204 lines
8.8 KiB
Plaintext
204 lines
8.8 KiB
Plaintext
# © Copyright IBM Corporation 2015, 2024
|
||
#
|
||
# Licensed under the Apache License, Version 2.0 (the "License");
|
||
# you may not use this file except in compliance with the License.
|
||
# You may obtain a copy of the License at
|
||
#
|
||
# http://www.apache.org/licenses/LICENSE-2.0
|
||
#
|
||
# Unless required by applicable law or agreed to in writing, software
|
||
# distributed under the License is distributed on an "AS IS" BASIS,
|
||
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||
# See the License for the specific language governing permissions and
|
||
# limitations under the License.
|
||
|
||
ARG BASE_IMAGE=registry.access.redhat.com/ubi9/ubi-minimal
|
||
ARG BASE_TAG=9.4-1227.1726694542
|
||
ARG BUILDER_IMAGE=registry.access.redhat.com/ubi9/go-toolset
|
||
ARG BUILDER_TAG=1.21.13-2.1727893526
|
||
ARG GO_WORKDIR=/opt/app-root/src/go/src/github.com/ibm-messaging/mq-container
|
||
ARG MQ_ARCHIVE="downloads/9.4.1.0-IBM-MQ-Advanced-for-Developers-Non-Install-LinuxX64.tar.gz"
|
||
|
||
###############################################################################
|
||
# Build stage to build Go code
|
||
###############################################################################
|
||
FROM $BUILDER_IMAGE:$BUILDER_TAG as builder
|
||
ARG IMAGE_REVISION="Not specified"
|
||
ARG IMAGE_SOURCE="Not specified"
|
||
ARG IMAGE_TAG="Not specified"
|
||
ARG GO_WORKDIR
|
||
ARG MQ_ARCHIVE
|
||
USER 0
|
||
WORKDIR $GO_WORKDIR/
|
||
ADD $MQ_ARCHIVE /opt/mqm
|
||
ENV CGO_CFLAGS="-I/opt/mqm/inc/" \
|
||
CGO_LDFLAGS_ALLOW="-Wl,-rpath.*" \
|
||
PATH="${PATH}:/opt/mqm/bin"
|
||
COPY go.mod go.sum ./
|
||
COPY cmd/ ./cmd
|
||
COPY internal/ ./internal
|
||
COPY ha/ ./ha
|
||
COPY pkg/ ./pkg
|
||
COPY vendor/ ./vendor
|
||
RUN go build -ldflags "-X \"main.ImageCreated=$(date --iso-8601=seconds)\" -X \"main.ImageRevision=$IMAGE_REVISION\" -X \"main.ImageSource=$IMAGE_SOURCE\" -X \"main.ImageTag=$IMAGE_TAG\"" ./cmd/runmqserver/ \
|
||
&& go build ./cmd/chkmqready/ \
|
||
&& go build ./cmd/chkmqhealthy/ \
|
||
&& go build ./cmd/chkmqstarted/ \
|
||
&& go build ./cmd/runmqdevserver/ \
|
||
&& chmod ug+x ./chkmq* ./runmq* \
|
||
&& go test -v ./cmd/runmqdevserver/... \
|
||
&& go test -v ./cmd/runmqserver/ \
|
||
&& go test -v ./cmd/chkmqready/ \
|
||
&& go test -v ./cmd/chkmqhealthy/ \
|
||
&& go test -v ./cmd/chkmqstarted/ \
|
||
&& go test -v ./pkg/... \
|
||
&& go test -v ./internal/... \
|
||
&& go vet ./cmd/... ./internal/...
|
||
|
||
###############################################################################
|
||
# Build stage to reduce MQ packages included using genmqpkg
|
||
###############################################################################
|
||
FROM $BASE_IMAGE:$BASE_TAG AS mq-redux
|
||
ARG BASE_IMAGE
|
||
ARG BASE_TAG
|
||
ARG MQ_ARCHIVE
|
||
WORKDIR /tmp/mq
|
||
ENV genmqpkg_inc32=1 \
|
||
genmqpkg_incadm=1 \
|
||
genmqpkg_incamqp=1 \
|
||
genmqpkg_incams=1 \
|
||
genmqpkg_inccbl=1 \
|
||
genmqpkg_inccics=1 \
|
||
genmqpkg_inccpp=1 \
|
||
genmqpkg_incdnet=1 \
|
||
genmqpkg_incjava=1 \
|
||
genmqpkg_incjre=1 \
|
||
genmqpkg_incman=1 \
|
||
genmqpkg_incmqbc=1 \
|
||
genmqpkg_incmqft=1 \
|
||
genmqpkg_incmqsf=1 \
|
||
genmqpkg_incmqxr=1 \
|
||
genmqpkg_incnls=1 \
|
||
genmqpkg_incras=1 \
|
||
genmqpkg_incsamp=1 \
|
||
genmqpkg_incsdk=1 \
|
||
genmqpkg_inctls=1 \
|
||
genmqpkg_incunthrd=1 \
|
||
genmqpkg_incweb=1
|
||
ADD $MQ_ARCHIVE /opt/mqm-noinstall
|
||
# Run genmqpkg to reduce the MQ packages included
|
||
RUN /opt/mqm-noinstall/bin/genmqpkg.sh -b /opt/mqm-redux
|
||
|
||
###############################################################################
|
||
# Main build stage, to build MQ image
|
||
###############################################################################
|
||
FROM $BASE_IMAGE:$BASE_TAG AS mq-server
|
||
ARG MQ_URL
|
||
ARG BASE_IMAGE
|
||
ARG BASE_TAG
|
||
ARG GO_WORKDIR
|
||
LABEL summary="IBM MQ Advanced Server" \
|
||
description="Simplify, accelerate and facilitate the reliable exchange of data with a security-rich messaging solution — trusted by the world’s most successful enterprises" \
|
||
vendor="IBM" \
|
||
maintainer="IBM" \
|
||
distribution-scope="private" \
|
||
authoritative-source-url="https://www.ibm.com/software/passportadvantage/" \
|
||
url="https://www.ibm.com/products/mq/advanced" \
|
||
io.openshift.tags="mq messaging" \
|
||
io.k8s.display-name="IBM MQ Advanced Server" \
|
||
io.k8s.description="Simplify, accelerate and facilitate the reliable exchange of data with a security-rich messaging solution — trusted by the world’s most successful enterprises" \
|
||
base-image=$BASE_IMAGE \
|
||
base-image-release=$BASE_TAG
|
||
COPY --chown=1001:root --from=mq-redux /opt/mqm-redux/ /opt/mqm/
|
||
COPY --chown=1001:root setup-image.sh /usr/local/bin/
|
||
COPY --chown=1001:root install-mq-server-prereqs.sh /usr/local/bin/
|
||
RUN env \
|
||
&& chmod u+x /usr/local/bin/install-*.sh \
|
||
&& chmod u+x /usr/local/bin/setup-image.sh \
|
||
&& install-mq-server-prereqs.sh \
|
||
&& setup-image.sh \
|
||
&& /opt/mqm/bin/security/amqpamcf
|
||
COPY --chown=1001:root --from=builder $GO_WORKDIR/runmqserver /usr/local/bin/
|
||
COPY --chown=1001:root --from=builder $GO_WORKDIR/chkmq* /usr/local/bin/
|
||
COPY --chown=1001:root ha/*.ini.tpl /etc/mqm/
|
||
# Copy web XML files
|
||
COPY --chown=1001:root web /etc/mqm/web
|
||
COPY --chown=1001:root etc/mqm/*.tpl /etc/mqm/
|
||
RUN ln -s /run/mqwebcontainer.xml /etc/mqm/web/installations/Installation1/servers/mqweb/mqwebcontainer.xml \
|
||
&& ln -s /run/tls.xml /etc/mqm/web/installations/Installation1/servers/mqweb/tls.xml \
|
||
&& ln -s /run/jvm.options /etc/mqm/web/installations/Installation1/servers/mqweb/configDropins/defaults/jvm.options \
|
||
&& ln -s /run/15-tls.mqsc /etc/mqm/15-tls.mqsc \
|
||
&& ln -s /run/10-native-ha.ini /etc/mqm/10-native-ha.ini \
|
||
&& ln -s /run/10-native-ha-instance.ini /etc/mqm/10-native-ha-instance.ini \
|
||
&& ln -s /run/10-native-ha-keystore.ini /etc/mqm/10-native-ha-keystore.ini \
|
||
&& chown -R 1001:root /etc/mqm/*
|
||
RUN touch /run/termination-log \
|
||
&& chown 1001:root /run/termination-log \
|
||
&& chmod 0660 /run/termination-log \
|
||
&& chmod -R g+w /etc/mqm/web \
|
||
&& chmod 0660 /etc/mqm/web/installations/Installation1/servers/mqweb/mqwebuser.xml
|
||
# Always use port 1414 for MQ, 9157 for the metrics, and 9415 for Native HA recovery
|
||
EXPOSE 1414 9157 9415 9443
|
||
ENV MQ_OVERRIDE_DATA_PATH=/mnt/mqm/data MQ_OVERRIDE_INSTALLATION_NAME=Installation1 MQ_USER_NAME="mqm" PATH="${PATH}:/opt/mqm/bin"
|
||
ENV MQ_GRACE_PERIOD=30
|
||
ENV LANG=C AMQ_DIAGNOSTIC_MSG_SEVERITY=1 AMQ_ADDITIONAL_JSON_LOG=1
|
||
ENV MQ_LOGGING_CONSOLE_EXCLUDE_ID=AMQ5041I,AMQ5052I,AMQ5051I,AMQ5037I,AMQ5975I
|
||
ENV WLP_LOGGING_MESSAGE_FORMAT=json
|
||
# We can run as any UID
|
||
USER 1001
|
||
ENV MQ_CONNAUTH_USE_HTP=false
|
||
ENTRYPOINT ["runmqserver"]
|
||
|
||
###############################################################################
|
||
# Build stage to build C code for custom authorization service (developer-only)
|
||
###############################################################################
|
||
# Use the Go toolset image, which already includes gcc and the MQ SDK
|
||
FROM builder as cbuilder
|
||
USER 0
|
||
# Install the Apache Portable Runtime code (used for simpleauth hash checking)
|
||
COPY authservice/ /opt/app-root/src/authservice/
|
||
WORKDIR /opt/app-root/src/authservice/mqsimpleauth
|
||
RUN make all
|
||
|
||
###############################################################################
|
||
# Add default developer config
|
||
###############################################################################
|
||
FROM mq-server AS mq-dev-server
|
||
ARG BASE_IMAGE
|
||
ARG BASE_TAG
|
||
ARG GO_WORKDIR
|
||
LABEL summary="IBM MQ Advanced for Developers Server" \
|
||
description="Simplify, accelerate and facilitate the reliable exchange of data with a security-rich messaging solution — trusted by the world’s most successful enterprises" \
|
||
vendor="IBM" \
|
||
distribution-scope="private" \
|
||
authoritative-source-url="https://www.ibm.com/software/passportadvantage/" \
|
||
url="https://www.ibm.com/products/mq/advanced" \
|
||
io.openshift.tags="mq messaging" \
|
||
io.k8s.display-name="IBM MQ Advanced for Developers Server" \
|
||
io.k8s.description="Simplify, accelerate and facilitate the reliable exchange of data with a security-rich messaging solution — trusted by the world’s most successful enterprises" \
|
||
base-image=$BASE_IMAGE \
|
||
base-image-release=$BASE_TAG
|
||
USER 0
|
||
COPY --from=cbuilder /opt/app-root/src/authservice/mqsimpleauth/build/mqsimpleauth.so /opt/mqm/lib64/
|
||
COPY --chown=1001:root etc/mqm/qm-service-component.ini.default /etc/mqm/
|
||
COPY --chown=1001:root --from=builder $GO_WORKDIR/runmqdevserver /usr/local/bin/
|
||
# Copy template files
|
||
COPY --chown=1001:root incubating/mqadvanced-server-dev/*.tpl /etc/mqm/
|
||
# Copy web XML files for default developer configuration
|
||
COPY --chown=1001:root incubating/mqadvanced-server-dev/web /etc/mqm/web
|
||
RUN ln -s /run/10-dev.mqsc /etc/mqm/10-dev.mqsc \
|
||
&& ln -s /run/20-dev-tls.mqsc /etc/mqm/20-dev-tls.mqsc \
|
||
&& chown --no-dereference 1001:root /etc/mqm/*.mqsc
|
||
RUN chmod -R g+w /etc/mqm/web \
|
||
&& ln -s /run/qm-service-component.ini /etc/mqm/qm-service-component.ini \
|
||
&& chown --no-dereference 1001:root /etc/mqm/qm-service-component.ini
|
||
|
||
ENV MQ_DEV=true \
|
||
MQ_ENABLE_EMBEDDED_WEB_SERVER=1 \
|
||
MQ_GENERATE_CERTIFICATE_HOSTNAME=localhost \
|
||
LD_LIBRARY_PATH=/opt/mqm/lib64 \
|
||
MQ_CONNAUTH_USE_HTP=true \
|
||
MQS_PERMIT_UNKNOWN_ID=true
|
||
USER 1001
|
||
ENTRYPOINT ["runmqdevserver"]
|