heimdall/Containerfile.j2 at main · daemonless/heimdall · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
# syntax=docker/dockerfile:1
ARG BASE_VERSION=15
ARG APP_VERSION=""

FROM ghcr.io/daemonless/nginx-base:${BASE_VERSION}

ARG APP_VERSION
ARG UPSTREAM_URL="https://api.github.com/repos/linuxserver/Heimdall/releases/latest"
ARG UPSTREAM_JQ=".tag_name"
{%- if ports %}
ARG HEALTHCHECK_ENDPOINT="http://localhost:{{ ports[0].port }}/daemonless-ping"
{%- else %}
ARG HEALTHCHECK_ENDPOINT="http://localhost:80/daemonless-ping"
{%- endif %}

ENV HEALTHCHECK_URL="${HEALTHCHECK_ENDPOINT}"

# --- Metadata (Injected by Generator) ---
LABEL org.opencontainers.image.title="{{ title }}" \
      org.opencontainers.image.description="{{ description }}" \
      org.opencontainers.image.source="{{ repo_url }}" \
      org.opencontainers.image.url="{{ web_url }}" \
      org.opencontainers.image.licenses="MIT" \
      org.opencontainers.image.vendor="daemonless" \
      org.opencontainers.image.authors="daemonless" \
      io.daemonless.category="{{ category }}" \
{%- if ports %}
      io.daemonless.port="{{ ports[0].port }}" \
{%- endif %}
{%- if volumes %}
      io.daemonless.volumes="{{ volumes | map(attribute='path') | join(',') }}" \
{%- endif %}
      io.daemonless.upstream-mode="source" \
      io.daemonless.upstream-url="${UPSTREAM_URL}" \
      io.daemonless.upstream-jq="${UPSTREAM_JQ}" \
      io.daemonless.healthcheck-url="${HEALTHCHECK_ENDPOINT}"

ARG PACKAGES="php84 php84-dom php84-intl php84-opcache php84-pdo_sqlite php84-tokenizer \
    php84-mbstring php84-xml php84-fileinfo php84-curl php84-ctype php84-zip php84-session php84-filter ca_root_nss"

# Install PHP runtime packages
RUN pkg update && \
    pkg install -y ${PACKAGES} && \
    pkg clean -ay && \
    rm -rf /var/cache/pkg/* /var/db/pkg/repos/*

# Fetch Heimdall release (tarball includes vendor/ and pre-built frontend assets)
RUN --mount=type=secret,id=github_token \
    TOKEN=$(cat /run/secrets/github_token 2>/dev/null || true) && \
    if [ -n "$TOKEN" ]; then \
        API_URL="https://x-access-token:${TOKEN}@api.github.com/repos/linuxserver/Heimdall/releases/latest"; \
    else \
        API_URL="${UPSTREAM_URL}"; \
    fi && \
    APP_VER="${APP_VERSION:-$(fetch -qo - "$API_URL" | jq -r "${UPSTREAM_JQ}")}" && \
    mkdir -p /app/www-tmp && \
    fetch -qo - "https://github.com/linuxserver/Heimdall/archive/refs/tags/${APP_VER}.tar.gz" | \
        tar -xz -C /app/www-tmp --strip-components=1 && \
    echo "${APP_VER}" > /app/version

# Set up directories and permissions
RUN mkdir -p /config && \
    chown -R bsd:bsd /config /app

# Copy s6 service scripts and defaults
COPY root/ /

# Make scripts executable
RUN chmod +x /etc/cont-init.d/* /etc/services.d/*/run 2>/dev/null || true

# --- Expose (Injected by Generator) ---
{%- if ports %}
EXPOSE {{ ports | map(attribute='port') | join(' ') }}
{%- endif %}

# --- Volumes (Injected by Generator) ---
{%- if volumes %}
VOLUME {{ volumes | map(attribute='path') | join(' ') }}
{%- endif %}