111 lines
4.3 KiB
Docker
111 lines
4.3 KiB
Docker
FROM debian:bookworm-slim
|
|
|
|
# explicitly set user/group IDs
|
|
RUN set -eux; \
|
|
groupadd -r postgres --gid=999; \
|
|
useradd -r -g postgres --uid=999 --home-dir=/var/lib/postgresql --shell=/bin/bash postgres; \
|
|
install --verbose --directory --owner postgres --group postgres --mode 1777 /var/lib/postgresql
|
|
|
|
RUN set -ex; \
|
|
apt-get update; \
|
|
apt-get install -y --no-install-recommends \
|
|
gnupg \
|
|
less \
|
|
; \
|
|
rm -rf /var/lib/apt/lists/*
|
|
|
|
# grab gosu for easy step-down from root
|
|
ENV GOSU_VERSION=1.17
|
|
RUN set -eux; \
|
|
savedAptMark="$(apt-mark showmanual)"; \
|
|
apt-get update; \
|
|
apt-get install -y --no-install-recommends ca-certificates wget; \
|
|
rm -rf /var/lib/apt/lists/*; \
|
|
dpkgArch="$(dpkg --print-architecture | awk -F- '{ print $NF }')"; \
|
|
wget -O /usr/local/bin/gosu "https://github.com/tianon/gosu/releases/download/$GOSU_VERSION/gosu-$dpkgArch"; \
|
|
wget -O /usr/local/bin/gosu.asc "https://github.com/tianon/gosu/releases/download/$GOSU_VERSION/gosu-$dpkgArch.asc"; \
|
|
export GNUPGHOME="$(mktemp -d)"; \
|
|
gpg --batch --keyserver hkps://keys.openpgp.org --recv-keys B42F6819007F00F88E364FD4036A9C25BF357DD4; \
|
|
gpg --batch --verify /usr/local/bin/gosu.asc /usr/local/bin/gosu; \
|
|
gpgconf --kill all; \
|
|
rm -rf "$GNUPGHOME" /usr/local/bin/gosu.asc; \
|
|
apt-mark auto '.*' > /dev/null; \
|
|
[ -z "$savedAptMark" ] || apt-mark manual $savedAptMark > /dev/null; \
|
|
apt-get purge -y --auto-remove -o APT::AutoRemove::RecommendsImportant=false; \
|
|
chmod +x /usr/local/bin/gosu; \
|
|
gosu --version; \
|
|
gosu nobody true
|
|
|
|
# make the "en_US.UTF-8" locale so postgres will be utf-8 enabled by default
|
|
RUN set -eux; \
|
|
if [ -f /etc/dpkg/dpkg.cfg.d/docker ]; then \
|
|
grep -q '/usr/share/locale' /etc/dpkg/dpkg.cfg.d/docker; \
|
|
sed -ri '/\/usr\/share\/locale/d' /etc/dpkg/dpkg.cfg.d/docker; \
|
|
! grep -q '/usr/share/locale' /etc/dpkg/dpkg.cfg.d/docker; \
|
|
fi; \
|
|
apt-get update; apt-get install -y --no-install-recommends locales; rm -rf /var/lib/apt/lists/*; \
|
|
echo 'en_US.UTF-8 UTF-8' >> /etc/locale.gen; \
|
|
locale-gen; \
|
|
locale -a | grep 'en_US.utf8'
|
|
ENV LANG=en_US.utf8
|
|
|
|
RUN set -eux; \
|
|
apt-get update; \
|
|
apt-get install -y --no-install-recommends \
|
|
libnss-wrapper \
|
|
xz-utils \
|
|
zstd \
|
|
; \
|
|
rm -rf /var/lib/apt/lists/*
|
|
|
|
RUN mkdir /docker-entrypoint-initdb.d
|
|
|
|
RUN set -ex; \
|
|
key='B97B0AFCAA1A47F044F244A07FCC7D46ACCC4CF8'; \
|
|
export GNUPGHOME="$(mktemp -d)"; \
|
|
mkdir -p /usr/local/share/keyrings/; \
|
|
gpg --batch --keyserver keyserver.ubuntu.com --recv-keys "$key"; \
|
|
gpg --batch --export --armor "$key" > /usr/local/share/keyrings/postgres.gpg.asc; \
|
|
gpgconf --kill all; \
|
|
rm -rf "$GNUPGHOME"
|
|
|
|
ENV PG_MAJOR=17
|
|
ENV PATH=$PATH:/usr/lib/postgresql/17/bin
|
|
ENV PG_VERSION=17.5
|
|
|
|
RUN set -ex; \
|
|
dpkgArch="$(dpkg --print-architecture)"; \
|
|
echo "deb [ signed-by=/usr/local/share/keyrings/postgres.gpg.asc ] http://apt.postgresql.org/pub/repos/apt/ bookworm-pgdg main 17" > /etc/apt/sources.list.d/pgdg.list; \
|
|
apt-get update; \
|
|
apt-get install -y --no-install-recommends postgresql-common; \
|
|
sed -ri 's/#(create_main_cluster) .*$/\1 = false/' /etc/postgresql-common/createcluster.conf; \
|
|
apt-get install -y --no-install-recommends \
|
|
"postgresql-17" \
|
|
; \
|
|
rm -rf /var/lib/apt/lists/*; \
|
|
find /usr -name '*.pyc' -type f -exec bash -c 'for pyc; do dpkg -S "$pyc" &> /dev/null || rm -vf "$pyc"; done' -- '{}' +; \
|
|
postgres --version
|
|
|
|
# make the sample config easier to munge (and "correct by default")
|
|
RUN set -eux; \
|
|
dpkg-divert --add --rename --divert "/usr/share/postgresql/postgresql.conf.sample.dpkg" "/usr/share/postgresql/17/postgresql.conf.sample"; \
|
|
cp -v /usr/share/postgresql/postgresql.conf.sample.dpkg /usr/share/postgresql/postgresql.conf.sample; \
|
|
ln -sv ../postgresql.conf.sample "/usr/share/postgresql/17/"; \
|
|
sed -ri "s!^#?(listen_addresses)\s*=\s*\S+.*!\1 = '*'!" /usr/share/postgresql/postgresql.conf.sample; \
|
|
grep -F "listen_addresses = '*'" /usr/share/postgresql/postgresql.conf.sample
|
|
|
|
RUN install --verbose --directory --owner postgres --group postgres --mode 3777 /var/run/postgresql
|
|
|
|
ENV PGDATA=/var/lib/postgresql/data
|
|
RUN install --verbose --directory --owner postgres --group postgres --mode 1777 "$PGDATA"
|
|
VOLUME /var/lib/postgresql/data
|
|
|
|
COPY docker-entrypoint.sh docker-ensure-initdb.sh /usr/local/bin/
|
|
RUN ln -sT docker-ensure-initdb.sh /usr/local/bin/docker-enforce-initdb.sh
|
|
ENTRYPOINT ["docker-entrypoint.sh"]
|
|
|
|
STOPSIGNAL SIGINT
|
|
|
|
EXPOSE 5432
|
|
CMD ["postgres"]
|