initial commit

stringang · stringang · commit abeba24495d7 · 2024-04-15T16:12:16.000+08:00
diff --git a/README.md b/README.md
@@ -0,0 +1,15 @@
+# docker-baseimage
+
+base 镜像:
+- 使用 s6 进程管理工具。使用 [skaware](https://github.com/just-containers/skaware) 容器化编译 s6
+- 使用 sshd
+
+java 镜像：
+- 支持 jvm-sandbox 插件，通过环境变量启动
+
+## Reference
+- https://github.com/jprjr/docker-ubuntu-stack/tree/master
+- https://github.com/jprjr/docker-debian-stack/blob/base-wheezy/base/Dockerfile
+- https://web.archive.org/web/20160304021857/http://blog.tutum.co/2014/12/02/docker-and-s6-my-new-favorite-process-supervisor/
+- https://www.brendangregg.com/blog/2016-07-13/llnode-nodejs-memory-leak-analysis.html
+- https://developer.ibm.com/articles/explore-nodejs-core-dumps-using-the-llnode-plugin-for-lldb/
diff --git a/base/Dockerfile.almalinux b/base/Dockerfile.almalinux
@@ -0,0 +1,28 @@
+FROM almalinux/8-init:8.8-20230718
+
+LABEL authors="gang.liu"
+
+RUN dnf install -y \
+    tzdata \
+    lsof \
+    net-tools \
+    iproute \
+    curl \
+    tcpdump \
+    openssl \
+    vim \
+    bash-completion \
+    wget \
+    psmisc \
+    procps \
+    iotop \
+    htop \
+    ca-certificates \
+    ;
+
+# Minimize the systemd setup
+# ref: https://github.com/freeipa/freeipa-container/blob/master/Dockerfile.almalinux-8#L26
+RUN find /etc/systemd/system /usr/lib/systemd/system/{basic,multi-user,sysinit}.target.wants -type l \! -lname /dev/null | xargs rm -v
+RUN systemctl mask systemd-logind.service && mv /usr/lib/systemd/system/systemd-logind.service /usr/lib/systemd/system/systemd-logind.service-disable-dbus
+
+ENTRYPOINT [ "/usr/sbin/init" ]
diff --git a/base/Dockerfile.almalinux-s6 b/base/Dockerfile.almalinux-s6
@@ -0,0 +1,48 @@
+FROM almalinux:8.8-20230718
+
+LABEL authors="gang.liu"
+
+RUN rpm --import https://repo.almalinux.org/almalinux/RPM-GPG-KEY-AlmaLinux \
+  && dnf install -y \
+    passwd \
+    tzdata \
+    lsof \
+    net-tools \
+    iproute \
+    curl \
+    tcpdump \
+    openssl \
+    vim \
+    bash-completion \
+    wget \
+    psmisc \
+    procps \
+    iotop \
+    ca-certificates \
+    openssh \
+    openssh-server \
+    epel-release.noarch \
+    unzip \
+  && dnf update -y;
+
+COPY root/ /root/
+COPY etc/ /etc
+
+# ssh
+ADD https://raw.githubusercontent.com/fedora-sysv/initscripts/main/etc/rc.d/init.d/functions /etc/rc.d/init.d/
+ADD https://raw.githubusercontent.com/OpenMandrivaAssociation/openssh/master/sshd-keygen /usr/sbin/
+RUN chmod +x /usr/sbin/sshd-keygen \
+    && sshd-keygen \
+    && sed -i 's/GSSAPIAuthentication yes/GSSAPIAuthentication no/g' /etc/ssh/sshd_config \
+    && sed -i 's/UseDNS yes/UseDNS no/g' /etc/ssh/sshd_config \
+    && echo test@2024ABC | passwd --stdin root
+
+# jvm-sandbox
+RUN wget https://ompc.oss-cn-hangzhou.aliyuncs.com/jvm-sandbox/release/sandbox-1.3.3-bin.zip && unzip sandbox-1.3.3-bin.zip -d /opt/sandbox
+
+# install s6
+RUN mkdir -p /s6
+ADD root/s6-2.11.0.0-linux-x86-bin.tar.gz /s6
+RUN cp /s6/bin/* /usr/bin/
+
+ENTRYPOINT ["/usr/bin/s6-svscan","/etc/s6"]
diff --git a/base/Dockerfile.centos b/base/Dockerfile.centos
@@ -0,0 +1,23 @@
+FROM centos:centos7.9.2009
+
+ARG VERSION
+
+RUN yum install -y \
+    tzdata \
+    lsof \
+    vim \
+    telnet \
+    net-tools \
+    iproute \
+    curl \
+    tcpdump \
+    openssl \
+    ca-certificates \
+    ;
+
+# s6 overlay
+ADD https://github.com/just-containers/s6-overlay/releases/download/v2.2.0.1/s6-overlay-amd64-installer /tmp/
+RUN chmod +x /tmp/s6-overlay-amd64-installer && /tmp/s6-overlay-amd64-installer /
+
+ENTRYPOINT ["/init"]
+CMD ["python2.7", "-m", "SimpleHTTPServer", "8080"]
diff --git a/base/Dockerfile.centos-s6 b/base/Dockerfile.centos-s6
@@ -0,0 +1,45 @@
+FROM centos:centos7.9.2009
+
+ARG VERSION
+
+RUN yum install -y \
+    tzdata \
+    lsof \
+    vim \
+    bash-completion \
+    telnet \
+    wget \
+    net-tools \
+    iproute \
+    curl \
+    tcpdump \
+    openssl \
+    ca-certificates \
+    openssh \
+    openssh-server \
+    procps \
+    psmisc \
+    unzip \
+    ;
+
+COPY root/ /root/
+COPY etc/ /etc
+
+# ssh
+ADD https://raw.githubusercontent.com/fedora-sysv/initscripts/main/etc/rc.d/init.d/functions /etc/rc.d/init.d/
+ADD https://raw.githubusercontent.com/OpenMandrivaAssociation/openssh/master/sshd-keygen /usr/sbin/
+RUN chmod +x /usr/sbin/sshd-keygen \
+    && sshd-keygen \
+    && sed -i 's/GSSAPIAuthentication yes/GSSAPIAuthentication no/g' /etc/ssh/sshd_config \
+    && sed -i 's/UseDNS yes/UseDNS no/g' /etc/ssh/sshd_config \
+    && echo test@2024ABC | passwd --stdin root
+
+# jvm-sandbox
+RUN wget https://ompc.oss-cn-hangzhou.aliyuncs.com/jvm-sandbox/release/sandbox-1.3.3-bin.zip && unzip sandbox-1.3.3-bin.zip -d /opt/sandbox
+
+# install s6
+RUN mkdir -p /s6
+ADD root/s6-2.11.0.0-linux-x86-bin.tar.gz /s6
+RUN cp /s6/bin/* /usr/bin/
+
+ENTRYPOINT ["/usr/bin/s6-svscan","/etc/s6"]
diff --git a/base/Dockerfile.debian b/base/Dockerfile.debian
@@ -0,0 +1,24 @@
+FROM debian:bullseye
+
+ARG VERSION
+
+LABEL version="1.0"
+LABEL maintainer="gang.liu"
+
+RUN apt-get install -y \
+    tzdata \
+    lsof \
+    vim \
+    telnet \
+    net-tools \
+    iproute \
+    curl \
+    tcpdump \
+    openssl \
+    ca-certificates \
+    dumb-init \
+    ;
+
+ENTRYPOINT ["/usr/bin/dumb-init", "--"]
+
+CMD ["python2.7", "-m", "SimpleHTTPServer", "8080"]
diff --git a/base/etc/s6/.s6-svscan/SIGINT b/base/etc/s6/.s6-svscan/SIGINT
@@ -0,0 +1,3 @@
+#!/usr/bin/env bash
+
+exit 0
diff --git a/base/etc/s6/.s6-svscan/SIGWINCH b/base/etc/s6/.s6-svscan/SIGWINCH
@@ -0,0 +1,6 @@
+#!/usr/bin/env bash
+
+for service in /etc/s6/*
+do
+	s6-svwait -d $service
+done
diff --git a/base/etc/s6/.s6-svscan/finish b/base/etc/s6/.s6-svscan/finish
@@ -0,0 +1,6 @@
+#!/usr/bin/env bash
+
+for service in /etc/s6/*
+do
+	s6-svwait -d $service
+done
diff --git a/base/etc/s6/app/finish b/base/etc/s6/app/finish
@@ -0,0 +1,4 @@
+#!/usr/bin/env bash
+
+#If ./finish exits 125, then s6-supervise sends a 'O' event to ./event before the 'D', and it does not restart the service
+exit 125
diff --git a/base/etc/s6/app/run b/base/etc/s6/app/run
@@ -0,0 +1,7 @@
+#!/usr/bin/env bash
+
+while :
+do
+	echo "I am app"
+	sleep 15
+done
diff --git a/base/etc/s6/sshd/run b/base/etc/s6/sshd/run
@@ -0,0 +1,12 @@
+#!/usr/bin/env bash
+
+#ssh-keygen -t rsa -f /etc/ssh/ssh_host_rsa_key -N ""
+#ssh-keygen -t ecdsa -f /etc/ssh/ssh_host_ecdsa_key -N ""
+#ssh-keygen -t ed25519 -f /etc/ssh/ssh_host_ed25519_key -N ""
+
+#sed -i 's/GSSAPIAuthentication yes/GSSAPIAuthentication no/g' /etc/ssh/sshd_config
+#sed -i 's/UsePAM yes/UsePAM no/g' /etc/ssh/sshd_config
+#sed -i 's/UseDNS yes/UseDNS no/g' /etc/ssh/sshd_config
+#echo test@2024ABC | passwd --stdin root
+
+/usr/sbin/sshd -D
diff --git a/base/root/.m2/settings.xml b/base/root/.m2/settings.xml
@@ -0,0 +1,8 @@
+<mirrors>
+    <mirror>
+        <id>alimaven</id>
+        <name>aliyun maven</name>
+        <url>http://maven.aliyun.com/nexus/content/groups/public/</url>
+        <mirrorOf>central</mirrorOf>
+    </mirror>
+</mirrors>
diff --git a/base/root/.npmrc b/base/root/.npmrc
@@ -0,0 +1 @@
+registry=https://registry.npmmirror.com
diff --git a/base/root/s6-2.11.0.0-linux-x86-bin.tar.gz b/base/root/s6-2.11.0.0-linux-x86-bin.tar.gz
diff --git a/java/Dockerfile b/java/Dockerfile
@@ -0,0 +1,19 @@
+FROM stringang/centos-s6
+
+RUN mkdir -p /opt/example/soft/ && \
+    mkdir -p /appruntime/java/
+
+# 配置 java
+ADD jdk-8u251-linux-x64.tar.gz /opt/example/soft/
+ENV JAVA_HOME=/opt/example/soft/jdk1.8.0_251
+
+ENV PATH=${JAVA_HOME}/bin:${PATH}
+
+WORKDIR /appruntime/java/${APP_NAME}
+
+ENV APP_RUN_ARGS="-XX:+UnlockExperimentalVMOptions -XX:+UseCGroupMemoryLimitForHeap -XX:MaxRAMFraction=2 -Dfile.encoding=UTF-8"
+
+COPY sandbox-agent-config/ /appruntime/java/
+COPY etc /etc
+
+
diff --git a/java/etc/s6/app/run b/java/etc/s6/app/run
diff --git a/java/sandbox-agent-config/jacoco.sh b/java/sandbox-agent-config/jacoco.sh
diff --git a/nodejs/Dockerfile b/nodejs/Dockerfile
diff --git a/nodejs/Dockerfile.nodejs-s6 b/nodejs/Dockerfile.nodejs-s6

Original file line number	Diff line number	Diff line change
`@@ -0,0 +1,3 @@`
	`1`	`+#!/usr/bin/env bash`
	`2`	`+`
	`3`	`+exit 0`