23059a1de3
Some checks failed
CodeQL / Analyze (javascript) (push) Failing after 16s
CodeQL / Analyze (python) (push) Failing after 3s
i18n sync check / check:sync (push) Failing after 3s
React Doctor / react-doctor (push) Failing after 16s
Branch Build CE / Build-Push Admin Docker Image (${{ matrix.arch }}) (push) Has been cancelled
Branch Build CE / Merge Admin Manifest (push) Has been cancelled
Branch Build CE / Build-Push Web Docker Image (${{ matrix.arch }}) (push) Has been cancelled
Branch Build CE / Merge Web Manifest (push) Has been cancelled
Branch Build CE / Build-Push Space Docker Image (${{ matrix.arch }}) (push) Has been cancelled
Branch Build CE / Merge Proxy Manifest (push) Has been cancelled
Branch Build CE / Merge Space Manifest (push) Has been cancelled
Branch Build CE / Prepare AIO Assets (push) Has been cancelled
Branch Build CE / Build Setup (push) Has been cancelled
Branch Build CE / Build-Push Live Collaboration Docker Image (${{ matrix.arch }}) (push) Has been cancelled
Branch Build CE / Merge Live Collaboration Manifest (push) Has been cancelled
Branch Build CE / Build-Push API Server Docker Image (${{ matrix.arch }}) (push) Has been cancelled
Branch Build CE / Merge API Server Manifest (push) Has been cancelled
Branch Build CE / Build-Push Proxy Docker Image (${{ matrix.arch }}) (push) Has been cancelled
Branch Build CE / Build-Push AIO Docker Image (${{ matrix.arch }}) (push) Has been cancelled
Branch Build CE / Merge AIO Manifest (push) Has been cancelled
Branch Build CE / Upload Build Assets (push) Has been cancelled
Branch Build CE / Build Release (push) Has been cancelled
92 lines
3.3 KiB
Docker
92 lines
3.3 KiB
Docker
ARG PLANE_VERSION=v0.27.1
|
|
FROM --platform=$BUILDPLATFORM tonistiigi/binfmt AS binfmt
|
|
|
|
# **************************************************
|
|
# STAGE 0: Image Loading
|
|
# **************************************************
|
|
FROM node:22-alpine AS node
|
|
|
|
FROM makeplane/plane-frontend:${PLANE_VERSION} AS web-img
|
|
FROM makeplane/plane-backend:${PLANE_VERSION} AS backend-img
|
|
FROM makeplane/plane-space:${PLANE_VERSION} AS space-img
|
|
FROM makeplane/plane-admin:${PLANE_VERSION} AS admin-img
|
|
FROM makeplane/plane-live:${PLANE_VERSION} AS live-img
|
|
FROM makeplane/plane-proxy:${PLANE_VERSION} AS proxy-img
|
|
|
|
# **************************************************
|
|
# STAGE 1: Runner
|
|
# **************************************************
|
|
FROM python:3.12.12-alpine AS runner
|
|
|
|
WORKDIR /app
|
|
|
|
# OS security updates. --available forces reinstall from the current repos;
|
|
# bump APK_SECURITY_PATCH to bust buildx's cached layer (keyed on this command
|
|
# string), otherwise a rebuild silently re-ships the old packages.
|
|
ARG APK_SECURITY_PATCH=2026-09-07
|
|
RUN echo "apk-security-patch ${APK_SECURITY_PATCH}" && apk update && apk upgrade --no-cache --available
|
|
|
|
# All apk work must happen BEFORE the `COPY --from=node /usr/lib` below: that
|
|
# copy overwrites /usr/lib/libapk.so.* with node:22-alpine's copy, which is a
|
|
# different Alpine release, leaving /sbin/apk linked against a libapk that no
|
|
# longer exports the symbols it needs. Every later apk call then dies with
|
|
# "Error relocating /sbin/apk: ... symbol not found" (exit 127), and apk cannot
|
|
# repair itself because apk is the broken binary. So the runtime tools that used
|
|
# to be installed further down are folded in here.
|
|
RUN apk add --no-cache \
|
|
"libpq" \
|
|
"libxslt" \
|
|
"xmlsec" \
|
|
"nss-tools" \
|
|
"bash" \
|
|
"curl" \
|
|
"uuidgen" \
|
|
"ncdu" \
|
|
"vim"
|
|
|
|
|
|
COPY --from=node /usr/lib /usr/lib
|
|
COPY --from=node /usr/local/lib /usr/local/lib
|
|
COPY --from=node /usr/local/include /usr/local/include
|
|
COPY --from=node /usr/local/bin /usr/local/bin
|
|
|
|
# The copy above re-introduces node:22-alpine's npm, whose bundled dependencies
|
|
# carry known vulnerabilities (pacote, ip-address, brace-expansion, tar,
|
|
# sigstore) -- the per-service images strip npm, so without this the AIO is the
|
|
# only place they come back. npm is not needed at runtime: the space program in
|
|
# supervisor.conf execs its react-router-serve bin shim directly rather than
|
|
# going through npx.
|
|
RUN rm -rf /usr/local/lib/node_modules/npm /usr/local/bin/npm /usr/local/bin/npx
|
|
|
|
COPY --from=web-img /usr/share/caddy/html /app/web
|
|
COPY --from=space-img /app /app/space
|
|
COPY --from=admin-img /usr/share/caddy/html/god-mode /app/admin
|
|
COPY --from=live-img /app /app/live
|
|
|
|
RUN rm -rf /app/space/apps/space/.next/cache
|
|
|
|
COPY --from=proxy-img /usr/bin/caddy /usr/bin/caddy
|
|
COPY dist/Caddyfile /app/proxy/Caddyfile
|
|
|
|
COPY --from=backend-img /code /app/backend
|
|
COPY --from=backend-img /usr/local/lib/python3.12/site-packages/ /usr/local/lib/python3.12/site-packages/
|
|
COPY --from=backend-img /usr/local/bin/ /usr/local/bin/
|
|
|
|
RUN pip install supervisor
|
|
RUN mkdir -p /etc/supervisor/conf.d
|
|
|
|
COPY start.sh /app/start.sh
|
|
COPY dist/plane.env /app/plane.env
|
|
COPY supervisor.conf /etc/supervisor/conf.d/supervisor.conf
|
|
|
|
RUN mkdir -p /app/logs/access && \
|
|
mkdir -p /app/logs/error && \
|
|
mkdir -p /app/data && \
|
|
chmod +x /app/start.sh
|
|
|
|
VOLUME ["/app/data", "/app/logs"]
|
|
|
|
EXPOSE 80 443
|
|
|
|
CMD ["/app/start.sh"]
|