ok, wordpress actually works with --read-only now

Author: lillian

wordpress/Dockerfile

@@ -2,17 +2,11 @@ FROM alpine:latest
 
 RUN apk add unit-php82 php82-ldap php82-mysqli php82-curl php82-dom php82-exif php82-fileinfo \
     php82-pecl-imagick php82-mbstring php82-zip php82-gd php82-iconv php82-intl \
-    zip curl git
+    zip curl git strace
 
 WORKDIR /app
 
-# Unit entrypoint, but config is in /app/config instead of /docker-entrypoint.d
-RUN wget https://raw.githubusercontent.com/nginx/unit/d48180190752201865f41b2cf1e0a6740fa2ea59/pkg/docker/docker-entrypoint.sh
-RUN sed -i 's/docker-entrypoint\.d/app\/config/g' docker-entrypoint.sh
-RUN chmod +x docker-entrypoint.sh
-
-# fix for `unlink("/run/unit.pid") failed (2: No such file or directory)`, should ask upstream about this at some point
-RUN sed -i 's#set -e#touch /run/unit.pid\n&#' docker-entrypoint.sh
+COPY docker-entrypoint.sh .
 
 RUN wget -O - https://wordpress.org/wordpress-6.4.2.tar.gz | tar xz
 
@@ -32,4 +26,4 @@ COPY config.json .
 # mount /app/wordpress/wp-config.php:ro
 # mount /app/wordpress/wp-content/uploads/:rw
 
-CMD [ "/app/docker-entrypoint.sh", "unitd", "--log", "/dev/stdout", "--no-daemon", "--user", "nobody", "--group", "nobody" ]
+CMD [ "/app/docker-entrypoint.sh" ]

wordpress/docker-entrypoint.sh

@@ -0,0 +1,61 @@
+#!/bin/sh
+# adapted from https://raw.githubusercontent.com/nginx/unit/d48180190752201865f41b2cf1e0a6740fa2ea59/pkg/docker/docker-entrypoint.sh
+
+set -e
+
+WAITLOOPS=5
+SLEEPSEC=1
+
+log() {
+    echo "$(basename $0): $@"
+}
+
+curl_put()
+{
+    RET=$(/usr/bin/curl -s -w '%{http_code}' -X PUT --data-binary $1 --unix-socket /var/run/control.unit.sock http://localhost/$2)
+    RET_BODY=$(echo $RET | /bin/sed '$ s/...$//')
+    RET_STATUS=$(echo $RET | /usr/bin/tail -c 4)
+    if [ "$RET_STATUS" -ne "200" ]; then
+        log "Error: HTTP response status code is '$RET_STATUS'"
+        echo "$RET_BODY"
+        return 1
+    else
+        log "OK: HTTP response status code is '$RET_STATUS'"
+        echo "$RET_BODY"
+    fi
+    return 0
+}
+
+set_config() {
+    for i in $(/usr/bin/seq $WAITLOOPS); do
+        if [ ! -S /var/run/control.unit.sock ]; then
+            log "Waiting for control socket to be created..."
+            /bin/sleep $SLEEPSEC
+        else
+            break
+        fi
+    done
+    # even when the control socket exists, it does not mean unit has finished initialisation
+    # this curl call will get a reply once unit is fully launched
+    /usr/bin/curl -s -X GET --unix-socket /var/run/control.unit.sock http://localhost/
+
+    log "Setting access logs to /dev/stdout"
+    curl_put '"/dev/stdout"' "config/access_log"
+
+    config="/app/config/config.json"
+    log "Applying configuration $config"
+    curl_put @$config config
+
+    echo "$0: Unit configuration complete"
+}
+
+if [ "$1" == "set-config" ]; then
+    set_config
+    exit 0
+fi
+
+log "Starting config thread in background..."
+sh $0 set-config &
+
+log "Starting unitd..."
+exec unitd --control unix:/var/run/control.unit.sock --log /dev/stdout --no-daemon --user nobody --group nobody