### STAGE 1: Develop ###### ARG SRC_PATH="/app/onlyoffice/src" ARG BUILD_PATH="/var/www" FROM ubuntu:20.10 AS develop ARG RELEASE_DATE="2016-06-21" ARG DEBIAN_FRONTEND=noninteractive ARG GIT_BRANCH="master" ARG SRC_PATH ARG BUILD_PATH LABEL onlyoffice.appserver.release-date="${RELEASE_DATE}" \ maintainer="Ascensio System SIA " ENV LANG=en_US.UTF-8 \ LANGUAGE=en_US:en \ LC_ALL=en_US.UTF-8 RUN echo "nameserver 8.8.8.8" | tee /etc/resolv.conf > /dev/null && \ apt-get -y update && \ apt-get -y upgrade && \ apt-get -y dist-upgrade && \ apt-get install -yq sudo locales && \ addgroup --system --gid 107 onlyoffice && \ adduser -uid 104 --quiet --home /var/www/onlyoffice --system --gid 107 onlyoffice && \ locale-gen en_US.UTF-8 && \ apt-get -y update && \ apt-get install -yq software-properties-common wget curl && \ curl -sL https://deb.nodesource.com/setup_12.x | sudo -E bash - && \ apt-get install -y nodejs && \ curl -sS https://dl.yarnpkg.com/debian/pubkey.gpg | sudo apt-key add - && \ echo "deb https://dl.yarnpkg.com/debian/ stable main" | sudo tee /etc/apt/sources.list.d/yarn.list && \ wget https://packages.microsoft.com/config/ubuntu/20.10/packages-microsoft-prod.deb -O packages-microsoft-prod.deb && \ dpkg -i packages-microsoft-prod.deb && \ apt-get -y update && \ apt-get install -y apt-transport-https && \ apt-get install -y apt-utils &&\ apt-get -y update && \ cd ~ && \ echo "#!/bin/sh\nexit 0" > /usr/sbin/policy-rc.d && \ apt-get install -yq git \ yarn \ dotnet-sdk-5.0 RUN echo "nameserver 8.8.8.8" | tee /etc/resolv.conf > /dev/null && \ echo ${GIT_BRANCH} && \ git clone --depth 1 -b ${GIT_BRANCH} https://github.com/ONLYOFFICE/AppServer.git ${SRC_PATH} RUN echo "nameserver 8.8.8.8" | tee /etc/resolv.conf > /dev/null && \ cd ${SRC_PATH} && \ mkdir -p /var/www/public/ && cp -rf public/* /var/www/public/ && \ mkdir -p /app/onlyoffice/config/ && cp -rf config/* /app/onlyoffice/config/ && \ mkdir -p /etc/nginx/conf.d && cp -f config/nginx/onlyoffice*.conf /etc/nginx/conf.d/ && \ mkdir -p /etc/nginx/includes/ && cp -f config/nginx/includes/onlyoffice*.conf /etc/nginx/includes/ && \ sed -e 's/#//' -i /etc/nginx/conf.d/onlyoffice.conf && \ cd ${SRC_PATH}/build/install/common/ && \ bash build-frontend.sh -sp ${SRC_PATH} && \ cd ${SRC_PATH} && yarn build && cd ${SRC_PATH}/build/install/common/ && \ bash build-backend.sh -sp ${SRC_PATH} && \ bash publish-backend.sh -sp ${SRC_PATH} -bp ${BUILD_PATH} -ar "--disable-parallel" COPY config/mysql/conf.d/mysql.cnf /etc/mysql/conf.d/mysql.cnf COPY config/supervisor/supervisord.conf /etc/supervisor/conf.d/supervisord.conf RUN sed -i 's/Server=.*;Port=/Server=127.0.0.1;Port=/' /app/onlyoffice/config/appsettings.test.json RUN rm -rf /var/lib/apt/lists/* ### STAGE 2: Build ### FROM mcr.microsoft.com/dotnet/aspnet:5.0.4-focal-amd64 as builder ARG BUILD_PATH ENV BUILD_PATH=${BUILD_PATH} COPY --from=develop /app/onlyoffice/config/ /app/onlyoffice/config/ # add defualt user and group for no-root run RUN mkdir -p /var/log/onlyoffice && \ mkdir -p /app/onlyoffice/data && \ addgroup --system --gid 107 onlyoffice && \ adduser -uid 104 --quiet --home /var/www/onlyoffice --system --gid 107 onlyoffice && \ chown onlyoffice:onlyoffice /app/onlyoffice -R && \ chown onlyoffice:onlyoffice /var/log -R && \ chown onlyoffice:onlyoffice /var/www -R RUN echo "nameserver 8.8.8.8" | tee /etc/resolv.conf > /dev/null && \ apt-get -y update && \ apt-get -y upgrade && \ apt-get install -yq nano && \ apt-get install -yq jq && \ apt-get install -yq nodejs && \ apt-get install -yq libgdiplus #USER onlyoffice EXPOSE 5050 ENTRYPOINT ["./docker-entrypoint.sh"] ### STAGE 3: Run ### ## NGINX ## FROM nginx AS web ARG SRC_PATH ARG BUILD_PATH RUN echo "nameserver 8.8.8.8" | tee /etc/resolv.conf > /dev/null && \ apt-get -y update && \ apt-get -y upgrade && \ apt-get install -yq vim && \ # Remove default nginx website rm -rf /usr/share/nginx/html/* # copy static services files and config values COPY --from=develop /etc/nginx/conf.d /etc/nginx/conf.d COPY --from=develop /etc/nginx/includes /etc/nginx/includes COPY --from=develop /var/www/public /var/www/public COPY --from=develop ${SRC_PATH}/products/ASC.CRM/Client/dist ${BUILD_PATH}/products/ASC.CRM/client COPY --from=develop ${SRC_PATH}/web/ASC.Web.Editor/dist ${BUILD_PATH}/products/ASC.Files/editor COPY --from=develop ${SRC_PATH}/products/ASC.Files/Client/dist ${BUILD_PATH}/products/ASC.Files/client COPY --from=develop ${SRC_PATH}/web/ASC.Web.Login/dist ${BUILD_PATH}/studio/login COPY --from=develop ${SRC_PATH}/products/ASC.People/Client/dist ${BUILD_PATH}/products/ASC.People/client COPY --from=develop ${SRC_PATH}/products/ASC.Projects/Client/dist ${BUILD_PATH}/products/ASC.Projects/client COPY --from=develop ${SRC_PATH}/web/ASC.Web.Client/dist ${BUILD_PATH}/studio/client COPY /config/nginx/templates/upstream.conf.template /etc/nginx/templates/upstream.conf.template # add defualt user and group for no-root run RUN chown nginx:nginx /etc/nginx/* -R && \ chown nginx:nginx /docker-entrypoint.d/* && \ # changes for upstream configure sed -i 's/localhost:5010/$service_api_system/' /etc/nginx/conf.d/onlyoffice.conf && \ sed -i 's/localhost:5012/$service_backup/' /etc/nginx/conf.d/onlyoffice.conf && \ sed -i 's/localhost:5021/$service_crm/' /etc/nginx/conf.d/onlyoffice.conf && \ sed -i 's/localhost:5007/$service_files/' /etc/nginx/conf.d/onlyoffice.conf && \ sed -i 's/localhost:5004/$service_people_server/' /etc/nginx/conf.d/onlyoffice.conf && \ sed -i 's/localhost:5020/$service_projects_server/' /etc/nginx/conf.d/onlyoffice.conf && \ sed -i 's/localhost:5000/$service_api/' /etc/nginx/conf.d/onlyoffice.conf && \ sed -i 's/localhost:5003/$service_studio/' /etc/nginx/conf.d/onlyoffice.conf && \ sed -i 's/localhost:9999/$service_urlshortener/' /etc/nginx/conf.d/onlyoffice.conf && \ sed -i 's/172.*/$document_server;/' /etc/nginx/conf.d/onlyoffice.conf && \ # configute the image nginx whith less privileged https://hub.docker.com/_/nginx sed -i 's/pid.*nginx.pid;/pid \/tmp\/nginx.pid;/' /etc/nginx/nginx.conf && \ sed -i 's/http.*{/http {\n client_body_temp_path \/tmp\/client_temp;\n proxy_temp_path \/tmp\/proxy_temp_path;\n fastcgi_temp_path \/tmp\/fastcgi_temp;\n uwsgi_temp_path \/tmp\/uwsgi_temp;\n scgi_temp_path \/tmp\/scgi_temp;/' /etc/nginx/nginx.conf ## ASC.ApiSystem ## FROM builder AS api_system WORKDIR ${BUILD_PATH}/services/apisystem/ COPY --chown=onlyoffice:onlyoffice docker-entrypoint.sh . COPY --from=develop --chown=onlyoffice:onlyoffice ${BUILD_PATH}/services/ASC.ApiSystem/service . CMD ["ASC.ApiSystem.dll", "ASC.ApiSystem"] ## ASC.Data.Backup ## FROM builder AS backup WORKDIR ${BUILD_PATH}/services/backup/ COPY --chown=onlyoffice:onlyoffice docker-entrypoint.sh . COPY --from=develop --chown=onlyoffice:onlyoffice ${BUILD_PATH}/services/ASC.Data.Backup/service . CMD ["ASC.Data.Backup.dll", "ASC.Data.Backup", "core:products:folder=/var/www/products/", "core:products:subfolder=server"] ## ASC.CRM ## FROM builder AS crm WORKDIR ${BUILD_PATH}/products/ASC.CRM/server/ COPY --chown=onlyoffice:onlyoffice docker-entrypoint.sh . COPY --from=develop --chown=onlyoffice:onlyoffice ${BUILD_PATH}/products/ASC.CRM/server/ . CMD ["ASC.CRM.dll", "ASC.CRM"] ## ASC.Data.Storage.Encryption ## FROM builder AS data_storage_encryption WORKDIR ${BUILD_PATH}/services/storage.encryption/ COPY --chown=onlyoffice:onlyoffice docker-entrypoint.sh . COPY --from=develop --chown=onlyoffice:onlyoffice ${BUILD_PATH}/services/ASC.Data.Storage.Encryption/service/ . CMD ["ASC.Data.Storage.Encryption.dll", "ASC.Data.Storage.Encryption"] ## ASC.Files ## FROM builder AS files WORKDIR ${BUILD_PATH}/products/ASC.Files/server/ COPY --chown=onlyoffice:onlyoffice docker-entrypoint.sh . COPY --from=develop --chown=onlyoffice:onlyoffice ${BUILD_PATH}/products/ASC.Files/server/ . CMD ["ASC.Files.dll", "ASC.Files"] ## ASC.Files.Service ## FROM builder AS files_services WORKDIR ${BUILD_PATH}/products/ASC.Files/service/ COPY --chown=onlyoffice:onlyoffice docker-entrypoint.sh . COPY --from=develop --chown=onlyoffice:onlyoffice ${BUILD_PATH}/services/ASC.Files.Service/service/ . CMD ["ASC.Files.Service.dll", "ASC.Files.Service", "core:products:folder=/var/www/products/", "core:products:subfolder=server"] ## ASC.Data.Storage.Migration ## FROM builder AS data_storage_migration WORKDIR ${BUILD_PATH}/services/storage.migration/service/ COPY --chown=onlyoffice:onlyoffice docker-entrypoint.sh . COPY --from=develop --chown=onlyoffice:onlyoffice ${BUILD_PATH}/services/ASC.Data.Storage.Migration/service/ . CMD ["ASC.Data.Storage.Migration.dll", "ASC.Data.Storage.Migration"] ## ASC.Notify ## FROM builder AS notify WORKDIR ${BUILD_PATH}/services/notify/service COPY --chown=onlyoffice:onlyoffice docker-entrypoint.sh . COPY --from=develop --chown=onlyoffice:onlyoffice ${BUILD_PATH}/services/ASC.Notify/service/ . CMD ["ASC.Notify.dll", "ASC.Notify", "core:products:folder=/var/www/products/", "core:products:subfolder=server"] ## ASC.People ## FROM builder AS people_server WORKDIR ${BUILD_PATH}/products/ASC.People/server/ COPY --chown=onlyoffice:onlyoffice docker-entrypoint.sh . COPY --from=develop --chown=onlyoffice:onlyoffice ${BUILD_PATH}/products/ASC.People/server/ . CMD ["ASC.People.dll", "ASC.People"] ## ASC.Projects ## FROM builder AS projects_server WORKDIR ${BUILD_PATH}/products/ASC.Projects/server/ COPY --chown=onlyoffice:onlyoffice docker-entrypoint.sh . COPY --from=develop --chown=onlyoffice:onlyoffice ${BUILD_PATH}/products/ASC.Projects/server/ . CMD ["ASC.Projects.dll", "ASC.Projects"] ## ASC.Socket.IO.Svc ## FROM builder AS socket WORKDIR ${BUILD_PATH}/services/socket/ COPY --chown=onlyoffice:onlyoffice docker-entrypoint.sh . COPY --from=develop --chown=onlyoffice:onlyoffice ${BUILD_PATH}/services/ASC.Socket.IO.Svc/service/ . COPY --from=develop --chown=onlyoffice:onlyoffice ${BUILD_PATH}/services/ASC.Socket.IO/service/ ${BUILD_PATH}/www/ASC.Socket.IO/ CMD ["ASC.Socket.IO.Svc.dll", "ASC.Socket.IO.Svc"] ## ASC.Studio.Notify ## FROM builder AS studio_notify WORKDIR ${BUILD_PATH}/services/studio.notify/service/ COPY --chown=onlyoffice:onlyoffice docker-entrypoint.sh . COPY --from=develop --chown=onlyoffice:onlyoffice ${BUILD_PATH}/services/ASC.Studio.Notify/service/ . CMD ["ASC.Studio.Notify.dll", "ASC.Studio.Notify", "core:products:folder=/var/www/products/", "core:products:subfolder=server"] ## ASC.TelegramService ## FROM builder AS telegram_service WORKDIR ${BUILD_PATH}/services/telegram/ COPY --chown=onlyoffice:onlyoffice docker-entrypoint.sh . COPY --from=develop --chown=onlyoffice:onlyoffice ${BUILD_PATH}/services/ASC.TelegramService/service/ . CMD ["ASC.TelegramService.dll", "ASC.TelegramService"] ## ASC.Thumbnails.Svc ## FROM builder AS thumbnails WORKDIR ${BUILD_PATH}/services/thumb/service/ COPY --chown=onlyoffice:onlyoffice docker-entrypoint.sh . COPY --from=develop --chown=onlyoffice:onlyoffice ${BUILD_PATH}/services/ASC.Thumbnails.Svc/service/ . COPY --from=develop --chown=onlyoffice:onlyoffice ${BUILD_PATH}/services/ASC.Thumbnails/service/ /var/www/services/thumb/client CMD ["ASC.Thumbnails.Svc.dll", "ASC.Thumbnails.Svc"] ## ASC.UrlShortener.Svc ## FROM builder AS urlshortener WORKDIR ${BUILD_PATH}/services/urlshortener/service/ COPY --chown=onlyoffice:onlyoffice docker-entrypoint.sh . COPY --from=develop --chown=onlyoffice:onlyoffice ${BUILD_PATH}/services/ASC.UrlShortener.Svc/service/ . COPY --from=develop --chown=onlyoffice:onlyoffice ${BUILD_PATH}/services/ASC.UrlShortener/service/ /var/www/services/urlshortener/client CMD ["ASC.UrlShortener.Svc.dll", "ASC.UrlShortener.Svc"] ## ASC.Web.Api ## FROM builder AS api WORKDIR ${BUILD_PATH}/studio/api/ COPY --chown=onlyoffice:onlyoffice docker-entrypoint.sh . COPY --from=develop --chown=onlyoffice:onlyoffice ${BUILD_PATH}/services/ASC.Web.Api/service/ . CMD ["ASC.Web.Api.dll", "ASC.Web.Api"] ## ASC.Web.Studio ## FROM builder AS studio WORKDIR ${BUILD_PATH}/studio/server/ COPY --chown=onlyoffice:onlyoffice docker-entrypoint.sh . COPY --from=develop --chown=onlyoffice:onlyoffice ${BUILD_PATH}/services/ASC.Web.Studio/service/ . CMD ["ASC.Web.Studio.dll", "ASC.Web.Studio"]