Added PHP 8.3 images (#11)

* Added PHP 8.3 images * Updated deps
hiqdev · Jan 26, 2024 · 44d4941 · 44d4941
1 parent 537a99a
commit 44d4941
Show file tree

Hide file tree

Showing 4 changed files with 454 additions and 0 deletions.
diff --git a/src/8.3/Makefile b/src/8.3/Makefile
@@ -0,0 +1,12 @@
+VERSION = 8.3
+
+builds = fpm-alpine cli-alpine
+
+all: $(builds) push_$(builds)
+
+$(builds):
+	echo "🔧 Building PHP image for $@"
+	docker build -t hiqdev/php:$(VERSION)-$@ $@
+	docker push hiqdev/php:$(VERSION)-$@
+
+.PHONY: all $(builds) push_$(builds)
diff --git a/src/8.3/cli-alpine/Dockerfile b/src/8.3/cli-alpine/Dockerfile
@@ -0,0 +1,160 @@
+FROM php:8.3-cli-alpine
+
+ENV POSTFIX_MAILNAME hiqdev.com
+ENV XDEBUG_RELEASE=3.3.1
+ENV MEMCACHED_RELEASE=3.2.0
+ENV PECL_SSH2_RELEASE=1.4
+ENV GNU_LIBICONV_RELEASE=1.17-r2
+
+# PHP options
+ENV PHP_MAX_EXECUTION_TIME 3000
+ENV PHP_MAX_INPUT_VARS 20000
+ENV PHP_ERROR_REPORTING="E_ALL & ~E_NOTICE"
+ENV PHP_POST_MAX_SIZE 60M
+ENV PHP_UPLOAD_MAX_FILESIZE 25M
+ENV PHP_SESS_GC_MAXLIFETIME 2592000
+
+RUN set -xe \
+    && apk update \
+    && apk add --no-cache --virtual .php-deps \
+        imagemagick \
+        ghostscript \
+        make \
+        libssh2 \
+        icu \
+        gmp-dev \
+        librdkafka-dev \
+        libpq-dev \
+        libzip-dev \
+        libxml2-dev \
+        libmemcached-dev \
+        imap-dev \
+        libgomp \
+    && apk add --no-cache --virtual .tools \
+        openssh-client \
+        git \
+        iproute2 \
+        bind-tools \
+        gnupg \
+        unzip \
+        bash \
+        postgresql-client \
+        postfix \
+    && apk add --no-cache --virtual .build-deps \
+        $PHPIZE_DEPS \
+        zlib-dev \
+        icu-dev \
+        g++ \
+        freetype-dev \
+        libpng-dev \
+        imagemagick-dev \
+        libjpeg-turbo-dev \
+        ghc \
+        autoconf \
+        krb5-dev \
+        libssh2-dev \
+        zlib-dev \
+        patch \
+    && \
+    docker-php-ext-configure intl && \
+    docker-php-ext-install intl && \
+    docker-php-ext-enable intl && \
+
+    docker-php-ext-configure imap --with-kerberos --with-imap-ssl && \
+    pecl install mailparse && \
+    docker-php-ext-install zip bcmath imap soap pcntl gmp && \
+    docker-php-ext-enable mailparse && \
+
+    pecl install imagick && \
+    docker-php-ext-enable imagick && \
+
+    # SSH
+    pecl install ssh2-$PECL_SSH2_RELEASE && \
+    docker-php-ext-enable ssh2 && \
+
+    # GD
+    export CFLAGS="$PHP_CFLAGS" CPPFLAGS="$PHP_CPPFLAGS" LDFLAGS="$PHP_LDFLAGS" && \
+    docker-php-ext-configure gd --with-freetype --with-jpeg && \
+    docker-php-ext-install gd && \
+
+    # PostgreSQL
+    docker-php-ext-install pdo_pgsql pgsql && \
+
+    # XDebug
+    pecl install "xdebug-$XDEBUG_RELEASE" && \
+    docker-php-ext-enable xdebug && \
+
+    # Opcache
+    docker-php-ext-install opcache \
+
+    && pecl install rdkafka \
+    && docker-php-ext-enable rdkafka \
+
+    # Memcached
+    && pecl install memcached-$MEMCACHED_RELEASE \
+    && docker-php-ext-enable memcached \
+
+    # Sockets
+    && docker-php-ext-install sockets \
+
+    # Blackfire
+    && version=$(php -r "echo PHP_MAJOR_VERSION.PHP_MINOR_VERSION;") \
+    && architecture=$(case $(uname -m) in i386 | i686 | x86) echo "i386" ;; x86_64 | amd64) echo "amd64" ;; aarch64 | arm64 | armv8) echo "arm64" ;; *) echo "amd64" ;; esac) \
+    && curl -A "Docker" -o /tmp/blackfire-probe.tar.gz -D - -L -s https://blackfire.io/api/v1/releases/probe/php/linux/$architecture/$version \
+    && mkdir -p /tmp/blackfire \
+    && tar zxpf /tmp/blackfire-probe.tar.gz -C /tmp/blackfire \
+    && mv /tmp/blackfire/blackfire-*.so $(php -r "echo ini_get ('extension_dir');")/blackfire.so \
+    && printf ";extension=blackfire.so\nblackfire.agent_socket=tcp://blackfire:8707\n" > $PHP_INI_DIR/conf.d/blackfire.ini \
+    && rm -rf /tmp/blackfire /tmp/blackfire-probe.tar.gz \
+    && echo 'Blackfire has been installed' \
+
+    && apk add gnu-libiconv="$GNU_LIBICONV_RELEASE" --update-cache --repository http://dl-cdn.alpinelinux.org/alpine/latest-stable/community/ --allow-untrusted \
+
+    && { find /usr/local/lib -type f -print0 | xargs -0r strip --strip-all -p 2>/dev/null || true; } \
+    && apk del .build-deps \
+    && rm -rf /tmp/* /usr/local/lib/php/doc/* /var/cache/apk/* \
+
+ENV LD_PRELOAD /usr/lib/preloadable_libiconv.so
+
+# General settings
+RUN { \
+        echo "memory_limit=256M"; \
+    } | tee -a /usr/local/etc/php/conf.d/docker-php-general.ini \
+
+    && { \
+        echo "opcache.enable=1"; \
+        echo "opcache.memory_consumption=1024"; \
+        echo "opcache.max_accelerated_files=9000"; \
+        echo "opcache_revalidate_freq=120"; \
+        echo "opcache.interned_strings_buffer=16"; \
+    } | tee -a /usr/local/etc/php/conf.d/docker-php-ext-opcache.ini \
+
+    # Disable XDebug by default
+    && sed -i "1s/^/;/" /usr/local/etc/php/conf.d/docker-php-ext-xdebug.ini \
+    && { \
+        echo "xdebug.max_nesting_level=500"; \
+        echo "xdebug.mode=debug"; \
+        echo "xdebug.client_host=127.0.0.1"; \
+        echo "xdebug.client_port=9003"; \
+        echo "xdebug.start_with_request=trigger"; \
+    } | tee -a /usr/local/etc/php/conf.d/docker-php-ext-xdebug.ini \
+    && \
+    { \
+        echo "log_errors = On"; \
+        echo "max_execution_time = $PHP_MAX_EXECUTION_TIME"; \
+        echo "max_input_vars = $PHP_MAX_INPUT_VARS"; \
+        echo "error_reporting = $PHP_ERROR_REPORTING"; \
+        echo "post_max_size = $PHP_POST_MAX_SIZE"; \
+        echo "upload_max_filesize = $PHP_UPLOAD_MAX_FILESIZE"; \
+        echo "session.gc_maxlifetime = $PHP_SESS_GC_MAXLIFETIME"; \
+        echo "mail.add_x_header = Off"; \
+    } | tee -a /usr/local/etc/php/php.ini
+
+# Composer
+COPY --from=composer:2 /usr/bin/composer /usr/bin/composer
+
+# FreeCDB
+COPY --from=hiqdev/freecdb /usr/bin/cdbmake /usr/bin/cdbdump /usr/bin/cdbget /usr/bin/cdbstats /usr/bin/
+
+RUN mkdir /app
+WORKDIR /app
diff --git a/src/8.3/fpm-alpine/Dockerfile b/src/8.3/fpm-alpine/Dockerfile
@@ -0,0 +1,200 @@
+FROM php:8.3-fpm-alpine
+
+ENV POSTFIX_MAILNAME hiqdev.com
+ENV XDEBUG_RELEASE=3.3.1
+ENV MEMCACHED_RELEASE=3.2.0
+ENV NEW_RELIC_AGENT_VERSION=10.16.0.5
+ENV PECL_SSH2_RELEASE=1.4
+ENV GNU_LIBICONV_RELEASE=1.17-r2
+
+# PHP-FPM options
+ENV FPM_MAX_CHILDREN 300
+ENV FPM_START_SERVERS 50
+ENV FPM_MIN_SPARE_SERVERS 20
+ENV FPM_MAX_SPARE_SERVERS 50
+ENV FPM_MAX_REQUESTS 10000
+ENV FPM_PROCESS_MAX 512
+
+# PHP Options
+ENV PHP_MAX_EXECUTION_TIME 3000
+ENV PHP_MAX_INPUT_VARS 20000
+ENV PHP_ERROR_REPORTING="E_ALL & ~E_DEPRECATED & ~E_STRICT & ~E_NOTICE"
+ENV PHP_POST_MAX_SIZE 60M
+ENV PHP_UPLOAD_MAX_FILESIZE 25M
+ENV PHP_SESS_GC_MAXLIFETIME 2592000
+
+RUN set -xe \
+    && apk update \
+    && apk add --no-cache --virtual .php-deps \
+        imagemagick \
+        ghostscript \
+        make \
+        libssh2 \
+        icu \
+        gmp-dev \
+        librdkafka-dev \
+        libpq-dev \
+        libzip-dev \
+        libxml2-dev \
+        libmemcached-dev \
+        imap-dev \
+        libgomp \
+    && apk add --no-cache --virtual .tools \
+        openssh-client \
+        git \
+        iproute2 \
+        bind-tools \
+        gnupg \
+        unzip \
+        bash \
+        postgresql-client \
+        postfix \
+    && apk add --no-cache --virtual .build-deps \
+        $PHPIZE_DEPS \
+        zlib-dev \
+        icu-dev \
+        g++ \
+        freetype-dev \
+        libpng-dev \
+        imagemagick-dev \
+        libjpeg-turbo-dev \
+        ghc \
+        autoconf \
+        krb5-dev \
+        libssh2-dev \
+        zlib-dev \
+        patch \
+    && \
+    docker-php-ext-configure intl && \
+    docker-php-ext-install intl && \
+    docker-php-ext-enable intl && \
+
+    docker-php-ext-configure imap --with-kerberos --with-imap-ssl && \
+    pecl install mailparse && \
+    docker-php-ext-install zip bcmath imap soap pcntl gmp && \
+    docker-php-ext-enable mailparse && \
+
+    pecl install imagick && \
+    docker-php-ext-enable imagick && \
+
+    # SSH
+    pecl install ssh2-$PECL_SSH2_RELEASE && \
+    docker-php-ext-enable ssh2 && \
+
+    # GD
+    export CFLAGS="$PHP_CFLAGS" CPPFLAGS="$PHP_CPPFLAGS" LDFLAGS="$PHP_LDFLAGS" && \
+    docker-php-ext-configure gd --with-freetype --with-jpeg && \
+    docker-php-ext-install gd && \
+
+    # PostgreSQL
+    docker-php-ext-install pdo_pgsql pgsql && \
+
+    # XDebug
+    pecl install "xdebug-$XDEBUG_RELEASE" && \
+    docker-php-ext-enable xdebug && \
+
+    # Opcache
+    docker-php-ext-install opcache \
+
+    && pecl install rdkafka \
+    && docker-php-ext-enable rdkafka \
+
+    # Memcached
+    && pecl install memcached-$MEMCACHED_RELEASE \
+    && docker-php-ext-enable memcached \
+
+    # Sockets
+    && docker-php-ext-install sockets \
+
+    # Blackfire
+    && version=$(php -r "echo PHP_MAJOR_VERSION.PHP_MINOR_VERSION;") \
+    && architecture=$(case $(uname -m) in i386 | i686 | x86) echo "i386" ;; x86_64 | amd64) echo "amd64" ;; aarch64 | arm64 | armv8) echo "arm64" ;; *) echo "amd64" ;; esac) \
+    && curl -A "Docker" -o /tmp/blackfire-probe.tar.gz -D - -L -s https://blackfire.io/api/v1/releases/probe/php/linux/$architecture/$version \
+    && mkdir -p /tmp/blackfire \
+    && tar zxpf /tmp/blackfire-probe.tar.gz -C /tmp/blackfire \
+    && mv /tmp/blackfire/blackfire-*.so $(php -r "echo ini_get ('extension_dir');")/blackfire.so \
+    && printf ";extension=blackfire.so\nblackfire.agent_socket=tcp://blackfire:8707\n" > $PHP_INI_DIR/conf.d/blackfire.ini \
+    && rm -rf /tmp/blackfire /tmp/blackfire-probe.tar.gz \
+    && echo 'Blackfire has been installed' \
+
+    && apk add gnu-libiconv=$GNU_LIBICONV_RELEASE --update-cache --repository http://dl-cdn.alpinelinux.org/alpine/latest-stable/community/ --allow-untrusted \
+
+    # New Relic
+    && curl -L https://download.newrelic.com/php_agent/archive/$NEW_RELIC_AGENT_VERSION/newrelic-php5-$NEW_RELIC_AGENT_VERSION-linux-musl.tar.gz | tar -C /tmp -zx \
+    && NR_INSTALL_USE_CP_NOT_LN=1 NR_INSTALL_SILENT=1 /tmp/newrelic-php5-$NEW_RELIC_AGENT_VERSION-linux-musl/newrelic-install install \
+    && rm -rf /tmp/newrelic-php5-* /tmp/nrinstall* \
+
+    && { find /usr/local/lib -type f -print0 | xargs -0r strip --strip-all -p 2>/dev/null || true; } \
+    && apk del .build-deps \
+    && rm -rf /tmp/* /usr/local/lib/php/doc/* /var/cache/apk/*
+
+ENV LD_PRELOAD /usr/lib/preloadable_libiconv.so
+
+# General settings
+RUN { \
+        echo "memory_limit=256M"; \
+    } | tee -a /usr/local/etc/php/conf.d/docker-php-general.ini \
+
+    && { \
+        echo "opcache.enable=1"; \
+        echo "opcache.memory_consumption=1024"; \
+        echo "opcache.max_accelerated_files=9000"; \
+        echo "opcache_revalidate_freq=120"; \
+        echo "opcache.interned_strings_buffer=16"; \
+    } | tee -a /usr/local/etc/php/conf.d/docker-php-ext-opcache.ini \
+
+    # Disable XDebug by default
+    && sed -i "1s/^/;/" /usr/local/etc/php/conf.d/docker-php-ext-xdebug.ini \
+    && { \
+        echo "xdebug.max_nesting_level=500"; \
+        echo "xdebug.mode=debug"; \
+        echo "xdebug.client_host=127.0.0.1"; \
+        echo "xdebug.client_port=9003"; \
+        echo "xdebug.start_with_request=trigger"; \
+    } | tee -a /usr/local/etc/php/conf.d/docker-php-ext-xdebug.ini && \
+
+    # Disable New Relic by default
+#    sed -i "s/extension = /;extension =/" /usr/local/etc/php/conf.d/newrelic.ini && \
+
+    # Tune configs
+    sed -i "s/max_children\s*=\s*[[:digit:]]\+/max_children = $FPM_MAX_CHILDREN/" /usr/local/etc/php-fpm.d/www.conf && \
+    sed -i "s/start_servers\s*=\s*[[:digit:]]\+/start_servers = $FPM_START_SERVERS/" /usr/local/etc/php-fpm.d/www.conf && \
+    sed -i "s/min_spare_servers\s*=\s*[[:digit:]]\+/min_spare_servers = $FPM_MIN_SPARE_SERVERS/" /usr/local/etc/php-fpm.d/www.conf && \
+    sed -i "s/pm.max_spare_servers\s*=\s*[[:digit:]]\+/pm.max_spare_servers = $FPM_MAX_SPARE_SERVERS/" /usr/local/etc/php-fpm.d/www.conf && \
+
+    # FPM monitoring
+    sed -i "s/.*pm.status_path = .*$/pm.status_path = \/fpm_status/g" /usr/local/etc/php-fpm.d/www.conf && \
+    sed -i "s/.*ping.path = .*$/ping.path = \/fpm_ping/g" /usr/local/etc/php-fpm.d/www.conf && \
+    sed -i "s/.*ping.response = .*$/ping.response = pong/g" /usr/local/etc/php-fpm.d/www.conf && \
+    { \
+        echo '[www]'; \
+        echo "pm.max_requests = $FPM_MAX_REQUESTS"; \
+        echo 'catch_workers_output = yes'; \
+        echo '[global]'; \
+        echo "process.max = $FPM_PROCESS_MAX"; \
+        echo 'emergency_restart_threshold = 10'; \
+        echo 'emergency_restart_interval = 2s'; \
+        echo 'process_control_timeout = 10s'; \
+    } | tee -a /usr/local/etc/php-fpm.d/www.conf && \
+    { \
+        echo "log_errors = On"; \
+        echo "max_execution_time = $PHP_MAX_EXECUTION_TIME"; \
+        echo "max_input_vars = $PHP_MAX_INPUT_VARS"; \
+        echo "error_reporting = $PHP_ERROR_REPORTING"; \
+        echo "post_max_size = $PHP_POST_MAX_SIZE"; \
+        echo "upload_max_filesize = $PHP_UPLOAD_MAX_FILESIZE"; \
+        echo "session.gc_maxlifetime = $PHP_SESS_GC_MAXLIFETIME"; \
+        echo "mail.add_x_header = Off"; \
+    } | tee -a /usr/local/etc/php/php.ini
+
+# Composer
+COPY --from=composer:2 /usr/bin/composer /usr/bin/composer
+# FreeCDB
+COPY --from=hiqdev/freecdb /usr/bin/cdbmake /usr/bin/cdbdump /usr/bin/cdbget /usr/bin/cdbstats /usr/bin/
+
+RUN mkdir /app
+WORKDIR /app
+
+COPY hiqdev-docker-entrypoint /usr/local/bin
+ENTRYPOINT ["hiqdev-docker-entrypoint"]
+CMD ["php-fpm"]