
        # some compression utils
        gzip \
        tar \
        unzip \
        zip \
        pigz \
        # useful to send mail
        mailutils \
        # perlmagick \
        #
        # Packages from ./cpanfile:
        # If cpanfile specifies a newer version than apt has, cpanm will install the newer version.
        #
        libfile-slurp-perl \
        libtie-ixhash-perl \
        libwww-perl \
        libimage-magick-perl \
        libxml-encoding-perl  \
        libmime-lite-perl \
        libcache-memcached-fast-perl \
        libjson-pp-perl \
        libclone-perl \
        #11866: Delete following after Keycloak Migration:
        libcrypt-passwdmd5-perl \
        libencode-detect-perl \
        libbarcode-zbar-perl \
        libxml-feedpp-perl \
        liburi-find-perl \
        libxml-simple-perl \
        libexperimental-perl \
        libapache2-request-perl \
        libdigest-md5-perl \
        libtime-local-perl \
        libdbd-pg-perl \
        liburi-escape-xs-perl \
        libxml-libxslt-perl \
        libdata-table-perl \
        libanyevent-redis-perl \
        # NB: not available in ubuntu 1804 LTS:
        libmath-random-secure-perl \
        libfile-copy-recursive-perl \
        libemail-stuffer-perl \
        liblist-moreutils-perl \
        libpod-simple-perl \
        liblog-log4perl-perl \
        # NB: not available in ubuntu 1804 LTS:
        libgeoip2-perl \
        libemail-valid-perl
RUN --mount=type=cache,id=apt-cache,target=/var/cache/apt \
    --mount=type=cache,id=lib-apt-cache,target=/var/lib/apt set -x && \
    # rerun apt update, because last RUN might be in cache
    ( ( [ ! -e /var/cache/apt/pkgcache.bin ] || [ $(($(date +%s) - $(stat --format=%Y /var/cache/apt/pkgcache.bin))) -gt 3600 ] ) && \
      apt-get update || true \
    ) && \
    apt-get install -y --no-install-recommends \
        curl \
        #
        # cpan dependencies that can be satisfied by apt even if the package itself can't:
        #
        # EV - event loop
        libev-perl \
        # Algorithm::CheckDigits
        libprobe-perl-perl \
        # CLDR::Number
        libmath-round-perl \
        libsoftware-license-perl \
        libtest-differences-perl \
        libtest-exception-perl \
        # Data::Dumper::AutoEncode
        # NB: not available in ubuntu 1804 LTS:
        libmodule-build-pluggable-perl \
        libclass-accessor-lite-perl \
        # DateTime
        libclass-singleton-perl \
        # DateTime::Locale
        libfile-sharedir-install-perl \
        # File::chmod::Recursive
        libfile-chmod-perl \
        # GeoIP2
        libdata-dumper-concise-perl \
        libdata-printer-perl \
        libdata-validate-ip-perl \
        libio-compress-perl \
        libjson-maybexs-perl \
        libcpanel-json-xs-perl \
        liblist-allutils-perl \
        liblist-someutils-perl \
        # GraphViz2
        libdata-section-simple-perl \
        libfile-which-perl \
        libipc-run3-perl \
        liblog-handler-perl \
        libtest-deep-perl \
        libwant-perl \
        # Image::OCR::Tesseract
        libfile-find-rule-perl \
        liblinux-usermod-perl \
        # Locale::Maketext::Lexicon::Getcontext
        liblocale-maketext-lexicon-perl \
        # Math::Random::Secure
        libcrypt-random-source-perl \
        libmath-random-isaac-perl \
        libtest-sharedfork-perl \
        libtest-warn-perl \
        # MongoDB
        libauthen-sasl-saslprep-perl \
        libauthen-scram-perl \
        libbson-perl \
        libclass-xsaccessor-perl \
        libconfig-autoconf-perl \
        libdigest-hmac-perl \
        libsafe-isa-perl \
        # Spreadsheet::CSV
        libspreadsheet-parseexcel-perl \
        # Test::Number::Delta
        libtest-number-delta-perl \
        libdevel-size-perl \
        # Net-IDN-Encode (needs Debian patch for Perl 5.40+ compat)
        libnet-idn-encode-perl \
        gnumeric \
        # for dev
        # gnu readline
        libreadline-dev \
        # IO::AIO needed by Perl::LanguageServer
        libperl-dev \
        # needed to build Apache2::Connection::XForwardedFor
        libapache2-mod-perl2-dev \
        # OpenSSL dev needed by OIDC::Lite
        libssl-dev \
        # libheif 1.19+ in trixie uses plugins for codec support
        # needed by Imager::File::HEIF configure test
        libheif-plugin-x265 \
        libheif-plugin-libde265 \
        # Imager::zxing - build deps
        pkg-config \
        libzxing-dev \
        # Imager and Imager::File::* build dependencies
        libavif-dev \
        libde265-dev \
        libheif-dev \
        libjpeg-dev \
        libpng-dev \
        libwebp-dev

RUN curl -fsSL https://raw.githubusercontent.com/skaji/cpm/main/cpm -o /tmp/cpm && \
    mv /tmp/cpm /usr/bin/cpm && \
    chmod +x /usr/bin/cpm && \
    /usr/bin/cpm --version

# Run www-data user AS host user 'off' or developper uid
ARG USER_UID
ARG USER_GID
RUN usermod --uid $USER_UID www-data && \
    groupmod --gid $USER_GID www-data


######################
# Stage for installing/compiling cpanfile dependencies
######################
FROM modperl AS builder
ARG CPANMOPTS

ARG PO_LIB_DIR=/tmp/local

WORKDIR /tmp

# run apt update if needed because some package might need to apt install
RUN --mount=type=cache,id=apt-cache,target=/var/cache/apt \
    --mount=type=cache,id=lib-apt-cache,target=/var/lib/apt \
    --mount=type=cache,id=cpanm-cache,target=/root/.cpanm \
    --mount=type=cache,id=cpm-cache,target=/root/.perl-cpm \
    set -x && \
    ( ( [ ! -e /var/cache/apt/pkgcache.bin ] || [ $(($(date +%s) - $(stat --format=%Y /var/cache/apt/pkgcache.bin))) -gt 3600 ] ) && \
      apt-get update || true \
    ) && \
    # Install package dependencies in $PO_LIB_DIR
    export PERL_MM_OPT="INSTALL_BASE=$PO_LIB_DIR" && \
    export PERL_MB_OPT="--install_base $PO_LIB_DIR" && \
    export PERL5LIB="$PO_LIB_DIR/lib/perl5/:$PERL5LIB" && \
    export PATH="$PO_LIB_DIR/bin:$PATH" && \
    # first install some dependencies that are not well handled
    cpm install --show-build-log-on-failure -w $(nproc) -g "Apache::Bootstrap" && \
    # Install the JUnit renderer separately so tests can keep using --renderer=JUnit
    # without adding an unresolved dependency back into cpanfile.
    cpm install --show-build-log-on-failure -w $(nproc) -g "Test2::Harness::Renderer::JUnit"

# Add ProductOpener runtime dependencies from cpan
COPY ./cpanfile* /tmp/
RUN --mount=type=cache,id=apt-cache,target=/var/cache/apt \
    --mount=type=cache,id=lib-apt-cache,target=/var/lib/apt \
    --mount=type=cache,id=cpanm-cache,target=/root/.cpanm \
    --mount=type=cache,id=cpm-cache,target=/root/.perl-cpm \
    set -x && \
    # Install package dependencies in $PO_LIB_DIR
    export PERL_MM_OPT="INSTALL_BASE=/tmp/local/" && \ 
    export PERL_MB_OPT="--install_base /tmp/local/" && \
    export PERL5LIB="/tmp/local/lib/perl5/" && \
    cpm install $CPANMOPTS --show-build-log-on-failure -w $(nproc) -g

######################
# backend production image stage
######################
FROM modperl AS runnable

# Prepare Apache to include our custom config
RUN rm /etc/apache2/sites-enabled/000-default.conf

# Copy Perl libraries from the builder image
COPY --from=builder /tmp/local/ /opt/perl/local/
ENV PERL5LIB="/opt/product-opener/lib/:/opt/perl/local/lib/perl5/"
ENV PATH="/opt/perl/local/bin:${PATH}"
# Set up apache2 to use npm prefork
RUN \
    a2dismod mpm_event && \
    a2enmod mpm_prefork

# Create writable dirs and change ownership to www-data
RUN \
    mkdir -p var/run/apache2/ && \
    chown www-data:www-data var/run/apache2/ && \
    for path in data html_data users products product_images orgs logs new_images deleted_products_images reverted_products deleted_private_products translate deleted_products deleted.images import_files tmp build-cache/taxonomies debug sftp; do \
        mkdir -p /mnt/podata/${path}; \
    done && \
    chown www-data:www-data -R /mnt/podata && \
    # Create symlinks of data files that are indeed conf data in /mnt/podata (because we currently mix data and conf data)
    # NOTE: do not changes those links for they are in a volume, or handle migration in entry-point
    for path in external-data emb_codes ingredients madenearme packager-codes po taxonomies templates; do \
        ln -sf /opt/product-opener/${path} /mnt/podata/${path}; \
    done && \
    # Create some necessary files to ensure permissions in volumes
    mkdir -p /opt/product-opener/html/data/ && \
    mkdir -p /opt/product-opener/html/data/taxonomies/ && \
    mkdir -p /opt/product-opener/html/images/products && \
    chown www-data:www-data -R /opt/product-opener/html/ && \
    # inter services directories (until we get a real solution)
    for service in obf off opf opff; do \
        mkdir -p /srv/$service; \
        chown www-data:www-data -R /srv/$service; \
    done && \
    # logs dir
    mkdir -p /var/log/apache2/ && \
    chown www-data:www-data -R /var/log
# Install Product Opener from the workdir
COPY --chown=www-data:www-data . /opt/product-opener/

EXPOSE 80
COPY ./docker/docker-entrypoint.sh /
WORKDIR /opt/product-opener/
USER www-data
ENTRYPOINT [ "/docker-entrypoint.sh" ]
# default command is apache2ctl start
CMD ["apache2ctl", "-D", "FOREGROUND"]

######################
# Prod image is default
######################
FROM runnable AS prod