This commit is contained in:
Bernhard Radermacher
2026-02-26 11:34:05 +01:00
parent 46f4539a28
commit 6473e97571

View File

@@ -1,77 +1,77 @@
FROM debian:trixie-slim FROM debian:trixie-slim
RUN set -eux && \ RUN set -eux; \
groupadd -r postgres --gid=5432 && \ groupadd -r postgres --gid=5432; \
useradd -r -g postgres --uid=5432 --home-dir=/var/lib/postgresql --shell=/bin/bash postgres && \ useradd -r -g postgres --uid=5432 --home-dir=/var/lib/postgresql --shell=/bin/bash postgres; \
install --verbose --directory --owner postgres --group postgres --mode 1755 /var/lib/postgresql install --verbose --directory --owner postgres --group postgres --mode 1755 /var/lib/postgresql
RUN apt-get update && \ RUN apt-get update; \
apt-get install -y --no-install-recommends \ apt-get install -y --no-install-recommends \
openssh-server \ openssh-server \
sudo \ sudo \
&& \ ; \
rm -rf /var/lib/apt/lists/* && \ rm -rf /var/lib/apt/lists/*; \
echo "postgres ALL = (ALL) NOPASSWD:ALL" >> /etc/sudoers && \ echo "postgres ALL = (ALL) NOPASSWD:ALL" >> /etc/sudoers; \
echo "X11Forwarding no" >> /etc/ssh/sshd_config && \ echo "X11Forwarding no" >> /etc/ssh/sshd_config; \
echo "PasswordAuthentication no" >> /etc/ssh/sshd_config && \ echo "PasswordAuthentication no" >> /etc/ssh/sshd_config; \
echo "StrictHostKeyChecking no" >> /etc/ssh/ssh_config echo "StrictHostKeyChecking no" >> /etc/ssh/ssh_config
RUN set -eux && \ RUN set -eux; \
grep -q '/usr/share/locale' /etc/dpkg/dpkg.cfg.d/docker && \ grep -q '/usr/share/locale' /etc/dpkg/dpkg.cfg.d/docker; \
sed -ri '/\/usr\/share\/locale/d' /etc/dpkg/dpkg.cfg.d/docker && \ sed -ri '/\/usr\/share\/locale/d' /etc/dpkg/dpkg.cfg.d/docker; \
! grep -q '/usr/share/locale' /etc/dpkg/dpkg.cfg.d/docker && \ ! grep -q '/usr/share/locale' /etc/dpkg/dpkg.cfg.d/docker; \
apt-get update && \ apt-get update; \
apt-get install -y --no-install-recommends \ apt-get install -y --no-install-recommends \
locales && \ locales; \
rm -rf /var/lib/apt/lists/* && \ rm -rf /var/lib/apt/lists/*; \
echo 'en_US.UTF-8 UTF-8' >> /etc/locale.gen && \ echo 'en_US.UTF-8 UTF-8' >> /etc/locale.gen; \
locale-gen && \ locale-gen; \
locale -a | grep 'en_US.utf8' locale -a | grep 'en_US.utf8'
ENV LANG=en_US.utf8 ENV LANG=en_US.utf8
ENV GOSU_VERSION=1.19 ENV GOSU_VERSION=1.19
RUN set -eux && \ RUN set -eux; \
apt-get update && \ apt-get update; \
apt-get install -y --no-install-recommends \ apt-get install -y --no-install-recommends \
gnupg \ gnupg \
&& \ ; \
savedAptMark="$(apt-mark showmanual)" && \ savedAptMark="$(apt-mark showmanual)"; \
apt-get install -y --no-install-recommends \ apt-get install -y --no-install-recommends \
ca-certificates \ ca-certificates \
wget \ wget \
&& \ ; \
rm -rf /var/lib/apt/lists/* && \ rm -rf /var/lib/apt/lists/*; \
dpkgArch="$(dpkg --print-architecture | awk -F- '{ print $NF }')" && \ dpkgArch="$(dpkg --print-architecture | awk -F- '{ print $NF }')"; \
wget -O /usr/local/bin/gosu "https://github.com/tianon/gosu/releases/download/${GOSU_VERSION}/gosu-${dpkgArch}" && \ wget -O /usr/local/bin/gosu "https://github.com/tianon/gosu/releases/download/${GOSU_VERSION}/gosu-${dpkgArch}"; \
wget -O /usr/local/bin/gosu.asc "https://github.com/tianon/gosu/releases/download/${GOSU_VERSION}/gosu-${dpkgArch}.asc" && \ wget -O /usr/local/bin/gosu.asc "https://github.com/tianon/gosu/releases/download/${GOSU_VERSION}/gosu-${dpkgArch}.asc"; \
export GNUPGHOME="$(mktemp -d)" && \ export GNUPGHOME="$(mktemp -d)"; \
gpg --batch --keyserver hkps://keys.openpgp.org --recv-keys B42F6819007F00F88E364FD4036A9C25BF357DD4 && \ gpg --batch --keyserver hkps://keys.openpgp.org --recv-keys B42F6819007F00F88E364FD4036A9C25BF357DD4; \
gpg --batch --verify /usr/local/bin/gosu.asc /usr/local/bin/gosu && \ gpg --batch --verify /usr/local/bin/gosu.asc /usr/local/bin/gosu; \
gpgconf --kill all && \ gpgconf --kill all; \
rm -rf "${GNUPGHOME}" /usr/local/bin/gosu.asc && \ rm -rf "${GNUPGHOME}" /usr/local/bin/gosu.asc; \
apt-mark auto '.*' > /dev/null && \ apt-mark auto '.*' > /dev/null; \
[ -z "${savedAptMark}" ] || apt-mark manual "${savedAptMark}" > /dev/null && \ [ -z "${savedAptMark}" ] || apt-mark manual "${savedAptMark}" > /dev/null; \
apt-get purge -y --auto-remove -o APT::AutoRemove::RecommendsImportant=false && \ apt-get purge -y --auto-remove -o APT::AutoRemove::RecommendsImportant=false; \
chmod +x /usr/local/bin/gosu && \ chmod +x /usr/local/bin/gosu; \
gosu --version && \ gosu --version; \
gosu nobody true gosu nobody true
RUN set -ex && \ RUN set -ex; \
apt-get update && \ apt-get update; \
apt-get install -y --no-install-recommends \ apt-get install -y --no-install-recommends \
less \ less \
xz-utils \ xz-utils \
zstd \ zstd \
&& \ ; \
rm -rf /var/lib/apt/lists/* rm -rf /var/lib/apt/lists/*
RUN set -ex && \ RUN set -ex; \
key='B97B0AFCAA1A47F044F244A07FCC7D46ACCC4CF8' && \ key='B97B0AFCAA1A47F044F244A07FCC7D46ACCC4CF8'; \
export GNUPGHOME="$(mktemp -d)" && \ export GNUPGHOME="$(mktemp -d)"; \
mkdir -p /usr/local/share/keyrings/ && \ mkdir -p /usr/local/share/keyrings/; \
gpg --batch --keyserver keyserver.ubuntu.com --recv-keys "${key}" && \ gpg --batch --keyserver keyserver.ubuntu.com --recv-keys "${key}"; \
gpg --batch --export --armor "${key}" > /usr/local/share/keyrings/postgres.gpg.asc && \ gpg --batch --export --armor "${key}" > /usr/local/share/keyrings/postgres.gpg.asc; \
gpgconf --kill all && \ gpgconf --kill all; \
rm -rf "${GNUPGHOME}" rm -rf "${GNUPGHOME}"
ENV PG_MAJOR=15 ENV PG_MAJOR=15
@@ -79,31 +79,31 @@ ENV PATH=$PATH:/usr/lib/postgresql/$PG_MAJOR/bin
ENV PG_VERSION=15.16-1.pgdg13+1 ENV PG_VERSION=15.16-1.pgdg13+1
ENV PGDATA=/var/lib/postgresql/data ENV PGDATA=/var/lib/postgresql/data
RUN install --verbose --directory --owner postgres --group postgres --mode 3777 /var/run/postgresql && \ RUN install --verbose --directory --owner postgres --group postgres --mode 3777 /var/run/postgresql; \
install --verbose --directory --owner postgres --group postgres --mode 3755 /var/lib/postgresql && \ install --verbose --directory --owner postgres --group postgres --mode 3755 /var/lib/postgresql; \
install --verbose --directory --owner postgres --group postgres --mode 1700 "${PGDATA}" install --verbose --directory --owner postgres --group postgres --mode 1700 "${PGDATA}"
RUN set -ex && \ RUN set -ex; \
dpkgArch="$(dpkg --print-architecture)" && \ dpkgArch="$(dpkg --print-architecture)"; \
aptRepo="[ signed-by=/usr/local/share/keyrings/postgres.gpg.asc ] http://apt.postgresql.org/pub/repos/apt trixie-pgdg main ${PG_MAJOR}" && \ aptRepo="[ signed-by=/usr/local/share/keyrings/postgres.gpg.asc ] http://apt.postgresql.org/pub/repos/apt trixie-pgdg main ${PG_MAJOR}"; \
echo "deb ${aptRepo}" > /etc/apt/sources.list.d/pgdg.list && \ echo "deb ${aptRepo}" > /etc/apt/sources.list.d/pgdg.list; \
apt-get update && \ apt-get update; \
apt-get install -y --no-install-recommends \ apt-get install -y --no-install-recommends \
postgresql-common \ postgresql-common \
&& \ ; \
sed -ri 's/#(create_main_cluster) .*$/\1 = false/' /etc/postgresql-common/createcluster.conf && \ sed -ri 's/#(create_main_cluster) .*$/\1 = false/' /etc/postgresql-common/createcluster.conf; \
apt-get install -y --no-install-recommends \ apt-get install -y --no-install-recommends \
"postgresql-${PG_MAJOR}=${PG_VERSION}" \ "postgresql-${PG_MAJOR}=${PG_VERSION}" \
"postgresql-${PG_MAJOR}-pgpool2" \ "postgresql-${PG_MAJOR}-pgpool2" \
&& \ ; \
rm -rf /var/lib/apt/lists/* && \ rm -rf /var/lib/apt/lists/*; \
postgres --version postgres --version
RUN set -eux && \ RUN set -eux; \
dpkg-divert --add --rename --divert "/usr/share/postgresql/postgresql.conf.sample.dpkg" "/usr/share/postgresql/${PG_MAJOR}/postgresql.conf.sample" && \ dpkg-divert --add --rename --divert "/usr/share/postgresql/postgresql.conf.sample.dpkg" "/usr/share/postgresql/${PG_MAJOR}/postgresql.conf.sample"; \
cp -v /usr/share/postgresql/postgresql.conf.sample.dpkg /usr/share/postgresql/postgresql.conf.sample && \ cp -v /usr/share/postgresql/postgresql.conf.sample.dpkg /usr/share/postgresql/postgresql.conf.sample; \
ln -sv ../postgresql.conf.sample "/usr/share/postgresql/${PG_MAJOR}/" && \ ln -sv ../postgresql.conf.sample "/usr/share/postgresql/${PG_MAJOR}/"; \
sed -ri "s!^#?(listen_addresses)\s*=\s*\S+.*!\1 = '*'!" /usr/share/postgresql/postgresql.conf.sample && \ sed -ri "s!^#?(listen_addresses)\s*=\s*\S+.*!\1 = '*'!" /usr/share/postgresql/postgresql.conf.sample; \
grep -F "listen_addresses = '*'" /usr/share/postgresql/postgresql.conf.sample grep -F "listen_addresses = '*'" /usr/share/postgresql/postgresql.conf.sample
VOLUME /var/lib/postgresql/data VOLUME /var/lib/postgresql/data