Dockerfile 2.6 KB

1234567891011121314151617181920212223242526272829303132333435363738394041424344454647484950515253545556
  1. # syntax=docker/dockerfile:1
  2. # This dockerfile builds on top of 'docker/Dockerfile-workers' in matrix-org/synapse
  3. # by including a built-in postgres instance, as well as setting up the homeserver so
  4. # that it is ready for testing via Complement.
  5. #
  6. # Instructions for building this image from those it depends on is detailed in this guide:
  7. # https://github.com/matrix-org/synapse/blob/develop/docker/README-testing.md#testing-with-postgresql-and-single-or-multi-process-synapse
  8. ARG SYNAPSE_VERSION=latest
  9. FROM matrixdotorg/synapse-workers:$SYNAPSE_VERSION
  10. # First of all, we copy postgres server from the official postgres image,
  11. # since for repeated rebuilds, this is much faster than apt installing
  12. # postgres each time.
  13. # This trick only works because (a) the Synapse image happens to have all the
  14. # shared libraries that postgres wants, (b) we use a postgres image based on
  15. # the same debian version as Synapse's docker image (so the versions of the
  16. # shared libraries match).
  17. RUN adduser --system --uid 999 postgres --home /var/lib/postgresql
  18. COPY --from=postgres:13-bullseye /usr/lib/postgresql /usr/lib/postgresql
  19. COPY --from=postgres:13-bullseye /usr/share/postgresql /usr/share/postgresql
  20. RUN mkdir /var/run/postgresql && chown postgres /var/run/postgresql
  21. ENV PATH="${PATH}:/usr/lib/postgresql/13/bin"
  22. ENV PGDATA=/var/lib/postgresql/data
  23. # We also initialize the database at build time, rather than runtime, so that it's faster to spin up the image.
  24. RUN gosu postgres initdb --locale=C --encoding=UTF-8 --auth-host password
  25. # Configure a password and create a database for Synapse
  26. RUN echo "ALTER USER postgres PASSWORD 'somesecret'" | gosu postgres postgres --single
  27. RUN echo "CREATE DATABASE synapse" | gosu postgres postgres --single
  28. # Extend the shared homeserver config to disable rate-limiting,
  29. # set Complement's static shared secret, enable registration, amongst other
  30. # tweaks to get Synapse ready for testing.
  31. # To do this, we copy the old template out of the way and then include it
  32. # with Jinja2.
  33. RUN mv /conf/shared.yaml.j2 /conf/shared-orig.yaml.j2
  34. COPY conf/workers-shared-extra.yaml.j2 /conf/shared.yaml.j2
  35. WORKDIR /data
  36. COPY conf/postgres.supervisord.conf /etc/supervisor/conf.d/postgres.conf
  37. # Copy the entrypoint
  38. COPY conf/start_for_complement.sh /
  39. # Expose nginx's listener ports
  40. EXPOSE 8008 8448
  41. ENTRYPOINT ["/start_for_complement.sh"]
  42. # Update the healthcheck to have a shorter check interval
  43. HEALTHCHECK --start-period=5s --interval=1s --timeout=1s \
  44. CMD /bin/sh /healthcheck.sh