FROM behance/docker-nginx:10.2.0 as output

LABEL maintainers="Behance Team <dev-behance@adobe.com>"

# Set TERM to suppress warning messages.

ENV CONF_PHPFPM=/etc/php/7.4/fpm/php-fpm.conf \

CONF_PHPMODS=/etc/php/7.4/mods-available \

CONF_FPMPOOL=/etc/php/7.4/fpm/pool.d/www.conf \

CONF_FPMOVERRIDES=/etc/php/7.4/fpm/conf.d/overrides.user.ini \

APP_ROOT=/app \

SERVER_WORKER_CONNECTIONS=3072 \

SERVER_CLIENT_BODY_BUFFER_SIZE=128k \

SERVER_CLIENT_HEADER_BUFFER_SIZE=1k \

SERVER_CLIENT_BODY_BUFFER_SIZE=128k \

SERVER_LARGE_CLIENT_HEADER_BUFFERS="4 256k" \

PHP_FPM_MAX_CHILDREN=4096 \

PHP_FPM_START_SERVERS=20 \

PHP_FPM_MAX_REQUESTS=1024 \

PHP_FPM_MIN_SPARE_SERVERS=5 \

PHP_FPM_MAX_SPARE_SERVERS=128 \

PHP_FPM_MEMORY_LIMIT=256M \

PHP_FPM_MAX_EXECUTION_TIME=60 \

PHP_FPM_UPLOAD_MAX_FILESIZE=1M \

PHP_OPCACHE_MEMORY_CONSUMPTION=128 \

PHP_OPCACHE_INTERNED_STRINGS_BUFFER=16 \

PHP_OPCACHE_MAX_WASTED_PERCENTAGE=5 \

PHP_OPCACHE_ENABLE_CLI=1 \

PHP_ENGINE_VERSION=20190902 \

CFG_APP_DEBUG=1

COPY ./scripts/ /scripts/

# - Update security packages

# - Add PHP and support packages

# - Install NewRelic

# - Compile extensions

# - Enable/disable default extensions

# - Cleanup

RUN /bin/bash -e /security_updates.sh && \

apt-get install -yqq --no-install-recommends \

gpg-agent \

git \

curl \

wget \

software-properties-common \

locales \

&& \

locale-gen en_US.UTF-8 && export LANG=en_US.UTF-8 && \

add-apt-repository ppa:ondrej/php -y && \

apt-get update -q && \

# Ensure old versions of PHP don't accidentally get added by PPA maintainers

apt-mark hold \

apache2 \

apache2-bin \

libapache2-mod-php7.4 \

manpages \

manpages-dev \

&& \

apt-get -yqq install \

php7.4 \

php7.4-apcu \

php7.4-bcmath \

php7.4-bz2 \

php7.4-curl \

php7.4-fpm \

php7.4-gd \

php7.4-intl \

php7.4-json \

php7.4-mbstring \

php7.4-memcache \

php7.4-mysql \

php7.4-pgsql \

php7.4-xdebug \

php7.4-xml \

php7.4-yaml \

php7.4-zip \

# below required to compile non-packaged extensions

php7.4-dev \

pkg-config \

libmemcached-dev \

zlib1g-dev \

libssl-dev \

libpcre3-dev \

golang \

&& \

/bin/bash -e /scripts/install-newrelic-ubuntu.sh && \

/bin/bash -e /scripts/install-composer.sh && \

/scripts/pecl-install.sh \

igbinary \

memcached \

msgpack \

redis \

&& \

phpenmod \

memcached \

igbinary \

msgpack \

&& \

phpdismod \

pdo_pgsql \

pgsql \

redis \

yaml \

xdebug \

&& \

apt-get remove --purge -yq \

build-essential \

cpp \

cpp-7 \

gcc \

golang \

libpcre3-dev \

libssl-dev \

locales \

patch \

php7.4-dev \

pkg-config \

software-properties-common \

wget \

&& \

/bin/bash /clean.sh \

# Remove extra extensions installed via packages for other versions of PHP, leaving only the active engine folder

cd /usr/lib/php && \

ls -d */ | grep '[0-9]\{8\}' | grep -v ${PHP_ENGINE_VERSION} | xargs rm -rf && \

cd /

# # Overlay the root filesystem from this repo

COPY ./container/root /

# - Make additional hacks to migrate files/config from 7.0 --> 7.4 folder

RUN cp /etc/php/7.0/mods-available/* $CONF_PHPMODS && \

cp /etc/php/7.0/fpm/conf.d/overrides.user.ini $CONF_FPMOVERRIDES && \

# Hack: share startup scripts between variant versions by symlinking \

ln -s /usr/sbin/php-fpm7.4 /usr/sbin/php-fpm && \

# Override default ini values for both CLI + FPM \

phpenmod overrides && \

# Enable NewRelic via Ubuntu symlinks, but disable in file. Cross-variant startup script uncomments with env vars.

phpenmod newrelic && \

# Run standard set of tweaks to ensure runs performant, reliably, and consistent between variants

/bin/bash -e /scripts/prep-php.sh

# TESTING PHASE: using multi-stage to isolate any possible side effects

FROM output as testenvironment

# HACK: workaround for https://github.com/aelsabbahy/goss/issues/392

# Run the child and parent test configs separately instead of leveraging inheritance

RUN goss -g /tests/php-fpm/7.4.goss.yaml validate && \

goss -g /tests/php-fpm/base.goss.yaml validate

# Output the final image

FROM output