Dockerfile

FROM tier/centos7base

ARG maintainer=my
ARG imagename=shibboleth_idp_standalone
ARG version=3.3.0
ENV VERSION=$version
ENV IMAGENAME=$imagename
ENV MAINTAINER=$maintainer

ARG registry=docker.io
ARG maintainer=tier
ARG imagename=shibboleth_idp_standalone
ARG version=3.3.0
ARG tierversion=17020
ARG tierbuild=$tierbuild

ARG oracle_jdk_rpm=jdk-8u121-linux-x64.rpm
ARG oracle_jce_zip=jce_policy-8.zip

ENV VERSION=$version
ENV TIERVERSION=$tierversion
ENV TIERBUILD=$tierbuild
ENV IMAGENAME=$imagename
ENV MAINTAINER=$maintainer

LABEL Vendor="Internet2"
LABEL ImageType="Shibboleth IDP Release"
LABEL ImageName=$imagename
LABEL ImageOS=centos7
LABEL Version=$VERSION

RUN yum -y install \
    apr-devel \
    httpd \
    krb5-workstation \
    mod_ssl \
    openssl-devel \
    wget \
    && yum -y clean all

ENV JAVA_HOME /usr/java/latest
    
COPY $oracle_jdk_rpm $oracle_jce_zip /tmp/

RUN echo $oracle_jdk_rpm && yum -y install /tmp/$oracle_jdk_rpm && \
    rm -f /tmp/$oracle_jdk_rpm && \
    alternatives --install /usr/bin/java jar $JAVA_HOME/bin/java 200000 && \
    alternatives --install /usr/bin/javaws javaws $JAVA_HOME/bin/javaws 200000 && \
    alternatives --install /usr/bin/javac javac $JAVA_HOME/bin/javac 200000 && \
    unzip -oj /tmp/$oracle_jce_zip UnlimitedJCEPolicyJDK8/local_policy.jar -d $JAVA_HOME/jre/lib/security/ && \
    unzip -oj /tmp/$oracle_jce_zip UnlimitedJCEPolicyJDK8/US_export_policy.jar -d $JAVA_HOME/jre/lib/security/ && \
    rm -f /tmp/$oracle_jce_zip && chmod -R 640 $JAVA_HOME/jre/lib/security/

ENV SHIB_RELDIR=http://shibboleth.net/downloads/identity-provider/$VERSION
ENV SHIB_PREFIX=shibboleth-identity-provider-$VERSION

RUN mkdir -p /tmp/shibboleth && cd /tmp/shibboleth && \
      wget -q https://shibboleth.net/downloads/PGP_KEYS \
           $SHIB_RELDIR/$SHIB_PREFIX.tar.gz \ 
           $SHIB_RELDIR/$SHIB_PREFIX.tar.gz.asc \
           $SHIB_RELDIR/$SHIB_PREFIX.tar.gz.sha256 && \
# Perform verifications
           gpg --import PGP_KEYS && \
           gpg $SHIB_PREFIX.tar.gz.asc && \
           sha256sum --check $SHIB_PREFIX.tar.gz.sha256 && \
# Prepare filesystem
           tar xf $SHIB_PREFIX.tar.gz && \
           mkdir -p /opt/shibboleth && \
           mv $SHIB_PREFIX /opt/shibboleth/. && \
           ln -s /opt/shibboleth/$SHIB_PREFIX /opt/shibboleth/current && \
# Cleanup
           rm -rf /tmp/shibboleth
           
           
ENV CATALINA_HOME /usr/local/tomcat
ENV PATH $CATALINA_HOME/bin:$PATH
RUN mkdir -p "$CATALINA_HOME"

# Not having trouble with this locally [JVF]
# see https://www.apache.org/dist/tomcat/tomcat-8/KEYS
RUN set -ex \
    && for key in \
        05AB33110949707C93A279E3D3EFE6B686867BA6 \
        07E48665A34DCAFAE522E5E6266191C37C037D42 \
        47309207D818FFD8DCD3F83F1931D684307A10A5 \
        541FBE7D8F78B25E055DDEE13C370389288584E7 \
        61B832AC2F1C5A90F0F9B00A1C506407564C17A3 \
        713DA88BE50911535FE716F5208B0AB1D63011C7 \
        79F7026C690BAA50B92CD8B66A3AD3F4F22C4FED \
        9BA44C2621385CB966EBA586F72C284D731FABEE \
        A27677289986DB50844682F8ACB77FC2E86E29AC \
        A9C5DF4D22E99998D9875A5110C01C5A2F6059E7 \
        DCFD35E0BF8CA7344752DE8B6FB21E8933C60243 \
        F3A04C595DB5B6A5F1ECA43E3B7BBB100D811BBE \
        F7DA48BB64BCB84ECBA7EE6935CD23C10D498E23 \
    ; do \
        gpg --keyserver ha.pool.sks-keyservers.net --recv-keys "$key"; \
    done

ENV TOMCAT_MAJOR 8
ENV TOMCAT_VERSION 8.0.41
ENV TOMCAT_TGZ_URL https://www.apache.org/dist/tomcat/tomcat-$TOMCAT_MAJOR/v$TOMCAT_VERSION/bin/apache-tomcat-$TOMCAT_VERSION.tar.gz

WORKDIR $CATALINA_HOME
RUN set -x \
	\
	&& wget -q -O tomcat.tar.gz "$TOMCAT_TGZ_URL" \
	&& wget -q -O tomcat.tar.gz.asc "$TOMCAT_TGZ_URL.asc" \
#	&& gpg --batch --verify tomcat.tar.gz.asc tomcat.tar.gz \
	&& tar -xvf tomcat.tar.gz --strip-components=1 \
	&& rm bin/*.bat \
	&& rm tomcat.tar.gz* \
    && mkdir -p conf/Catalina \
    && curl -o /usr/local/tomcat/lib/jstl1.2.jar https://build.shibboleth.net/nexus/service/local/repositories/thirdparty/content/javax/servlet/jstl/1.2/jstl-1.2.jar
    

ENV PATH $CATALINA_HOME/bin:$JAVA_HOME/bin:$PATH