45 lines
895 B
Docker
45 lines
895 B
Docker
FROM alpine:edge
|
|
|
|
ENV LANG C.UTF-8
|
|
ENV SSL_CERT_FILE /etc/ssl/certs/ca-certificates.crt
|
|
|
|
ENV BLOG_UID 1000
|
|
ENV BLOG_GID 1000
|
|
|
|
# prepare repositories
|
|
RUN set -ex \
|
|
&& echo "http://nl.alpinelinux.org/alpine/edge/community" >> /etc/apk/repositories \
|
|
&& apk update
|
|
|
|
# add files
|
|
ADD root /
|
|
|
|
# prepare for provisioning
|
|
RUN set -ex \
|
|
&& apk upgrade -a --no-cache \
|
|
&& apk add --no-cache\
|
|
ansible \
|
|
bash \
|
|
ca-certificates \
|
|
g++ \
|
|
git \
|
|
openssh \
|
|
python \
|
|
sudo \
|
|
&& addgroup -g $BLOG_GID blog \
|
|
&& adduser -h /home/blog -D -s /bin/sh -G blog blog \
|
|
&& echo 'blog ALL=(ALL) NOPASSWD: ALL' > /etc/sudoers.d/blog \
|
|
&& chmod 0440 /etc/sudoers.d/blog \
|
|
&& chown -R $BLOG_UID:$BLOG_GID /home/blog
|
|
|
|
# switch user to blog
|
|
USER blog
|
|
|
|
# provision
|
|
RUN set -ex \
|
|
&& ansible-playbook -c local /home/blog/playbooks/writing_env.yml
|
|
|
|
WORKDIR /blog
|
|
|
|
EXPOSE 8000
|