Commit c4867781 authored by Luca Cinquini's avatar Luca Cinquini
Browse files

Building tomcat image from official ubuntu image

parent 873792e6

.gitignore

+1 −0
Original line number Diff line number Diff line
@@ -6,3 +6,4 @@ 
**/*.jar

**/*.gz

_site/

.project

tomcat/Dockerfile

+23 −11
Original line number Diff line number Diff line 
# Official tomcat container but running with an unprivileged user



FROM tomcat:8

# Ubuntu container with Tomcat installation

FROM ubuntu:latest



MAINTAINER Earth System Grid Federation <esgf-devel@lists.llnl.gov>



# Create the tomcat user and group

# Update OS libraries

RUN apt-get -y update && \

    apt-get -y install openjdk-8-jdk wget

    

# Install Tomcat

ENV TOMCAT_VERSION 8.0.53

RUN mkdir /usr/local/tomcat && \

    wget http://www-us.apache.org/dist/tomcat/tomcat-8/v${TOMCAT_VERSION}/bin/apache-tomcat-${TOMCAT_VERSION}.tar.gz -O /tmp/tomcat.tar.gz && \

    cd /tmp && tar xvfz tomcat.tar.gz && \

    cp -Rv /tmp/apache-tomcat-${TOMCAT_VERSION}/* /usr/local/tomcat/

ENV CATALINA_HOME /usr/local/tomcat

ENV JAVA_HOME /usr/lib/jvm/java-8-openjdk-amd64/jre/

ENV PATH $PATH:/usr/local/tomcat/bin



# Create the tomcat user and group

ENV TOMCAT_USER tomcat

ENV TOMCAT_GROUP tomcat

ENV TOMCAT_UID 1001
@@ -12,7 +25,7 @@ ENV TOMCAT_GID 1001 
RUN groupadd -g $TOMCAT_GID $TOMCAT_GROUP &&  \

    useradd -d $CATALINA_HOME -g $TOMCAT_GROUP -s /usr/sbin/nologin -u $TOMCAT_UID $TOMCAT_USER



# Install gettext-base (for envsubst)

# Install gettext-base (for envsubst)

RUN apt-get update && \

    apt-get install -y gettext-base && \

    rm -rf /var/lib/apt/lists/*
@@ -24,19 +37,18 @@ RUN chown $TOMCAT_UID:0 $JAVA_HOME/lib/security/cacerts && \ 
# Remove the default webapps

RUN rm -rf $CATALINA_HOME/webapps/*



# Install custom server.xml with remote IP valve

# Install custom server.xml with remote IP valve

COPY conf/server.xml $CATALINA_HOME/conf/



# We want to allow running as any user in the root group

# So transfer ownership of CATALINA_HOME to the tomcat user and root group, with

# rw for both

# Remove the setgid bit from the conf directory as it prevents the root group using it

# So transfer ownership of CATALINA_HOME to the tomcat user and root group, with

# rw for both

# Remove the setgid bit from the conf directory as it prevents the root group using it

RUN chown -R $TOMCAT_UID:0 $CATALINA_HOME && \

    chmod g-s+x $CATALINA_HOME/conf && \

    chmod -R u+rw,g+rw,o= $CATALINA_HOME



# Install custom entrypoint script

# Install custom entrypoint script

COPY scripts/docker-entrypoint.sh /usr/local/bin/docker-entrypoint.sh



ENTRYPOINT ["/usr/local/bin/docker-entrypoint.sh"]

CMD ["catalina.sh", "run"]