mirror of
https://github.com/danog/php.git
synced 2024-11-27 04:14:56 +01:00
a0ce8afda4
See:
- https://github.com/docker-library/php/issues/865
- https://bugs.php.net/bug.php?id=76324
- https://github.com/php/php-src/pull/3632
- 2d03197749
This is not necessary for Debian Stretch (where `freetype-config` still exists) nor PHP 7.4+ (where `pkg-config` is used instead/in addition).
265 lines
8.2 KiB
Bash
Executable File
265 lines
8.2 KiB
Bash
Executable File
#!/usr/bin/env bash
|
|
set -Eeuo pipefail
|
|
|
|
# https://www.php.net/gpg-keys.php
|
|
declare -A gpgKeys=(
|
|
# https://wiki.php.net/todo/php74
|
|
# petk & derick
|
|
# https://www.php.net/gpg-keys.php#gpg-7.4
|
|
[7.4]='42670A7FE4D0441C8E4632349E4FDC074A4EF02D 5A52880781F755608BF815FC910DEB46F53EA312'
|
|
|
|
# https://wiki.php.net/todo/php73
|
|
# cmb & stas
|
|
# https://www.php.net/gpg-keys.php#gpg-7.3
|
|
[7.3]='CBAF69F173A0FEA4B537F470D66C9593118BCCB6 F38252826ACD957EF380D39F2F7956BC5DA04B5D'
|
|
|
|
# https://wiki.php.net/todo/php72
|
|
# pollita & remi
|
|
# https://www.php.net/downloads.php#gpg-7.2
|
|
# https://www.php.net/gpg-keys.php#gpg-7.2
|
|
[7.2]='1729F83938DA44E27BA0F4D3DBDB397470D12172 B1B44D8F021E4E2D6021E995DC9FF8D3EE5AF27F'
|
|
|
|
# https://wiki.php.net/todo/php71
|
|
# davey & krakjoe
|
|
# pollita for 7.1.13 for some reason
|
|
# https://www.php.net/downloads.php#gpg-7.1
|
|
# https://www.php.net/gpg-keys.php#gpg-7.1
|
|
[7.1]='A917B1ECDA84AEC2B568FED6F50ABC807BD5DCD0 528995BFEDFBA7191D46839EF9BA0ADA31CBD89E 1729F83938DA44E27BA0F4D3DBDB397470D12172'
|
|
)
|
|
# see https://www.php.net/downloads.php
|
|
|
|
cd "$(dirname "$(readlink -f "$BASH_SOURCE")")"
|
|
|
|
versions=( "$@" )
|
|
if [ ${#versions[@]} -eq 0 ]; then
|
|
versions=( */ )
|
|
fi
|
|
versions=( "${versions[@]%/}" )
|
|
|
|
generated_warning() {
|
|
cat <<-EOH
|
|
#
|
|
# NOTE: THIS DOCKERFILE IS GENERATED VIA "update.sh"
|
|
#
|
|
# PLEASE DO NOT EDIT IT DIRECTLY.
|
|
#
|
|
|
|
EOH
|
|
}
|
|
|
|
travisEnv=
|
|
for version in "${versions[@]}"; do
|
|
rcVersion="${version%-rc}"
|
|
|
|
# "7", "5", etc
|
|
majorVersion="${rcVersion%%.*}"
|
|
# "2", "1", "6", etc
|
|
minorVersion="${rcVersion#$majorVersion.}"
|
|
minorVersion="${minorVersion%%.*}"
|
|
|
|
# scrape the relevant API based on whether we're looking for pre-releases
|
|
apiUrl="https://www.php.net/releases/index.php?json&max=100&version=${rcVersion%%.*}"
|
|
apiJqExpr='
|
|
(keys[] | select(startswith("'"$rcVersion"'."))) as $version
|
|
| [ $version, (
|
|
.[$version].source[]
|
|
| select(.filename | endswith(".xz"))
|
|
|
|
|
"https://www.php.net/get/" + .filename + "/from/this/mirror",
|
|
"https://www.php.net/get/" + .filename + ".asc/from/this/mirror",
|
|
.sha256 // "",
|
|
.md5 // ""
|
|
) ]
|
|
'
|
|
if [ "$rcVersion" != "$version" ]; then
|
|
apiUrl='https://qa.php.net/api.php?type=qa-releases&format=json'
|
|
apiJqExpr='
|
|
.releases[]
|
|
| select(.version | startswith("'"$rcVersion"'."))
|
|
| [
|
|
.version,
|
|
.files.xz.path // "",
|
|
"",
|
|
.files.xz.sha256 // "",
|
|
.files.xz.md5 // ""
|
|
]
|
|
'
|
|
fi
|
|
IFS=$'\n'
|
|
possibles=( $(
|
|
curl -fsSL "$apiUrl" \
|
|
| jq --raw-output "$apiJqExpr | @sh" \
|
|
| sort -rV
|
|
) )
|
|
unset IFS
|
|
|
|
if [ "${#possibles[@]}" -eq 0 ]; then
|
|
echo >&2
|
|
echo >&2 "error: unable to determine available releases of $version"
|
|
echo >&2
|
|
exit 1
|
|
fi
|
|
|
|
# format of "possibles" array entries is "VERSION URL.TAR.XZ URL.TAR.XZ.ASC SHA256 MD5" (each value shell quoted)
|
|
# see the "apiJqExpr" values above for more details
|
|
eval "possi=( ${possibles[0]} )"
|
|
fullVersion="${possi[0]}"
|
|
url="${possi[1]}"
|
|
ascUrl="${possi[2]}"
|
|
sha256="${possi[3]}"
|
|
md5="${possi[4]}"
|
|
|
|
gpgKey="${gpgKeys[$rcVersion]}"
|
|
if [ -z "$gpgKey" ]; then
|
|
echo >&2 "ERROR: missing GPG key fingerprint for $version"
|
|
echo >&2 " try looking on https://www.php.net/downloads.php#gpg-$version"
|
|
exit 1
|
|
fi
|
|
|
|
# if we don't have a .asc URL, let's see if we can figure one out :)
|
|
if [ -z "$ascUrl" ] && wget -q --spider "$url.asc"; then
|
|
ascUrl="$url.asc"
|
|
fi
|
|
|
|
dockerfiles=()
|
|
|
|
for suite in buster stretch alpine{3.10,3.9}; do
|
|
[ -d "$version/$suite" ] || continue
|
|
alpineVer="${suite#alpine}"
|
|
|
|
baseDockerfile=Dockerfile-debian.template
|
|
if [ "${suite#alpine}" != "$suite" ]; then
|
|
baseDockerfile=Dockerfile-alpine.template
|
|
fi
|
|
|
|
for variant in cli apache fpm zts; do
|
|
[ -d "$version/$suite/$variant" ] || continue
|
|
{ generated_warning; cat "$baseDockerfile"; } > "$version/$suite/$variant/Dockerfile"
|
|
|
|
echo "Generating $version/$suite/$variant/Dockerfile from $baseDockerfile + $variant-Dockerfile-block-*"
|
|
gawk -i inplace -v variant="$variant" '
|
|
$1 == "##</autogenerated>##" { ia = 0 }
|
|
!ia { print }
|
|
$1 == "##<autogenerated>##" { ia = 1; ab++; ac = 0; if (system("test -f " variant "-Dockerfile-block-" ab) != 0) { ia = 0 } }
|
|
ia { ac++ }
|
|
ia && ac == 1 { system("cat " variant "-Dockerfile-block-" ab) }
|
|
' "$version/$suite/$variant/Dockerfile"
|
|
|
|
cp -a \
|
|
docker-php-entrypoint \
|
|
docker-php-ext-* \
|
|
docker-php-source \
|
|
"$version/$suite/$variant/"
|
|
if [ "$variant" = 'apache' ]; then
|
|
cp -a apache2-foreground "$version/$suite/$variant/"
|
|
fi
|
|
if [ "$majorVersion" = '7' -a "$minorVersion" -lt '2' ]; then
|
|
# argon2 password hashing is only supported in 7.2+
|
|
sed -ri \
|
|
-e '/##<argon2-stretch>##/,/##<\/argon2-stretch>##/d' \
|
|
-e '/argon2/d' \
|
|
"$version/$suite/$variant/Dockerfile"
|
|
elif [ "$suite" != 'stretch' ]; then
|
|
# and buster+ doesn't need to pull argon2 from stretch-backports
|
|
sed -ri \
|
|
-e '/##<argon2-stretch>##/,/##<\/argon2-stretch>##/d' \
|
|
"$version/$suite/$variant/Dockerfile"
|
|
fi
|
|
if [ "$majorVersion" = '7' -a "$minorVersion" -lt '4' ]; then
|
|
# oniguruma is part of mbstring in php 7.4+
|
|
sed -ri \
|
|
-e '/oniguruma-dev|libonig-dev/d' \
|
|
"$version/$suite/$variant/Dockerfile"
|
|
fi
|
|
if [ "$majorVersion" -ge '8' ]; then
|
|
# 8 and above no longer include pecl/pear (see https://github.com/docker-library/php/issues/846#issuecomment-505638494)
|
|
sed -ri \
|
|
-e '/pear |pearrc|pecl.*channel/d' \
|
|
"$version/$suite/$variant/Dockerfile"
|
|
fi
|
|
if [ "$majorVersion" != '7' ] || [ "$minorVersion" -lt '4' ]; then
|
|
# --with-pear is only relevant on PHP 7, and specifically only 7.4+ (see https://github.com/docker-library/php/issues/846#issuecomment-505638494)
|
|
sed -ri \
|
|
-e '/--with-pear/d' \
|
|
"$version/$suite/$variant/Dockerfile"
|
|
fi
|
|
if [ "$majorVersion" = '7' -a "$minorVersion" -lt '2' ]; then
|
|
# sodium is part of php core 7.2+ https://wiki.php.net/rfc/libsodium
|
|
sed -ri '/sodium/d' "$version/$suite/$variant/Dockerfile"
|
|
fi
|
|
if [ "$variant" = 'fpm' -a "$majorVersion" = '7' -a "$minorVersion" -lt '3' ]; then
|
|
# php-fpm "decorate_workers_output" is only available in 7.3+
|
|
sed -ri \
|
|
-e '/decorate_workers_output/d' \
|
|
-e '/log_limit/d' \
|
|
"$version/$suite/$variant/Dockerfile"
|
|
fi
|
|
if [ "$suite" = 'stretch' ] || { [ "$majorVersion" = '7' ] && [ "$minorVersion" -ge '4' ]; }; then
|
|
# https://github.com/docker-library/php/issues/865
|
|
# https://bugs.php.net/bug.php?id=76324
|
|
# https://github.com/php/php-src/pull/3632
|
|
# https://github.com/php/php-src/commit/2d03197749696ac3f8effba6b7977b0d8729fef3
|
|
sed -ri \
|
|
-e '/freetype-config/d' \
|
|
"$version/$suite/$variant/Dockerfile"
|
|
fi
|
|
|
|
# remove any _extra_ blank lines created by the deletions above
|
|
gawk '
|
|
{
|
|
if (NF == 0 || (NF == 1 && $1 == "\\")) {
|
|
blank++
|
|
}
|
|
else {
|
|
blank = 0
|
|
}
|
|
|
|
if (blank < 2) {
|
|
print
|
|
}
|
|
}
|
|
' "$version/$suite/$variant/Dockerfile" > "$version/$suite/$variant/Dockerfile.new"
|
|
mv "$version/$suite/$variant/Dockerfile.new" "$version/$suite/$variant/Dockerfile"
|
|
|
|
sed -ri \
|
|
-e 's!%%DEBIAN_TAG%%!'"$suite-slim"'!' \
|
|
-e 's!%%DEBIAN_SUITE%%!'"$suite"'!' \
|
|
-e 's!%%ALPINE_VERSION%%!'"$alpineVer"'!' \
|
|
"$version/$suite/$variant/Dockerfile"
|
|
dockerfiles+=( "$version/$suite/$variant/Dockerfile" )
|
|
done
|
|
done
|
|
|
|
(
|
|
set -x
|
|
sed -ri \
|
|
-e 's!%%PHP_VERSION%%!'"$fullVersion"'!' \
|
|
-e 's!%%GPG_KEYS%%!'"$gpgKey"'!' \
|
|
-e 's!%%PHP_URL%%!'"$url"'!' \
|
|
-e 's!%%PHP_ASC_URL%%!'"$ascUrl"'!' \
|
|
-e 's!%%PHP_SHA256%%!'"$sha256"'!' \
|
|
-e 's!%%PHP_MD5%%!'"$md5"'!' \
|
|
"${dockerfiles[@]}"
|
|
)
|
|
|
|
# update entrypoint commands
|
|
for dockerfile in "${dockerfiles[@]}"; do
|
|
cmd="$(awk '$1 == "CMD" { $1 = ""; print }' "$dockerfile" | tail -1 | jq --raw-output '.[0]')"
|
|
entrypoint="$(dirname "$dockerfile")/docker-php-entrypoint"
|
|
sed -i 's! php ! '"$cmd"' !g' "$entrypoint"
|
|
done
|
|
|
|
newTravisEnv=
|
|
for dockerfile in "${dockerfiles[@]}"; do
|
|
dir="${dockerfile%Dockerfile}"
|
|
dir="${dir%/}"
|
|
variant="${dir#$version}"
|
|
variant="${variant#/}"
|
|
newTravisEnv+='\n - VERSION='"$version VARIANT=$variant"
|
|
done
|
|
travisEnv="$newTravisEnv$travisEnv"
|
|
done
|
|
|
|
travis="$(awk -v 'RS=\n\n' '$1 == "env:" { $0 = "env:'"$travisEnv"'" } { printf "%s%s", $0, RS }' .travis.yml)"
|
|
echo "$travis" > .travis.yml
|