Block a user
tilda-checkout-service (latest)
Published 2025-12-03 12:56:47 +03:00 by Nikidze
Installation
docker pull gitea.private.nikidze.ru/nikidze/tilda-checkout-service:latestsha256:e1ede02537799cd122f5601750202ac31117eddb8e04316390dadfe0ef1d7831About this package
The modern PHP app server
Image Layers
| ADD alpine-minirootfs-3.22.0-x86_64.tar.gz / # buildkit |
| CMD ["/bin/sh"] |
| ENV PHPIZE_DEPS=autoconf dpkg-dev dpkg file g++ gcc libc-dev make pkgconf re2c |
| RUN /bin/sh -c apk add --no-cache ca-certificates curl openssl tar xz # buildkit |
| RUN /bin/sh -c set -eux; adduser -u 82 -D -S -G www-data www-data # buildkit |
| ENV PHP_INI_DIR=/usr/local/etc/php |
| RUN /bin/sh -c set -eux; mkdir -p "$PHP_INI_DIR/conf.d"; [ ! -d /var/www/html ]; mkdir -p /var/www/html; chown www-data:www-data /var/www/html; chmod 1777 /var/www/html # buildkit |
| ENV PHP_CFLAGS=-fstack-protector-strong -fpic -fpie -O2 -D_LARGEFILE_SOURCE -D_FILE_OFFSET_BITS=64 |
| ENV PHP_CPPFLAGS=-fstack-protector-strong -fpic -fpie -O2 -D_LARGEFILE_SOURCE -D_FILE_OFFSET_BITS=64 |
| ENV PHP_LDFLAGS=-Wl,-O1 -pie |
| ENV GPG_KEYS=AFD8691FDAEDF03BDF6E460563F15A9B715376CA 9D7F99A0CB8F05C8A6958D6256A97AF7600A39A6 0616E93D95AF471243E26761770426E17EBBB3DD |
| ENV PHP_VERSION=8.4.10 |
| ENV PHP_URL=https://www.php.net/distributions/php-8.4.10.tar.xz PHP_ASC_URL=https://www.php.net/distributions/php-8.4.10.tar.xz.asc |
| ENV PHP_SHA256=14983a9ef8800e6bc2d920739fd386054402f7976ca9cd7f711509496f0d2632 |
| RUN /bin/sh -c set -eux; apk add --no-cache --virtual .fetch-deps gnupg; mkdir -p /usr/src; cd /usr/src; curl -fsSL -o php.tar.xz "$PHP_URL"; if [ -n "$PHP_SHA256" ]; then echo "$PHP_SHA256 *php.tar.xz" | sha256sum -c -; fi; if [ -n "$PHP_ASC_URL" ]; then curl -fsSL -o php.tar.xz.asc "$PHP_ASC_URL"; export GNUPGHOME="$(mktemp -d)"; for key in $GPG_KEYS; do gpg --batch --keyserver keyserver.ubuntu.com --recv-keys "$key"; done; gpg --batch --verify php.tar.xz.asc php.tar.xz; gpgconf --kill all; rm -rf "$GNUPGHOME"; fi; apk del --no-network .fetch-deps # buildkit |
| COPY docker-php-source /usr/local/bin/ # buildkit |
| RUN /bin/sh -c set -eux; apk add --no-cache --virtual .build-deps $PHPIZE_DEPS argon2-dev coreutils curl-dev gnu-libiconv-dev libsodium-dev libxml2-dev linux-headers oniguruma-dev openssl-dev readline-dev sqlite-dev ; rm -vf /usr/include/iconv.h; export CFLAGS="$PHP_CFLAGS" CPPFLAGS="$PHP_CPPFLAGS" LDFLAGS="$PHP_LDFLAGS" PHP_BUILD_PROVIDER='https://github.com/docker-library/php' PHP_UNAME='Linux - Docker' ; docker-php-source extract; cd /usr/src/php; gnuArch="$(dpkg-architecture --query DEB_BUILD_GNU_TYPE)"; ./configure --build="$gnuArch" --with-config-file-path="$PHP_INI_DIR" --with-config-file-scan-dir="$PHP_INI_DIR/conf.d" --enable-option-checking=fatal --with-mhash --with-pic --enable-mbstring --enable-mysqlnd --with-password-argon2 --with-sodium=shared --with-pdo-sqlite=/usr --with-sqlite3=/usr --with-curl --with-iconv=/usr --with-openssl --with-readline --with-zlib --enable-phpdbg --enable-phpdbg-readline --with-pear --enable-embed --enable-zts --disable-zend-signals ; make -j "$(nproc)"; find -type f -name '*.a' -delete; make install; find /usr/local -type f -perm '/0111' -exec sh -euxc ' strip --strip-all "$@" || : ' -- '{}' + ; make clean; cp -v php.ini-* "$PHP_INI_DIR/"; cd /; docker-php-source delete; runDeps="$( scanelf --needed --nobanner --format '%n#p' --recursive /usr/local | tr ',' '\n' | sort -u | awk 'system("[ -e /usr/local/lib/" $1 " ]") == 0 { next } { print "so:" $1 }' )"; apk add --no-cache $runDeps; apk del --no-network .build-deps; pecl update-channels; rm -rf /tmp/pear ~/.pearrc; php --version # buildkit |
| COPY docker-php-ext-* docker-php-entrypoint /usr/local/bin/ # buildkit |
| RUN /bin/sh -c docker-php-ext-enable opcache # buildkit |
| RUN /bin/sh -c docker-php-ext-enable sodium # buildkit |
| ENTRYPOINT ["docker-php-entrypoint"] |
| CMD ["php" "-a"] |
| ARG TARGETARCH=amd64 |
| WORKDIR /app |
| RUN |1 TARGETARCH=amd64 /bin/sh -c apk add --no-cache ca-certificates libcap mailcap # buildkit |
| RUN |1 TARGETARCH=amd64 /bin/sh -c set -eux; mkdir -p /app/public /config/caddy /data/caddy /etc/caddy /etc/frankenphp; sed -i 's/php/frankenphp run/g' /usr/local/bin/docker-php-entrypoint; echo '<?php phpinfo();' > /app/public/index.php # buildkit |
| COPY caddy/frankenphp/Caddyfile /etc/caddy/Caddyfile # buildkit |
| RUN |1 TARGETARCH=amd64 /bin/sh -c ln /etc/caddy/Caddyfile /etc/frankenphp/Caddyfile && curl -sSLf -o /usr/local/bin/install-php-extensions https://github.com/mlocati/docker-php-extension-installer/releases/latest/download/install-php-extensions && chmod +x /usr/local/bin/install-php-extensions # buildkit |
| CMD ["--config" "/etc/frankenphp/Caddyfile" "--adapter" "caddyfile"] |
| HEALTHCHECK &{["CMD-SHELL" "curl -f http://localhost:2019/metrics || exit 1"] "0s" "0s" "0s" "0s" '\x00'} |
| ENV XDG_CONFIG_HOME=/config |
| ENV XDG_DATA_HOME=/data |
| EXPOSE map[80/tcp:{}] |
| EXPOSE map[443/tcp:{}] |
| EXPOSE map[443/udp:{}] |
| EXPOSE map[2019/tcp:{}] |
| LABEL org.opencontainers.image.title=FrankenPHP |
| LABEL org.opencontainers.image.description=The modern PHP app server |
| LABEL org.opencontainers.image.url=https://frankenphp.dev |
| LABEL org.opencontainers.image.source=https://github.com/php/frankenphp |
| LABEL org.opencontainers.image.licenses=MIT |
| LABEL org.opencontainers.image.vendor=Kévin Dunglas |
| ARG FRANKENPHP_VERSION=v1.8.0 |
| ARG NO_COMPRESS= |
| SHELL [/bin/ash -eo pipefail -c] |
| COPY /usr/local/go /usr/local/go # buildkit |
| ENV PATH=/usr/local/go/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin |
| ENV GOTOOLCHAIN=local |
| RUN |3 TARGETARCH=amd64 FRANKENPHP_VERSION=v1.8.0 NO_COMPRESS= /bin/ash -eo pipefail -c apk add --no-cache --virtual .build-deps $PHPIZE_DEPS argon2-dev bash brotli-dev coreutils curl-dev git gnu-libiconv-dev libsodium-dev cmake libstdc++ libxml2-dev linux-headers oniguruma-dev openssl-dev readline-dev sqlite-dev upx # buildkit |
| WORKDIR /usr/local/src/watcher |
| RUN |3 TARGETARCH=amd64 FRANKENPHP_VERSION=v1.8.0 NO_COMPRESS= /bin/ash -eo pipefail -c if [ -f /run/secrets/github-token ] && [ -s /run/secrets/github-token ]; then curl -s -H "Authorization: Bearer $(cat /run/secrets/github-token)" https://api.github.com/repos/e-dant/watcher/releases/latest; else curl -s https://api.github.com/repos/e-dant/watcher/releases/latest; fi | grep tarball_url | awk '{ print $2 }' | sed 's/,$//' | sed 's/"//g' | xargs curl -L | tar xz --strip-components 1 && cmake -S . -B build -DCMAKE_BUILD_TYPE=Release && cmake --build build && cmake --install build # buildkit |
| WORKDIR /go/src/app |
| COPY go.mod go.sum ./ # buildkit |
| RUN |3 TARGETARCH=amd64 FRANKENPHP_VERSION=v1.8.0 NO_COMPRESS= /bin/ash -eo pipefail -c go mod download # buildkit |
| WORKDIR /go/src/app/caddy |
| COPY caddy/go.mod caddy/go.sum ./ # buildkit |
| RUN |3 TARGETARCH=amd64 FRANKENPHP_VERSION=v1.8.0 NO_COMPRESS= /bin/ash -eo pipefail -c go mod download # buildkit |
| WORKDIR /go/src/app |
| COPY . ./ # buildkit |
| ENV CGO_CFLAGS=-DFRANKENPHP_VERSION=v1.8.0 -fstack-protector-strong -fpic -fpie -O2 -D_LARGEFILE_SOURCE -D_FILE_OFFSET_BITS=64 |
| ENV CGO_CPPFLAGS=-fstack-protector-strong -fpic -fpie -O2 -D_LARGEFILE_SOURCE -D_FILE_OFFSET_BITS=64 |
| ENV CGO_LDFLAGS=-lssl -lcrypto -lreadline -largon2 -lcurl -lonig -lz -Wl,-O1 -pie |
| WORKDIR /go/src/app/caddy/frankenphp |
| RUN |3 TARGETARCH=amd64 FRANKENPHP_VERSION=v1.8.0 NO_COMPRESS= /bin/ash -eo pipefail -c GOBIN=/usr/local/bin go install -tags 'nobadger,nomysql,nopgx' -ldflags "-w -s -extldflags '-Wl,-z,stack-size=0x80000' -X 'github.com/caddyserver/caddy/v2.CustomVersion=FrankenPHP $FRANKENPHP_VERSION PHP $PHP_VERSION Caddy'" -buildvcs=true && setcap cap_net_bind_service=+ep /usr/local/bin/frankenphp && ([ -z "${NO_COMPRESS}" ] && upx --best /usr/local/bin/frankenphp || true) && frankenphp version && frankenphp build-info # buildkit |
| WORKDIR /go/src/app |
| ENV COMPOSER_ALLOW_SUPERUSER=1 |
| RUN /bin/ash -eo pipefail -c apk add --no-cache libpng libzip-dev gmp-dev libwebp-dev libpq-dev icu-dev jpeg-dev libxpm-dev freetype-dev git linux-headers bash $PHPIZE_DEPS && pecl install xdebug && pecl install redis && pecl install mongodb-2.1.1 && docker-php-ext-enable xdebug redis.so mongodb && docker-php-ext-configure pgsql -with-pgsql=/usr/local/pgsql && docker-php-ext-install pcntl pdo pgsql pdo_pgsql bcmath gd zip gmp intl opcache exif && docker-php-ext-configure gd --with-jpeg --with-freetype && curl -sS https://getcomposer.org/installer | php -- --filename=composer --install-dir=/usr/local/bin # buildkit |
| COPY xdebug.ini /usr/local/etc/php/conf.d/ # buildkit |
| ARG USER=appuser |
| RUN |1 USER=appuser /bin/ash -eo pipefail -c adduser -D ${USER}; setcap CAP_NET_BIND_SERVICE=+eip /usr/local/bin/frankenphp; chown -R ${USER}:${USER} /data/caddy && chown -R ${USER}:${USER} /config/caddy && chown -R ${USER}:${USER} /var/www # buildkit |
| ENV HOME=/home/appuser |
| ENV XDG_CONFIG_HOME=/home/appuser/.config |
| USER appuser |
| WORKDIR /var/www |
| VOLUME [/var/www] |
| ARG USER=appuser |
| WORKDIR /var/www |
| COPY --chown=appuser:appuser ./src/ /var/www # buildkit |
| COPY /app/public/build /var/www/public/build # buildkit |
| RUN |1 USER=appuser /bin/ash -eo pipefail -c composer install --no-interaction --prefer-dist --optimize-autoloader # buildkit |
| VOLUME [/var/www] |
| CMD ["/usr/local/bin/php" "artisan" "octane:frankenphp" "--host=0.0.0.0" "--port=8080" "--admin-port=2020"] |
Labels
| Key | Value |
|---|---|
| org.opencontainers.image.created | 2025-07-14T05:23:36Z |
| org.opencontainers.image.description | The modern PHP app server |
| org.opencontainers.image.licenses | MIT |
| org.opencontainers.image.revision | d5544bbca47547f4106906551b0e779538a894a8 |
| org.opencontainers.image.source | https://github.com/php/frankenphp |
| org.opencontainers.image.title | FrankenPHP |
| org.opencontainers.image.url | https://frankenphp.dev |
| org.opencontainers.image.vendor | Kévin Dunglas |
| org.opencontainers.image.version | v1.8.0 |