10 changed files with 705 additions and 2 deletions
-
4anygroup.yml
-
4requirements.yml
-
32roles/nginx/tasks/files/20-envsubst-on-templates.sh
-
188roles/nginx/tasks/files/30-tune-worker-processes.sh
-
30roles/nginx/tasks/main.yml
-
69roles/php/files/docker-php-ext-configure
-
121roles/php/files/docker-php-ext-enable
-
143roles/php/files/docker-php-ext-install
-
34roles/php/files/docker-php-source
-
82roles/php/tasks/main.yml
@ -1,8 +1,8 @@ |
|||
--- |
|||
- hosts: debian10 |
|||
roles: |
|||
- common |
|||
- anyrole |
|||
- nginx |
|||
- php |
|||
|
|||
# Associate further roles to servers in specific group in this file... |
|||
|
|||
|
|||
@ -0,0 +1,4 @@ |
|||
--- |
|||
collections: |
|||
- name: nginxinc.nginx_core |
|||
version: 0.8.0 |
|||
@ -0,0 +1,32 @@ |
|||
#!/bin/sh |
|||
|
|||
set -e |
|||
|
|||
ME=$(basename $0) |
|||
|
|||
auto_envsubst() { |
|||
local template_dir="${NGINX_ENVSUBST_TEMPLATE_DIR:-/etc/nginx/templates}" |
|||
local suffix="${NGINX_ENVSUBST_TEMPLATE_SUFFIX:-.template}" |
|||
local output_dir="${NGINX_ENVSUBST_OUTPUT_DIR:-/etc/nginx/conf.d}" |
|||
|
|||
local template defined_envs relative_path output_path subdir |
|||
defined_envs=$(printf '${%s} ' $(env | cut -d= -f1)) |
|||
[ -d "$template_dir" ] || return 0 |
|||
if [ ! -w "$output_dir" ]; then |
|||
echo >&3 "$ME: ERROR: $template_dir exists, but $output_dir is not writable" |
|||
return 0 |
|||
fi |
|||
find "$template_dir" -follow -type f -name "*$suffix" -print | while read -r template; do |
|||
relative_path="${template#$template_dir/}" |
|||
output_path="$output_dir/${relative_path%$suffix}" |
|||
subdir=$(dirname "$relative_path") |
|||
# create a subdirectory where the template file exists |
|||
mkdir -p "$output_dir/$subdir" |
|||
echo >&3 "$ME: Running envsubst on $template to $output_path" |
|||
envsubst "$defined_envs" < "$template" > "$output_path" |
|||
done |
|||
} |
|||
|
|||
auto_envsubst |
|||
|
|||
exit 0 |
|||
@ -0,0 +1,188 @@ |
|||
#!/bin/sh |
|||
# vim:sw=2:ts=2:sts=2:et |
|||
|
|||
set -eu |
|||
|
|||
LC_ALL=C |
|||
ME=$( basename "$0" ) |
|||
PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin |
|||
|
|||
[ "${NGINX_ENTRYPOINT_WORKER_PROCESSES_AUTOTUNE:-}" ] || exit 0 |
|||
|
|||
touch /etc/nginx/nginx.conf 2>/dev/null || { echo >&2 "$ME: error: can not modify /etc/nginx/nginx.conf (read-only file system?)"; exit 0; } |
|||
|
|||
ceildiv() { |
|||
num=$1 |
|||
div=$2 |
|||
echo $(( (num + div - 1) / div )) |
|||
} |
|||
|
|||
get_cpuset() { |
|||
cpusetroot=$1 |
|||
cpusetfile=$2 |
|||
ncpu=0 |
|||
[ -f "$cpusetroot/$cpusetfile" ] || return 1 |
|||
for token in $( tr ',' ' ' < "$cpusetroot/$cpusetfile" ); do |
|||
case "$token" in |
|||
*-*) |
|||
count=$( seq $(echo "$token" | tr '-' ' ') | wc -l ) |
|||
ncpu=$(( ncpu+count )) |
|||
;; |
|||
*) |
|||
ncpu=$(( ncpu+1 )) |
|||
;; |
|||
esac |
|||
done |
|||
echo "$ncpu" |
|||
} |
|||
|
|||
get_quota() { |
|||
cpuroot=$1 |
|||
ncpu=0 |
|||
[ -f "$cpuroot/cpu.cfs_quota_us" ] || return 1 |
|||
[ -f "$cpuroot/cpu.cfs_period_us" ] || return 1 |
|||
cfs_quota=$( cat "$cpuroot/cpu.cfs_quota_us" ) |
|||
cfs_period=$( cat "$cpuroot/cpu.cfs_period_us" ) |
|||
[ "$cfs_quota" = "-1" ] && return 1 |
|||
[ "$cfs_period" = "0" ] && return 1 |
|||
ncpu=$( ceildiv "$cfs_quota" "$cfs_period" ) |
|||
[ "$ncpu" -gt 0 ] || return 1 |
|||
echo "$ncpu" |
|||
} |
|||
|
|||
get_quota_v2() { |
|||
cpuroot=$1 |
|||
ncpu=0 |
|||
[ -f "$cpuroot/cpu.max" ] || return 1 |
|||
cfs_quota=$( cut -d' ' -f 1 < "$cpuroot/cpu.max" ) |
|||
cfs_period=$( cut -d' ' -f 2 < "$cpuroot/cpu.max" ) |
|||
[ "$cfs_quota" = "max" ] && return 1 |
|||
[ "$cfs_period" = "0" ] && return 1 |
|||
ncpu=$( ceildiv "$cfs_quota" "$cfs_period" ) |
|||
[ "$ncpu" -gt 0 ] || return 1 |
|||
echo "$ncpu" |
|||
} |
|||
|
|||
get_cgroup_v1_path() { |
|||
needle=$1 |
|||
found= |
|||
foundroot= |
|||
mountpoint= |
|||
|
|||
[ -r "/proc/self/mountinfo" ] || return 1 |
|||
[ -r "/proc/self/cgroup" ] || return 1 |
|||
|
|||
while IFS= read -r line; do |
|||
case "$needle" in |
|||
"cpuset") |
|||
case "$line" in |
|||
*cpuset*) |
|||
found=$( echo "$line" | cut -d ' ' -f 4,5 ) |
|||
break |
|||
;; |
|||
esac |
|||
;; |
|||
"cpu") |
|||
case "$line" in |
|||
*cpuset*) |
|||
;; |
|||
*cpu,cpuacct*|*cpuacct,cpu|*cpuacct*|*cpu*) |
|||
found=$( echo "$line" | cut -d ' ' -f 4,5 ) |
|||
break |
|||
;; |
|||
esac |
|||
esac |
|||
done << __EOF__ |
|||
$( grep -F -- '- cgroup ' /proc/self/mountinfo ) |
|||
__EOF__ |
|||
|
|||
while IFS= read -r line; do |
|||
controller=$( echo "$line" | cut -d: -f 2 ) |
|||
case "$needle" in |
|||
"cpuset") |
|||
case "$controller" in |
|||
cpuset) |
|||
mountpoint=$( echo "$line" | cut -d: -f 3 ) |
|||
break |
|||
;; |
|||
esac |
|||
;; |
|||
"cpu") |
|||
case "$controller" in |
|||
cpu,cpuacct|cpuacct,cpu|cpuacct|cpu) |
|||
mountpoint=$( echo "$line" | cut -d: -f 3 ) |
|||
break |
|||
;; |
|||
esac |
|||
;; |
|||
esac |
|||
done << __EOF__ |
|||
$( grep -F -- 'cpu' /proc/self/cgroup ) |
|||
__EOF__ |
|||
|
|||
case "${found%% *}" in |
|||
"/") |
|||
foundroot="${found##* }$mountpoint" |
|||
;; |
|||
"$mountpoint") |
|||
foundroot="${found##* }" |
|||
;; |
|||
esac |
|||
echo "$foundroot" |
|||
} |
|||
|
|||
get_cgroup_v2_path() { |
|||
found= |
|||
foundroot= |
|||
mountpoint= |
|||
|
|||
[ -r "/proc/self/mountinfo" ] || return 1 |
|||
[ -r "/proc/self/cgroup" ] || return 1 |
|||
|
|||
while IFS= read -r line; do |
|||
found=$( echo "$line" | cut -d ' ' -f 4,5 ) |
|||
done << __EOF__ |
|||
$( grep -F -- '- cgroup2 ' /proc/self/mountinfo ) |
|||
__EOF__ |
|||
|
|||
while IFS= read -r line; do |
|||
mountpoint=$( echo "$line" | cut -d: -f 3 ) |
|||
done << __EOF__ |
|||
$( grep -F -- '0::' /proc/self/cgroup ) |
|||
__EOF__ |
|||
|
|||
case "${found%% *}" in |
|||
"") |
|||
return 1 |
|||
;; |
|||
"/") |
|||
foundroot="${found##* }$mountpoint" |
|||
;; |
|||
"$mountpoint") |
|||
foundroot="${found##* }" |
|||
;; |
|||
esac |
|||
echo "$foundroot" |
|||
} |
|||
|
|||
ncpu_online=$( getconf _NPROCESSORS_ONLN ) |
|||
ncpu_cpuset= |
|||
ncpu_quota= |
|||
ncpu_cpuset_v2= |
|||
ncpu_quota_v2= |
|||
|
|||
cpuset=$( get_cgroup_v1_path "cpuset" ) && ncpu_cpuset=$( get_cpuset "$cpuset" "cpuset.effective_cpus" ) || ncpu_cpuset=$ncpu_online |
|||
cpu=$( get_cgroup_v1_path "cpu" ) && ncpu_quota=$( get_quota "$cpu" ) || ncpu_quota=$ncpu_online |
|||
cgroup_v2=$( get_cgroup_v2_path ) && ncpu_cpuset_v2=$( get_cpuset "$cgroup_v2" "cpuset.cpus.effective" ) || ncpu_cpuset_v2=$ncpu_online |
|||
cgroup_v2=$( get_cgroup_v2_path ) && ncpu_quota_v2=$( get_quota_v2 "$cgroup_v2" ) || ncpu_quota_v2=$ncpu_online |
|||
|
|||
ncpu=$( printf "%s\n%s\n%s\n%s\n%s\n" \ |
|||
"$ncpu_online" \ |
|||
"$ncpu_cpuset" \ |
|||
"$ncpu_quota" \ |
|||
"$ncpu_cpuset_v2" \ |
|||
"$ncpu_quota_v2" \ |
|||
| sort -n \ |
|||
| head -n 1 ) |
|||
|
|||
sed -i.bak -r 's/^(worker_processes)(.*)$/# Commented out by '"$ME"' on '"$(date)"'\n#\1\2\n\1 '"$ncpu"';/' /etc/nginx/nginx.conf |
|||
@ -0,0 +1,30 @@ |
|||
--- |
|||
- name: Set ENV vars |
|||
lineinfile: |
|||
dest: ~/.bashrc |
|||
line: "{{item}}" |
|||
loop: |
|||
- 'export NGINX_VERSION="1.21.3"' |
|||
- 'export NJS_VERSION="0.6.2"' |
|||
- 'export PKG_RELEASE="1~buster"' |
|||
|
|||
- name: Install gnupg |
|||
shell: apt-get update && apt-get install --no-install-recommends --no-install-suggests -y gnupg1 gnupg2 gnupg ca-certificates |
|||
|
|||
- name: Install nginx |
|||
environment: |
|||
NGINX_GPGKEY: 573BFD6B3D8FBC641079A6ABABF5BD827BD9BF62 |
|||
shell: >- |
|||
set -x && addgroup --system --gid 101 nginx && adduser --system --disabled-login --ingroup nginx --no-create-home --home /nonexistent --gecos "nginx user" --shell /bin/false --uid 101 nginx && found=''; for server in ha.pool.sks-keyservers.net hkp://keyserver.ubuntu.com:80 hkp://p80.pool.sks-keyservers.net:80 pgp.mit.edu ; do echo "Fetching GPG key $NGINX_GPGKEY from $server"; apt-key adv --keyserver "$server" --keyserver-options timeout=10 --recv-keys "$NGINX_GPGKEY" && found=yes && break; done; test -z "$found" && echo >&2 "error: failed to fetch GPG key $NGINX_GPGKEY" && exit 1; apt-get remove --purge --auto-remove -y gnupg1 && rm -rf /var/lib/apt/lists/* && dpkgArch="$(dpkg --print-architecture)" && nginxPackages=" nginx=${NGINX_VERSION}-${PKG_RELEASE} nginx-module-xslt=${NGINX_VERSION}-${PKG_RELEASE} nginx-module-geoip=${NGINX_VERSION}-${PKG_RELEASE} nginx-module-image-filter=${NGINX_VERSION}-${PKG_RELEASE} nginx-module-njs=${NGINX_VERSION}+${NJS_VERSION}-${PKG_RELEASE} " && case "$dpkgArch" in amd64|i386|arm64) echo "deb https://nginx.org/packages/mainline/debian/ buster nginx" >> /etc/apt/sources.list.d/nginx.list && apt-get update ;; *) echo "deb-src https://nginx.org/packages/mainline/debian/ buster nginx" >> /etc/apt/sources.list.d/nginx.list && tempDir="$(mktemp -d)" && chmod 777 "$tempDir" && savedAptMark="$(apt-mark showmanual)" && apt-get update && apt-get build-dep -y $nginxPackages && ( cd "$tempDir" && DEB_BUILD_OPTIONS="nocheck parallel=$(nproc)" apt-get source --compile $nginxPackages ) && apt-mark showmanual | xargs apt-mark auto > /dev/null && { [ -z "$savedAptMark" ] || apt-mark manual $savedAptMark; } && ls -lAFh "$tempDir" && ( cd "$tempDir" && dpkg-scanpackages . > Packages ) && grep '^Package: ' "$tempDir/Packages" && echo "deb [ trusted=yes ] file://$tempDir ./" > /etc/apt/sources.list.d/temp.list && apt-get -o Acquire::GzipIndexes=false update ;; esac && apt-get install --no-install-recommends --no-install-suggests -y $nginxPackages gettext-base curl && apt-get remove --purge --auto-remove -y && rm -rf /var/lib/apt/lists/* /etc/apt/sources.list.d/nginx.list && if [ -n "$tempDir" ]; then apt-get purge -y --auto-remove && rm -rf "$tempDir" /etc/apt/sources.list.d/temp.list; fi && ln -sf /dev/stdout /var/log/nginx/access.log && ln -sf /dev/stderr /var/log/nginx/error.log |
|||
|
|||
- name: Create dir for additional helper scripts /docker-entrypoint.d |
|||
shell: mkdir -p /docker-entrypoint.d |
|||
|
|||
- name: Copy envsubst and tune worker to /docker-entrypoint.d |
|||
copy: |
|||
src: "{{item}}" |
|||
dest: /docker-entrypoint.d |
|||
mode: 0744 |
|||
loop: |
|||
- 20-envsubst-on-templates.sh |
|||
- 30-tune-worker-processes.sh |
|||
@ -0,0 +1,69 @@ |
|||
#!/bin/sh |
|||
set -e |
|||
|
|||
# prefer user supplied CFLAGS, but default to our PHP_CFLAGS |
|||
: ${CFLAGS:=$PHP_CFLAGS} |
|||
: ${CPPFLAGS:=$PHP_CPPFLAGS} |
|||
: ${LDFLAGS:=$PHP_LDFLAGS} |
|||
export CFLAGS CPPFLAGS LDFLAGS |
|||
|
|||
srcExists= |
|||
if [ -d /usr/src/php ]; then |
|||
srcExists=1 |
|||
fi |
|||
docker-php-source extract |
|||
if [ -z "$srcExists" ]; then |
|||
touch /usr/src/php/.docker-delete-me |
|||
fi |
|||
|
|||
cd /usr/src/php/ext |
|||
|
|||
usage() { |
|||
echo "usage: $0 ext-name [configure flags]" |
|||
echo " ie: $0 gd --with-jpeg-dir=/usr/local/something" |
|||
echo |
|||
echo 'Possible values for ext-name:' |
|||
find . \ |
|||
-mindepth 2 \ |
|||
-maxdepth 2 \ |
|||
-type f \ |
|||
-name 'config.m4' \ |
|||
| xargs -n1 dirname \ |
|||
| xargs -n1 basename \ |
|||
| sort \ |
|||
| xargs |
|||
echo |
|||
echo 'Some of the above modules are already compiled into PHP; please check' |
|||
echo 'the output of "php -i" to see which modules are already loaded.' |
|||
} |
|||
|
|||
ext="$1" |
|||
if [ -z "$ext" ] || [ ! -d "$ext" ]; then |
|||
usage >&2 |
|||
exit 1 |
|||
fi |
|||
shift |
|||
|
|||
pm='unknown' |
|||
if [ -e /lib/apk/db/installed ]; then |
|||
pm='apk' |
|||
fi |
|||
|
|||
if [ "$pm" = 'apk' ]; then |
|||
if \ |
|||
[ -n "$PHPIZE_DEPS" ] \ |
|||
&& ! apk info --installed .phpize-deps > /dev/null \ |
|||
&& ! apk info --installed .phpize-deps-configure > /dev/null \ |
|||
; then |
|||
apk add --no-cache --virtual .phpize-deps-configure $PHPIZE_DEPS |
|||
fi |
|||
fi |
|||
|
|||
if command -v dpkg-architecture > /dev/null; then |
|||
gnuArch="$(dpkg-architecture --query DEB_BUILD_GNU_TYPE)" |
|||
set -- --build="$gnuArch" "$@" |
|||
fi |
|||
|
|||
cd "$ext" |
|||
phpize |
|||
./configure --enable-option-checking=fatal "$@" |
|||
@ -0,0 +1,121 @@ |
|||
#!/bin/sh |
|||
set -e |
|||
|
|||
extDir="$(php -d 'display_errors=stderr' -r 'echo ini_get("extension_dir");')" |
|||
cd "$extDir" |
|||
|
|||
usage() { |
|||
echo "usage: $0 [options] module-name [module-name ...]" |
|||
echo " ie: $0 gd mysqli" |
|||
echo " $0 pdo pdo_mysql" |
|||
echo " $0 --ini-name 0-apc.ini apcu apc" |
|||
echo |
|||
echo 'Possible values for module-name:' |
|||
find -maxdepth 1 \ |
|||
-type f \ |
|||
-name '*.so' \ |
|||
-exec basename '{}' ';' \ |
|||
| sort \ |
|||
| xargs |
|||
echo |
|||
echo 'Some of the above modules are already compiled into PHP; please check' |
|||
echo 'the output of "php -i" to see which modules are already loaded.' |
|||
} |
|||
|
|||
opts="$(getopt -o 'h?' --long 'help,ini-name:' -- "$@" || { usage >&2 && false; })" |
|||
eval set -- "$opts" |
|||
|
|||
iniName= |
|||
while true; do |
|||
flag="$1" |
|||
shift |
|||
case "$flag" in |
|||
--help|-h|'-?') usage && exit 0 ;; |
|||
--ini-name) iniName="$1" && shift ;; |
|||
--) break ;; |
|||
*) |
|||
{ |
|||
echo "error: unknown flag: $flag" |
|||
usage |
|||
} >&2 |
|||
exit 1 |
|||
;; |
|||
esac |
|||
done |
|||
|
|||
modules= |
|||
for module; do |
|||
if [ -z "$module" ]; then |
|||
continue |
|||
fi |
|||
if ! [ -f "$module" ] && ! [ -f "$module.so" ]; then |
|||
echo >&2 "error: '$module' does not exist" |
|||
echo >&2 |
|||
usage >&2 |
|||
exit 1 |
|||
fi |
|||
modules="$modules $module" |
|||
done |
|||
|
|||
if [ -z "$modules" ]; then |
|||
usage >&2 |
|||
exit 1 |
|||
fi |
|||
|
|||
pm='unknown' |
|||
if [ -e /lib/apk/db/installed ]; then |
|||
pm='apk' |
|||
fi |
|||
|
|||
apkDel= |
|||
if [ "$pm" = 'apk' ]; then |
|||
if \ |
|||
[ -n "$PHPIZE_DEPS" ] \ |
|||
&& ! apk info --installed .phpize-deps > /dev/null \ |
|||
&& ! apk info --installed .phpize-deps-configure > /dev/null \ |
|||
; then |
|||
apk add --no-cache --virtual '.docker-php-ext-enable-deps' binutils |
|||
apkDel='.docker-php-ext-enable-deps' |
|||
fi |
|||
fi |
|||
|
|||
for module in $modules; do |
|||
moduleFile="$module" |
|||
if [ -f "$module.so" ] && ! [ -f "$module" ]; then |
|||
moduleFile="$module.so" |
|||
fi |
|||
if readelf --wide --syms "$moduleFile" | grep -q ' zend_extension_entry$'; then |
|||
# https://wiki.php.net/internals/extensions#loading_zend_extensions |
|||
line="zend_extension=$module" |
|||
else |
|||
line="extension=$module" |
|||
fi |
|||
|
|||
ext="$(basename "$module")" |
|||
ext="${ext%.*}" |
|||
if php -d 'display_errors=stderr' -r 'exit(extension_loaded("'"$ext"'") ? 0 : 1);'; then |
|||
# this isn't perfect, but it's better than nothing |
|||
# (for example, 'opcache.so' presents inside PHP as 'Zend OPcache', not 'opcache') |
|||
echo >&2 |
|||
echo >&2 "warning: $ext ($module) is already loaded!" |
|||
echo >&2 |
|||
continue |
|||
fi |
|||
|
|||
case "$iniName" in |
|||
/*) |
|||
# allow an absolute path |
|||
ini="$iniName" |
|||
;; |
|||
*) |
|||
ini="$PHP_INI_DIR/conf.d/${iniName:-"docker-php-ext-$ext.ini"}" |
|||
;; |
|||
esac |
|||
if ! grep -qFx -e "$line" -e "$line.so" "$ini" 2>/dev/null; then |
|||
echo "$line" >> "$ini" |
|||
fi |
|||
done |
|||
|
|||
if [ "$pm" = 'apk' ] && [ -n "$apkDel" ]; then |
|||
apk del --no-network $apkDel |
|||
fi |
|||
@ -0,0 +1,143 @@ |
|||
#!/bin/sh |
|||
set -e |
|||
|
|||
# prefer user supplied CFLAGS, but default to our PHP_CFLAGS |
|||
: ${CFLAGS:=$PHP_CFLAGS} |
|||
: ${CPPFLAGS:=$PHP_CPPFLAGS} |
|||
: ${LDFLAGS:=$PHP_LDFLAGS} |
|||
export CFLAGS CPPFLAGS LDFLAGS |
|||
|
|||
srcExists= |
|||
if [ -d /usr/src/php ]; then |
|||
srcExists=1 |
|||
fi |
|||
docker-php-source extract |
|||
if [ -z "$srcExists" ]; then |
|||
touch /usr/src/php/.docker-delete-me |
|||
fi |
|||
|
|||
cd /usr/src/php/ext |
|||
|
|||
usage() { |
|||
echo "usage: $0 [-jN] [--ini-name file.ini] ext-name [ext-name ...]" |
|||
echo " ie: $0 gd mysqli" |
|||
echo " $0 pdo pdo_mysql" |
|||
echo " $0 -j5 gd mbstring mysqli pdo pdo_mysql shmop" |
|||
echo |
|||
echo 'if custom ./configure arguments are necessary, see docker-php-ext-configure' |
|||
echo |
|||
echo 'Possible values for ext-name:' |
|||
find . \ |
|||
-mindepth 2 \ |
|||
-maxdepth 2 \ |
|||
-type f \ |
|||
-name 'config.m4' \ |
|||
| xargs -n1 dirname \ |
|||
| xargs -n1 basename \ |
|||
| sort \ |
|||
| xargs |
|||
echo |
|||
echo 'Some of the above modules are already compiled into PHP; please check' |
|||
echo 'the output of "php -i" to see which modules are already loaded.' |
|||
} |
|||
|
|||
opts="$(getopt -o 'h?j:' --long 'help,ini-name:,jobs:' -- "$@" || { usage >&2 && false; })" |
|||
eval set -- "$opts" |
|||
|
|||
j=1 |
|||
iniName= |
|||
while true; do |
|||
flag="$1" |
|||
shift |
|||
case "$flag" in |
|||
--help|-h|'-?') usage && exit 0 ;; |
|||
--ini-name) iniName="$1" && shift ;; |
|||
--jobs|-j) j="$1" && shift ;; |
|||
--) break ;; |
|||
*) |
|||
{ |
|||
echo "error: unknown flag: $flag" |
|||
usage |
|||
} >&2 |
|||
exit 1 |
|||
;; |
|||
esac |
|||
done |
|||
|
|||
exts= |
|||
for ext; do |
|||
if [ -z "$ext" ]; then |
|||
continue |
|||
fi |
|||
if [ ! -d "$ext" ]; then |
|||
echo >&2 "error: $PWD/$ext does not exist" |
|||
echo >&2 |
|||
usage >&2 |
|||
exit 1 |
|||
fi |
|||
exts="$exts $ext" |
|||
done |
|||
|
|||
if [ -z "$exts" ]; then |
|||
usage >&2 |
|||
exit 1 |
|||
fi |
|||
|
|||
pm='unknown' |
|||
if [ -e /lib/apk/db/installed ]; then |
|||
pm='apk' |
|||
fi |
|||
|
|||
apkDel= |
|||
if [ "$pm" = 'apk' ]; then |
|||
if [ -n "$PHPIZE_DEPS" ]; then |
|||
if apk info --installed .phpize-deps-configure > /dev/null; then |
|||
apkDel='.phpize-deps-configure' |
|||
elif ! apk info --installed .phpize-deps > /dev/null; then |
|||
apk add --no-cache --virtual .phpize-deps $PHPIZE_DEPS |
|||
apkDel='.phpize-deps' |
|||
fi |
|||
fi |
|||
fi |
|||
|
|||
popDir="$PWD" |
|||
for ext in $exts; do |
|||
cd "$ext" |
|||
|
|||
[ -e Makefile ] || docker-php-ext-configure "$ext" |
|||
|
|||
make -j"$j" |
|||
|
|||
if ! php -n -d 'display_errors=stderr' -r 'exit(ZEND_DEBUG_BUILD ? 0 : 1);' > /dev/null; then |
|||
# only "strip" modules if we aren't using a debug build of PHP |
|||
# (none of our builds are debug builds, but PHP might be recompiled with "--enable-debug" configure option) |
|||
# https://github.com/docker-library/php/issues/1268 |
|||
|
|||
find modules \ |
|||
-maxdepth 1 \ |
|||
-name '*.so' \ |
|||
-exec sh -euxc ' \ |
|||
strip --strip-all "$@" || : |
|||
' -- '{}' + |
|||
fi |
|||
|
|||
make -j"$j" install |
|||
|
|||
find modules \ |
|||
-maxdepth 1 \ |
|||
-name '*.so' \ |
|||
-exec basename '{}' ';' \ |
|||
| xargs -r docker-php-ext-enable ${iniName:+--ini-name "$iniName"} |
|||
|
|||
make -j"$j" clean |
|||
|
|||
cd "$popDir" |
|||
done |
|||
|
|||
if [ "$pm" = 'apk' ] && [ -n "$apkDel" ]; then |
|||
apk del --no-network $apkDel |
|||
fi |
|||
|
|||
if [ -e /usr/src/php/.docker-delete-me ]; then |
|||
docker-php-source delete |
|||
fi |
|||
@ -0,0 +1,34 @@ |
|||
#!/bin/sh |
|||
set -e |
|||
|
|||
dir=/usr/src/php |
|||
|
|||
usage() { |
|||
echo "usage: $0 COMMAND" |
|||
echo |
|||
echo "Manage php source tarball lifecycle." |
|||
echo |
|||
echo "Commands:" |
|||
echo " extract extract php source tarball into directory $dir if not already done." |
|||
echo " delete delete extracted php source located into $dir if not already done." |
|||
echo |
|||
} |
|||
|
|||
case "$1" in |
|||
extract) |
|||
mkdir -p "$dir" |
|||
if [ ! -f "$dir/.docker-extracted" ]; then |
|||
tar -Jxf /usr/src/php.tar.xz -C "$dir" --strip-components=1 |
|||
touch "$dir/.docker-extracted" |
|||
fi |
|||
;; |
|||
|
|||
delete) |
|||
rm -rf "$dir" |
|||
;; |
|||
|
|||
*) |
|||
usage |
|||
exit 1 |
|||
;; |
|||
esac |
|||
@ -0,0 +1,82 @@ |
|||
--- |
|||
- name: Copy docker-php-* helpers to /usr/local/bin/ |
|||
copy: |
|||
src: "{{item}}" |
|||
dest: /usr/local/bin/ |
|||
mode: 0744 |
|||
loop: |
|||
- docker-php-ext-configure |
|||
- docker-php-ext-enable |
|||
- docker-php-ext-install |
|||
- docker-php-source |
|||
|
|||
# prevent Debian's PHP packages from being installed |
|||
# https://github.com/docker-library/php/pull/542 |
|||
- name: Disable php for apt |
|||
shell: "set -eux; { echo 'Package: php*'; echo 'Pin: release *'; echo 'Pin-Priority: -1'; } > /etc/apt/preferences.d/no-debian-php" |
|||
|
|||
# dependencies required for running "phpize" |
|||
# (see persistent deps below) |
|||
- name: Set ENV var PHPIZE_DEPS |
|||
lineinfile: |
|||
dest: ~/.bashrc |
|||
line: 'export PHPIZE_DEPS="autoconf dpkg-dev file g++ gcc libc-dev make pkg-config re2c"' |
|||
|
|||
# persistent / runtime deps |
|||
- name: Install dev dependencies for compile |
|||
shell: set -eux; apt-get update; apt-get install -y --no-install-recommends $PHPIZE_DEPS ca-certificates curl xz-utils ; rm -rf /var/lib/apt/lists/* |
|||
environment: |
|||
PHPIZE_DEPS: autoconf dpkg-dev file g++ gcc libc-dev make pkg-config re2c |
|||
|
|||
- name: Set ENV var PHP_INI_DIR |
|||
lineinfile: |
|||
dest: ~/.bashrc |
|||
line: 'export PHP_INI_DIR="/usr/local/etc/php"' |
|||
|
|||
- name: Create /var/www/html dir |
|||
shell: set -eux; mkdir -p "$PHP_INI_DIR/conf.d"; [ ! -d /var/www/html ]; mkdir -p /var/www/html; chown www-data:www-data /var/www/html; chmod 777 /var/www/html |
|||
environment: |
|||
PHP_INI_DIR: /usr/local/etc/php |
|||
|
|||
# Apply stack smash protection to functions using local buffers and alloca() |
|||
# Make PHP's main executable position-independent (improves ASLR security mechanism, and has no performance impact on x86_64) |
|||
# Enable optimization (-O2) |
|||
# Enable linker optimization (this sorts the hash buckets to improve cache locality, and is non-default) |
|||
# https://github.com/docker-library/php/issues/272 |
|||
# -D_LARGEFILE_SOURCE and -D_FILE_OFFSET_BITS=64 (https://www.php.net/manual/en/intro.filesystem.php) |
|||
- name: Set ENV vars for php installation |
|||
lineinfile: |
|||
dest: ~/.bashrc |
|||
line: "{{item}}" |
|||
loop: |
|||
- 'export PHP_CFLAGS="-fstack-protector-strong -fpic -fpie -O2 -D_LARGEFILE_SOURCE -D_FILE_OFFSET_BITS=64"' |
|||
- 'export PHP_CPPFLAGS="$PHP_CFLAGS"' |
|||
- 'export PHP_LDFLAGS="-Wl,-O1 -pie"' |
|||
- 'export GPG_KEYS="42670A7FE4D0441C8E4632349E4FDC074A4EF02D 5A52880781F755608BF815FC910DEB46F53EA312"' |
|||
- 'export PHP_VERSION="7.4.33"' |
|||
- 'export PHP_URL="https://www.php.net/distributions/php-7.4.33.tar.xz" PHP_ASC_URL="https://www.php.net/distributions/php-7.4.33.tar.xz.asc"' |
|||
- 'export PHP_SHA256="924846abf93bc613815c55dd3f5809377813ac62a9ec4eb3778675b82a27b927"' |
|||
|
|||
- name: Download php sources |
|||
shell: set -eux; savedAptMark="$(apt-mark showmanual)"; apt-get update; apt-get install -y --no-install-recommends gnupg dirmngr; rm -rf /var/lib/apt/lists/*; mkdir -p /usr/src; cd /usr/src; curl -fsSL -o php.tar.xz "$PHP_URL"; if [ -n "$PHP_SHA256" ]; then echo "$PHP_SHA256 *php.tar.xz" | sha256sum -c -; fi; if [ -n "$PHP_ASC_URL" ]; then curl -fsSL -o php.tar.xz.asc "$PHP_ASC_URL"; export GNUPGHOME="$(mktemp -d)"; for key in $GPG_KEYS; do gpg --batch --keyserver keyserver.ubuntu.com --recv-keys "$key"; done; gpg --batch --verify php.tar.xz.asc php.tar.xz; gpgconf --kill all; rm -rf "$GNUPGHOME"; fi; apt-mark auto '.*' > /dev/null; apt-mark manual $savedAptMark > /dev/null; apt-get purge -y --auto-remove -o APT::AutoRemove::RecommendsImportant=false |
|||
environment: |
|||
PHP_URL: https://www.php.net/distributions/php-7.4.33.tar.xz |
|||
PHP_SHA256: 924846abf93bc613815c55dd3f5809377813ac62a9ec4eb3778675b82a27b927 |
|||
PHP_ASC_URL: https://www.php.net/distributions/php-7.4.33.tar.xz.asc |
|||
GPG_KEYS: 42670A7FE4D0441C8E4632349E4FDC074A4EF02D 5A52880781F755608BF815FC910DEB46F53EA312 |
|||
|
|||
- name: Install php |
|||
environment: |
|||
PHP_CFLAGS: -fstack-protector-strong -fpic -fpie -O2 -D_LARGEFILE_SOURCE -D_FILE_OFFSET_BITS=64 |
|||
PHP_CPPFLAGS: -fstack-protector-strong -fpic -fpie -O2 -D_LARGEFILE_SOURCE -D_FILE_OFFSET_BITS=64 |
|||
PHP_LDFLAGS: -Wl,-O1 -pie |
|||
PHP_INI_DIR: /usr/local/etc/php |
|||
shell: >- |
|||
set -eux; savedAptMark="$(apt-mark showmanual)"; apt-get update; apt-get install -y --no-install-recommends libargon2-dev libcurl4-openssl-dev libonig-dev libreadline-dev libsodium-dev libsqlite3-dev libssl-dev libxml2-dev zlib1g-dev ; export CFLAGS="$PHP_CFLAGS" CPPFLAGS="$PHP_CPPFLAGS" LDFLAGS="$PHP_LDFLAGS" ; docker-php-source extract; cd /usr/src/php; gnuArch="$(dpkg-architecture --query DEB_BUILD_GNU_TYPE)"; debMultiarch="$(dpkg-architecture --query DEB_BUILD_MULTIARCH)"; if [ ! -d /usr/include/curl ]; then ln -sT "/usr/include/$debMultiarch/curl" /usr/local/include/curl; fi; ./configure --build="$gnuArch" --with-config-file-path="$PHP_INI_DIR" --with-config-file-scan-dir="$PHP_INI_DIR/conf.d" --enable-option-checking=fatal --with-mhash --with-pic --enable-ftp --enable-mbstring --enable-mysqlnd --with-password-argon2 --with-sodium=shared --with-pdo-sqlite=/usr --with-sqlite3=/usr --with-curl --with-iconv --with-openssl --with-readline --with-zlib --disable-phpdbg --with-pear $(test "$gnuArch" = 's390x-linux-gnu' && echo '--without-pcre-jit') --with-libdir="lib/$debMultiarch" --disable-cgi --enable-fpm --with-fpm-user=www-data --with-fpm-group=www-data ; make -j "$(nproc)"; find -type f -name '*.a' -delete; make install; find /usr/local -type f -perm '/0111' -exec sh -euxc ' strip --strip-all "$@" || : ' -- '{}' + ; make clean; cp -v php.ini-* "$PHP_INI_DIR/"; cd /; docker-php-source delete; apt-mark auto '.*' > /dev/null; [ -z "$savedAptMark" ] || apt-mark manual $savedAptMark; find /usr/local -type f -executable -exec ldd '{}' ';' | awk '/=>/ { print $(NF-1) }' | sort -u | xargs -r dpkg-query --search | cut -d: -f1 | sort -u | xargs -r apt-mark manual ; apt-get purge -y --auto-remove -o APT::AutoRemove::RecommendsImportant=false; rm -rf /var/lib/apt/lists/*; pecl update-channels; rm -rf /tmp/pear ~/.pearrc; php --version |
|||
|
|||
# sodium was built as a shared module (so that it can be replaced later if so desired), so let's enable it too (https://github.com/docker-library/php/issues/598) |
|||
- name: Shell Command (docker-php-ext-enable sodium) |
|||
shell: docker-php-ext-enable sodium |
|||
|
|||
- name: Nerest php-fpm pool config |
|||
shell: set -eux; cd /usr/local/etc; if [ -d php-fpm.d ]; then sed 's!=NONE/!=!g' php-fpm.conf.default | tee php-fpm.conf > /dev/null; cp php-fpm.d/www.conf.default php-fpm.d/www.conf; else mkdir php-fpm.d; cp php-fpm.conf.default php-fpm.d/www.conf; { echo '[global]'; echo 'include=etc/php-fpm.d/*.conf'; } | tee php-fpm.conf; fi; { echo '[global]'; echo 'error_log = /proc/self/fd/2'; echo; echo '; https://github.com/docker-library/php/pull/725#issuecomment-443540114'; echo 'log_limit = 8192'; echo; echo '[www]'; echo '; if we send this to /proc/self/fd/1, it never appears'; echo 'access.log = /proc/self/fd/2'; echo; echo 'clear_env = no'; echo; echo '; Ensure worker stdout and stderr are sent to the main error log.'; echo 'catch_workers_output = yes'; echo 'decorate_workers_output = no'; } | tee php-fpm.d/docker.conf; { echo '[global]'; echo 'daemonize = no'; echo; echo '[www]'; echo 'listen = 9000'; } | tee php-fpm.d/zz-docker.conf |
|||
Write
Preview
Loading…
Cancel
Save
Reference in new issue