FROM bigfleet/shibboleth_idp:autoexec

ARG maintainer=my
ARG imagename=shibboleth_idp
ARG version=3.3.1
ENV VERSION=$version
ENV JAVA_OPTS=-Xmx1500m -XX:MaxPermSize=128m

# Uncomment all the following lines to download the JDK to your Shibboleth IDP image.  By uncommenting these lines, you agree to the Oracle Binary Code License Agreement for Java SE (http://www.oracle.com/technetwork/java/javase/terms/license/index.html)

ENV JAVA_VERSION 8u101
ENV BUILD_VERSION b13
ENV JAVA_HOME /usr/java/latest

RUN wget -nv --no-cookies --no-check-certificate --header "Cookie: oraclelicense=accept-securebackup-cookie" "http://download.oracle.com/otn-pub/java/jdk/$JAVA_VERSION-$BUILD_VERSION/jdk-$JAVA_VERSION-linux-x64.rpm" -O /tmp/jdk-8-linux-x64.rpm && \
    yum -y install /tmp/jdk-8-linux-x64.rpm && \
    rm -f /tmp/jdk-8-linux-x64.rpm && \
    alternatives --install /usr/bin/java jar $JAVA_HOME/bin/java 200000 && \
    alternatives --install /usr/bin/javaws javaws $JAVA_HOME/bin/javaws 200000 && \
    alternatives --install /usr/bin/javac javac $JAVA_HOME/bin/javac 200000
    
RUN yum -y install unzip \
    && wget --no-check-certificate --no-cookies --header "Cookie: oraclelicense=accept-securebackup-cookie" \
    http://download.oracle.com/otn-pub/java/jce/8/jce_policy-8.zip \
    && echo "f3020a3922efd6626c2fff45695d527f34a8020e938a49292561f18ad1320b59  jce_policy-8.zip" | sha256sum -c - \
    && unzip -oj jce_policy-8.zip UnlimitedJCEPolicyJDK8/local_policy.jar -d $JAVA_HOME/jre/lib/security/ \
    && unzip -oj jce_policy-8.zip UnlimitedJCEPolicyJDK8/US_export_policy.jar -d $JAVA_HOME/jre/lib/security/ \
    && rm jce_policy-8.zip \
    && chmod -R 640 $JAVA_HOME/jre/lib/security/

RUN chown -R root:root /opt/shibboleth/shibboleth-identity-provider-$version && \
    rm -rf /usr/local/tomcat/webapps/* && \
    ANT_OPTS="-Didp.target.dir=/opt/shibboleth/current" /opt/shibboleth/current/bin/build.sh && \
    ln -s /opt/shibboleth/current /opt/shibboleth-idp && \
    ln -s /opt/shibboleth-idp/war/idp.war $CATALINA_HOME/webapps/idp.war && \
    touch /usr/local/tomcat/logs/voltest && \
    touch /opt/shibboleth/shibboleth-identity-provider-$version/logs/voltest && \
    mkdir /opt/certs

COPY ./conf/ /usr/local/tomcat/conf/
COPY ./certs/gencert.sh /opt/autoexec/onbuild/gencert.sh
# Remove this line once build is cooking
COPY ./container_files/bin/onbuild.sh /opt/autoexec/bin/onbuild.sh 
RUN chmod +x /opt/autoexec/onbuild/gencert.sh && /opt/autoexec/bin/onbuild.sh

VOLUME ["/usr/local/tomcat/logs", "/opt/shibboleth/shibboleth-identity-provider-$VERSION/logs"]

EXPOSE 8080
CMD ["catalina.sh", "run"]