php-base (php82-fpm-nginx-alpine)

Published 2025-10-27 17:36:06 +01:00 by ovalek in common/php-base

Pull the image from the command line:

docker pull forgejo-dev.ovalek.cz/common/php-base:php82-fpm-nginx-alpine

Digest

sha256:f19a3505a03d0336a728610ca779f0af30e5b1b48b0e0997709bfb31d19e1d23

For more information on the Container registry, see the documentation.

ADD alpine-minirootfs-3.22.2-x86_64.tar.gz / # buildkit

CMD ["/bin/sh"]

ENV PHPIZE_DEPS=autoconf dpkg-dev dpkg file g++ gcc libc-dev make pkgconf re2c

RUN /bin/sh -c apk add --no-cache ca-certificates curl openssl tar xz # buildkit

RUN /bin/sh -c set -eux; adduser -u 82 -D -S -G www-data www-data # buildkit

ENV PHP_INI_DIR=/usr/local/etc/php

RUN /bin/sh -c set -eux; mkdir -p "$PHP_INI_DIR/conf.d"; [ ! -d /var/www/html ]; mkdir -p /var/www/html; chown www-data:www-data /var/www/html; chmod 1777 /var/www/html # buildkit

ENV PHP_CFLAGS=-fstack-protector-strong -fpic -fpie -O2 -D_LARGEFILE_SOURCE -D_FILE_OFFSET_BITS=64

ENV PHP_CPPFLAGS=-fstack-protector-strong -fpic -fpie -O2 -D_LARGEFILE_SOURCE -D_FILE_OFFSET_BITS=64

ENV PHP_LDFLAGS=-Wl,-O1 -pie

ENV GPG_KEYS=39B641343D8C104B2B146DC3F9C39DC0B9698544 E60913E4DF209907D8E30D96659A97C9CF2A795A 1198C0117593497A5EC5C199286AF1F9897469DC

ENV PHP_VERSION=8.2.29

ENV PHP_URL=https://www.php.net/distributions/php-8.2.29.tar.xz PHP_ASC_URL=https://www.php.net/distributions/php-8.2.29.tar.xz.asc

ENV PHP_SHA256=475f991afd2d5b901fb410be407d929bc00c46285d3f439a02c59e8b6fe3589c

RUN /bin/sh -c set -eux; apk add --no-cache --virtual .fetch-deps gnupg; mkdir -p /usr/src; cd /usr/src; curl -fsSL -o php.tar.xz "$PHP_URL"; if [ -n "$PHP_SHA256" ]; then echo "$PHP_SHA256 *php.tar.xz" | sha256sum -c -; fi; curl -fsSL -o php.tar.xz.asc "$PHP_ASC_URL"; export GNUPGHOME="$(mktemp -d)"; for key in $GPG_KEYS; do gpg --batch --keyserver keyserver.ubuntu.com --recv-keys "$key"; done; gpg --batch --verify php.tar.xz.asc php.tar.xz; gpgconf --kill all; rm -rf "$GNUPGHOME"; apk del --no-network .fetch-deps # buildkit

COPY docker-php-source /usr/local/bin/ # buildkit

RUN /bin/sh -c set -eux; apk add --no-cache --virtual .build-deps $PHPIZE_DEPS argon2-dev coreutils curl-dev gnu-libiconv-dev libsodium-dev libxml2-dev linux-headers oniguruma-dev openssl-dev readline-dev sqlite-dev ; rm -vf /usr/include/iconv.h; export CFLAGS="$PHP_CFLAGS" CPPFLAGS="$PHP_CPPFLAGS" LDFLAGS="$PHP_LDFLAGS" PHP_BUILD_PROVIDER='https://github.com/docker-library/php' PHP_UNAME='Linux - Docker' ; docker-php-source extract; cd /usr/src/php; gnuArch="$(dpkg-architecture --query DEB_BUILD_GNU_TYPE)"; ./configure --build="$gnuArch" --with-config-file-path="$PHP_INI_DIR" --with-config-file-scan-dir="$PHP_INI_DIR/conf.d" --enable-option-checking=fatal --with-mhash --with-pic --enable-mbstring --enable-mysqlnd --with-password-argon2 --with-sodium=shared --with-pdo-sqlite=/usr --with-sqlite3=/usr --with-curl --with-iconv=/usr --with-openssl --with-readline --with-zlib --disable-phpdbg --with-pear $(test "$gnuArch" = 'riscv64-linux-musl' && echo '--without-pcre-jit') --disable-cgi --enable-fpm --with-fpm-user=www-data --with-fpm-group=www-data ; make -j "$(nproc)"; find -type f -name '*.a' -delete; make install; find /usr/local -type f -perm '/0111' -exec sh -euxc ' strip --strip-all "$@" || : ' -- '{}' + ; make clean; cp -v php.ini-* "$PHP_INI_DIR/"; cd /; docker-php-source delete; runDeps="$( scanelf --needed --nobanner --format '%n#p' --recursive /usr/local | tr ',' '\n' | sort -u | awk 'system("[ -e /usr/local/lib/" $1 " ]") == 0 { next } { print "so:" $1 }' )"; apk add --no-cache $runDeps; apk del --no-network .build-deps; pecl update-channels; rm -rf /tmp/pear ~/.pearrc; php --version # buildkit

COPY docker-php-ext-* docker-php-entrypoint /usr/local/bin/ # buildkit

RUN /bin/sh -c docker-php-ext-enable opcache # buildkit

RUN /bin/sh -c docker-php-ext-enable sodium # buildkit

ENTRYPOINT ["docker-php-entrypoint"]

WORKDIR /var/www/html

RUN /bin/sh -c set -eux; cd /usr/local/etc; if [ -d php-fpm.d ]; then sed 's!=NONE/!=!g' php-fpm.conf.default | tee php-fpm.conf > /dev/null; cp php-fpm.d/www.conf.default php-fpm.d/www.conf; else mkdir php-fpm.d; cp php-fpm.conf.default php-fpm.d/www.conf; { echo '[global]'; echo 'include=etc/php-fpm.d/*.conf'; } | tee php-fpm.conf; fi; { echo '[global]'; echo 'error_log = /proc/self/fd/2'; echo; echo '; https://github.com/docker-library/php/pull/725#issuecomment-443540114'; echo 'log_limit = 8192'; echo; echo '[www]'; echo '; php-fpm closes STDOUT on startup, so sending logs to /proc/self/fd/1 does not work.'; echo '; https://bugs.php.net/bug.php?id=73886'; echo 'access.log = /proc/self/fd/2'; echo; echo 'clear_env = no'; echo; echo '; Ensure worker stdout and stderr are sent to the main error log.'; echo 'catch_workers_output = yes'; echo 'decorate_workers_output = no'; } | tee php-fpm.d/docker.conf; { echo '[global]'; echo 'daemonize = no'; echo; echo '[www]'; echo 'listen = 9000'; } | tee php-fpm.d/zz-docker.conf; mkdir -p "$PHP_INI_DIR/conf.d"; { echo '; https://github.com/docker-library/php/issues/878#issuecomment-938595965'; echo 'fastcgi.logging = Off'; } > "$PHP_INI_DIR/conf.d/docker-fpm.ini" # buildkit

STOPSIGNAL SIGQUIT

EXPOSE map[9000/tcp:{}]

CMD ["php-fpm"]

RUN /bin/sh -c set -eux; apk add --no-cache --virtual .build-deps autoconf build-base libtool pkgconf git curl-dev oniguruma-dev freetype-dev libjpeg-turbo-dev libpng-dev icu-dev bzip2-dev libxml2-dev libzip-dev gettext-dev openldap-dev; docker-php-ext-configure gd --with-freetype --with-jpeg; mkdir -p /usr/local/include/php/ext/dom; cp /usr/src/php/ext/dom/*_ce.h /usr/local/include/php/ext/dom/ || true; docker-php-ext-install -j"$(nproc)" xml dom xmlreader xmlwriter soap; docker-php-ext-install -j"$(nproc)" bcmath bz2 calendar ctype curl exif fileinfo gd gettext intl ldap mbstring mysqli pdo pdo_mysql zip; apk del .build-deps; apk add --no-cache bzip2 freetype libjpeg-turbo libpng icu icu-data-full libxml2 libzip openldap; apk del icu-data-en || true; rm -rf /var/cache/apk/* /tmp/* # buildkit

ADD https://github.com/mlocati/docker-php-extension-installer/releases/latest/download/install-php-extensions /usr/local/bin/ # buildkit

RUN /bin/sh -c chmod +x /usr/local/bin/install-php-extensions && sync && install-php-extensions imagick # buildkit

COPY /usr/bin/composer /usr/bin/composer # buildkit

RUN /bin/sh -c set -eux; { echo "memory_limit = 512M"; echo "max_execution_time = 300"; echo "max_input_time = 300"; echo "post_max_size = 40M"; echo "upload_max_filesize = 40M"; echo "max_file_uploads = 20"; echo "file_uploads = On"; echo "expose_php = Off"; echo "display_errors = Off"; echo "log_errors = On"; echo "error_reporting = E_ALL & ~E_DEPRECATED & ~E_STRICT"; echo "allow_url_fopen = On"; echo "allow_url_include = Off"; echo "short_open_tag = Off"; echo "default_charset = UTF-8"; echo "date.timezone = Europe/Prague"; } > /usr/local/etc/php/conf.d/custom.ini # buildkit

WORKDIR /var/www/html

ARG user=www-data

ARG uid=1000

RUN |2 user=www-data uid=1000 /bin/sh -c apk add --no-cache nginx supervisor && rm -rf /var/cache/apk/* # buildkit

RUN |2 user=www-data uid=1000 /bin/sh -c sed -i 's/^daemonize = yes/daemonize = no/' /usr/local/etc/php-fpm.conf && { echo '[global]'; echo 'error_log = /dev/stderr'; echo ''; echo '[www]'; echo 'access.log = /dev/stdout'; echo ''; echo 'access.format = "[%{%Y-%m-%dT%H:%M:%S%z}t] %R \"%r\" %s"'; echo ''; echo 'listen = /var/run/php-fpm.sock'; echo 'listen.owner = www-data'; echo 'listen.group = www-data'; echo 'listen.mode = 0660'; } > /usr/local/etc/php-fpm.d/zzz-overrides.conf && mkdir -p /var/run && chown -R www-data:www-data /var/run # buildkit

RUN |2 user=www-data uid=1000 /bin/sh -c sed -i 's/^user nginx;/user www-data;/' /etc/nginx/nginx.conf && mkdir -p /etc/nginx/conf.d && rm -f /etc/nginx/conf.d/default.conf /etc/nginx/http.d/default.conf && { echo 'server {'; echo ' listen 80 default_server;'; echo ' listen [::]:80 default_server;'; echo ' server_name _;'; echo ' # Tell nginx to use our new log format'; echo ' access_log /dev/stdout combined;'; echo ' error_log /dev/stderr;'; echo ' root /var/www/html/www;'; echo ' index index.php index.html;'; echo ' location / {'; echo ' try_files $uri $uri/ /index.php?$query_string;'; echo ' }'; echo ' location ~ \.php$ {'; echo ' try_files $uri =404;'; echo ' fastcgi_split_path_info ^(.+\.php)(/.+)$;'; echo ' fastcgi_pass unix:/var/run/php-fpm.sock;'; echo ' fastcgi_index index.php;'; echo ' include fastcgi_params;'; echo ' fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;'; echo ' fastcgi_param PATH_INFO $fastcgi_path_info;'; echo ' }'; echo ' location ~ /\.ht {'; echo ' deny all;'; echo ' }'; echo '}'; } > /etc/nginx/http.d/default.conf # buildkit

RUN |2 user=www-data uid=1000 /bin/sh -c { echo '[supervisord]'; echo 'nodaemon=true'; echo 'pidfile=/var/run/supervisord.pid'; echo 'logfile=/dev/stdout'; echo 'logfile_maxbytes=0'; echo 'user=root'; echo ''; echo '[program:php-fpm]'; echo 'command=/usr/local/sbin/php-fpm'; echo 'autostart=true'; echo 'autorestart=true'; echo 'priority=5'; echo 'user=root'; echo 'stdout_logfile=/dev/stdout'; echo 'stdout_logfile_maxbytes=0'; echo 'stderr_logfile=/dev/stderr'; echo 'stderr_logfile_maxbytes=0'; echo ''; echo '[program:nginx]'; echo 'command=/usr/sbin/nginx -g "daemon off;"'; echo 'autostart=true'; echo 'autorestart=true'; echo 'priority=10'; echo 'user=root'; echo 'stdout_logfile=/dev/stdout'; echo 'stdout_logfile_maxbytes=0'; echo 'stderr_logfile=/dev/stderr'; echo 'stderr_logfile_maxbytes=0'; } > /etc/supervisord.conf # buildkit

EXPOSE [80/tcp]

CMD ["/usr/bin/supervisord" "-c" "/etc/supervisord.conf"]