storj/cmd/storagenode/Dockerfile.base

ARG DOCKER_ARCH

FROM ${DOCKER_ARCH:-amd64}/debian:buster-slim
RUN apt-get update \
     && apt-get install -y --no-install-recommends ca-certificates supervisor unzip wget
RUN update-ca-certificates
RUN mkdir -p /var/log/supervisor /app
COPY cmd/storagenode/docker-base/ /
# set permissions to allow non-root access
RUN chmod -R a+rw /etc/supervisor /var/log/supervisor /app
# remove the default supervisord.conf
RUN rm -rf /etc/supervisord.conf
# create a symlink to custom supervisord config file at the default location
RUN ln -s /etc/supervisor/supervisord.conf /etc/supervisord.conf
{cmd/storagenode,Makefile}: add storagenode base image Dockerfile Having the storagenode and storagenode-updater processes in one container requires a process manager to properly handle the individual processes. Using a process manager like supervisord requires that you package supervisord and it configuration in the image, along with the storagenode and storagenode-updater binaries. Installing supervisord requires that we run apk to install it and its dependencies at build time which makes it difficult to build multi-platoform images; executing apk forces a requirement of the build system to run foreign architechtures. This change adds a dockerfile which will be used to build the base image for the storagenode and has supervisord packaged. The base image will be built manually using docker buildx, with QEMU binfmt support. Updates https://github.com/storj/storj/issues/4489 Change-Id: I33f8f01398a7207bca08d8a4a43f4ed56b6a2473 2022-02-24 11:58:15 +00:00			`ARG DOCKER_ARCH`

cmd/storagenode: use Debian as base image instead of alpine We are switching from alpine to debian due to a network issue introduced in alpine 3.13+ which fails to verify certificates due to not all armhf boards meet the time64 requirement: https://wiki.alpinelinux.org/wiki/Release_Notes_for_Alpine_3.13.0\#time64_requirements Also, Debian does not have official imagess for arm32v6 architecture so we are building with arm32v5 arch in the Makefile. Change-Id: I3660c3f64b7c2b342dd4ccb876af5f4e3036ea9d 2022-03-24 04:46:07 +00:00			`FROM ${DOCKER_ARCH:-amd64}/debian:buster-slim`
			`RUN apt-get update \`
			`&& apt-get install -y --no-install-recommends ca-certificates supervisor unzip wget`
			`RUN update-ca-certificates`
cmd/storagenode: move supervisord config file to storagenode-base image The supervisord.conf file is edited to set the args for the storagenode and storagenode-updater binaries at runtime. This change moves the config file to the base image so we can set the permission to allow non-root users edit the config file. Non-root user permission is also needed for the /app directory so we can install/update the binaries when run as a non-root user. Updates https://github.com/storj/storj/issues/4489 Change-Id: If7a51a00ea171253e41923501174a43393f4638c 2022-03-08 13:30:04 +00:00			`RUN mkdir -p /var/log/supervisor /app`
			`COPY cmd/storagenode/docker-base/ /`
cmd/storagenode: fix permission to /etc/supervisor in base image This change fixes the `sed: can't create temp file '/etc/supervisor/supervisord.confXXXXXX': Permission denied` issue when editing the supervisord.conf file during runtime as a non-root user. While editing the config file, Sed creates a temporary file, saves the result and then finally mv the original file with the temporary one. So we need to set the permission for the /etc/supervisor where the temporary file is created. Change-Id: Ic9c147a9cf0a6ef94adf702e33054edce1828806 2022-03-15 13:01:14 +00:00			`# set permissions to allow non-root access`
			`RUN chmod -R a+rw /etc/supervisor /var/log/supervisor /app`
cmd/storagenode: bug fixes to storagenode docker image This change fixes the following issues: wget: Alpine docker image by default uses the builtin BusyBox wget which is not capable of handling SSL traffic via proxy unlike the GNU wget. We have to replace BusyBox wget with GNU wget. updater failing to restart the node: supervisorctl pointing to wrong config file. We remove the default configuration file and point supervisorctl to custom config in systemctl updates https://github.com/storj/storj/issues/4489 Change-Id: I24a7f18377ba723bbc377bb5d25aaa14f37021b1 2022-03-18 08:41:21 +00:00			`# remove the default supervisord.conf`
			`RUN rm -rf /etc/supervisord.conf`
			`# create a symlink to custom supervisord config file at the default location`
			`RUN ln -s /etc/supervisor/supervisord.conf /etc/supervisord.conf`