testing jupyterlab build

apiVersion: v1

description: A Helm chart example for jupyterlab

name: jupyterlab

version: 1.0.0

# Copyright (c) Jupyter Development Team.

# Distributed under the terms of the Modified BSD License.

# Ubuntu 18.04 (bionic)

# https://hub.docker.com/_/ubuntu/?tab=tags&name=bionic

# OS/ARCH: linux/amd64

ARG ROOT_CONTAINER=ubuntu:bionic-20200403@sha256:b58746c8a89938b8c9f5b77de3b8cf1fe78210c696ab03a1442e235eea65d84f

ARG BASE_CONTAINER=$ROOT_CONTAINER

FROM $BASE_CONTAINER

LABEL maintainer="Jupyter Project <jupyter@googlegroups.com>"

ARG NB_USER="stf007_auser"

ARG NB_UID="15737"

ARG NB_GID="2328"

USER root

# Install all OS dependencies for notebook server that starts but lacks all

# features (e.g., download as all possible file formats)

ENV DEBIAN_FRONTEND noninteractive

RUN apt-get update \

 && apt-get install -yq --no-install-recommends \

    wget \

    bzip2 \

    ca-certificates \

    sudo \

    locales \

    fonts-liberation \

    run-one \

 && apt-get clean && rm -rf /var/lib/apt/lists/*

RUN echo "en_US.UTF-8 UTF-8" > /etc/locale.gen && \

    locale-gen

# Configure environment

ENV CONDA_DIR=/opt/conda \

    SHELL=/bin/bash \

    NB_USER=$NB_USER \

    NB_UID=$NB_UID \

    NB_GID=$NB_GID \

    LC_ALL=en_US.UTF-8 \

    LANG=en_US.UTF-8 \

    LANGUAGE=en_US.UTF-8

ENV PATH=$CONDA_DIR/bin:$PATH \

    HOME=/home/$NB_USER

# Copy a script that we will use to correct permissions after running certain commands

COPY fix-permissions /usr/local/bin/fix-permissions

RUN chmod a+rx /usr/local/bin/fix-permissions

# Enable prompt color in the skeleton .bashrc before creating the default NB_USER

RUN sed -i 's/^#force_color_prompt=yes/force_color_prompt=yes/' /etc/skel/.bashrc

# Create NB_USER wtih name jovyan user with UID=1000 and in the 'users' group

# and make sure these dirs are writable by the `users` group.

RUN echo "auth requisite pam_deny.so" >> /etc/pam.d/su && \

    sed -i.bak -e 's/^%admin/#%admin/' /etc/sudoers && \

    sed -i.bak -e 's/^%sudo/#%sudo/' /etc/sudoers && \

    useradd -m -s /bin/bash -N -u $NB_UID $NB_USER && \

    mkdir -p $CONDA_DIR && \

    chown $NB_USER:$NB_GID $CONDA_DIR && \

    chmod g+w /etc/passwd && \

    fix-permissions $HOME && \

    fix-permissions $CONDA_DIR

USER $NB_UID

WORKDIR $HOME

ARG PYTHON_VERSION=default

# Setup work directory for backward-compatibility

RUN mkdir /home/$NB_USER/work && \

    fix-permissions /home/$NB_USER

# Install conda as jovyan and check the md5 sum provided on the download site

ENV MINICONDA_VERSION=4.8.2 \

    MINICONDA_MD5=87e77f097f6ebb5127c77662dfc3165e \

    CONDA_VERSION=4.8.2

RUN cd /tmp && \

    wget --quiet https://repo.continuum.io/miniconda/Miniconda3-py37_${MINICONDA_VERSION}-Linux-x86_64.sh && \

    echo "${MINICONDA_MD5} *Miniconda3-py37_${MINICONDA_VERSION}-Linux-x86_64.sh" | md5sum -c - && \

    /bin/bash Miniconda3-py37_${MINICONDA_VERSION}-Linux-x86_64.sh -f -b -p $CONDA_DIR && \

    rm Miniconda3-py37_${MINICONDA_VERSION}-Linux-x86_64.sh && \

    echo "conda ${CONDA_VERSION}" >> $CONDA_DIR/conda-meta/pinned && \

    conda config --system --prepend channels conda-forge && \

    conda config --system --set auto_update_conda false && \

    conda config --system --set show_channel_urls true && \

    conda config --system --set channel_priority strict && \

    if [ ! $PYTHON_VERSION = 'default' ]; then conda install --yes python=$PYTHON_VERSION; fi && \

    conda list python | grep '^python ' | tr -s ' ' | cut -d '.' -f 1,2 | sed 's/$/.*/' >> $CONDA_DIR/conda-meta/pinned && \

    conda install --quiet --yes conda && \

    conda install --quiet --yes pip && \

    conda update --all --quiet --yes && \

    conda clean --all -f -y && \

    rm -rf /home/$NB_USER/.cache/yarn && \

    fix-permissions $CONDA_DIR && \

    fix-permissions /home/$NB_USER

# Install Tini

RUN conda install --quiet --yes 'tini=0.18.0' && \

    conda list tini | grep tini | tr -s ' ' | cut -d ' ' -f 1,2 >> $CONDA_DIR/conda-meta/pinned && \

    conda clean --all -f -y && \

    fix-permissions $CONDA_DIR && \

    fix-permissions /home/$NB_USER

# Install Jupyter Notebook, Lab, and Hub

# Generate a notebook server config

# Cleanup temporary files

# Correct permissions

# Do all this in a single RUN command to avoid duplicating all of the

# files across image layers when the permissions change

RUN conda install --quiet --yes \

    'notebook=6.0.3' \

    'jupyterhub=1.1.0' \

    'jupyterlab=2.1.3' && \

    conda clean --all -f -y && \

    npm cache clean --force && \

    jupyter notebook --generate-config && \

    rm -rf $CONDA_DIR/share/jupyter/lab/staging && \

    rm -rf /home/$NB_USER/.cache/yarn && \

    fix-permissions $CONDA_DIR && \

    fix-permissions /home/$NB_USER

EXPOSE 8888

# Configure container startup

ENTRYPOINT ["tini", "-g", "--"]

CMD ["start-notebook.sh"]

# Copy local files as late as possible to avoid cache busting

COPY start.sh start-notebook.sh start-singleuser.sh /usr/local/bin/

COPY jupyter_notebook_config.py /etc/jupyter/

# Fix permissions on /etc/jupyter as root

USER root

RUN fix-permissions /etc/jupyter/

# Switch back to jovyan to avoid accidental container runs as root

USER $NB_UID

#!/bin/bash

# set permissions on a directory

# after any installation, if a directory needs to be (human) user-writable,

# run this script on it.

# It will make everything in the directory owned by the group $NB_GID

# and writable by that group.

# Deployments that want to set a specific user id can preserve permissions

# by adding the `--group-add users` line to `docker run`.

# uses find to avoid touching files that already have the right permissions,

# which would cause massive image explosion

# right permissions are:

# group=$NB_GID

# AND permissions include group rwX (directory-execute)

# AND directories have setuid,setgid bits set

set -e

for d in "$@"; do

  find "$d" \

    ! \( \

      -group $NB_GID \

      -a -perm -g+rwX  \

    \) \

    -exec chgrp $NB_GID {} \; \

    -exec chmod g+rwX {} \;

  # setuid,setgid *on directories only*

  find "$d" \

    \( \

        -type d \

        -a ! -perm -6000  \

    \) \

    -exec chmod +6000 {} \;

done

# Copyright (c) Jupyter Development Team.

# Distributed under the terms of the Modified BSD License.

from jupyter_core.paths import jupyter_data_dir

import subprocess

import os

import errno

import stat

c = get_config()

c.NotebookApp.ip = '0.0.0.0'

c.NotebookApp.port = 8888

c.NotebookApp.open_browser = False

# https://github.com/jupyter/notebook/issues/3130

c.FileContentsManager.delete_to_trash = False

# Generate a self-signed certificate

if 'GEN_CERT' in os.environ:

    dir_name = jupyter_data_dir()

    pem_file = os.path.join(dir_name, 'notebook.pem')

    try:

        os.makedirs(dir_name)

    except OSError as exc:  # Python >2.5

        if exc.errno == errno.EEXIST and os.path.isdir(dir_name):

            pass

        else:

            raise

    # Generate an openssl.cnf file to set the distinguished name

    cnf_file = os.path.join(os.getenv('CONDA_DIR', '/usr/lib'), 'ssl', 'openssl.cnf')

    if not os.path.isfile(cnf_file):

        with open(cnf_file, 'w') as fh:

            fh.write('''\

[req]

distinguished_name = req_distinguished_name

[req_distinguished_name]

''')

    # Generate a certificate if one doesn't exist on disk

    subprocess.check_call(['openssl', 'req', '-new',

                           '-newkey', 'rsa:2048',

                           '-days', '365',

                           '-nodes', '-x509',

                           '-subj', '/C=XX/ST=XX/L=XX/O=generated/CN=generated',

                           '-keyout', pem_file,

                           '-out', pem_file])

    # Restrict access to the file

    os.chmod(pem_file, stat.S_IRUSR | stat.S_IWUSR)

    c.NotebookApp.certfile = pem_file

# Change default umask for all subprocesses of the notebook server if set in

# the environment

if 'NB_UMASK' in os.environ:

    os.umask(int(os.environ['NB_UMASK'], 8))

 No newline at end of file

#!/bin/bash

# Copyright (c) Jupyter Development Team.

# Distributed under the terms of the Modified BSD License.

set -e

wrapper=""

if [[ "${RESTARTABLE}" == "yes" ]]; then

  wrapper="run-one-constantly"

fi

if [[ ! -z "${JUPYTERHUB_API_TOKEN}" ]]; then

  # launched by JupyterHub, use single-user entrypoint

  exec /usr/local/bin/start-singleuser.sh "$@"

elif [[ ! -z "${JUPYTER_ENABLE_LAB}" ]]; then

  . /usr/local/bin/start.sh $wrapper jupyter lab "$@"

else

  . /usr/local/bin/start.sh $wrapper jupyter notebook "$@"

fi