dockerfile自动部署nginx+php7

FROM centos:7

MAINTAINER Carl

#====================================解决依赖关系============================================

ENV NGINX_VERSION 1.10.2

ENV PHP_VERSION 7.0.12

ENV LIBICONV_VERSION 1.14

RUN yum -y install bzip* libm* mhash*

ImageMagick* php-pear* php-devel*

autoconf automake openssh libiconv*

libreoffice-headless libreoffice-writer lua*

libtool cmake make --skip-broken &&

yum clean all

#=============================================================================================

RUN rpm -ivh http://dl.fedoraproject.org/pub/epel/7Server/x86_64/e/epel-release-7-8.noarch.rpm &&

yum install -y wget

wget zlib-devel zlib*

python-setuptools openssh* libmcrypt*

freetype-devel libpng-devel libjpeg-devel

pcre-devel lrzsz* gcc* image* openoffice*

libxslt-devel freetype-devel libpng-devel

libcurl-devel openldap* postgresql-devel

curl-devel bzip2-devel libjpeg-devel readline-devel

libmcrypt* glibc* libcurl*

screen tree lsof htop iptraf sysstat inotify-tools htop

mcrypt* libevent* libxml2*

post* pcre* gcc-c++ &&

yum clean all

#====================================安装nginx && php7=========================================

RUN groupadd -r www &&

useradd -M -s /sbin/nologin -r -g www www

#download nginx libiconv and php7,libiconv1.14版本存在BUG

RUN mkdir -p /usr/local/src/nginx-php && cd $_ &&

wget -c -O nginx.tar.gz http://nginx.org/download/nginx-$NGINX_VERSION.tar.gz &&

wget -O php.tar.gz http://php.net/distributions/php-$PHP_VERSION.tar.gz &&

wget -c -O libiconv.tar.gz http://ftp.gnu.org/pub/gnu/libiconv/libiconv-1.14.tar.gz &&

curl -O -SL https://github.com/xdebug/xdebug/archive/XDEBUG_2_4_0RC3.tar.gz

#Make install nginx

RUN cd /usr/local/src/nginx-php &&

tar -zxvf nginx.tar.gz &&

cd nginx-$NGINX_VERSION &&

./configure --prefix=/usr/local/nginx

--user=www --group=www

--error-log-path=/var/log/nginx_error.log

--http-log-path=/var/log/nginx_access.log

--pid-path=/var/run/nginx.pid

--with-pcre

--with-http_ssl_module

--without-mail_pop3_module

--without-mail_imap_module

--with-http_gzip_static_module &&

make && make install

#Make install libiconv,存在BUG可修复

#stdio.in.h找到

#_GL_WARN_ON_USE (gets,"gets is a security hole - use fgets instead");

#注释掉

#添加

##ifdefined(__GLIBC__)&&!defined(__UCLIBC__)&&!__GLIBC_PREREQ(2,16)

# _GL_WARN_ON_USE (gets,"gets is a security hole - use fgets instead");

##endif

RUN cd /usr/local/src/nginx-php &&

tar -zxvf libiconv.tar.gz &&

cd libiconv-$LIBICONV_VERSION &&

./configure --prefix=/usr/local/libiconv &&

make -j 4 && make install

#Make install php7

RUN cd /usr/local/src/nginx-php &&

tar -zvxf php.tar.gz &&

cd php-$PHP_VERSION &&

./configure --prefix=/usr/local/php

--with-config-file-path=/usr/local/php/etc

--with-config-file-scan-dir=/usr/local/php/etc/php.d

--with-fpm-user=www

--with-fpm-group=www

--with-mcrypt=/usr/include

--with-iconv=/usr/local/libiconv

--with-mysqli

--with-pdo-mysql

--with-openssl

--with-gd

--with-zlib

--with-gettext

--with-curl

--with-png-dir

--with-jpeg-dir

--with-freetype-dir

--with-xmlrpc

--with-mhash

--with-openssl

--enable-fpm

--enable-xml

--enable-shmop

--enable-sysvsem

--enable-inline-optimization

--enable-mbregex

--enable-mbstring

--enable-ftp

--enable-gd-native-ttf

--enable-mysqlnd

--enable-pcntl

--enable-sockets

--enable-zip

--enable-soap

--enable-session

--enable-opcache

--enable-bcmath

--enable-exif

--enable-fileinfo

--disable-rpath

--disable-debug

--without-pear &&

make -j 4 && make install

#=======================================================================================================

#Add xdebug extension

RUN cd /home/nginx-php &&

tar -zxvf XDEBUG_2_4_0RC3.tar.gz &&

cd xdebug-XDEBUG_2_4_0RC3 &&

/usr/local/php/bin/phpize &&

./configure --enable-xdebug --with-php-config=/usr/local/php/bin/php-config &&

make &&

cp modules/xdebug.so /usr/local/php/lib/php/extensions/xdebug.so

RUN cd /home/nginx-php/php-$PHP_VERSION &&

cp php.ini-production /usr/local/php/etc/php.ini &&

cp /usr/local/php/etc/php-fpm.conf.default /usr/local/php/etc/php-fpm.conf &&

cp /usr/local/php/etc/php-fpm.d/www.conf.default /usr/local/php/etc/php-fpm.d/www.conf

#=======================================================================================================

#Install supervisor

RUN easy_install supervisor &&

mkdir -p /var/log/supervisor &&

mkdir -p /var/run/sshd &&

mkdir -p /var/run/supervisord

#Add supervisord conf

ADD supervisord.conf /etc/supervisord.conf

#Create web folder

VOLUME ["/data/www", "/usr/local/nginx/conf/ssl", "/usr/local/nginx/conf/vhost", "/usr/local/php/etc/php.d"]

ADD index.php /data/www/index.php

ADD xdebug.ini /usr/local/php/etc/php.d/xdebug.ini

#Update nginx config

ADD nginx.conf /usr/local/nginx/conf/nginx.conf

#========================向容器中添加文件===============================

#Start

ADD start.sh /start.sh

RUN chmod +x /start.sh

#======================指定容器映射到主机的端口=========================

#Set port

EXPOSE 8080 443 9000

#========================================================

#Start it

ENTRYPOINT ["/start.sh"]

#!/bin/sh

#########################################################################

# File Name: start.sh

# Author: TiMOphY

#########################################################################

Nginx_Install_Dir=/usr/local/nginx

DATA_DIR=/data/www

set -e

chown -R www.www $DATA_DIR

if [[ -n "$PROXY_WEB" ]]; then

[ -f "${Nginx_Install_Dir}/conf/ssl" ] || mkdir -p $Nginx_Install_Dir/conf/ssl

[ -f "${Nginx_Install_Dir}/conf/vhost" ] || mkdir -p $Nginx_Install_Dir/conf/vhost

if [ -z "$PROXY_DOMAIN" ]; then

echo >&2 'error: missing PROXY_DOMAIN'

echo >&2 ' Did you forget to add -e PROXY_DOMAIN=... ?'

exit 1

if [ -z "$PROXY_CRT" ]; then

echo >&2 'error: missing PROXY_CRT'

echo >&2 ' Did you forget to add -e PROXY_CRT=... ?'

exit 1

if [ -z "$PROXY_KEY" ]; then

echo >&2 'error: missing PROXY_KEY'

echo >&2 ' Did you forget to add -e PROXY_KEY=... ?'

exit 1

if [ ! -f "${Nginx_Install_Dir}/conf/ssl/${PROXY_CRT}" ]; then

echo >&2 'error: missing PROXY_CRT'

echo >&2 " You need to put ${PROXY_CRT} in ssl directory"

exit 1

if [ ! -f "${Nginx_Install_Dir}/conf/ssl/${PROXY_KEY}" ]; then

echo >&2 'error: missing PROXY_CSR'

echo >&2 " You need to put ${PROXY_KEY} in ssl directory"

exit 1

cat > ${Nginx_Install_Dir}/conf/vhost/website.conf << EOF

server {

listen 80;

server_name $PROXY_DOMAIN;

return 301 https://$PROXY_DOMAIN$request_uri;

}

server {

listen 443 ssl;

server_name $PROXY_DOMAIN;

ssl on;

ssl_certificate ssl/${PROXY_CRT};

ssl_certificate_key ssl/${PROXY_KEY};

ssl_protocols TLSv1 TLSv1.1 TLSv1.2;

ssl_prefer_server_ciphers on;

ssl_ciphers "EECDH+AESGCM:EDH+AESGCM:AES256+EECDH:AES256+EDH";

keepalive_timeout 70;

ssl_session_cache shared:SSL:10m;

ssl_session_timeout 10m;

root $DATA_DIR;

index index.php index.html index.htm;

location / {

try_files $uri $uri/ /index.php?$args;

}

location ~ .php$ {

root /data/www;

fastcgi_pass 127.0.0.1:9000;

fastcgi_index index.php;

fastcgi_param script_FILENAME /$document_root$fastcgi_script_name;

include fastcgi_params;

}

EOF

/usr/bin/supervisord -n -c /etc/supervisord.conf

dockerfile自动部署nginx+php7

PHP相关栏目本月热门文章