|
| 1 | +FROM neomediatech/ubuntu-base:22.04 |
| 2 | + |
| 3 | +ENV APP_VERSION=3.x \ |
| 4 | + SERVICE=rspamd |
| 5 | + |
| 6 | +LABEL maintainer=" [email protected]" \ |
| 7 | + org.label-schema.version=$APP_VERSION \ |
| 8 | + org.label-schema.vcs-type=Git \ |
| 9 | + org.label-schema.vcs-url=https://github.com/Neomediatech/${SERVICE} \ |
| 10 | + org.label-schema.maintainer=Neomediatech |
| 11 | + |
| 12 | +RUN apt-get update && apt-get -y dist-upgrade && \ |
| 13 | + apt-get install -y --no-install-recommends \ |
| 14 | + ca-certificates lsb-release wget gnupg && \ |
| 15 | + apt-get clean && \ |
| 16 | + rm -rf /var/lib/apt/lists/* |
| 17 | + |
| 18 | +SHELL ["/bin/bash", "-c"] |
| 19 | +RUN set -x \ |
| 20 | +# gpg: key FFA232EDBF21E25E: public key "Rspamd Nightly Builds (Rspamd Nightly Builds) < [email protected]>" imported |
| 21 | + && key='3FA347D5E599BE4595CA2576FFA232EDBF21E25E' \ |
| 22 | + && export GNUPGHOME="$(mktemp -d)" \ |
| 23 | + && gpg --import <<<$'\ |
| 24 | +-----BEGIN PGP PUBLIC KEY BLOCK----- \n\ |
| 25 | + \n\ |
| 26 | +mQINBFW3VB8BEADAV1lBy8DPcSEBSLYVKgwsBx/dRmgenKeliMpiZyNYJJmF6tSV \n\ |
| 27 | +s3v5DtDIUESgI2mBKNeptdneri3CDJScI/LgPLKqemrLBkAMfe+f57JgppY5ti4H \n\ |
| 28 | +xo+VZdbF9bhCAwYwJnqnyuLjYSUu6nCuW4uPDoqBHXynwsIWr1O3fREpY+vgIgaT \n\ |
| 29 | +Oqm3ncssqxSicymd6k0yuo55xuUvrc4Yu4IEnhFVRU53e0E3zmHg/7ONI99YtBan \n\ |
| 30 | +7G/w2IfA1bfRDYZ2Avau+JqGcEl8vy+eLmYayKirdsMPN8Tx6RFOstDf1CnjW/bj \n\ |
| 31 | +IX7SDOklIGJjJwcWW/iY+1P9SfNNqSDgXavJj2wmLMlUhgjyJFTXfdDRjmN0PFxo \n\ |
| 32 | +f6OQu5xok1WHfKFJL+hLGknjHdXLmGd5MSuFlutdVHJQrieknjBea9xCiEsrfe8V \n\ |
| 33 | +zyNqGhzgIYjOi/bO7jGpY/WiFHvM9XtBVp862tqM1S1WbAWW5u+es6NK4q9Cv0DR \n\ |
| 34 | +tIalss+5gFhdsIFGFYQWfY7CrjOIC+C0+c5IGaBkHte35hCCvDpOO909xxVqUZYe \n\ |
| 35 | +9Pl8zYgPDe1H4arMO+p6rSvVntvIWOqLqkuWYSiOY4TGADJTkeZRbopZhvqs/9mc \n\ |
| 36 | +847fVMbOwKfkbeuGiHhUK0QFewXSu+cXJyGtyu3RgokBWr2yyzJFXIvJbQARAQAB \n\ |
| 37 | +tEZSc3BhbWQgTmlnaHRseSBCdWlsZHMgKFJzcGFtZCBOaWdodGx5IEJ1aWxkcykg \n\ |
| 38 | +PHZzZXZvbG9kQGhpZ2hzZWN1cmUucnU+iQI4BBMBAgAiBQJVt1QfAhsDBgsJCAcD \n\ |
| 39 | +AgYVCAIJCgsEFgIDAQIeAQIXgAAKCRD/ojLtvyHiXucND/4ja0t+4RMiD0c0z3xD \n\ |
| 40 | +Vp0Ysq7kZvzlteUrw98f1BMYbmSTJ+43JVZV67GJ8fV2d9/atIlyLce8Gn9hYmF7 \n\ |
| 41 | +C5nPpCCOlNejkwkc9MhZgoM0z7sTNZwKLZ4fSnxHD10Z923G+IRQYeXswM7hE/T5 \n\ |
| 42 | +8NgANOWBFs9BxIEIT6IfRNHF23SCmCeNFNmUen6uXLznjRzYbMmwP7u2BopfJcpN \n\ |
| 43 | +ajnm66IypQDsUqVwBRnm9o9GAWUPbp4ahhf1vYu04T1vD7n4qhrLdhHmEJpukEhD \n\ |
| 44 | +q613Wl/k0g0O8SahfSAaM1x5zLOJ0sMacyxCktQKXypAhkhhJc4J1KLbnNUsxZdk \n\ |
| 45 | +Gn4wLZuhfIuzh2KfKBdwoL3zRq7kjgumJo7AQhEIIDGKutl6sZnbRHjBr4qBb1NJ \n\ |
| 46 | +/7GC7UiZhIesdO6HdqrriNF0l8dRVIaHXGKF0PQWWG+J+147oQM+SJmm4W4oONSx \n\ |
| 47 | +YCjyTllxwh/54fhu81jhSyBgbKAmV1gYLIPvAUgPkguAb5JWcvZOeXytHWZYLK9T \n\ |
| 48 | +8rW5R0bviiouHHRyQYu0AX+wiSyAfoVnTVyad6xTWUT3aQ8jeL0I3uy323Mrq56U \n\ |
| 49 | +7Yo0NFwKPF9z5kbuQje3daudQQymkhOfNcQm3dOaaWKGp5KPRi3OtKYMu+5Aphor \n\ |
| 50 | +lwJWDec6PUe835YwqrARXtPaNA== \n\ |
| 51 | +=4Cm3 \n\ |
| 52 | +-----END PGP PUBLIC KEY BLOCK-----' \ |
| 53 | + && gpg --keyserver hkps://keys.openpgp.org --recv-keys "$key" \ |
| 54 | + && gpg --export "$key" > /etc/apt/trusted.gpg.d/rspamd.gpg \ |
| 55 | + && rm -rf "$GNUPGHOME" \ |
| 56 | + && apt-key list > /dev/null |
| 57 | + |
| 58 | +RUN CODENAME=`lsb_release -c -s` && \ |
| 59 | + echo "deb [signed-by=/etc/apt/trusted.gpg.d/rspamd.gpg] https://rspamd.com/apt-stable/ $CODENAME main" > /etc/apt/sources.list.d/rspamd.list && \ |
| 60 | + apt-get update && \ |
| 61 | + apt-get --no-install-recommends install -y rspamd && \ |
| 62 | + apt-get clean && \ |
| 63 | + rm -rf /var/lib/apt/lists/* && \ |
| 64 | + echo 'pidfile = false;' > /etc/rspamd/override.d/options.inc && \ |
| 65 | + mkdir -p /srv/scripts && \ |
| 66 | + wget -O /srv/scripts/logrotate.sh https://raw.githubusercontent.com/Neomediatech/assets/main/scripts/logrotate.sh && \ |
| 67 | + chmod +x /srv/scripts/logrotate.sh |
| 68 | + |
| 69 | +COPY conf/ /etc/rspamd |
| 70 | +COPY entrypoint.sh /entrypoint.sh |
| 71 | +RUN chmod +x /entrypoint.sh |
| 72 | + |
| 73 | +HEALTHCHECK --interval=30s --timeout=30s --start-period=10s --retries=20 CMD rspamadm control stat |grep uptime|head -1 || ( echo "no uptime, no party\!" && exit 1 ) |
| 74 | + |
| 75 | +ENTRYPOINT ["/entrypoint.sh"] |
| 76 | +CMD [ "/usr/bin/rspamd", "-f", "-u", "_rspamd", "-g", "_rspamd" ] |
| 77 | + |
0 commit comments