Dockerfile

FROM tier/shib-idp:3.4.3_20190201 as idp

# Grouper version for the entire GTE
FROM i2incommon/grouper:2.6.0

# Disable docker HEALTHCHECK inherited from tier/shib-sp
HEALTHCHECK NONE

LABEL author="tier-packaging@internet2.edu <tier-packaging@internet2.edu>" \
      Vendor="TIER" \
      ImageType="Grouper Training" \
      ImageName=$imagename \
      ImageOS=centos7

ENV ENV=training \
    USERTOKEN=gte-base

# 2021-01-13 the phpldapadmin in epel is 1.2.5 which is incompatible with php 5.4.x
RUN yum install -y epel-release \
    && yum install -y mariadb mariadb-server nano openldap openldap-clients openldap-servers phpMyAdmin \
          https://archive.fedoraproject.org/pub/archive/epel/7.2020-10-05/x86_64/Packages/p/phpldapadmin-1.2.3-10.el7.noarch.rpm \
    && yum clean all

COPY container_files/seed-data/ /seed-data/

RUN mysql_install_db --force \
    && chown -R mysql:mysql /var/lib/mysql/ \
    && sed -i 's/^\(bind-address\s.*\)/# \1/' /etc/my.cnf \
    && sed -i 's/^\(log_error\s.*\)/# \1/' /etc/my.cnf \
    && sed -i 's/\[mysqld\]/\[mysqld\]\ncharacter_set_server = utf8/' /etc/my.cnf \
    && sed -i 's/\[mysqld\]/\[mysqld\]\ncollation_server = utf8_general_ci/' /etc/my.cnf \
    && sed -i 's/\[mysqld\]/\[mysqld\]\nport = 3306/' /etc/my.cnf \
    && cat  /etc/my.cnf \
    && echo "/usr/bin/mysqld_safe &" > /tmp/config \
    && echo "mysqladmin --silent --wait=30 ping || exit 1" >> /tmp/config \
    && echo "mysql -e 'GRANT ALL PRIVILEGES ON *.* TO \"root\"@\"%\" WITH GRANT OPTION;'" >> /tmp/config \
    && echo "mysql -e 'CREATE DATABASE grouper CHARACTER SET utf8 COLLATE utf8_bin;'" >> /tmp/config \
    && bash /tmp/config \
    && rm -f /tmp/config
#    && mysql grouper < /seed-data/sisData.sql

RUN cp /usr/share/openldap-servers/DB_CONFIG.example /var/lib/ldap/DB_CONFIG \
    && mkdir -p /var/ldap/example \
    && chown -R ldap:ldap /var/lib/ldap /etc/openldap/slapd.d /var/ldap \
    && (/usr/sbin/slapd -h "ldap:/// ldaps:/// ldapi:///" -u ldap &) \
    && while ! curl -s ldap://localhost:389 > /dev/null; do echo waiting for ldap to start; sleep 1; done; \
    ldapmodify -Y EXTERNAL -H ldapi:/// -f /seed-data/domain.ldif \
    && ldapadd -H ldapi:/// -f /etc/openldap/schema/cosine.ldif \
    && ldapadd -H ldapi:/// -f /etc/openldap/schema/inetorgperson.ldif \
    && ldapadd -H ldapi:/// -f /seed-data/memberOf.ldif \
    && ldapadd -H ldapi:/// -f /seed-data/eduPerson.ldif \
    && ldapadd -x -D cn=root,dc=internet2,dc=edu -w password -f /seed-data/users.ldif \
    && pkill -HUP slapd \
    && while curl -s ldap://localhost:389 > /dev/null; do echo waiting for ldap to stop; sleep 1; done

COPY container_files/conf/* /opt/grouper/grouperWebapp/WEB-INF/classes/
COPY container_files/conf/grouperText/* /opt/grouper/grouperWebapp/WEB-INF/classes/grouperText/

RUN (/usr/sbin/slapd -h "ldap:/// ldaps:/// ldapi:///" -u ldap &) \
    && while ! curl -s ldap://localhost:389 > /dev/null; do echo waiting for ldap to start; sleep 1; done; \
    (mysqld_safe & ) \
    && while ! curl -s localhost:3306 > /dev/null; do echo waiting for mysqld to start; sleep 3; done; \
    cd /opt/grouper/grouperWebapp/WEB-INF/bin \
    && ./gsh.sh -registry -check -runscript -noprompt \
    && ./gsh.sh /seed-data/bootstrap.gsh \
    && pkill -HUP slapd \
    && while curl -s ldap://localhost:389 > /dev/null; do echo waiting for ldap to stop; sleep 1; done; \
    pkill -u mysql mysqld \
    && while curl -s localhost:3306 > /dev/null; do echo waiting for mysqld to stop; sleep 1; done

COPY --from=idp /opt/shibboleth-idp/ /opt/shibboleth-idp/

COPY container_files/etc/ /etc/
COPY container_files/httpd/* /etc/httpd/conf.d/
COPY container_files/shibboleth-idp/ /opt/shibboleth-idp/
COPY container_files/shibboleth-sp/* /etc/shibboleth/
COPY container_files/tomcat/ /opt/tomee/
COPY container_files/tier-support/* /opt/tier-support/
COPY container_files/tls/host-key.pem  /etc/pki/tls/private/
COPY container_files/tls/* /etc/pki/tls/certs/
COPY container_files/usr-local-bin/* /usr/local/bin/
COPY container_files/var-www-html/ /var/www/html/

#RUN cp /opt/tier-support/grouper.xml /opt/tier-support/grouper-ws.xml /opt/tomee/conf/Catalina/localhost/ \
RUN chown -R tomcat /opt/shibboleth-idp/ \
    && chmod -R 700 /opt/shibboleth-idp/ \
    && chmod +rx /var/www/html/app/index.py \
    && /opt/shibboleth-idp/bin/build.sh \
    && chmod go-w /etc/phpMyAdmin/config.inc.php


RUN chown -R tomcat:tomcat /opt/grouper/grouperWebapp
RUN chown -R tomcat:tomcat /opt/tomee

ENV GROUPER_START_DELAY_SECONDS=10

# note 5005 is for remote Java debugging
EXPOSE 389 3306 8080 5005

CMD ["grouper"]