Permalink
Newer
100644
115 lines (88 sloc)
4.14 KB
1
#
2
# Building assumes midpoint-3.9-SNAPSHOT-dist.tar.gz is present in the current directory.
3
#
4
5
FROM tier/shibboleth_sp
6
7
MAINTAINER info@evolveum.com
8
9
RUN rpm --import http://repos.azulsystems.com/RPM-GPG-KEY-azulsystems
10
RUN curl -o /etc/yum.repos.d/zulu.repo http://repos.azulsystems.com/rhel/zulu.repo
11
RUN yum -y update
12
RUN yum -y install \
13
zulu-8 \
14
cron \
15
supervisor \
16
libcurl \
17
&& yum clean -y all
18
19
RUN rm /etc/shibboleth/sp-key.pem /etc/shibboleth/sp-cert.pem \
20
&& cd /etc/httpd/conf.d/ \
21
&& rm -f autoindex.conf ssl.conf userdir.conf welcome.conf
22
23
COPY container_files/supervisor/supervisord.conf /etc/supervisor/supervisord.conf
24
COPY container_files/httpd/conf/* /etc/httpd/conf.d/
25
COPY container_files/shibboleth/* /etc/shibboleth/
26
COPY container_files/usr-local-bin/* /usr/local/bin/
27
COPY container_files/opt-tier/* /opt/tier/
28
29
RUN chmod 755 /opt/tier/setenv.sh \
35
&& chmod 755 /usr/local/bin/startup.sh \
36
&& chmod 755 /usr/local/bin/healthcheck.sh
41
&& mv /etc/httpd/conf.modules.d/00-shib.conf /etc/httpd/conf.modules.d/00-shib.conf.auth.shibboleth \
43
&& sed -i 's/LogFormat "/LogFormat "httpd;access_log;%{ENV}e;%{USERTOKEN}e;/g' /etc/httpd/conf/httpd.conf \
44
&& echo -e "\nErrorLogFormat \"httpd;error_log;%{ENV}e;%{USERTOKEN}e;[%{u}t] [%-m:%l] [pid %P:tid %T] %7F: %E: [client\ %a] %M% ,\ referer\ %{Referer}i\"" >> /etc/httpd/conf/httpd.conf \
45
&& sed -i 's/CustomLog "logs\/access_log"/CustomLog "\/tmp\/loghttpd"/g' /etc/httpd/conf/httpd.conf \
46
&& sed -i 's/ErrorLog "logs\/error_log"/ErrorLog "\/tmp\/loghttpd"/g' /etc/httpd/conf/httpd.conf \
47
&& echo -e "\nPassEnv ENV" >> /etc/httpd/conf/httpd.conf \
48
&& echo -e "\nPassEnv USERTOKEN" >> /etc/httpd/conf/httpd.conf
49
64
65
VOLUME ${MP_DIR}/var
66
67
# Repository parameters
68
69
ENV REPO_DATABASE_TYPE mariadb
70
ENV REPO_JDBC_URL default
71
ENV REPO_HOST midpoint_data
72
ENV REPO_PORT default
73
ENV REPO_DATABASE registry
74
ENV REPO_USER registry_user
75
ENV REPO_PASSWORD_FILE /run/secrets/mp_database_password.txt
84
# Authentication/web
85
86
ENV AUTHENTICATION internal
87
ENV SSO_HEADER uid
88
ENV AJP_ENABLED true
89
ENV AJP_PORT 9090
101
# TIER Beacon Opt-out
102
# Completely uncomment the following ENV line to prevent the containers from sending analytics information to Internet2.
103
# With the default/release configuration, it will only send product (Shibb/Grouper/COmanage/midPoint) and version (3.9, etc)
104
# once daily between midnight and 4am. There is no configuration or private information collected or sent.
105
# This data helps with the scaling and funding of TIER. Please do not disable it if you find the TIER tools useful.
106
# To keep it commented, keep multiple comments on the following line (to prevent other scripts from processing it).
107
##### ENV TIER_BEACON_OPT_OUT true
113
HEALTHCHECK --interval=1m --timeout=30s --start-period=2m CMD /usr/local/bin/healthcheck.sh
114