| # debian.sh --arch 'amd64' out/ 'trixie' '@1783900800' |
| ENV PATH=/usr/local/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin |
| ENV LANG=C.UTF-8 |
| RUN /bin/sh -c set -eux; apt-get update; apt-get install -y --no-install-recommends ca-certificates netbase tzdata ; apt-get dist-clean # buildkit |
| ENV GPG_KEY=7169605F62C751356D054A26A821E680E5FA6305 |
| ENV PYTHON_VERSION=3.12.13 |
| ENV PYTHON_SHA256=c08bc65a81971c1dd5783182826503369466c7e67374d1646519adf05207b684 |
| RUN /bin/sh -c set -eux; savedAptMark="$(apt-mark showmanual)"; apt-get update; apt-get install -y --no-install-recommends dpkg-dev gcc gnupg libbluetooth-dev libbz2-dev libc6-dev libdb-dev libffi-dev libgdbm-dev liblzma-dev libncursesw5-dev libreadline-dev libsqlite3-dev libssl-dev make tk-dev uuid-dev wget xz-utils zlib1g-dev ; wget -O python.tar.xz "https://www.python.org/ftp/python/${PYTHON_VERSION%%[a-z]*}/Python-$PYTHON_VERSION.tar.xz"; echo "$PYTHON_SHA256 *python.tar.xz" | sha256sum -c -; wget -O python.tar.xz.asc "https://www.python.org/ftp/python/${PYTHON_VERSION%%[a-z]*}/Python-$PYTHON_VERSION.tar.xz.asc"; GNUPGHOME="$(mktemp -d)"; export GNUPGHOME; gpg --batch --keyserver hkps://keys.openpgp.org --recv-keys "$GPG_KEY"; gpg --batch --verify python.tar.xz.asc python.tar.xz; gpgconf --kill all; rm -rf "$GNUPGHOME" python.tar.xz.asc; mkdir -p /usr/src/python; tar --extract --directory /usr/src/python --strip-components=1 --file python.tar.xz; rm python.tar.xz; cd /usr/src/python; gnuArch="$(dpkg-architecture --query DEB_BUILD_GNU_TYPE)"; ./configure --build="$gnuArch" --enable-loadable-sqlite-extensions --enable-optimizations --enable-option-checking=fatal --enable-shared $(test "${gnuArch%%-*}" != 'riscv64' && echo '--with-lto') --with-ensurepip ; nproc="$(nproc)"; EXTRA_CFLAGS="$(dpkg-buildflags --get CFLAGS)"; LDFLAGS="$(dpkg-buildflags --get LDFLAGS)"; LDFLAGS="${LDFLAGS:-} -Wl,--strip-all"; arch="$(dpkg --print-architecture)"; arch="${arch##*-}"; case "$arch" in amd64|arm64) EXTRA_CFLAGS="${EXTRA_CFLAGS:-} -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer"; ;; i386) ;; *) EXTRA_CFLAGS="${EXTRA_CFLAGS:-} -fno-omit-frame-pointer"; ;; esac; make -j "$nproc" "EXTRA_CFLAGS=${EXTRA_CFLAGS:-}" "LDFLAGS=${LDFLAGS:-}" ; rm python; make -j "$nproc" "EXTRA_CFLAGS=${EXTRA_CFLAGS:-}" "LDFLAGS=${LDFLAGS:-} -Wl,-rpath='\$\$ORIGIN/../lib'" python ; make install; cd /; rm -rf /usr/src/python; find /usr/local -depth \( \( -type d -a \( -name test -o -name tests -o -name idle_test \) \) -o \( -type f -a \( -name '*.pyc' -o -name '*.pyo' -o -name 'libpython*.a' \) \) \) -exec rm -rf '{}' + ; ldconfig; apt-mark auto '.*' > /dev/null; apt-mark manual $savedAptMark; find /usr/local -type f -executable -not \( -name '*tkinter*' \) -exec ldd '{}' ';' | awk '/=>/ { so = $(NF-1); if (index(so, "/usr/local/") == 1) { next }; gsub("^/(usr/)?", "", so); printf "*%s\n", so }' | sort -u | xargs -rt dpkg-query --search | awk 'sub(":$", "", $1) { print $1 }' | sort -u | xargs -r apt-mark manual ; apt-get purge -y --auto-remove -o APT::AutoRemove::RecommendsImportant=false; apt-get dist-clean; export PYTHONDONTWRITEBYTECODE=1; python3 --version; pip3 --version # buildkit |
| RUN /bin/sh -c set -eux; for src in idle3 pip3 pydoc3 python3 python3-config; do dst="$(echo "$src" | tr -d 3)"; [ -s "/usr/local/bin/$src" ]; [ ! -e "/usr/local/bin/$dst" ]; ln -svT "$src" "/usr/local/bin/$dst"; done # buildkit |
| CMD ["python3"] |
| ARG EDITION |
| ARG EDITION PACKER_VERSION |
| ARG EDITION OPENTOFU_VERSION PACKER_VERSION |
| ARG BPG_PROVIDER_VERSION EDITION OPENTOFU_VERSION PACKER_VERSION |
| ENV DEBIAN_FRONTEND=noninteractive PIP_ROOT_USER_ACTION=ignore |
| |4 BPG_PROVIDER_VERSION=0.109.0 EDITION=plus OPENTOFU_VERSION=1.9.1 PACKER_VERSION=1.11.2 /bin/sh -c apt-get update && apt-get install -y --no-install-recommends curl unzip git openssh-client openssl gosu && rm -rf /var/lib/apt/lists/* |
| |4 BPG_PROVIDER_VERSION=0.109.0 EDITION=plus OPENTOFU_VERSION=1.9.1 PACKER_VERSION=1.11.2 /bin/sh -c curl -fsSL "https://releases.hashicorp.com/packer/${PACKER_VERSION}/packer_${PACKER_VERSION}_linux_amd64.zip" -o /tmp/packer.zip && unzip /tmp/packer.zip -d /usr/local/bin/ && rm /tmp/packer.zip && chmod +x /usr/local/bin/packer |
| |4 BPG_PROVIDER_VERSION=0.109.0 EDITION=plus OPENTOFU_VERSION=1.9.1 PACKER_VERSION=1.11.2 /bin/sh -c useradd -u 1001 -g users -s /bin/bash -m -d /home/portal portal |
| WORKDIR /app |
| COPY file:3014addf83051aefb4379e06cf51a72075b656f9772b1fa00bab2e5a24b171eb in ./ |
| |4 BPG_PROVIDER_VERSION=0.109.0 EDITION=plus OPENTOFU_VERSION=1.9.1 PACKER_VERSION=1.11.2 /bin/sh -c pip install --no-cache-dir -r requirements.txt && pip install --no-cache-dir ansible ansible-runner |
| COPY file:019f8c44893610446ba9361b0af0372ef64a8c9526b2832395af0c9da5abf5f6 in ./ansible/requirements.yml |
| |4 BPG_PROVIDER_VERSION=0.109.0 EDITION=plus OPENTOFU_VERSION=1.9.1 PACKER_VERSION=1.11.2 /bin/sh -c ansible-galaxy collection install -r ./ansible/requirements.yml |
| ENV PACKER_PLUGIN_PATH=/app/.packer.d/plugins |
| |4 BPG_PROVIDER_VERSION=0.109.0 EDITION=plus OPENTOFU_VERSION=1.9.1 PACKER_VERSION=1.11.2 /bin/sh -c mkdir -p "${PACKER_PLUGIN_PATH}" |
| |4 BPG_PROVIDER_VERSION=0.109.0 EDITION=plus OPENTOFU_VERSION=1.9.1 PACKER_VERSION=1.11.2 /bin/sh -c packer plugins install github.com/hashicorp/proxmox || true |
| |4 BPG_PROVIDER_VERSION=0.109.0 EDITION=plus OPENTOFU_VERSION=1.9.1 PACKER_VERSION=1.11.2 /bin/sh -c if [ "$EDITION" != "core" ]; then set -eux; cd /tmp; curl -fsSL "https://github.com/opentofu/opentofu/releases/download/v${OPENTOFU_VERSION}/tofu_${OPENTOFU_VERSION}_linux_amd64.zip" -o "tofu_${OPENTOFU_VERSION}_linux_amd64.zip"; curl -fsSL "https://github.com/opentofu/opentofu/releases/download/v${OPENTOFU_VERSION}/tofu_${OPENTOFU_VERSION}_SHA256SUMS" -o tofu_SHA256SUMS; grep "tofu_${OPENTOFU_VERSION}_linux_amd64.zip" tofu_SHA256SUMS | sha256sum -c -; unzip -o "tofu_${OPENTOFU_VERSION}_linux_amd64.zip" -d /usr/local/bin/ tofu; chmod +x /usr/local/bin/tofu; rm -f "tofu_${OPENTOFU_VERSION}_linux_amd64.zip" tofu_SHA256SUMS; mkdir -p /opt/tofu/plugin-mirror /tmp/mirror-cfg; printf 'terraform {\n required_providers {\n proxmox = {\n source = "bpg/proxmox"\n version = "%s"\n }\n }\n}\n' "${BPG_PROVIDER_VERSION}" > /tmp/mirror-cfg/providers.tf; ( cd /tmp/mirror-cfg && tofu providers mirror -platform=linux_amd64 /opt/tofu/plugin-mirror ); rm -rf /tmp/mirror-cfg; printf 'provider_installation {\n filesystem_mirror {\n path = "/opt/tofu/plugin-mirror"\n }\n}\n' > /opt/tofu/tofurc; chmod -R a+rX /opt/tofu; echo "PROJ-76: OpenTofu ${OPENTOFU_VERSION} + bpg/proxmox ${BPG_PROVIDER_VERSION} bundled (EDITION=$EDITION)"; else echo "PROJ-76: OpenTofu skipped (EDITION=core)"; fi |
| ENV TF_CLI_CONFIG_FILE=/opt/tofu/tofurc |
| COPY dir:0c4dfa24f734ffd57e90308dfd11fef2108d60811b48f1149b63ea1607864320 in ./backend/ |
| COPY dir:cecdb74cf0df69868e855ce686febadc58de7cc41126f0c2c05941190129673a in ./ansible/ |
| COPY dir:00b826c0700986a3c60d24147a652b994b1fe5f14268e51eb7d25d1451e1a516 in ./packer/ |
| COPY dir:815d2935ba2bfdccaa871a9f145510c853dcf6f01834408603d51813c0bca0ca in ./examples/ |
| |4 BPG_PROVIDER_VERSION=0.109.0 EDITION=plus OPENTOFU_VERSION=1.9.1 PACKER_VERSION=1.11.2 /bin/sh -c if [ "$EDITION" != "core" ]; then SECRET_KEY="build-time-throwaway-key-for-ansible-doc-cache-not-used-at-runtime" python -m backend.plus.ansible_editor.doc_cache --build && chmod -R a+rX /opt/p3/ansible-doc-cache && echo "PROJ-93: ansible-doc schema cache built (EDITION=$EDITION)"; else echo "PROJ-93: ansible-doc cache skipped (EDITION=core)"; fi |
| |4 BPG_PROVIDER_VERSION=0.109.0 EDITION=plus OPENTOFU_VERSION=1.9.1 PACKER_VERSION=1.11.2 /bin/sh -c if [ "$EDITION" = "core" ]; then rm -rf /app/backend/plus/ && echo "PROJ-69: backend/plus/ removed (EDITION=core)"; fi |
| COPY multi:29458b83f84a1318096ecc329c37331e5db14dd5eb90d1a4a27d41fce03a17e3 in /app/ |
| COPY file:efab52de50731393954ea0004983a38e6c3ccccb1d49eb2c4b2549280aa07598 in /app/plus.enc |
| COPY dir:8387705b90f6878d5580a50db0b4de585c5b59b5dcf141bfda11f5fa487c9598 in ./frontend/dist/ |
| |4 BPG_PROVIDER_VERSION=0.109.0 EDITION=plus OPENTOFU_VERSION=1.9.1 PACKER_VERSION=1.11.2 /bin/sh -c mkdir -p /app/data /app/ssl && chown -R portal:users /app |
| COPY file:f7f3f85cfcbfc9e5739d626cec28f7fcf69625c3863d30f69e752601c4602352 in /entrypoint.sh |
| |4 BPG_PROVIDER_VERSION=0.109.0 EDITION=plus OPENTOFU_VERSION=1.9.1 PACKER_VERSION=1.11.2 /bin/sh -c chmod +x /entrypoint.sh |
| EXPOSE 8443 |
| HEALTHCHECK --interval=30s --timeout=10s --start-period=15s --retries=3 CMD curl -fk https://localhost:8443/api/health || exit 1 |
| ENTRYPOINT ["/entrypoint.sh"] |
