diff --git a/openresty/1.27.1.2-0-1-focal/build/Dockerfile b/openresty/1.27.1.2-0-1-focal/build/Dockerfile index bf66cbbe1..bd358c2e0 100644 --- a/openresty/1.27.1.2-0-1-focal/build/Dockerfile +++ b/openresty/1.27.1.2-0-1-focal/build/Dockerfile @@ -1,5 +1,8 @@ +# Dockerfile - Ubuntu Focal +# https://github.com/openresty/docker-openresty + ARG RESTY_IMAGE_BASE="ubuntu" -ARG RESTY_IMAGE_TAG="jammy" +ARG RESTY_IMAGE_TAG="focal" ARG PANEL_OPENRESTY_VERSION FROM 1panel/openresty:${PANEL_OPENRESTY_VERSION} as panel-openresty @@ -8,20 +11,41 @@ FROM ${RESTY_IMAGE_BASE}:${RESTY_IMAGE_TAG} LABEL maintainer="Evan Wies " +# Docker Build Arguments ARG RESTY_IMAGE_BASE="ubuntu" -ARG RESTY_IMAGE_TAG="jammy" -ARG RESTY_VERSION="1.27.1.1" -ARG RESTY_LUAROCKS_VERSION="3.11.0" -ARG RESTY_OPENSSL_VERSION="1.1.1w" -ARG RESTY_OPENSSL_PATCH_VERSION="1.1.1f" -ARG RESTY_OPENSSL_URL_BASE="https://www.openssl.org/source/old/1.1.1" -ARG RESTY_PCRE_VERSION="8.45" -ARG RESTY_PCRE_BUILD_OPTIONS="--enable-jit" -ARG RESTY_PCRE_SHA256="4e6ce03e0336e8b4a3d6c2b70b1c5e18590a5673a98186da90d4f33c23defc09" +ARG RESTY_IMAGE_TAG="focal" +ARG RESTY_VERSION="1.27.1.2" +ARG RESTY_LUAROCKS_VERSION="3.11.1" + +# https://github.com/openresty/openresty-packaging/blob/master/deb/openresty-openssl3/debian/rules +ARG RESTY_OPENSSL_VERSION="3.4.1" +ARG RESTY_OPENSSL_PATCH_VERSION="3.4.1" +ARG RESTY_OPENSSL_URL_BASE="https://github.com/openssl/openssl/releases/download/openssl-${RESTY_OPENSSL_VERSION}" +# LEGACY: "https://www.openssl.org/source/old/1.1.1" +ARG RESTY_OPENSSL_BUILD_OPTIONS="enable-camellia enable-seed enable-rfc3779 enable-cms enable-md2 enable-rc5 \ + enable-weak-ssl-ciphers enable-ssl3 enable-ssl3-method enable-md2 enable-ktls enable-fips \ + " + +# https://github.com/openresty/openresty-packaging/blob/master/deb/openresty-pcre2/debian/rules +ARG RESTY_PCRE_VERSION="10.44" +ARG RESTY_PCRE_SHA256="86b9cb0aa3bcb7994faa88018292bc704cdbb708e785f7c74352ff6ea7d3175b" +ARG RESTY_PCRE_BUILD_OPTIONS="--enable-jit --enable-pcre2grep-jit --disable-bsr-anycrlf --disable-coverage --disable-ebcdic --disable-fuzz-support \ + --disable-jit-sealloc --disable-never-backslash-C --enable-newline-is-lf --enable-pcre2-8 --enable-pcre2-16 --enable-pcre2-32 \ + --enable-pcre2grep-callout --enable-pcre2grep-callout-fork --disable-pcre2grep-libbz2 --disable-pcre2grep-libz --disable-pcre2test-libedit \ + --enable-percent-zt --disable-rebuild-chartables --enable-shared --disable-static --disable-silent-rules --enable-unicode --disable-valgrind \ + " + ARG RESTY_J="1" + +# https://github.com/openresty/openresty-packaging/blob/master/deb/openresty/debian/rules ARG RESTY_CONFIG_OPTIONS="\ --with-compat \ - --with-file-aio \ + --without-http_rds_json_module \ + --without-http_rds_csv_module \ + --without-lua_rds_parser \ + --without-mail_pop3_module \ + --without-mail_imap_module \ + --without-mail_smtp_module \ --with-http_addition_module \ --with-http_auth_request_module \ --with-http_dav_module \ @@ -48,25 +72,23 @@ ARG RESTY_CONFIG_OPTIONS="\ --with-sha1-asm \ --with-stream \ --with-stream_ssl_module \ + --with-stream_ssl_preread_module \ --with-threads \ " -ARG RESTY_CONFIG_OPTIONS_MORE +ARG RESTY_CONFIG_OPTIONS_MORE="" ARG RESTY_LUAJIT_OPTIONS="--with-luajit-xcflags='-DLUAJIT_NUMMODE=2 -DLUAJIT_ENABLE_LUA52COMPAT'" ARG RESTY_PCRE_OPTIONS="--with-pcre-jit" -ARG RESTY_ADD_PACKAGE_BUILDDEPS +ARG RESTY_ADD_PACKAGE_BUILDDEPS="" ARG RESTY_ADD_PACKAGE_RUNDEPS="" ARG RESTY_EVAL_PRE_CONFIGURE="" ARG RESTY_EVAL_POST_DOWNLOAD_PRE_CONFIGURE="" ARG RESTY_EVAL_POST_MAKE="" -ARG CONTAINER_PACKAGE_URL - - # These are not intended to be user-specified ARG _RESTY_CONFIG_DEPS="--with-pcre \ - --with-cc-opt='-DNGX_LUA_ABORT_AT_PANIC -I/usr/local/openresty/pcre/include -I/usr/local/openresty/openssl/include' \ - --with-ld-opt='-L/usr/local/openresty/pcre/lib -L/usr/local/openresty/openssl/lib -Wl,-rpath,/usr/local/openresty/pcre/lib:/usr/local/openresty/openssl/lib' \ + --with-cc-opt='-DNGX_LUA_ABORT_AT_PANIC -I/usr/local/openresty/pcre2/include -I/usr/local/openresty/openssl3/include' \ + --with-ld-opt='-L/usr/local/openresty/pcre2/lib -L/usr/local/openresty/openssl3/lib -Wl,-rpath,/usr/local/openresty/pcre2/lib:/usr/local/openresty/openssl3/lib' \ " LABEL resty_image_base="${RESTY_IMAGE_BASE}" @@ -76,6 +98,7 @@ LABEL resty_luarocks_version="${RESTY_LUAROCKS_VERSION}" LABEL resty_openssl_version="${RESTY_OPENSSL_VERSION}" LABEL resty_openssl_patch_version="${RESTY_OPENSSL_PATCH_VERSION}" LABEL resty_openssl_url_base="${RESTY_OPENSSL_URL_BASE}" +LABEL resty_openssl_build_options="${RESTY_OPENSSL_BUILD_OPTIONS}" LABEL resty_pcre_version="${RESTY_PCRE_VERSION}" LABEL resty_pcre_build_options="${RESTY_PCRE_BUILD_OPTIONS}" LABEL resty_pcre_sha256="${RESTY_PCRE_SHA256}" @@ -91,9 +114,8 @@ LABEL resty_luajit_options="${RESTY_LUAJIT_OPTIONS}" LABEL resty_pcre_options="${RESTY_PCRE_OPTIONS}" COPY tmp /tmp - -RUN sed -i "s|http://archive.ubuntu.com/ubuntu/|${CONTAINER_PACKAGE_URL}|g" /etc/apt/sources.list \ - && sed -i "s|http://security.ubuntu.com/ubuntu/|${CONTAINER_PACKAGE_URL}|g" /etc/apt/sources.list +#RUN sed -i "s|http://archive.ubuntu.com/ubuntu/|${CONTAINER_PACKAGE_URL}|g" /etc/apt/sources.list \ +# && sed -i "s|http://security.ubuntu.com/ubuntu/|${CONTAINER_PACKAGE_URL}|g" /etc/apt/sources.list RUN DEBIAN_FRONTEND=noninteractive apt-get update \ && DEBIAN_FRONTEND=noninteractive apt-get install -y --no-install-recommends \ @@ -115,43 +137,33 @@ RUN DEBIAN_FRONTEND=noninteractive apt-get update \ ${RESTY_ADD_PACKAGE_BUILDDEPS} \ ${RESTY_ADD_PACKAGE_RUNDEPS} \ && cd /tmp \ - && bash /tmp/pre.sh \ && if [ -n "${RESTY_EVAL_PRE_CONFIGURE}" ]; then eval $(echo ${RESTY_EVAL_PRE_CONFIGURE}); fi \ - # && curl -fSL "${RESTY_OPENSSL_URL_BASE}/openssl-${RESTY_OPENSSL_VERSION}.tar.gz" -o openssl-${RESTY_OPENSSL_VERSION}.tar.gz \ +# && curl -fSL "${RESTY_OPENSSL_URL_BASE}/openssl-${RESTY_OPENSSL_VERSION}.tar.gz" -o openssl-${RESTY_OPENSSL_VERSION}.tar.gz \ && tar xzf openssl-${RESTY_OPENSSL_VERSION}.tar.gz \ && cd openssl-${RESTY_OPENSSL_VERSION} \ - && if [ $(echo ${RESTY_OPENSSL_VERSION} | cut -c 1-5) = "1.1.1" ] ; then \ - echo 'patching OpenSSL 1.1.1 for OpenResty' \ - && curl -s https://raw.githubusercontent.com/openresty/openresty/master/patches/openssl-${RESTY_OPENSSL_PATCH_VERSION}-sess_set_get_cb_yield.patch | patch -p1 ; \ - fi \ - && if [ $(echo ${RESTY_OPENSSL_VERSION} | cut -c 1-5) = "1.1.0" ] ; then \ - echo 'patching OpenSSL 1.1.0 for OpenResty' \ - && curl -s https://raw.githubusercontent.com/openresty/openresty/ed328977028c3ec3033bc25873ee360056e247cd/patches/openssl-1.1.0j-parallel_build_fix.patch | patch -p1 \ - && curl -s https://raw.githubusercontent.com/openresty/openresty/master/patches/openssl-${RESTY_OPENSSL_PATCH_VERSION}-sess_set_get_cb_yield.patch | patch -p1 ; \ - fi \ + && echo 'patching OpenSSL 3.x for OpenResty' \ + && patch -p1 < /tmp/openssl-${RESTY_OPENSSL_PATCH_VERSION}-sess_set_get_cb_yield.patch \ && ./config \ - no-threads shared zlib -g \ - enable-ssl3 enable-ssl3-method \ - --prefix=/usr/local/openresty/openssl \ + shared zlib -g \ + --prefix=/usr/local/openresty/openssl3 \ --libdir=lib \ - -Wl,-rpath,/usr/local/openresty/openssl/lib \ + -Wl,-rpath,/usr/local/openresty/openssl3/lib \ + ${RESTY_OPENSSL_BUILD_OPTIONS} \ && make -j${RESTY_J} \ && make -j${RESTY_J} install_sw \ && cd /tmp \ - # && curl -fSL https://downloads.sourceforge.net/project/pcre/pcre/${RESTY_PCRE_VERSION}/pcre-${RESTY_PCRE_VERSION}.tar.gz -o pcre-${RESTY_PCRE_VERSION}.tar.gz \ - && echo "${RESTY_PCRE_SHA256} pcre-${RESTY_PCRE_VERSION}.tar.gz" | shasum -a 256 --check \ - && tar xzf pcre-${RESTY_PCRE_VERSION}.tar.gz \ - && cd /tmp/pcre-${RESTY_PCRE_VERSION} \ - && ./configure \ - --prefix=/usr/local/openresty/pcre \ - --disable-cpp \ - --enable-utf \ - --enable-unicode-properties \ +# && curl -fSL "https://github.com/PCRE2Project/pcre2/releases/download/pcre2-${RESTY_PCRE_VERSION}/pcre2-${RESTY_PCRE_VERSION}.tar.gz" -o pcre2-${RESTY_PCRE_VERSION}.tar.gz \ + && echo "${RESTY_PCRE_SHA256} pcre2-${RESTY_PCRE_VERSION}.tar.gz" | shasum -a 256 --check \ + && tar xzf pcre2-${RESTY_PCRE_VERSION}.tar.gz \ + && cd /tmp/pcre2-${RESTY_PCRE_VERSION} \ + && CFLAGS="-g -O3" ./configure \ + --prefix=/usr/local/openresty/pcre2 \ + --libdir=/usr/local/openresty/pcre2/lib \ ${RESTY_PCRE_BUILD_OPTIONS} \ - && make -j${RESTY_J} \ - && make -j${RESTY_J} install \ + && CFLAGS="-g -O3" make -j${RESTY_J} \ + && CFLAGS="-g -O3" make -j${RESTY_J} install \ && cd /tmp \ - # && curl -fSL https://openresty.org/download/openresty-${RESTY_VERSION}.tar.gz -o openresty-${RESTY_VERSION}.tar.gz \ +# && curl -fSL https://openresty.org/download/openresty-${RESTY_VERSION}.tar.gz -o openresty-${RESTY_VERSION}.tar.gz \ && tar xzf openresty-${RESTY_VERSION}.tar.gz \ && cd /tmp/openresty-${RESTY_VERSION} \ && if [ -n "${RESTY_EVAL_POST_DOWNLOAD_PRE_CONFIGURE}" ]; then eval $(echo ${RESTY_EVAL_POST_DOWNLOAD_PRE_CONFIGURE}); fi \ @@ -161,9 +173,8 @@ RUN DEBIAN_FRONTEND=noninteractive apt-get update \ && cd /tmp \ && rm -rf \ openssl-${RESTY_OPENSSL_VERSION}.tar.gz openssl-${RESTY_OPENSSL_VERSION} \ - pcre-${RESTY_PCRE_VERSION}.tar.gz pcre-${RESTY_PCRE_VERSION} \ + pcre2-${RESTY_PCRE_VERSION}.tar.gz pcre2-${RESTY_PCRE_VERSION} \ openresty-${RESTY_VERSION}.tar.gz openresty-${RESTY_VERSION} \ - # && curl -fSL https://luarocks.github.io/luarocks/releases/luarocks-${RESTY_LUAROCKS_VERSION}.tar.gz -o luarocks-${RESTY_LUAROCKS_VERSION}.tar.gz \ && tar xzf luarocks-${RESTY_LUAROCKS_VERSION}.tar.gz \ && cd luarocks-${RESTY_LUAROCKS_VERSION} \ && ./configure \ @@ -179,11 +190,7 @@ RUN DEBIAN_FRONTEND=noninteractive apt-get update \ && DEBIAN_FRONTEND=noninteractive apt-get autoremove -y \ && mkdir -p /var/run/openresty \ && ln -sf /dev/stdout /usr/local/openresty/nginx/logs/access.log \ - && ln -sf /dev/stderr /usr/local/openresty/nginx/logs/error.log \ - && mkdir -p /usr/local/openresty/1pwaf - - -COPY --from=panel-openresty /usr/local/openresty/1pwaf /usr/local/openresty + && ln -sf /dev/stderr /usr/local/openresty/nginx/logs/error.log # Add additional binaries into PATH for convenience ENV PATH=$PATH:/usr/local/openresty/luajit/bin:/usr/local/openresty/nginx/sbin:/usr/local/openresty/bin @@ -196,12 +203,17 @@ ENV LUA_PATH="/usr/local/openresty/site/lualib/?.ljbc;/usr/local/openresty/site/ ENV LUA_CPATH="/usr/local/openresty/site/lualib/?.so;/usr/local/openresty/lualib/?.so;./?.so;/usr/local/lib/lua/5.1/?.so;/usr/local/openresty/luajit/lib/lua/5.1/?.so;/usr/local/lib/lua/5.1/loadall.so;/usr/local/openresty/luajit/lib/lua/5.1/?.so" -RUN bash /tmp/default.sh # Copy nginx configuration files COPY nginx.conf /usr/local/openresty/nginx/conf/nginx.conf COPY nginx.vh.default.conf /etc/nginx/conf.d/default.conf +RUN bash /tmp/default.sh +COPY --from=panel-openresty /usr/local/openresty/1pwaf /usr/local/openresty/1pwaf +COPY --from=panel-openresty /usr/local/openresty/1pwaf/libraries/libmaxminddb.so /usr/local/openresty/1pwaf/libraries/libmaxminddb.so +COPY --from=panel-openresty /usr/local/openresty/1pwaf/libraries/libinjection.so /usr/local/openresty/1pwaf/libraries/libinjection.so +COPY --from=panel-openresty /usr/local/openresty/luajit/lib/lua/5.1/lsqlite3.so /usr/local/openresty/luajit/lib/lua/5.1/lsqlite3.so + CMD ["/usr/local/openresty/bin/openresty", "-g", "daemon off;"] # Use SIGQUIT instead of default SIGTERM to cleanly drain requests diff --git a/openresty/1.27.1.2-0-1-focal/build/Dockerfile-bak b/openresty/1.27.1.2-0-1-focal/build/Dockerfile-bak new file mode 100644 index 000000000..bf66cbbe1 --- /dev/null +++ b/openresty/1.27.1.2-0-1-focal/build/Dockerfile-bak @@ -0,0 +1,209 @@ +ARG RESTY_IMAGE_BASE="ubuntu" +ARG RESTY_IMAGE_TAG="jammy" + +ARG PANEL_OPENRESTY_VERSION +FROM 1panel/openresty:${PANEL_OPENRESTY_VERSION} as panel-openresty + +FROM ${RESTY_IMAGE_BASE}:${RESTY_IMAGE_TAG} + +LABEL maintainer="Evan Wies " + +ARG RESTY_IMAGE_BASE="ubuntu" +ARG RESTY_IMAGE_TAG="jammy" +ARG RESTY_VERSION="1.27.1.1" +ARG RESTY_LUAROCKS_VERSION="3.11.0" +ARG RESTY_OPENSSL_VERSION="1.1.1w" +ARG RESTY_OPENSSL_PATCH_VERSION="1.1.1f" +ARG RESTY_OPENSSL_URL_BASE="https://www.openssl.org/source/old/1.1.1" +ARG RESTY_PCRE_VERSION="8.45" +ARG RESTY_PCRE_BUILD_OPTIONS="--enable-jit" +ARG RESTY_PCRE_SHA256="4e6ce03e0336e8b4a3d6c2b70b1c5e18590a5673a98186da90d4f33c23defc09" +ARG RESTY_J="1" +ARG RESTY_CONFIG_OPTIONS="\ + --with-compat \ + --with-file-aio \ + --with-http_addition_module \ + --with-http_auth_request_module \ + --with-http_dav_module \ + --with-http_flv_module \ + --with-http_geoip_module=dynamic \ + --with-http_gunzip_module \ + --with-http_gzip_static_module \ + --with-http_image_filter_module=dynamic \ + --with-http_mp4_module \ + --with-http_random_index_module \ + --with-http_realip_module \ + --with-http_secure_link_module \ + --with-http_slice_module \ + --with-http_ssl_module \ + --with-http_stub_status_module \ + --with-http_sub_module \ + --with-http_v2_module \ + --with-http_v3_module \ + --with-http_xslt_module=dynamic \ + --with-ipv6 \ + --with-mail \ + --with-mail_ssl_module \ + --with-md5-asm \ + --with-sha1-asm \ + --with-stream \ + --with-stream_ssl_module \ + --with-threads \ + " +ARG RESTY_CONFIG_OPTIONS_MORE +ARG RESTY_LUAJIT_OPTIONS="--with-luajit-xcflags='-DLUAJIT_NUMMODE=2 -DLUAJIT_ENABLE_LUA52COMPAT'" +ARG RESTY_PCRE_OPTIONS="--with-pcre-jit" + +ARG RESTY_ADD_PACKAGE_BUILDDEPS +ARG RESTY_ADD_PACKAGE_RUNDEPS="" +ARG RESTY_EVAL_PRE_CONFIGURE="" +ARG RESTY_EVAL_POST_DOWNLOAD_PRE_CONFIGURE="" +ARG RESTY_EVAL_POST_MAKE="" + +ARG CONTAINER_PACKAGE_URL + + +# These are not intended to be user-specified +ARG _RESTY_CONFIG_DEPS="--with-pcre \ + --with-cc-opt='-DNGX_LUA_ABORT_AT_PANIC -I/usr/local/openresty/pcre/include -I/usr/local/openresty/openssl/include' \ + --with-ld-opt='-L/usr/local/openresty/pcre/lib -L/usr/local/openresty/openssl/lib -Wl,-rpath,/usr/local/openresty/pcre/lib:/usr/local/openresty/openssl/lib' \ + " + +LABEL resty_image_base="${RESTY_IMAGE_BASE}" +LABEL resty_image_tag="${RESTY_IMAGE_TAG}" +LABEL resty_version="${RESTY_VERSION}" +LABEL resty_luarocks_version="${RESTY_LUAROCKS_VERSION}" +LABEL resty_openssl_version="${RESTY_OPENSSL_VERSION}" +LABEL resty_openssl_patch_version="${RESTY_OPENSSL_PATCH_VERSION}" +LABEL resty_openssl_url_base="${RESTY_OPENSSL_URL_BASE}" +LABEL resty_pcre_version="${RESTY_PCRE_VERSION}" +LABEL resty_pcre_build_options="${RESTY_PCRE_BUILD_OPTIONS}" +LABEL resty_pcre_sha256="${RESTY_PCRE_SHA256}" +LABEL resty_config_options="${RESTY_CONFIG_OPTIONS}" +LABEL resty_config_options_more="${RESTY_CONFIG_OPTIONS_MORE}" +LABEL resty_config_deps="${_RESTY_CONFIG_DEPS}" +LABEL resty_add_package_builddeps="${RESTY_ADD_PACKAGE_BUILDDEPS}" +LABEL resty_add_package_rundeps="${RESTY_ADD_PACKAGE_RUNDEPS}" +LABEL resty_eval_pre_configure="${RESTY_EVAL_PRE_CONFIGURE}" +LABEL resty_eval_post_download_pre_configure="${RESTY_EVAL_POST_DOWNLOAD_PRE_CONFIGURE}" +LABEL resty_eval_post_make="${RESTY_EVAL_POST_MAKE}" +LABEL resty_luajit_options="${RESTY_LUAJIT_OPTIONS}" +LABEL resty_pcre_options="${RESTY_PCRE_OPTIONS}" + +COPY tmp /tmp + +RUN sed -i "s|http://archive.ubuntu.com/ubuntu/|${CONTAINER_PACKAGE_URL}|g" /etc/apt/sources.list \ + && sed -i "s|http://security.ubuntu.com/ubuntu/|${CONTAINER_PACKAGE_URL}|g" /etc/apt/sources.list + +RUN DEBIAN_FRONTEND=noninteractive apt-get update \ + && DEBIAN_FRONTEND=noninteractive apt-get install -y --no-install-recommends \ + build-essential \ + ca-certificates \ + curl \ + gettext-base \ + libgd-dev \ + libgeoip-dev \ + libncurses5-dev \ + libperl-dev \ + libreadline-dev \ + libxslt1-dev \ + make \ + perl \ + unzip \ + wget \ + zlib1g-dev \ + ${RESTY_ADD_PACKAGE_BUILDDEPS} \ + ${RESTY_ADD_PACKAGE_RUNDEPS} \ + && cd /tmp \ + && bash /tmp/pre.sh \ + && if [ -n "${RESTY_EVAL_PRE_CONFIGURE}" ]; then eval $(echo ${RESTY_EVAL_PRE_CONFIGURE}); fi \ + # && curl -fSL "${RESTY_OPENSSL_URL_BASE}/openssl-${RESTY_OPENSSL_VERSION}.tar.gz" -o openssl-${RESTY_OPENSSL_VERSION}.tar.gz \ + && tar xzf openssl-${RESTY_OPENSSL_VERSION}.tar.gz \ + && cd openssl-${RESTY_OPENSSL_VERSION} \ + && if [ $(echo ${RESTY_OPENSSL_VERSION} | cut -c 1-5) = "1.1.1" ] ; then \ + echo 'patching OpenSSL 1.1.1 for OpenResty' \ + && curl -s https://raw.githubusercontent.com/openresty/openresty/master/patches/openssl-${RESTY_OPENSSL_PATCH_VERSION}-sess_set_get_cb_yield.patch | patch -p1 ; \ + fi \ + && if [ $(echo ${RESTY_OPENSSL_VERSION} | cut -c 1-5) = "1.1.0" ] ; then \ + echo 'patching OpenSSL 1.1.0 for OpenResty' \ + && curl -s https://raw.githubusercontent.com/openresty/openresty/ed328977028c3ec3033bc25873ee360056e247cd/patches/openssl-1.1.0j-parallel_build_fix.patch | patch -p1 \ + && curl -s https://raw.githubusercontent.com/openresty/openresty/master/patches/openssl-${RESTY_OPENSSL_PATCH_VERSION}-sess_set_get_cb_yield.patch | patch -p1 ; \ + fi \ + && ./config \ + no-threads shared zlib -g \ + enable-ssl3 enable-ssl3-method \ + --prefix=/usr/local/openresty/openssl \ + --libdir=lib \ + -Wl,-rpath,/usr/local/openresty/openssl/lib \ + && make -j${RESTY_J} \ + && make -j${RESTY_J} install_sw \ + && cd /tmp \ + # && curl -fSL https://downloads.sourceforge.net/project/pcre/pcre/${RESTY_PCRE_VERSION}/pcre-${RESTY_PCRE_VERSION}.tar.gz -o pcre-${RESTY_PCRE_VERSION}.tar.gz \ + && echo "${RESTY_PCRE_SHA256} pcre-${RESTY_PCRE_VERSION}.tar.gz" | shasum -a 256 --check \ + && tar xzf pcre-${RESTY_PCRE_VERSION}.tar.gz \ + && cd /tmp/pcre-${RESTY_PCRE_VERSION} \ + && ./configure \ + --prefix=/usr/local/openresty/pcre \ + --disable-cpp \ + --enable-utf \ + --enable-unicode-properties \ + ${RESTY_PCRE_BUILD_OPTIONS} \ + && make -j${RESTY_J} \ + && make -j${RESTY_J} install \ + && cd /tmp \ + # && curl -fSL https://openresty.org/download/openresty-${RESTY_VERSION}.tar.gz -o openresty-${RESTY_VERSION}.tar.gz \ + && tar xzf openresty-${RESTY_VERSION}.tar.gz \ + && cd /tmp/openresty-${RESTY_VERSION} \ + && if [ -n "${RESTY_EVAL_POST_DOWNLOAD_PRE_CONFIGURE}" ]; then eval $(echo ${RESTY_EVAL_POST_DOWNLOAD_PRE_CONFIGURE}); fi \ + && eval ./configure -j${RESTY_J} ${_RESTY_CONFIG_DEPS} ${RESTY_CONFIG_OPTIONS} ${RESTY_CONFIG_OPTIONS_MORE} ${RESTY_LUAJIT_OPTIONS} ${RESTY_PCRE_OPTIONS} \ + && make -j${RESTY_J} \ + && make -j${RESTY_J} install \ + && cd /tmp \ + && rm -rf \ + openssl-${RESTY_OPENSSL_VERSION}.tar.gz openssl-${RESTY_OPENSSL_VERSION} \ + pcre-${RESTY_PCRE_VERSION}.tar.gz pcre-${RESTY_PCRE_VERSION} \ + openresty-${RESTY_VERSION}.tar.gz openresty-${RESTY_VERSION} \ + # && curl -fSL https://luarocks.github.io/luarocks/releases/luarocks-${RESTY_LUAROCKS_VERSION}.tar.gz -o luarocks-${RESTY_LUAROCKS_VERSION}.tar.gz \ + && tar xzf luarocks-${RESTY_LUAROCKS_VERSION}.tar.gz \ + && cd luarocks-${RESTY_LUAROCKS_VERSION} \ + && ./configure \ + --prefix=/usr/local/openresty/luajit \ + --with-lua=/usr/local/openresty/luajit \ + --with-lua-include=/usr/local/openresty/luajit/include/luajit-2.1 \ + && make build \ + && make install \ + && cd /tmp \ + && if [ -n "${RESTY_EVAL_POST_MAKE}" ]; then eval $(echo ${RESTY_EVAL_POST_MAKE}); fi \ + && rm -rf luarocks-${RESTY_LUAROCKS_VERSION} luarocks-${RESTY_LUAROCKS_VERSION}.tar.gz \ + && if [ -n "${RESTY_ADD_PACKAGE_BUILDDEPS}" ]; then DEBIAN_FRONTEND=noninteractive apt-get remove -y --purge ${RESTY_ADD_PACKAGE_BUILDDEPS} ; fi \ + && DEBIAN_FRONTEND=noninteractive apt-get autoremove -y \ + && mkdir -p /var/run/openresty \ + && ln -sf /dev/stdout /usr/local/openresty/nginx/logs/access.log \ + && ln -sf /dev/stderr /usr/local/openresty/nginx/logs/error.log \ + && mkdir -p /usr/local/openresty/1pwaf + + +COPY --from=panel-openresty /usr/local/openresty/1pwaf /usr/local/openresty + +# Add additional binaries into PATH for convenience +ENV PATH=$PATH:/usr/local/openresty/luajit/bin:/usr/local/openresty/nginx/sbin:/usr/local/openresty/bin + +# Add LuaRocks paths +# If OpenResty changes, these may need updating: +# /usr/local/openresty/bin/resty -e 'print(package.path)' +# /usr/local/openresty/bin/resty -e 'print(package.cpath)' +ENV LUA_PATH="/usr/local/openresty/site/lualib/?.ljbc;/usr/local/openresty/site/lualib/?/init.ljbc;/usr/local/openresty/lualib/?.ljbc;/usr/local/openresty/lualib/?/init.ljbc;/usr/local/openresty/site/lualib/?.lua;/usr/local/openresty/site/lualib/?/init.lua;/usr/local/openresty/lualib/?.lua;/usr/local/openresty/lualib/?/init.lua;./?.lua;/usr/local/openresty/luajit/share/luajit-2.1/?.lua;/usr/local/share/lua/5.1/?.lua;/usr/local/share/lua/5.1/?/init.lua;/usr/local/openresty/luajit/share/lua/5.1/?.lua;/usr/local/openresty/luajit/share/lua/5.1/?/init.lua" + +ENV LUA_CPATH="/usr/local/openresty/site/lualib/?.so;/usr/local/openresty/lualib/?.so;./?.so;/usr/local/lib/lua/5.1/?.so;/usr/local/openresty/luajit/lib/lua/5.1/?.so;/usr/local/lib/lua/5.1/loadall.so;/usr/local/openresty/luajit/lib/lua/5.1/?.so" + +RUN bash /tmp/default.sh + +# Copy nginx configuration files +COPY nginx.conf /usr/local/openresty/nginx/conf/nginx.conf +COPY nginx.vh.default.conf /etc/nginx/conf.d/default.conf + +CMD ["/usr/local/openresty/bin/openresty", "-g", "daemon off;"] + +# Use SIGQUIT instead of default SIGTERM to cleanly drain requests +# See https://github.com/openresty/docker-openresty/blob/master/README.md#tips--pitfalls +STOPSIGNAL SIGQUIT \ No newline at end of file diff --git a/openresty/1.27.1.2-0-1-focal/build/tmp/default.sh b/openresty/1.27.1.2-0-1-focal/build/tmp/default.sh index 125376a56..a58202d25 100644 --- a/openresty/1.27.1.2-0-1-focal/build/tmp/default.sh +++ b/openresty/1.27.1.2-0-1-focal/build/tmp/default.sh @@ -1,18 +1,20 @@ apt-get install -y --no-install-recommends libsqlite3-dev git python3 automake autoconf libtool\ && apt-get clean \ && rm -rf /var/lib/apt/lists/* \ - && unzip /tmp/libmaxminddb.zip -d /tmp \ - && cd /tmp/libmaxminddb \ - && ./configure \ - && make \ - && make install \ - && unzip /tmp/libinjection-main.zip -d /tmp \ - && cd /tmp/libinjection-main \ - && make all \ - && unzip /tmp/lsqlite3.zip -d /tmp \ - && cd /tmp/lsqlite3 \ - && make all \ - && mkdir -p /usr/local/openresty/1pwaf/libraries/ \ - && cp /usr/local/lib/libmaxminddb.so.0.0.7 /usr/local/openresty/1pwaf/libraries/libmaxminddb.so \ - && cp /tmp/libinjection-main/src/.libs/libinjection.so.1.2.9 /usr/local/openresty/1pwaf/libraries/libinjection.so \ - && cp /tmp/lsqlite3/lsqlite3.so /usr/local/openresty/luajit/lib/lua/5.1/lsqlite3.so + && luarocks install luafilesystem \ + && mkdir -p /usr/local/openresty/1pwaf/libraries +# && unzip /tmp/libmaxminddb.zip -d /tmp \ +# && cd /tmp/libmaxminddb \ +# && ./configure \ +# && make \ +# && make install \ +# && unzip /tmp/libinjection-main.zip -d /tmp \ +# && cd /tmp/libinjection-main \ +# && make all \ +# && unzip /tmp/lsqlite3.zip -d /tmp \ +# && cd /tmp/lsqlite3 \ +# && make all \ +# && mkdir -p /usr/local/openresty/1pwaf/libraries/ \ +# && cp /usr/local/lib/libmaxminddb.so.0.0.7 /usr/local/openresty/1pwaf/libraries/libmaxminddb.so \ +# && cp /tmp/libinjection-main/src/.libs/libinjection.so.1.2.9 /usr/local/openresty/1pwaf/libraries/libinjection.so \ +# && cp /tmp/lsqlite3/lsqlite3.so /usr/local/openresty/luajit/lib/lua/5.1/lsqlite3.so diff --git a/openresty/1.27.1.2-0-1-focal/build/tmp/luarocks-3.11.0.tar.gz b/openresty/1.27.1.2-0-1-focal/build/tmp/luarocks-3.11.0.tar.gz deleted file mode 100644 index 906d63c81..000000000 Binary files a/openresty/1.27.1.2-0-1-focal/build/tmp/luarocks-3.11.0.tar.gz and /dev/null differ diff --git a/openresty/1.27.1.2-0-1-focal/build/tmp/luarocks-3.11.1.tar.gz b/openresty/1.27.1.2-0-1-focal/build/tmp/luarocks-3.11.1.tar.gz new file mode 100644 index 000000000..b0cc0bad4 Binary files /dev/null and b/openresty/1.27.1.2-0-1-focal/build/tmp/luarocks-3.11.1.tar.gz differ diff --git a/openresty/1.27.1.2-0-1-focal/build/tmp/openresty-1.27.1.1.tar.gz b/openresty/1.27.1.2-0-1-focal/build/tmp/openresty-1.27.1.1.tar.gz deleted file mode 100644 index 0ec35baf9..000000000 Binary files a/openresty/1.27.1.2-0-1-focal/build/tmp/openresty-1.27.1.1.tar.gz and /dev/null differ diff --git a/openresty/1.27.1.2-0-1-focal/build/tmp/openresty-1.27.1.2.tar.gz b/openresty/1.27.1.2-0-1-focal/build/tmp/openresty-1.27.1.2.tar.gz new file mode 100644 index 000000000..b72356532 Binary files /dev/null and b/openresty/1.27.1.2-0-1-focal/build/tmp/openresty-1.27.1.2.tar.gz differ diff --git a/openresty/1.27.1.2-0-1-focal/build/tmp/openssl-1.1.1w.tar.gz b/openresty/1.27.1.2-0-1-focal/build/tmp/openssl-1.1.1w.tar.gz deleted file mode 100644 index 9547637cf..000000000 Binary files a/openresty/1.27.1.2-0-1-focal/build/tmp/openssl-1.1.1w.tar.gz and /dev/null differ diff --git a/openresty/1.27.1.2-0-1-focal/build/tmp/openssl-3.4.1.tar.gz b/openresty/1.27.1.2-0-1-focal/build/tmp/openssl-3.4.1.tar.gz new file mode 100644 index 000000000..a4ad91636 Binary files /dev/null and b/openresty/1.27.1.2-0-1-focal/build/tmp/openssl-3.4.1.tar.gz differ diff --git a/openresty/1.27.1.2-0-1-focal/build/tmp/pcre-8.45.tar.gz b/openresty/1.27.1.2-0-1-focal/build/tmp/pcre-8.45.tar.gz deleted file mode 100644 index 02233ce2a..000000000 Binary files a/openresty/1.27.1.2-0-1-focal/build/tmp/pcre-8.45.tar.gz and /dev/null differ diff --git a/openresty/1.27.1.2-0-1-focal/build/tmp/pcre2-10.44.tar.gz b/openresty/1.27.1.2-0-1-focal/build/tmp/pcre2-10.44.tar.gz new file mode 100644 index 000000000..d6b2f8e0d Binary files /dev/null and b/openresty/1.27.1.2-0-1-focal/build/tmp/pcre2-10.44.tar.gz differ