Simplify docker defaults

ActiveWorkflow docker image can now be run without any arguments:

```sh
docker run -p 3000:3000 automaticmode/active_workflow
```

If you want to make all the data persistent, you should use docker
volume like this:

```sh
docker run -p 3000:3000 -v aw-data:/var/lib/postgresql/11/main automaticmode/active_workflow
```

ActiveWorkflow image now has postgres database server included and runs
all processes in one container.

For production use it is still recommended to use external database and
multiple containers to run web, scheduler and worker respectively.

Author: Vidas P

.dockerignore

@@ -13,6 +13,8 @@ coverage
 spec/tmp/*
 .travis.yml
 build_docker_image.sh
+Dockerfile
+docker-compose.yml
 
 # Copied from .gitignore
 *.rbc

Dockerfile

@@ -1,24 +1,18 @@
-FROM ruby:2.6.6-slim
+FROM ruby:2.6.6-slim-buster
 
-COPY docker/scripts/prepare /scripts/
-RUN /scripts/prepare
+COPY docker/scripts/prepare_os /scripts/
+RUN /scripts/prepare_os
 
-WORKDIR /app
-
-COPY ./ /app/
+VOLUME /var/lib/postgresql/11/main
 
-ENV RAILS_ENV=production
+WORKDIR /app
 
-# Get rid of annoying "fatal: Not a git repository (or any of the parent directories): .git" messages
-RUN umask 002 && git init && \
-    LC_ALL=en_US.UTF-8 RAILS_ENV=production SECRET_KEY_BASE=secret bundle install --redownload --no-local -j 4  && \
-    LC_ALL=en_US.UTF-8 RAILS_ENV=production SECRET_KEY_BASE=secret bundle exec rake assets:clean assets:precompile && \
-    chmod g=u /app/Gemfile.lock /app/config/ /app/tmp/
+COPY --chown=active_workflow ./ /app/
 
+RUN su active_workflow -c 'docker/scripts/prepare_app'
 
 EXPOSE 3000
 
 COPY docker/scripts/init /scripts/
-CMD ["/scripts/init"]
 
-USER 1001
+ENTRYPOINT ["tini", "--", "/app/docker/scripts/entrypoint"]

README.md

@@ -37,8 +37,18 @@ entities that act on schedule or react to external triggers. These unsupervised
 
 ## Getting Started
 
+
 See the [Getting Started wiki page](https://github.com/automaticmode/active_workflow/wiki/Getting-Started) and follow the simple setup process.
 
+
+## Try it with docker
+
+```sh
+docker run -p 3000:3000 automaticmode/active_workflow
+```
+
+Once it starts you can login at [http://localhost:3000](http://localhost:3000) with `admin`/`password`.
+
 ## Try it on Heroku
 
 A quick and easy way to check out ActiveWorkflow is by deploying it to

config/database.yml

@@ -6,7 +6,6 @@ default: &default
   username: <%= ENV['DATABASE_USERNAME'].presence || "active_workflow" %>
   host: <%= ENV['DATABASE_HOST'] || 'localhost' %>
   port: <%= ENV['DATABASE_PORT'] || 5432 %>
-  socket: <%= ENV['DATABASE_SOCKET'] || "" %>
   password: <%= ENV['DATABASE_PASSWORD'] || "myactiveworkflowpassword" %>
   strict: false
 

docker/scripts/entrypoint

@@ -0,0 +1,33 @@
+#!/bin/bash
+set -e
+
+export RAILS_ENV=production
+
+# Start internal postgres if no database is configured.
+if [ -z "${DATABASE_HOST}" ] && [ -z "${DATABASE_URL}" ]; then
+  /etc/init.d/postgresql start
+  echo -n 'Waiting for postgres to be ready'
+  until runuser -l postgres -c 'pg_isready' 2>/dev/null; do
+    sleep 1; echo -n '.'
+  done
+  echo ' done.'
+  runuser -l postgres -c 'createuser --createdb active_workflow || true'
+  # Use domain socket to connect to postgres.
+  export DATABASE_URL=postgres:///active_workflow
+  export DATABASE_HOST=''
+  export DATABASE_USERNAME=''
+  export DATABASE_PASSWORD=''
+  export CREATE_DATABASE=${CREATE_DATABASE:-true}
+  # Only use one container when running with internal database.
+  export SINGLE_DYNO=1
+fi
+
+if [ -n "$1" ]; then
+  CMD=$1
+  shift
+else
+  CMD=docker/scripts/init
+fi
+
+# Drop root and execute startup script with normal permissions.
+exec setpriv --reuid active_workflow --clear-groups $CMD "$@"

docker/scripts/init

@@ -1,20 +1,26 @@
 #!/bin/bash
 set -e
 
+# Environment defaults
+export DISABLE_SSL=${DISABLE_SSL:-true}
+
 cd /app
 
 # Cleanup any leftover pid file
 if [ -f /app/tmp/pids/server.pid ]; then
   rm /app/tmp/pids/server.pid
 fi
 
+if [ -z "${SECRET_KEY_BASE}" ]; then
+  echo 'WARNING: Please set SECRET_KEY_BASE to a random string, using "change me!" for this run.'
+  export SECRET_KEY_BASE='change me!'
+fi
+
 # The database may need to start up for a bit first
 if [ -n "${INTENTIONALLY_SLEEP}" ]; then
   echo "Intentionally sleeping ${INTENTIONALLY_SLEEP}"
   sleep ${INTENTIONALLY_SLEEP}
 fi
-
-
 if [ -n "${DATABASE_INITIAL_CONNECT_MAX_RETRIES}" ]; then
   max=${DATABASE_INITIAL_CONNECT_MAX_RETRIES}
   count=0

docker/scripts/prepare_app

@@ -0,0 +1,11 @@
+#!/bin/bash
+set -e
+
+umask 002
+gem install bundler
+bundle config set no-cache 'true'
+bundle config set without 'test development'
+bundle config set deployment 'true'
+LC_ALL=en_US.UTF-8 RAILS_ENV=production SECRET_KEY_BASE=secret bundle install --redownload --no-local -j 4
+LC_ALL=en_US.UTF-8 RAILS_ENV=production SECRET_KEY_BASE=secret bundle exec rake assets:clean assets:precompile
+chmod g=u /app/Gemfile.lock /app/config/ /app/tmp/

docker/scripts/prepare renamed to docker/scripts/prepare_os

@@ -22,22 +22,20 @@ $minimal_apt_get_install build-essential git-core \
   zlib1g-dev libyaml-dev libssl-dev libgdbm-dev libreadline-dev \
   libncurses5-dev libffi-dev libxml2-dev libxslt-dev libcurl4-openssl-dev libicu-dev \
   graphviz libgraphviz-dev \
-  libpq-dev libsqlite3-dev tzdata
+  libpq-dev libsqlite3-dev tzdata \
+  postgresql-11 tini
 
 apt-get purge -y python3* rsyslog rsync manpages
 apt -y autoremove
 apt-get -y clean
 
-gem install bundler
-bundle config set no-cache 'true'
-bundle config set without 'test development'
-bundle config set deployment 'true'
-
-mkdir -p /app
-chmod -R g=u /etc/passwd /app
-
 rm -rf /var/lib/apt/lists/*
 rm -rf /usr/share/doc/
 rm -rf /usr/share/man/
 rm -rf /usr/share/locale/
 rm -rf /var/log/*
+
+useradd --home-dir /app --no-create-home --no-log-init active_workflow
+mkdir -p /app
+chown -R active_workflow /app
+chmod 700 /app