wip: rebase images on gliderlabs/alpine for smaller size

quay.io/iseexchange/tacstack   1.767 GB  <--- before this commit
tacstack                       779.8 MB  <--- after this commit

README.md

@@ -10,6 +10,14 @@ with CentOS 6.5 and a LAMP stack of:
 * Python
 
 
+Build locally
+-------------
+
+Clone this git repo, then run:
+
+    script/build
+
+
 Deployment
 ----------
 
@@ -64,21 +72,6 @@ sudo nsenter --target $PID --mount --uts --ipc --net --pid
 ```
 
 
-OVAL vulnerability scan
------------------------
-
-The docker build runs a vulnerability scan.
-You can also perform the scan inside an existing build via:
-
-    docker run --rm -t quay.io/iseexchange/tacstack /oval/vulnerability-scan.sh
-
-See https://github.com/jumanjihouse/oval for details.
-
-TODO: Implement some sort of CD system to poll the OVAL feed and rebuild
-the image on any update. https://github.com/jumanjiman/docker-gocd may be
-a candidate for the solution.
-
-
 Contributing
 ------------
 

app/Dockerfile

@@ -0,0 +1,59 @@
+FROM gliderlabs/alpine:latest
+
+# Please list packages, one per line, in alpha order.
+RUN apk-install \
+    alpine-sdk \
+    apache2 \
+    bash \
+    bash-completion \
+    libffi \
+    libffi-dev \
+    libxml2 \
+    libxml2-dev \
+    libxslt \
+    libxslt-dev \
+    mysql \
+    mysql-client \
+    mysql-dev \
+    openssh \
+    openssh-client \
+    php \
+    php-dev \
+    php-gd \
+    php-memcache \
+    phpmyadmin \
+    php-mysql \
+    php-pspell \
+    php-snmp \
+    php-xml \
+    php-xmlrpc \
+    py-libxml2 \
+    py-libxslt \
+    py-nose \
+    py-pip \
+    python \
+    python-dev \
+    subversion \
+    supervisor \
+    vim \
+    ;
+
+RUN pip install "pip>=1.4,<1.5" --upgrade
+RUN pip install MySQL-python robotframework lxml python-etcd
+
+# Configure sshd.
+RUN ssh-keygen -q -N "" -t dsa -f /etc/ssh/ssh_host_dsa_key && ssh-keygen -q -N "" -t rsa -f /etc/ssh/ssh_host_rsa_key 
+RUN sed -ri 's/UsePAM yes/UsePAM no/g' /etc/ssh/sshd_config && echo 'root:changeme' | chpasswd
+
+# Ports: 22=ssh, 80=http, 3306=mysql, 18900=MAP 18901=RobotTestPort
+EXPOSE 22 80 3306 18900 18901
+
+COPY src /
+
+# Start mysql service and create admin user with changeme password
+#RUN /etc/init.d/mysql setup; \
+#    /etc/init.d/mysql start; \
+#    sleep 10s; \ 
+#    echo "CREATE USER 'admin'@'localhost' IDENTIFIED BY 'changeme'; GRANT ALL PRIVILEGES ON *.* TO admin@'%' WITH GRANT OPTION; FLUSH PRIVILEGES; SET PASSWORD FOR admin@'%'=PASSWORD('changeme');" | mysql
+
+CMD ["supervisord", "-n"]

src/files/supervisord.conf → app/src/etc/supervisord.conf

@@ -22,4 +22,10 @@ autorestart=true               ; retstart at unexpected quit (default: true)
 startretries=3                 ; max # of serial start failures (default 3)
 
 [program:mysql]
-command = /usr/bin/pidproxy /var/run/mysqld/mysqld.pid /usr/bin/mysqld_safe
+#command = /usr/bin/pidproxy /var/run/mysqld/mysqld.pid /usr/bin/mysqld_safe
+command = /usr/bin/mysqld_safe
+stdout_logfile=/var/log/mysqld.log
+stderr_logfile=/var/log/mysqld.log
+autostart=true                 ; start at supervisord start (default: true)
+autorestart=true               ; retstart at unexpected quit (default: true)
+startretries=3                 ; max # of serial start failures (default 3)

app/src/root/.bash_profile

@@ -0,0 +1 @@
+.bashrc

ftpdata/Dockerfile

@@ -0,0 +1,4 @@
+FROM gliderlabs/alpine:latest
+
+VOLUME /var/ftp/pub/uploads
+CMD /bin/sh

script/build

@@ -0,0 +1,3 @@
+#!/bin/sh
+
+docker build -t tacstack app/