Arno Kaimbacher
b5bbe26ec2
Some checks failed
build.yaml / feat: Enhance background job settings UI and functionality (push) Failing after 0s
- Updated BackgroundJob.vue to improve the display of background job statuses, including missing cross-references and current job mode. - Added auto-refresh functionality for background job status. - Introduced success toast notifications for successful status refreshes. - Modified the XML serialization process in DatasetXmlSerializer for better caching and performance. - Implemented a new RuleProvider for managing custom validation rules. - Improved error handling in routes for loading background job settings. - Enhanced ClamScan configuration with socket support for virus scanning. - Refactored dayjs utility to streamline locale management.
100 lines
No EOL
3.5 KiB
Docker
100 lines
No EOL
3.5 KiB
Docker
################## First Stage - Creating base #########################
|
|
|
|
# Created a variable to hold our node base image
|
|
ARG NODE_IMAGE=node:22-trixie-slim
|
|
|
|
FROM $NODE_IMAGE AS base
|
|
|
|
# Install dumb-init and ClamAV, and perform ClamAV database update
|
|
RUN apt-get update \
|
|
&& apt-get install -y --no-install-recommends \
|
|
dumb-init \
|
|
clamav \
|
|
clamav-daemon \
|
|
clamdscan \
|
|
ca-certificates \
|
|
&& rm -rf /var/lib/apt/lists/* \
|
|
# Creating folders and changing ownerships
|
|
&& mkdir -p /home/node/app \
|
|
&& mkdir -p /var/lib/clamav \
|
|
&& mkdir /usr/local/share/clamav \
|
|
&& mkdir /var/run/clamav \
|
|
&& mkdir -p /var/log/clamav \
|
|
&& mkdir -p /tmp/clamav-logs \
|
|
|
|
# Set ownership and permissions
|
|
&& chown node:node /home/node/app \
|
|
# && chown -R node:clamav /var/lib/clamav /usr/local/share/clamav /etc/clamav /var/run/clamav \
|
|
&& chown -R node:clamav /var/lib/clamav /usr/local/share/clamav /etc/clamav /var/run/clamav /var/log/clamav \
|
|
&& chown -R node:clamav /etc/clamav \
|
|
&& chmod 755 /tmp/clamav-logs \
|
|
&& chmod 750 /var/run/clamav \
|
|
&& chmod 755 /var/lib/clamav \
|
|
&& chmod 755 /var/log/clamav \
|
|
# Add node user to clamav group and allow sudo for clamav commands
|
|
&& usermod -a -G clamav node
|
|
# && chmod 666 /var/run/clamav/clamd.socket
|
|
# Make directories group-writable so node (as member of clamav group) can access them
|
|
# && chmod 750 /var/run/clamav /var/lib/clamav /var/log/clamav /tmp/clamav-logs
|
|
|
|
|
|
# Configure ClamAV - copy config files before switching user
|
|
# COPY --chown=node:clamav ./*.conf /etc/clamav/
|
|
COPY --chown=node:clamav ./*.conf /etc/clamav/
|
|
|
|
|
|
|
|
# Setting the working directory
|
|
WORKDIR /home/node/app
|
|
# Changing the current active user to "node"
|
|
|
|
# Download initial ClamAV database as root before switching users
|
|
USER node
|
|
RUN freshclam --quiet || echo "Initial database download failed - will retry at runtime"
|
|
|
|
# Copy entrypoint script
|
|
COPY --chown=node:clamav docker-entrypoint.sh /home/node/app/docker-entrypoint.sh
|
|
RUN chmod +x /home/node/app/docker-entrypoint.sh
|
|
ENV TZ="Europe/Vienna"
|
|
|
|
|
|
################## Second Stage - Installing dependencies ##########
|
|
# In this stage, we will start installing dependencies
|
|
FROM base AS dependencies
|
|
# We copy all package.* files to the working directory
|
|
COPY --chown=node:node ./package*.json ./
|
|
# We run NPM CI to install the exact versions of dependencies
|
|
RUN npm ci
|
|
# Lastly, we copy all the files with active user
|
|
COPY --chown=node:node . .
|
|
|
|
|
|
################## Third Stage - Building Stage #####################
|
|
# In this stage, we will start building dependencies
|
|
FROM dependencies AS build
|
|
ENV NODE_ENV=production
|
|
# We run "node ace build" to build the app (dist folder) for production
|
|
RUN node ace build --ignore-ts-errors
|
|
# RUN node ace build --production
|
|
|
|
|
|
################## Final Stage - Production #########################
|
|
# In this final stage, we will start running the application
|
|
FROM base AS production
|
|
# Here, we include all the required environment variables
|
|
# ENV NODE_ENV=production
|
|
# ENV PORT=$PORT
|
|
# ENV HOST=0.0.0.0
|
|
|
|
# Copy package.* to the working directory with active user
|
|
COPY --chown=node:node ./package*.json ./
|
|
# We run NPM CI to install the exact versions of production dependencies
|
|
RUN npm ci --omit=dev
|
|
# Copy files to the working directory from the build folder the user
|
|
COPY --chown=node:node --from=build /home/node/app/build .
|
|
# Expose port
|
|
# EXPOSE 3310
|
|
EXPOSE 3333
|
|
ENTRYPOINT ["/home/node/app/docker-entrypoint.sh"]
|
|
# Run the command to start the server using "dumb-init"
|
|
CMD [ "dumb-init", "node", "bin/server.js" ] |