mirror of
https://github.com/phpmyadmin/docker.git
synced 2026-08-24 10:13:22 -05:00
Compare commits
| Author | SHA1 | Date | |
|---|---|---|---|
 Michal Čihař
|
8429260408 | ||
|
Michal Čihař
|
2a32d39405 | ||
|
Michal Čihař
|
a82c421460 | ||
|
Michal Čihař
|
3e18501a5f | ||
|
Michal Čihař
|
f88988d7a5 | ||
|
Michal Čihař
|
11ad52edcd | ||
|
Michal Čihař
|
a924c9da70 | ||
|
Michal Čihař
|
174f145d54 |
@@ -0,0 +1,7 @@
|
||||
.travis.yml
|
||||
docker-compose.yml
|
||||
docker-compose.testing.yml
|
||||
README.md
|
||||
LICENSE
|
||||
Makefile
|
||||
testing
|
||||
@@ -1 +0,0 @@
|
||||
*.sql linguist-detectable=false
|
||||
@@ -0,0 +1,23 @@
|
||||
# Configuration for probot-stale - https://github.com/probot/stale
|
||||
|
||||
# Number of days of inactivity before an Issue or Pull Request becomes stale
|
||||
daysUntilStale: 60
|
||||
# Number of days of inactivity before a stale Issue or Pull Request is closed
|
||||
daysUntilClose: 7
|
||||
# Issues or Pull Requests with these labels will never be considered stale. Set to `[]` to disable
|
||||
exemptLabels:
|
||||
- pinned
|
||||
- security
|
||||
# Label to use when marking as stale
|
||||
staleLabel: wontfix
|
||||
# Comment to post when marking as stale. Set to `false` to disable
|
||||
markComment: >
|
||||
This issue has been automatically marked as stale because it has not had
|
||||
recent activity. It will be closed if no further activity occurs. Thank you
|
||||
for your contributions.
|
||||
# Comment to post when removing the stale label. Set to `false` to disable
|
||||
unmarkComment: false
|
||||
# Comment to post when closing a stale Issue or Pull Request. Set to `false` to disable
|
||||
closeComment: false
|
||||
# Limit to only `issues` or `pulls`
|
||||
only: pulls
|
||||
@@ -1,51 +0,0 @@
|
||||
name: GitHub CI
|
||||
|
||||
permissions:
|
||||
contents: read
|
||||
|
||||
on:
|
||||
pull_request:
|
||||
push:
|
||||
schedule:
|
||||
- cron: 0 0 * * 0
|
||||
|
||||
defaults:
|
||||
run:
|
||||
shell: 'bash -Eeuo pipefail -x {0}'
|
||||
|
||||
jobs:
|
||||
|
||||
generate-jobs:
|
||||
name: Generate Jobs
|
||||
runs-on: ubuntu-latest
|
||||
outputs:
|
||||
strategy: ${{ steps.generate-jobs.outputs.strategy }}
|
||||
steps:
|
||||
- uses: actions/checkout@v4
|
||||
- uses: docker-library/bashbrew@v0.1.12
|
||||
- id: generate-jobs
|
||||
name: Generate Jobs
|
||||
run: |
|
||||
strategy="$(GITHUB_REPOSITORY=phpmyadmin "$BASHBREW_SCRIPTS/github-actions/generate.sh")"
|
||||
echo "strategy=$strategy" >> "$GITHUB_OUTPUT"
|
||||
jq . <<<"$strategy" # sanity check / debugging aid
|
||||
|
||||
test:
|
||||
needs: generate-jobs
|
||||
strategy: ${{ fromJson(needs.generate-jobs.outputs.strategy) }}
|
||||
name: ${{ matrix.name }}
|
||||
runs-on: ${{ matrix.os }}
|
||||
steps:
|
||||
- uses: actions/checkout@v4
|
||||
- name: Prepare Environment
|
||||
run: ${{ matrix.runs.prepare }}
|
||||
- name: Pull Dependencies
|
||||
run: ${{ matrix.runs.pull }}
|
||||
- name: Build ${{ matrix.name }}
|
||||
run: ${{ matrix.runs.build }}
|
||||
- name: History ${{ matrix.name }}
|
||||
run: ${{ matrix.runs.history }}
|
||||
- name: Test ${{ matrix.name }}
|
||||
run: ${{ matrix.runs.test }}
|
||||
- name: '"docker images"'
|
||||
run: ${{ matrix.runs.images }}
|
||||
@@ -1,73 +0,0 @@
|
||||
name: Internal test suite
|
||||
|
||||
permissions:
|
||||
contents: read
|
||||
|
||||
on:
|
||||
pull_request:
|
||||
push:
|
||||
|
||||
jobs:
|
||||
test-apache-container:
|
||||
name: Test (${{ matrix.configuration }}) on database ${{ matrix.database-image }}
|
||||
runs-on: ubuntu-latest
|
||||
strategy:
|
||||
fail-fast: false
|
||||
matrix:
|
||||
database-image: [
|
||||
"mariadb:10.6",
|
||||
"mariadb:10.11",
|
||||
"mariadb:11.4",
|
||||
"mariadb:latest",
|
||||
"mysql:5.7",
|
||||
"mysql:8.4",
|
||||
"mysql:latest"
|
||||
]
|
||||
configuration: [
|
||||
"default",
|
||||
"one-host",
|
||||
"one-socket-host",
|
||||
"config-mount-dir",
|
||||
"fs-import-export",
|
||||
"different-apache-port",
|
||||
"run-as-www-data"
|
||||
]
|
||||
include:
|
||||
- {
|
||||
database-image: "mariadb:10.6",
|
||||
configuration: "one-ssl-host"
|
||||
}
|
||||
- {
|
||||
database-image: "mariadb:10.11",
|
||||
configuration: "one-ssl-host"
|
||||
}
|
||||
- {
|
||||
database-image: "mariadb:11.4",
|
||||
configuration: "one-ssl-host"
|
||||
}
|
||||
- {
|
||||
database-image: "mariadb:latest",
|
||||
configuration: "one-ssl-host"
|
||||
}
|
||||
|
||||
steps:
|
||||
- uses: actions/checkout@v4
|
||||
- name: Generate the testing keys
|
||||
if: ${{ contains(matrix.configuration, 'one-ssl-host') }}
|
||||
run: ./testing/generate-keys.sh
|
||||
- name: Switch to MySQL compatible ENVs
|
||||
if: ${{ contains(matrix.database-image, 'mysql') }}
|
||||
working-directory: ./testing/docker-compose/
|
||||
run: sed -i 's/MARIADB_ROOT_PASSWORD/MYSQL_ROOT_PASSWORD/' ./docker-compose.testing-${{ matrix.configuration }}.yml
|
||||
- name: Switch to MySQL compatible healthcheck
|
||||
if: ${{ contains(matrix.database-image, 'mysql') }}
|
||||
working-directory: ./testing/docker-compose/
|
||||
run: sed -i 's/mariadb-admin/mysqladmin/' ./docker-compose.testing-${{ matrix.configuration }}.yml
|
||||
- name: Build images
|
||||
working-directory: ./testing/
|
||||
run: docker compose -f ./docker-compose/docker-compose.testing-${{ matrix.configuration }}.yml build
|
||||
- name: Run ${{ matrix.configuration }} tests
|
||||
working-directory: ./testing/
|
||||
run: docker compose -f ./docker-compose/docker-compose.testing-${{ matrix.configuration }}.yml up --build --abort-on-container-exit --exit-code-from=sut
|
||||
env:
|
||||
DB: ${{ matrix.database-image }}
|
||||
@@ -1,7 +1 @@
|
||||
config.secret.inc.php
|
||||
__pycache__
|
||||
.pytest_cache
|
||||
.vscode
|
||||
.history
|
||||
.venv
|
||||
testing/*.pem
|
||||
|
||||
+45
@@ -0,0 +1,45 @@
|
||||
dist: trusty
|
||||
|
||||
sudo: required
|
||||
|
||||
services:
|
||||
- docker
|
||||
|
||||
language: python
|
||||
python:
|
||||
- "2.7"
|
||||
|
||||
env:
|
||||
matrix:
|
||||
- DB=mysql:latest
|
||||
- DB=mariadb:latest
|
||||
|
||||
before_install:
|
||||
- export TESTSUITE_PASSWORD=`openssl rand -base64 30`
|
||||
- docker run --name db_server -e MYSQL_ROOT_PASSWORD=$TESTSUITE_PASSWORD -d $DB
|
||||
|
||||
install:
|
||||
- pip install mechanize html5lib
|
||||
|
||||
script:
|
||||
# Build image
|
||||
- docker build -t phpmyadmin/phpmyadmin .
|
||||
# Test for single database
|
||||
- docker run --name testadmin -d --link db_server:db -p 9090:80 phpmyadmin/phpmyadmin
|
||||
- ./testing/test-docker.sh testadmin 9090
|
||||
# Test for single database using env
|
||||
- docker run --name envadmin -d --link db_server:db2 -e PMA_HOST=db2 -p 6060:80 phpmyadmin/phpmyadmin
|
||||
- ./testing/test-docker.sh envadmin 6060
|
||||
# Test for arbitrary database
|
||||
- docker run --name arbitraryadmin -d --link db_server:db3 -e PMA_ARBITRARY=1 -p 7070:80 phpmyadmin/phpmyadmin
|
||||
- ./testing/test-docker.sh arbitraryadmin 7070 db3
|
||||
# Test for arbitrary database with user config
|
||||
- docker run --name userconfigadmin -d --link db_server:db3 -v `readlink -f ./testing/config.test.inc.php`:/etc/phpmyadmin/config.user.inc.php -p 7080:80 phpmyadmin/phpmyadmin
|
||||
- ./testing/test-docker.sh userconfigadmin 7080 db3
|
||||
# Test docker-compose
|
||||
- docker-compose -f docker-compose.yml -f docker-compose.db.yml up -d
|
||||
- ./testing/test-docker.sh phpmyadmin 8080 db_server
|
||||
- docker-compose stop
|
||||
# Run tests in testing container
|
||||
- docker-compose -f docker-compose.testing.yml up -d phpmyadmin
|
||||
- ./testing/wait-for-testing.sh
|
||||
@@ -1,98 +0,0 @@
|
||||
# Changelog
|
||||
|
||||
All notable changes to this project will be documented in this file.
|
||||
|
||||
The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/).
|
||||
|
||||
## [5.2.3] - 2025-10-08
|
||||
|
||||
- Update to PHP 8.3
|
||||
- Enable the `uploadprogress` extension
|
||||
|
||||
## [5.2.2] - 2025-01-21
|
||||
|
||||
- Add `TZ` env var to change PHP `date.timezone` (#133)
|
||||
- Update to PHP 8.2 (#411)
|
||||
- Add back a `/sessions` volume for sessions persistence (#399)
|
||||
- Support adding custom configurations in `/etc/phpmyadmin/conf.d` (#401)
|
||||
- Fix for Debian 12 issue (#416) that caused libraries for extensions to be uninstalled
|
||||
- Add extension `bcmath` for 2nd factor authentication (#415)
|
||||
- Refactor `update.sh` (#408)
|
||||
- Enable remoteip mod for Apache (#434)
|
||||
- Add support for `PMA_SSL` and `PMA_SSLS` to enable SSL connection (#441)
|
||||
- Fixed looping through `$sockets` using the same index variable `$i` interferes with the last server id (#186)
|
||||
- Add support for `PMA_SSL_VERIFY` and `PMA_SSL_VERIFIES` (#448)
|
||||
- Add support for `PMA_SSL_CA` and `PMA_SSL_CAS` (#448)
|
||||
- Add support for `PMA_SSL_CERT` and `PMA_SSL_CERTS` (#448)
|
||||
- Add support for `PMA_SSL_KEY` and `PMA_SSL_KEYS` (#448)
|
||||
- Also add `PMA_SSL_DIR` to define the dir where SSL files are generated for `_BASE64` prefixed variables
|
||||
- Support `PMA_SSL_CA_BASE64` and `PMA_SSL_CAS_BASE64` as variables that contain the file contents (#448)
|
||||
- Support `PMA_SSL_KEY_BASE64` and `PMA_SSL_KEYS_BASE64` as variables that contain the file contents (#448)
|
||||
- Support `PMA_SSL_CERT_BASE64` and `PMA_SSL_CERTS_BASE64` as variables that contain the file contents (#448)
|
||||
|
||||
## [5.2.1] - 2023-02-08
|
||||
|
||||
- Move docker-compose test files into a folder
|
||||
- Fix the section about E2E tests in `README.md`
|
||||
- Support docker secrets from file for `PMA_USER` (#372)
|
||||
- Support docker secrets from file for `PMA_CONTROLUSER` (#372)
|
||||
- Support docker secrets from file for `PMA_CONTROLHOST` (#372)
|
||||
- Allow a different Apache port with `APACHE_PORT` (#340)
|
||||
- Add support for ENVs `PMA_UPLOADDIR` and `PMA_SAVEDIR` (#384)
|
||||
- Fixed a bug with `APACHE_PORT` ENV on container restart (#381)
|
||||
- Update to PHP 8.1 (#393)
|
||||
- Add support for ENV `TZ`
|
||||
|
||||
## [5.1.4] - 2022-05-11
|
||||
|
||||
- Fix incorrect image tag name in `README.md`
|
||||
|
||||
## [5.1.2] - 2022-01-22
|
||||
|
||||
- Fix GPG keyservers in Dockerfiles
|
||||
- Remove microbadger badges, it closed
|
||||
- Improve the README file
|
||||
- Fix add back composer.json and remove non needed source files (#345)
|
||||
- Update to PHP 8.0 (#325)
|
||||
|
||||
## [5.1.1] - 2021-06-04
|
||||
|
||||
- Improve documentation
|
||||
|
||||
## [5.1.0] - 2021-02-24
|
||||
|
||||
- Set ini setting `max_input_vars = 10000`
|
||||
- Add support for ENV `PMA_QUERYHISTORYMAX`
|
||||
- Add support for ENV `MAX_EXECUTION_TIME`
|
||||
- Add support for ENV `MEMORY_LIMIT`
|
||||
- Move to GitHub actions
|
||||
- Re-work the test system
|
||||
- Support docker secrets from file for `PMA_CONTROLPASS`
|
||||
- Generate phpmyadmin-misc.ini from ENVs
|
||||
|
||||
## [4.9.{6,7}] - 2020-10-{10,16} and [5.0.{3,4}] - 2020-10-{10,16}
|
||||
|
||||
- Add `tzdata` package
|
||||
- Extract downloaded files directly to web root `/var/www/html/` (#277)
|
||||
- Add SHA checksum when downloading a version
|
||||
- Improved `UPLOAD_LIMIT` documentation
|
||||
- Update documentation from `phpmyadmin/phpmyadmin` to `phpmyadmin`
|
||||
- `phpmyadmin` is now the official image in the Docker official library
|
||||
|
||||
## [5.0.2] - 2020-03-21
|
||||
|
||||
- Add org.opencontainers.image.* labels
|
||||
- Apply some feedback from docker-library team to Dockerfiles
|
||||
|
||||
## [4.9.3] - 2020-01-02 and [5.0.0] - 2019-12-26
|
||||
|
||||
- Add support for ENV `HIDE_PHP_VERSION` to set ini setting `expose_php = Off`
|
||||
- Add support for ENV `UPLOAD_LIMIT` to set `upload_max_filesize` and `post_max_size` ini settings
|
||||
- Add support for ENVs `PMA_CONFIG_BASE64` and `PMA_USER_CONFIG_BASE64` (#192)
|
||||
- Support docker secrets from files for `PMA_PASSWORD`, `MYSQL_ROOT_PASSWORD` and `MYSQL_PASSWORD`
|
||||
- Support docker secrets from files for `PMA_HOSTS` and `PMA_HOST`
|
||||
|
||||
## [4.9.2-2] - 2020-12-20
|
||||
|
||||
- Update to PHP 7.4 (#257)
|
||||
- Drop ini setting `opcache.enable_cli=1`
|
||||
+64
@@ -0,0 +1,64 @@
|
||||
FROM php:7.2-fpm-alpine
|
||||
|
||||
RUN apk add --no-cache \
|
||||
nginx \
|
||||
supervisor
|
||||
|
||||
# Install dependencies
|
||||
RUN set -ex; \
|
||||
\
|
||||
apk add --no-cache --virtual .build-deps \
|
||||
bzip2-dev \
|
||||
freetype-dev \
|
||||
libjpeg-turbo-dev \
|
||||
libpng-dev \
|
||||
libwebp-dev \
|
||||
libxpm-dev \
|
||||
; \
|
||||
\
|
||||
docker-php-ext-configure gd --with-freetype-dir=/usr --with-jpeg-dir=/usr --with-webp-dir=/usr --with-png-dir=/usr --with-xpm-dir=/usr; \
|
||||
docker-php-ext-install bz2 gd mysqli opcache zip; \
|
||||
\
|
||||
runDeps="$( \
|
||||
scanelf --needed --nobanner --format '%n#p' --recursive /usr/local/lib/php/extensions \
|
||||
| tr ',' '\n' \
|
||||
| sort -u \
|
||||
| awk 'system("[ -e /usr/local/lib/" $1 " ]") == 0 { next } { print "so:" $1 }' \
|
||||
)"; \
|
||||
apk add --virtual .phpmyadmin-phpexts-rundeps $runDeps; \
|
||||
apk del .build-deps
|
||||
|
||||
# Copy configuration
|
||||
COPY etc /etc/
|
||||
|
||||
# Copy main script
|
||||
COPY run.sh /run.sh
|
||||
RUN chmod u+rwx /run.sh
|
||||
|
||||
# Calculate download URL
|
||||
ENV VERSION 4.8+snapshot
|
||||
ENV URL https://files.phpmyadmin.net/snapshots/phpMyAdmin-${VERSION}-all-languages.tar.gz
|
||||
LABEL version=$VERSION
|
||||
|
||||
# Download tarball, verify it using gpg and extract
|
||||
RUN set -ex; \
|
||||
curl --output phpMyAdmin.tar.gz --location $URL; \
|
||||
tar xzf phpMyAdmin.tar.gz; \
|
||||
rm -f phpMyAdmin.tar.gz phpMyAdmin.tar.gz.asc; \
|
||||
mv phpMyAdmin-$VERSION-all-languages /www; \
|
||||
rm -rf /www/setup/ /www/examples/ /www/test/ /www/po/ /www/composer.json /www/RELEASE-DATE-$VERSION; \
|
||||
sed -i "s@define('CONFIG_DIR'.*@define('CONFIG_DIR', '/etc/phpmyadmin/');@" /www/libraries/vendor_config.php; \
|
||||
chown -R root:nobody /www; \
|
||||
find /www -type d -exec chmod 750 {} \; ; \
|
||||
find /www -type f -exec chmod 640 {} \;
|
||||
|
||||
# Add directory for sessions to allow session persistence
|
||||
RUN mkdir /sessions \
|
||||
&& mkdir -p /www/tmp \
|
||||
&& chmod -R 777 /www/tmp
|
||||
|
||||
# We expose phpMyAdmin on port 80
|
||||
EXPOSE 80
|
||||
|
||||
ENTRYPOINT [ "/run.sh" ]
|
||||
CMD ["phpmyadmin"]
|
||||
@@ -1,145 +0,0 @@
|
||||
FROM php:%%PHP_VERSION%%-%%VARIANT%%
|
||||
|
||||
ENV UPLOAD_PROGRESS_EXT_URL="https://github.com/php/pecl-php-uploadprogress/archive/refs/tags/uploadprogress-2.0.2.tar.gz"
|
||||
ENV UPLOAD_PROGRESS_SHA256="fe3f6cdfcedad563c970c4fd1cda31e422cfc0df5cc9a217d8c80ed3c8d137f5"
|
||||
|
||||
# install and docker-entrypoint.sh dependencies
|
||||
RUN apk add --no-cache \
|
||||
bash \
|
||||
tzdata \
|
||||
gnupg
|
||||
|
||||
# Install dependencies
|
||||
RUN set -ex; \
|
||||
\
|
||||
apk add --no-cache --virtual .build-deps \
|
||||
bzip2-dev \
|
||||
freetype-dev \
|
||||
libjpeg-turbo-dev \
|
||||
libpng-dev \
|
||||
libwebp-dev \
|
||||
libxpm-dev \
|
||||
libzip-dev \
|
||||
; \
|
||||
\
|
||||
mkdir -p /usr/src/php/ext/uploadprogress; \
|
||||
curl -fsSL -o uploadprogress.tar.gz "$UPLOAD_PROGRESS_EXT_URL"; \
|
||||
echo "$UPLOAD_PROGRESS_SHA256 uploadprogress.tar.gz" | sha256sum -c -; \
|
||||
tar -xf uploadprogress.tar.gz -C /usr/src/php/ext/uploadprogress --strip-components=1; \
|
||||
\
|
||||
docker-php-ext-configure gd --with-freetype --with-jpeg --with-webp --with-xpm; \
|
||||
docker-php-ext-install -j "$(nproc)" \
|
||||
bz2 \
|
||||
gd \
|
||||
mysqli \
|
||||
opcache \
|
||||
zip \
|
||||
bcmath \
|
||||
uploadprogress \
|
||||
; \
|
||||
\
|
||||
rm -r /usr/src/php/ext/uploadprogress; \
|
||||
\
|
||||
runDeps="$( \
|
||||
scanelf --needed --nobanner --format '%n#p' --recursive /usr/local/lib/php/extensions \
|
||||
| tr ',' '\n' \
|
||||
| sort -u \
|
||||
| awk 'system("[ -e /usr/local/lib/" $1 " ]") == 0 { next } { print "so:" $1 }' \
|
||||
)"; \
|
||||
apk add --no-network --virtual .phpmyadmin-phpexts-rundeps $runDeps; \
|
||||
apk del --no-network .build-deps
|
||||
|
||||
# set recommended PHP.ini settings
|
||||
# see https://secure.php.net/manual/en/opcache.installation.php
|
||||
ENV PMA_SSL_DIR=/etc/phpmyadmin/ssl
|
||||
ENV MAX_EXECUTION_TIME=600
|
||||
ENV MEMORY_LIMIT=512M
|
||||
ENV UPLOAD_LIMIT=2048K
|
||||
ENV TZ=UTC
|
||||
ENV SESSION_SAVE_PATH=/sessions
|
||||
RUN set -ex; \
|
||||
mkdir $SESSION_SAVE_PATH; \
|
||||
mkdir -p $PMA_SSL_DIR; \
|
||||
chmod 1777 $SESSION_SAVE_PATH; \
|
||||
chmod 755 $PMA_SSL_DIR; \
|
||||
chown www-data:www-data /etc/phpmyadmin; \
|
||||
chown www-data:www-data $PMA_SSL_DIR; \
|
||||
chown www-data:www-data $SESSION_SAVE_PATH; \
|
||||
\
|
||||
{ \
|
||||
echo 'opcache.memory_consumption=128'; \
|
||||
echo 'opcache.interned_strings_buffer=8'; \
|
||||
echo 'opcache.max_accelerated_files=4000'; \
|
||||
echo 'opcache.revalidate_freq=2'; \
|
||||
echo 'opcache.fast_shutdown=1'; \
|
||||
} > $PHP_INI_DIR/conf.d/opcache-recommended.ini; \
|
||||
\
|
||||
{ \
|
||||
echo 'session.cookie_httponly=1'; \
|
||||
echo 'session.use_strict_mode=1'; \
|
||||
} > $PHP_INI_DIR/conf.d/session-strict.ini; \
|
||||
\
|
||||
{ \
|
||||
echo 'allow_url_fopen=Off'; \
|
||||
echo 'max_execution_time=${MAX_EXECUTION_TIME}'; \
|
||||
echo 'max_input_vars=10000'; \
|
||||
echo 'memory_limit=${MEMORY_LIMIT}'; \
|
||||
echo 'post_max_size=${UPLOAD_LIMIT}'; \
|
||||
echo 'upload_max_filesize=${UPLOAD_LIMIT}'; \
|
||||
echo 'date.timezone=${TZ}'; \
|
||||
echo 'session.save_path=${SESSION_SAVE_PATH}'; \
|
||||
} > $PHP_INI_DIR/conf.d/phpmyadmin-misc.ini
|
||||
|
||||
USER www-data:www-data
|
||||
|
||||
# Calculate download URL
|
||||
ENV VERSION=%%VERSION%%
|
||||
ENV SHA256=%%SHA256%%
|
||||
ENV URL=https://files.phpmyadmin.net/phpMyAdmin/${VERSION}/phpMyAdmin-${VERSION}-all-languages.tar.xz
|
||||
|
||||
LABEL org.opencontainers.image.title="Official phpMyAdmin Docker image" \
|
||||
org.opencontainers.image.description="Run phpMyAdmin with Alpine, Apache and PHP FPM." \
|
||||
org.opencontainers.image.authors="The phpMyAdmin Team <developers@phpmyadmin.net>" \
|
||||
org.opencontainers.image.vendor="phpMyAdmin" \
|
||||
org.opencontainers.image.documentation="https://github.com/phpmyadmin/docker#readme" \
|
||||
org.opencontainers.image.licenses="GPL-2.0-only" \
|
||||
org.opencontainers.image.version="${VERSION}" \
|
||||
org.opencontainers.image.url="https://github.com/phpmyadmin/docker#readme" \
|
||||
org.opencontainers.image.source="https://github.com/phpmyadmin/docker.git"
|
||||
|
||||
# Download tarball, verify it using gpg and extract
|
||||
RUN set -ex; \
|
||||
\
|
||||
export GNUPGHOME="$(mktemp -d)"; \
|
||||
export GPGKEY="%%GPG_KEY%%"; \
|
||||
curl -fsSL -o phpMyAdmin.tar.xz $URL; \
|
||||
curl -fsSL -o phpMyAdmin.tar.xz.asc $URL.asc; \
|
||||
echo "$SHA256 *phpMyAdmin.tar.xz" | sha256sum -c -; \
|
||||
gpg --batch --keyserver keyserver.ubuntu.com --recv-keys "$GPGKEY" \
|
||||
|| gpg --batch --keyserver pgp.mit.edu --recv-keys "$GPGKEY" \
|
||||
|| gpg --batch --keyserver keyserver.pgp.com --recv-keys "$GPGKEY" \
|
||||
|| gpg --batch --keyserver keys.openpgp.org --recv-keys "$GPGKEY"; \
|
||||
gpg --batch --verify phpMyAdmin.tar.xz.asc phpMyAdmin.tar.xz; \
|
||||
tar -xf phpMyAdmin.tar.xz -C /var/www/html --strip-components=1; \
|
||||
mkdir -p /var/www/html/tmp; \
|
||||
gpgconf --kill all; \
|
||||
rm -r "$GNUPGHOME" phpMyAdmin.tar.xz phpMyAdmin.tar.xz.asc; \
|
||||
rm -r -v /var/www/html/setup/ /var/www/html/examples/ /var/www/html/js/src/ /var/www/html/babel.config.json /var/www/html/doc/html/_sources/ /var/www/html/RELEASE-DATE-$VERSION /var/www/html/CONTRIBUTING.md; \
|
||||
grep -q -F "'configFile' => ROOT_PATH . 'config.inc.php'," /var/www/html/libraries/vendor_config.php; \
|
||||
sed -i "s@'configFile' => .*@'configFile' => '/etc/phpmyadmin/config.inc.php',@" /var/www/html/libraries/vendor_config.php; \
|
||||
grep -q -F "'configFile' => '/etc/phpmyadmin/config.inc.php'," /var/www/html/libraries/vendor_config.php; \
|
||||
php -l /var/www/html/libraries/vendor_config.php; \
|
||||
find /var/www/html -type d -exec chmod 555 {} \;; \
|
||||
find /var/www/html -type f -exec chmod 444 {} \;; \
|
||||
chmod 1777 /var/www/html/tmp;
|
||||
|
||||
# Copy configuration
|
||||
COPY --chown=www-data:www-data config.inc.php /etc/phpmyadmin/config.inc.php
|
||||
COPY --chown=www-data:www-data helpers.php /etc/phpmyadmin/helpers.php
|
||||
|
||||
# Copy main script
|
||||
COPY docker-entrypoint.sh /docker-entrypoint.sh
|
||||
|
||||
USER root
|
||||
ENTRYPOINT [ "/docker-entrypoint.sh" ]
|
||||
CMD ["%%CMD%%"]
|
||||
@@ -1,159 +0,0 @@
|
||||
FROM php:%%PHP_VERSION%%-%%VARIANT%%
|
||||
|
||||
ENV UPLOAD_PROGRESS_EXT_URL="https://github.com/php/pecl-php-uploadprogress/archive/refs/tags/uploadprogress-2.0.2.tar.gz"
|
||||
ENV UPLOAD_PROGRESS_SHA256="fe3f6cdfcedad563c970c4fd1cda31e422cfc0df5cc9a217d8c80ed3c8d137f5"
|
||||
|
||||
# Install dependencies
|
||||
RUN set -ex; \
|
||||
\
|
||||
apt-get update; \
|
||||
apt-get install -y --no-install-recommends \
|
||||
gnupg \
|
||||
dirmngr \
|
||||
; \
|
||||
\
|
||||
savedAptMark="$(apt-mark showmanual)"; \
|
||||
\
|
||||
apt-get install -y --no-install-recommends \
|
||||
libbz2-dev \
|
||||
libfreetype6-dev \
|
||||
libjpeg-dev \
|
||||
libpng-dev \
|
||||
libwebp-dev \
|
||||
libxpm-dev \
|
||||
libzip-dev \
|
||||
; \
|
||||
\
|
||||
mkdir -p /usr/src/php/ext/uploadprogress; \
|
||||
curl -fsSL -o uploadprogress.tar.gz "$UPLOAD_PROGRESS_EXT_URL"; \
|
||||
echo "$UPLOAD_PROGRESS_SHA256 uploadprogress.tar.gz" | sha256sum -c -; \
|
||||
tar -xf uploadprogress.tar.gz -C /usr/src/php/ext/uploadprogress --strip-components=1; \
|
||||
\
|
||||
docker-php-ext-configure gd --with-freetype --with-jpeg --with-webp --with-xpm; \
|
||||
docker-php-ext-install -j "$(nproc)" \
|
||||
bz2 \
|
||||
gd \
|
||||
mysqli \
|
||||
opcache \
|
||||
zip \
|
||||
bcmath \
|
||||
uploadprogress \
|
||||
; \
|
||||
\
|
||||
rm -r /usr/src/php/ext/uploadprogress; \
|
||||
\
|
||||
apt-mark auto '.*' > /dev/null; \
|
||||
apt-mark manual $savedAptMark; \
|
||||
extdir="$(php -r 'echo ini_get("extension_dir");')"; \
|
||||
ldd "$extdir"/*.so \
|
||||
| awk '/=>/ { so = $(NF-1); if (index(so, "/usr/local/") == 1) { next }; gsub("^/(usr/)?", "", so); print so }' \
|
||||
| sort -u \
|
||||
| xargs -r dpkg-query -S \
|
||||
| cut -d: -f1 \
|
||||
| sort -u \
|
||||
| xargs -rt apt-mark manual; \
|
||||
\
|
||||
# start: Apache specific build
|
||||
a2enmod remoteip; \
|
||||
# end: Apache specific build
|
||||
\
|
||||
apt-get purge -y --auto-remove -o APT::AutoRemove::RecommendsImportant=false; \
|
||||
rm -rf /var/lib/apt/lists/*; \
|
||||
ldd "$extdir"/*.so | grep -qzv "=> not found" || (echo "Sanity check failed: missing libraries:"; ldd "$extdir"/*.so | grep " => not found"; exit 1); \
|
||||
ldd "$extdir"/*.so | grep -q "libzip.so.* => .*/libzip.so.*" || (echo "Sanity check failed: libzip.so is not referenced"; ldd "$extdir"/*.so; exit 1); \
|
||||
err="$(php --version 3>&1 1>&2 2>&3)"; \
|
||||
[ -z "$err" ] || (echo "Sanity check failed: php returned errors; $err"; exit 1;);
|
||||
|
||||
# set recommended PHP.ini settings
|
||||
# see https://secure.php.net/manual/en/opcache.installation.php
|
||||
ENV PMA_SSL_DIR=/etc/phpmyadmin/ssl
|
||||
ENV MAX_EXECUTION_TIME=600
|
||||
ENV MEMORY_LIMIT=512M
|
||||
ENV UPLOAD_LIMIT=2048K
|
||||
ENV TZ=UTC
|
||||
ENV SESSION_SAVE_PATH=/sessions
|
||||
RUN set -ex; \
|
||||
mkdir $SESSION_SAVE_PATH; \
|
||||
mkdir -p $PMA_SSL_DIR; \
|
||||
chmod 1777 $SESSION_SAVE_PATH; \
|
||||
chmod 755 $PMA_SSL_DIR; \
|
||||
chown www-data:www-data /etc/phpmyadmin; \
|
||||
chown www-data:www-data $PMA_SSL_DIR; \
|
||||
chown www-data:www-data $SESSION_SAVE_PATH; \
|
||||
\
|
||||
{ \
|
||||
echo 'opcache.memory_consumption=128'; \
|
||||
echo 'opcache.interned_strings_buffer=8'; \
|
||||
echo 'opcache.max_accelerated_files=4000'; \
|
||||
echo 'opcache.revalidate_freq=2'; \
|
||||
echo 'opcache.fast_shutdown=1'; \
|
||||
} > $PHP_INI_DIR/conf.d/opcache-recommended.ini; \
|
||||
\
|
||||
{ \
|
||||
echo 'session.cookie_httponly=1'; \
|
||||
echo 'session.use_strict_mode=1'; \
|
||||
} > $PHP_INI_DIR/conf.d/session-strict.ini; \
|
||||
\
|
||||
{ \
|
||||
echo 'allow_url_fopen=Off'; \
|
||||
echo 'max_execution_time=${MAX_EXECUTION_TIME}'; \
|
||||
echo 'max_input_vars=10000'; \
|
||||
echo 'memory_limit=${MEMORY_LIMIT}'; \
|
||||
echo 'post_max_size=${UPLOAD_LIMIT}'; \
|
||||
echo 'upload_max_filesize=${UPLOAD_LIMIT}'; \
|
||||
echo 'date.timezone=${TZ}'; \
|
||||
echo 'session.save_path=${SESSION_SAVE_PATH}'; \
|
||||
} > $PHP_INI_DIR/conf.d/phpmyadmin-misc.ini
|
||||
|
||||
USER www-data:www-data
|
||||
|
||||
# Calculate download URL
|
||||
ENV VERSION=%%VERSION%%
|
||||
ENV SHA256=%%SHA256%%
|
||||
ENV URL=https://files.phpmyadmin.net/phpMyAdmin/${VERSION}/phpMyAdmin-${VERSION}-all-languages.tar.xz
|
||||
|
||||
LABEL org.opencontainers.image.title="Official phpMyAdmin Docker image" \
|
||||
org.opencontainers.image.description="Run phpMyAdmin with Alpine, Apache and PHP FPM." \
|
||||
org.opencontainers.image.authors="The phpMyAdmin Team <developers@phpmyadmin.net>" \
|
||||
org.opencontainers.image.vendor="phpMyAdmin" \
|
||||
org.opencontainers.image.documentation="https://github.com/phpmyadmin/docker#readme" \
|
||||
org.opencontainers.image.licenses="GPL-2.0-only" \
|
||||
org.opencontainers.image.version="${VERSION}" \
|
||||
org.opencontainers.image.url="https://github.com/phpmyadmin/docker#readme" \
|
||||
org.opencontainers.image.source="https://github.com/phpmyadmin/docker.git"
|
||||
|
||||
# Download tarball, verify it using gpg and extract
|
||||
RUN set -ex; \
|
||||
export GNUPGHOME="$(mktemp -d)"; \
|
||||
export GPGKEY="%%GPG_KEY%%"; \
|
||||
curl -fsSL -o phpMyAdmin.tar.xz $URL; \
|
||||
curl -fsSL -o phpMyAdmin.tar.xz.asc $URL.asc; \
|
||||
echo "$SHA256 *phpMyAdmin.tar.xz" | sha256sum -c -; \
|
||||
gpg --batch --keyserver keyserver.ubuntu.com --recv-keys "$GPGKEY" \
|
||||
|| gpg --batch --keyserver pgp.mit.edu --recv-keys "$GPGKEY" \
|
||||
|| gpg --batch --keyserver keyserver.pgp.com --recv-keys "$GPGKEY" \
|
||||
|| gpg --batch --keyserver keys.openpgp.org --recv-keys "$GPGKEY"; \
|
||||
gpg --batch --verify phpMyAdmin.tar.xz.asc phpMyAdmin.tar.xz; \
|
||||
tar -xf phpMyAdmin.tar.xz -C /var/www/html --strip-components=1; \
|
||||
mkdir -p /var/www/html/tmp; \
|
||||
gpgconf --kill all; \
|
||||
rm -r "$GNUPGHOME" phpMyAdmin.tar.xz phpMyAdmin.tar.xz.asc; \
|
||||
rm -r -v /var/www/html/setup/ /var/www/html/examples/ /var/www/html/js/src/ /var/www/html/babel.config.json /var/www/html/doc/html/_sources/ /var/www/html/RELEASE-DATE-$VERSION /var/www/html/CONTRIBUTING.md; \
|
||||
grep -q -F "'configFile' => ROOT_PATH . 'config.inc.php'," /var/www/html/libraries/vendor_config.php; \
|
||||
sed -i "s@'configFile' => .*@'configFile' => '/etc/phpmyadmin/config.inc.php',@" /var/www/html/libraries/vendor_config.php; \
|
||||
grep -q -F "'configFile' => '/etc/phpmyadmin/config.inc.php'," /var/www/html/libraries/vendor_config.php; \
|
||||
php -l /var/www/html/libraries/vendor_config.php; \
|
||||
find /var/www/html -type d -exec chmod 555 {} \;; \
|
||||
find /var/www/html -type f -exec chmod 444 {} \;; \
|
||||
chmod 1777 /var/www/html/tmp;
|
||||
|
||||
# Copy configuration
|
||||
COPY --chown=www-data:www-data config.inc.php /etc/phpmyadmin/config.inc.php
|
||||
COPY --chown=www-data:www-data helpers.php /etc/phpmyadmin/helpers.php
|
||||
|
||||
# Copy main script
|
||||
COPY docker-entrypoint.sh /docker-entrypoint.sh
|
||||
|
||||
USER root
|
||||
ENTRYPOINT [ "/docker-entrypoint.sh" ]
|
||||
CMD ["%%CMD%%"]
|
||||
@@ -1,39 +1,28 @@
|
||||
DOCKER_REPO = phpmyadmin
|
||||
DOCKER_REPO = phpmyadmin/phpmyadmin
|
||||
|
||||
.PHONY: all build run logs clean stop rm prune
|
||||
.PHONY: all build build_nc run logs clean stop rm prune
|
||||
|
||||
all: build run logs
|
||||
|
||||
build: build-apache build-fpm build-fpm-alpine
|
||||
build:
|
||||
docker build -t ${DOCKER_REPO}:testing .
|
||||
|
||||
build-apache:
|
||||
docker build ${DOCKER_FLAGS} -t ${DOCKER_REPO}:testing apache
|
||||
|
||||
build-fpm:
|
||||
docker build ${DOCKER_FLAGS} -t ${DOCKER_REPO}:testing-fpm fpm
|
||||
|
||||
build-fpm-alpine:
|
||||
docker build ${DOCKER_FLAGS} -t ${DOCKER_REPO}:testing-fpm-alpine fpm-alpine
|
||||
build_nc:
|
||||
docker build --no-cache=true -t ${DOCKER_REPO}:testing .
|
||||
|
||||
run:
|
||||
docker compose -f ./testing/docker-compose/docker-compose.testing-default.yml up -d
|
||||
|
||||
testing-%:
|
||||
docker compose -p "phpmyadmin_$@" -f ./testing/docker-compose/docker-compose.$@.yml up --build --abort-on-container-exit --exit-code-from=sut
|
||||
docker compose -p "phpmyadmin_$@" -f ./testing/docker-compose/docker-compose.$@.yml down
|
||||
|
||||
run-tests: testing-default testing-one-host testing-one-socket-host testing-config-mount-dir testing-fs-import-export testing-different-apache-port testing-run-as-www-data testing-one-ssl-host
|
||||
docker-compose -f docker-compose.testing.yml up -d
|
||||
|
||||
logs:
|
||||
docker compose -f ./testing/docker-compose/docker-compose.testing-default.yml logs
|
||||
docker-compose -f docker-compose.testing.yml logs
|
||||
|
||||
clean: stop rm prune
|
||||
|
||||
stop:
|
||||
docker compose -f ./testing/docker-compose/docker-compose.testing-default.yml stop
|
||||
docker-compose -f docker-compose.testing.yml stop
|
||||
|
||||
rm:
|
||||
docker compose -f ./testing/docker-compose/docker-compose.testing-default.yml rm
|
||||
docker-compose -f docker-compose.testing.yml rm
|
||||
|
||||
prune:
|
||||
docker rm `docker ps -q -a --filter status=exited`
|
||||
|
||||
@@ -1,267 +1,121 @@
|
||||
# Official phpMyAdmin Docker image
|
||||
|
||||
Note that since phpMyAdmin has been accepted in to the [official DockerHub repository](https://hub.docker.com/_/phpmyadmin), you can use
|
||||
either that or this older [phpMyAdmin repository](https://hub.docker.com/r/phpmyadmin/phpmyadmin/) for your Docker installation. This
|
||||
is maintained as a courtesy to users who have not migrated.
|
||||
Run phpMyAdmin with Alpine, supervisor, nginx and PHP FPM.
|
||||
|
||||
Run phpMyAdmin with Alpine, Apache and PHP FPM.
|
||||
[](https://travis-ci.org/phpmyadmin/docker)
|
||||
[][hub]
|
||||
[][hub]
|
||||
[](https://microbadger.com/images/phpmyadmin/phpmyadmin "Get your own image badge on microbadger.com")
|
||||
[](https://microbadger.com/images/phpmyadmin/phpmyadmin "Get your own version badge on microbadger.com")
|
||||
|
||||
[](https://github.com/phpmyadmin/docker/actions?query=workflow%3A%22GitHub+CI%22)
|
||||
[](https://doi-janky.infosiftr.net/job/update.sh/job/phpmyadmin/)
|
||||
[](https://doi-janky.infosiftr.net/job/multiarch/job/amd64/job/phpmyadmin)
|
||||
[](https://doi-janky.infosiftr.net/job/multiarch/job/arm32v5/job/phpmyadmin)
|
||||
[](https://doi-janky.infosiftr.net/job/multiarch/job/arm32v6/job/phpmyadmin)
|
||||
[](https://doi-janky.infosiftr.net/job/multiarch/job/arm32v7/job/phpmyadmin)
|
||||
[](https://doi-janky.infosiftr.net/job/multiarch/job/arm64v8/job/phpmyadmin)
|
||||
[](https://doi-janky.infosiftr.net/job/multiarch/job/i386/job/phpmyadmin)
|
||||
[](https://doi-janky.infosiftr.net/job/multiarch/job/mips64le/job/phpmyadmin)
|
||||
[](https://doi-janky.infosiftr.net/job/multiarch/job/ppc64le/job/phpmyadmin)
|
||||
[](https://doi-janky.infosiftr.net/job/multiarch/job/s390x/job/phpmyadmin)
|
||||
[][hub]
|
||||
[][hub]
|
||||
|
||||
All of the following examples will bring you phpMyAdmin on `http://localhost:8080`
|
||||
All following examples will bring you phpMyAdmin on `http://localhost:8080`
|
||||
where you can enjoy your happy MySQL administration.
|
||||
|
||||
## Credentials
|
||||
|
||||
phpMyAdmin connects using your MySQL server credentials. Please check your corresponding
|
||||
database server image for information on the default username and password or how to specify your own custom credentials during installation.
|
||||
phpMyAdmin does use MySQL server credential, please check the corresponding
|
||||
server image for information how it is setup.
|
||||
|
||||
The official MySQL and MariaDB images use the following environment variables to define these:
|
||||
The official MySQL and MariaDB use following environment variables to define these:
|
||||
|
||||
- `MYSQL_ROOT_PASSWORD` - This variable is mandatory and specifies the password that will be set for the `root` superuser account.
|
||||
- `MYSQL_USER`, `MYSQL_PASSWORD` - These variables are optional, used in conjunction to create a new user and to set that user's password.
|
||||
* `MYSQL_ROOT_PASSWORD` - This variable is mandatory and specifies the password that will be set for the `root` superuser account.
|
||||
* `MYSQL_USER`, `MYSQL_PASSWORD` - These variables are optional, used in conjunction to create a new user and to set that user's password.
|
||||
|
||||
## Supported Docker Hub tags
|
||||
## Docker hub tags
|
||||
|
||||
The following tags are available:
|
||||
You can use following tags on Docker hub:
|
||||
|
||||
- `latest`, `fpm`, and `fpm-alpine` are always the most recent released version
|
||||
- Major versions, such as `5`, `5-fpm`, and `5-fpm-alpine`
|
||||
- Specific minor versions, such as `5.0`, `5.0-fpm`, and `5-fpm-alpine`
|
||||
- Specific patch versions, such as `5.0.0`, `5.0.0-fpm`, and `5.0.0-fpm-alpine`. Note that, on rare occasion, there may be an intermediary "docker-only" release, such as 4.9.2-1
|
||||
|
||||
A complete list of tags is [available at Docker Hub](https://hub.docker.com/_/phpmyadmin?tab=tags)
|
||||
|
||||
## Image variants
|
||||
|
||||
We provide three variations:
|
||||
|
||||
- "apache" includes a full Apache webserver with PHP and includes everything needed to work out of the box.
|
||||
This is the default when only a version number is requested.
|
||||
- "fpm" only starts a PHP FPM container. Use this variant if you already have a separate webserver.
|
||||
This includes more tools and is therefore a larger image than the "fpm-alpine" variation.
|
||||
- "fpm-alpine" has a very small footprint. It is based on Alpine Linux and only starts a PHP FPM process.
|
||||
Use this variant if you already have a separate webserver. If you need more tools that are not available on Alpine Linux, use the fpm image instead.
|
||||
* `latest` - latest stable release
|
||||
* `4.6` - latest stable release from the 4.6 branch
|
||||
* `4.7` - latest stable release from the 4.7 branch
|
||||
* `edge` - bleeding edge docker image (contains stable phpMyAdmin, but the Docker image changes might not yet be fully tested)
|
||||
* `edge-4.7` - bleeding edge docker image + latest snapshots from 4.7 branch
|
||||
* `edge-4.8` - bleeding edge docker image + latest snapshots from 4.8 branch (currently master)
|
||||
|
||||
## Usage with linked server
|
||||
|
||||
First you need to run a MySQL or MariaDB server in Docker, and the phpMyAdmin image needs to be
|
||||
linked to the running database container:
|
||||
First you need to run MySQL or MariaDB server in Docker, and this image need
|
||||
link a running mysql instance container:
|
||||
|
||||
```sh
|
||||
docker run --name phpmyadmin -d --link mysql_db_server:db -p 8080:80 phpmyadmin:latest
|
||||
```
|
||||
docker run --name myadmin -d --link mysql_db_server:db -p 8080:80 phpmyadmin/phpmyadmin
|
||||
```
|
||||
|
||||
## Usage with external server
|
||||
|
||||
You can specify a MySQL host in the `PMA_HOST` environment variable. You can also
|
||||
use `PMA_PORT` to specify the port of the server in case it's not the default one:
|
||||
You can specify MySQL host in the `PMA_HOST` environment variable. You can also
|
||||
use `PMA_PORT` to specify port of the server in case it's not the default one:
|
||||
|
||||
```sh
|
||||
docker run --name phpmyadmin -d -e PMA_HOST=dbhost -p 8080:80 phpmyadmin:latest
|
||||
```
|
||||
docker run --name myadmin -d -e PMA_HOST=dbhost -p 8080:80 phpmyadmin/phpmyadmin
|
||||
```
|
||||
|
||||
## Usage with arbitrary server
|
||||
|
||||
You can use arbitrary servers by adding the environment variable `PMA_ARBITRARY=1` to the startup command:
|
||||
You can use arbitrary servers by adding ENV variable `PMA_ARBITRARY=1` to the startup command:
|
||||
|
||||
```sh
|
||||
docker run --name phpmyadmin -d -e PMA_ARBITRARY=1 -p 8080:80 phpmyadmin:latest
|
||||
```
|
||||
docker run --name myadmin -d -e PMA_ARBITRARY=1 -p 8080:80 phpmyadmin/phpmyadmin
|
||||
```
|
||||
|
||||
## Usage with docker compose and an arbitrary server
|
||||
## Usage with docker-compose and arbitrary server
|
||||
|
||||
This will run phpMyAdmin with the arbitrary server option - allowing you to specify any MySQL/MariaDB
|
||||
server on the login page.
|
||||
This will run phpMyAdmin with arbitrary server - allowing you to specify MySQL/MariaDB
|
||||
server on login page.
|
||||
|
||||
```yaml
|
||||
version: '3.1'
|
||||
Using the docker-compose.yml from https://github.com/phpmyadmin/docker
|
||||
|
||||
services:
|
||||
db:
|
||||
image: mariadb:10.11
|
||||
restart: always
|
||||
environment:
|
||||
MYSQL_ROOT_PASSWORD: notSecureChangeMe
|
||||
```
|
||||
docker-compose up -d
|
||||
```
|
||||
|
||||
phpmyadmin:
|
||||
image: phpmyadmin
|
||||
restart: always
|
||||
ports:
|
||||
- 8080:80
|
||||
environment:
|
||||
- PMA_ARBITRARY=1
|
||||
## Run the E2E tests with docker-compose
|
||||
|
||||
You can run the E2E tests with the local test environment by running MariaDB/MySQL databases. Adding ENV variable `PHPMYADMIN_RUN_TEST=true` already added on docker-compose file. Simply run:
|
||||
|
||||
Using the docker-compose.testing.yml from https://github.com/phpmyadmin/docker
|
||||
|
||||
```
|
||||
docker-compose -f docker-compose.testing.yml up phpmyadmin
|
||||
```
|
||||
|
||||
## Adding Custom Configuration
|
||||
|
||||
You can add your own custom config.inc.php settings (such as Configuration Storage setup)
|
||||
by creating a file named `config.user.inc.php` with the various user defined settings
|
||||
You can add your own custom config.inc.php settings (such as Configuration Storage setup)
|
||||
by creating a file named "config.user.inc.php" with the various user defined settings
|
||||
in it, and then linking it into the container using:
|
||||
|
||||
```sh
|
||||
```
|
||||
-v /some/local/directory/config.user.inc.php:/etc/phpmyadmin/config.user.inc.php
|
||||
```
|
||||
|
||||
On the `docker run` line like this:
|
||||
|
||||
```sh
|
||||
docker run --name phpmyadmin -d --link mysql_db_server:db -p 8080:80 -v /some/local/directory/config.user.inc.php:/etc/phpmyadmin/config.user.inc.php phpmyadmin:latest
|
||||
On the "docker run" line like this:
|
||||
```
|
||||
docker run --name myadmin -d --link mysql_db_server:db -p 8080:80 -v /some/local/directory/config.user.inc.php:/etc/phpmyadmin/config.user.inc.php phpmyadmin/phpmyadmin
|
||||
```
|
||||
|
||||
Be sure to have `<?php` as your first line of the configuration file or the contents will not be detected as PHP code.
|
||||
See the following links for config file information.
|
||||
https://docs.phpmyadmin.net/en/latest/config.html#config
|
||||
https://docs.phpmyadmin.net/en/latest/setup.html
|
||||
|
||||
Example:
|
||||
|
||||
```php
|
||||
<?php
|
||||
|
||||
$cfg['ShowPhpInfo'] = true; // Adds a link to phpinfo() on the home page
|
||||
```
|
||||
|
||||
See the following links for config file information:
|
||||
|
||||
- https://docs.phpmyadmin.net/en/latest/config.html#config
|
||||
- https://docs.phpmyadmin.net/en/latest/setup.html
|
||||
|
||||
## Adding custom configuration in `/etc/phpmyadmin/conf.d`
|
||||
|
||||
you can also consider storing your custom configuration files in the folder `/etc/phpmyadmin/conf.d`, which is very suitable for managing multiple phpMyAdmin configuration files for different hosts,Then you can create `server-1.php`, `server-2.php`, or any file name you want, and store them in the conf.d directory mounted on the host.
|
||||
|
||||
On the `docker run` line like this:
|
||||
|
||||
```sh
|
||||
docker run --name phpmyadmin -d --link mysql_db_server:db -p 8080:80 -v /some/local/directory/conf.d:/etc/phpmyadmin/conf.d:ro phpmyadmin:latest
|
||||
```
|
||||
|
||||
## Usage behind a reverse proxy
|
||||
## Usage behind reverse proxys
|
||||
|
||||
Set the variable ``PMA_ABSOLUTE_URI`` to the fully-qualified path (``https://pma.example.net/``) where the reverse proxy makes phpMyAdmin available.
|
||||
|
||||
## Sessions persistence
|
||||
|
||||
In order to keep your sessions active between container updates you will need to mount the `/sessions` folder.
|
||||
|
||||
```sh
|
||||
-v /some/local/directory/sessions:/sessions:rw
|
||||
```
|
||||
|
||||
## Connect to the database over SSL
|
||||
|
||||
Set the variable ``PMA_SSL`` to `1` to enable SSL usage from phpMyAdmin to the MySQL server.
|
||||
The default value is `0`.
|
||||
The variable ``PMA_SSLS`` can be used as a comma seperated sequence of `0` and `1` where multiple hosts are mentioned.
|
||||
Values order must follow the ``PMA_HOSTS`` and will be computed accordingly.
|
||||
|
||||
```sh
|
||||
docker run --name phpmyadmin -d -e PMA_HOSTS=sslhost -e PMA_SSL=1 -p 8080:80 phpmyadmin:latest
|
||||
```
|
||||
|
||||
```sh
|
||||
docker run --name phpmyadmin -d -e PMA_HOSTS='sslhost,nosslhost' -e PMA_SSLS='1,0' -p 8080:80 phpmyadmin:latest
|
||||
```
|
||||
|
||||
## Environment variables summary
|
||||
|
||||
- ``PMA_ARBITRARY`` - when set to 1 connection to the arbitrary server will be allowed
|
||||
- ``PMA_HOST`` - define address/host name of the MySQL server
|
||||
- ``PMA_VERBOSE`` - define verbose name of the MySQL server
|
||||
- ``PMA_PORT`` - define port of the MySQL server
|
||||
- ``PMA_HOSTS`` - define comma separated list of address/host names of the MySQL servers
|
||||
- ``PMA_VERBOSES`` - define comma separated list of verbose names of the MySQL servers
|
||||
- ``PMA_PORTS`` - define comma separated list of ports of the MySQL servers
|
||||
- ``PMA_SOCKET`` - define socket file for the MySQL connection
|
||||
- ``PMA_SOCKETS`` - define comma separated list of socket files for the MySQL connections
|
||||
- ``PMA_SSL_DIR`` - define the path used for SSL files generated from environement variables, default value is `/etc/phpmyadmin/ssl`
|
||||
- ``PMA_SSL`` - when set to 1, defines SSL usage for the MySQL connection
|
||||
- ``PMA_SSLS`` - comma separated list of `0` and `1` defining SSL usage for the corresponding MySQL connections
|
||||
- ``PMA_SSL_VERIFY`` - when set to 1, enables SSL certificate verification for the MySQL connection.
|
||||
- ``PMA_SSL_VERIFIES`` - comma-separated list of `0` and `1` to enable or disable SSL certificate verification for multiple MySQL connections.
|
||||
- ``PMA_SSL_CA`` - in the context of mutual TLS security, allows setting your CA certificate file as a string inside the default `config.inc.php`.
|
||||
- ``PMA_SSL_CAS`` - in the context of mutual TLS security, allows setting multiple CA certificate files as a comma-separated list of strings inside the default `config.inc.php`.
|
||||
- ``PMA_SSL_CERT`` - in the context of mutual TLS security, allows setting your certificate file as a string inside the default `config.inc.php`.
|
||||
- ``PMA_SSL_CERTS`` - in the context of mutual TLS security, allows setting multiple certificate files as a comma-separated list of strings inside the default `config.inc.php`.
|
||||
- ``PMA_SSL_KEY`` - in the context of mutual TLS security, allows setting your private key file as a string inside the default `config.inc.php`.
|
||||
- ``PMA_SSL_KEYS`` - in the context of mutual TLS security, allows setting multiple private key files as a comma-separated list of strings inside the default `config.inc.php`.
|
||||
- ``PMA_USER`` and ``PMA_PASSWORD`` - define username and password to use only with the `config` authentication method
|
||||
- ``PMA_ABSOLUTE_URI`` - the full URL to phpMyAdmin. Sometimes needed when used in a reverse-proxy configuration. Don't set this unless needed. See [documentation](https://docs.phpmyadmin.net/en/latest/config.html#cfg_PmaAbsoluteUri).
|
||||
- ``PMA_CONFIG_BASE64`` - if set, this option will override the default `config.inc.php` with the base64 decoded contents of the variable
|
||||
- ``PMA_USER_CONFIG_BASE64`` - if set, this option will override the default `config.user.inc.php` with the base64 decoded contents of the variable
|
||||
- ``PMA_UPLOADDIR`` - if defined, this option will set the path where files can be saved to be available to import ([$cfg['UploadDir']](https://docs.phpmyadmin.net/en/latest/config.html#cfg_UploadDir))
|
||||
- ``PMA_SAVEDIR`` - if defined, this option will set the path where exported files can be saved ([$cfg['SaveDir']](https://docs.phpmyadmin.net/en/latest/config.html#cfg_SaveDir))
|
||||
- ``PMA_CONTROLHOST`` - when set, this points to an alternate database host used for storing the [phpMyAdmin Configuration Storage database](https://docs.phpmyadmin.net/en/latest/setup.html#phpmyadmin-configuration-storage) database
|
||||
- ``PMA_CONTROLPORT`` - if set, will override the default port (3306) for connecting to the control host for storing the [phpMyAdmin Configuration Storage database](https://docs.phpmyadmin.net/en/latest/setup.html#phpmyadmin-configuration-storage) database
|
||||
- ``PMA_PMADB`` - define the name of the database to be used for the [phpMyAdmin Configuration Storage database](https://docs.phpmyadmin.net/en/latest/setup.html#phpmyadmin-configuration-storage). When not set, the advanced features are not enabled by default: they can still potentially be enabled by the user when logging in with the zero conf (zero configuration) feature. Suggested values: `phpmyadmin` or `pmadb`
|
||||
- ``PMA_CONTROLUSER`` - define the username for phpMyAdmin to use for advanced features (the [controluser](https://docs.phpmyadmin.net/en/latest/config.html#cfg_Servers_controluser))
|
||||
- ``PMA_CONTROLPASS`` - define the password for phpMyAdmin to use with the [controluser](https://docs.phpmyadmin.net/en/latest/config.html#cfg_Servers_controlpass)
|
||||
- ``PMA_QUERYHISTORYDB`` - when set [to true](https://docs.phpmyadmin.net/en/latest/config.html#cfg_QueryHistoryDB), enables storing [SQL history](https://docs.phpmyadmin.net/en/latest/config.html#cfg_Servers_history) to the [phpMyAdmin Configuration Storage database](https://docs.phpmyadmin.net/en/latest/setup.html#phpmyadmin-configuration-storage). When [false](https://docs.phpmyadmin.net/en/latest/config.html#cfg_QueryHistoryDB), history is stored in the browser and is cleared when logging out
|
||||
- ``PMA_QUERYHISTORYMAX`` - when set to an integer, controls the number of history items. See [documentation](https://docs.phpmyadmin.net/en/latest/config.html#cfg_QueryHistoryMax). Defaults to `25`.
|
||||
- ``MAX_EXECUTION_TIME`` - if set, will override the maximum execution time in seconds (default 600) for phpMyAdmin ([$cfg['ExecTimeLimit']](https://docs.phpmyadmin.net/en/latest/config.html#cfg_ExecTimeLimit)) and PHP [max_execution_time](https://www.php.net/manual/en/info.configuration.php#ini.max-execution-time) (format as `[0-9+]`)
|
||||
- ``MEMORY_LIMIT`` - if set, will override the memory limit (default 512M) for phpMyAdmin ([$cfg['MemoryLimit']](https://docs.phpmyadmin.net/en/latest/config.html#cfg_MemoryLimit)) and PHP [memory_limit](https://www.php.net/manual/en/ini.core.php#ini.memory-limit) (format as `[0-9+](K,M,G)` where K is for Kilobytes, M for Megabytes, G for Gigabytes and 1K = 1024 bytes)
|
||||
- ``UPLOAD_LIMIT`` - if set, this option will override the default value for apache and php-fpm (format as `[0-9+](K,M,G)` default value is 2048K, this will change ``upload_max_filesize`` and ``post_max_size`` values)
|
||||
- ``TZ`` - if defined, this option will change the default PHP `date.timezone` from `UTC`. See [documentation](https://www.php.net/manual/en/timezones.php) for supported values.
|
||||
- ``HIDE_PHP_VERSION`` - if defined, this option will hide the PHP version (`expose_php = Off`). Set to any value (such as `HIDE_PHP_VERSION=true`).
|
||||
- ``APACHE_PORT`` - if defined, this option will change the default Apache port from `80` in case you want it to run on a different port like an unprivileged port. Set to any port value (such as `APACHE_PORT=8090`)
|
||||
|
||||
For usage with Docker secrets, appending ``_FILE`` to the ``PMA_PASSWORD`` environment variable is allowed (it overrides ``PMA_PASSWORD`` if it is set):
|
||||
|
||||
```sh
|
||||
docker run --name phpmyadmin -d -e PMA_PASSWORD_FILE=/run/secrets/db_password.txt -p 8080:80 phpmyadmin:latest
|
||||
```
|
||||
|
||||
#### Variables that can store the file contents using ``_BASE64``
|
||||
|
||||
- `PMA_SSL_CA`
|
||||
- `PMA_SSL_CAS`
|
||||
- `PMA_SSL_KEY`
|
||||
- `PMA_SSL_KEYS`
|
||||
- `PMA_SSL_CERT`
|
||||
- `PMA_SSL_CERTS`
|
||||
|
||||
Also includes: `PMA_CONFIG_BASE64` or `PMA_USER_CONFIG_BASE64`.
|
||||
|
||||
For example, the variable would be named `PMA_SSL_CA_BASE64` and the value is the base64 encoded contents of the file.
|
||||
|
||||
#### Variables that can be read from a file using ``_FILE``
|
||||
|
||||
- `MYSQL_ROOT_PASSWORD`
|
||||
- `MYSQL_PASSWORD`
|
||||
- `PMA_USER`
|
||||
- `PMA_PASSWORD`
|
||||
- `PMA_HOSTS`
|
||||
- `PMA_HOST`
|
||||
- `PMA_CONTROLHOST`
|
||||
- `PMA_CONTROLUSER`
|
||||
- `PMA_CONTROLPASS`
|
||||
|
||||
## Run the E2E tests for this docker image
|
||||
|
||||
You can run the E2E test suite on a local test environment.
|
||||
The Requirements are `make`, `docker` and the `docker compose` plugin.
|
||||
|
||||
Clone this repository: `https://github.com/phpmyadmin/docker.git`
|
||||
|
||||
And then run this command to start the test suite:
|
||||
```sh
|
||||
make run-tests
|
||||
```
|
||||
* ``PMA_ARBITRARY`` - when set to 1 connection to the arbitrary server will be allowed
|
||||
* ``PMA_HOST`` - define address/host name of the MySQL server
|
||||
* ``PMA_VERBOSE`` - define verbose name of the MySQL server
|
||||
* ``PMA_PORT`` - define port of the MySQL server
|
||||
* ``PMA_HOSTS`` - define comma separated list of address/host names of the MySQL servers
|
||||
* ``PMA_VERBOSES`` - define comma separated list of verbose names of the MySQL servers
|
||||
* ``PMA_PORTS`` - define comma separated list of ports of the MySQL servers
|
||||
* ``PMA_USER`` and ``PMA_PASSWORD`` - define username to use for config authentication method
|
||||
* ``PMA_ABSOLUTE_URI`` - define user-facing URI
|
||||
|
||||
For more detailed documentation see https://docs.phpmyadmin.net/en/latest/setup.html#installing-using-docker
|
||||
|
||||
[hub]: https://hub.docker.com/_/phpmyadmin
|
||||
[hub]: https://hub.docker.com/r/phpmyadmin/phpmyadmin/
|
||||
|
||||
Please report any issues with the Docker container to https://github.com/phpmyadmin/docker/issues
|
||||
|
||||
Please report any issues with phpMyAdmin to https://github.com/phpmyadmin/phpmyadmin/issues
|
||||
|
||||
@@ -1,160 +0,0 @@
|
||||
# DO NOT EDIT: created by update.sh from Dockerfile-debian.template
|
||||
FROM php:8.3-apache
|
||||
|
||||
ENV UPLOAD_PROGRESS_EXT_URL="https://github.com/php/pecl-php-uploadprogress/archive/refs/tags/uploadprogress-2.0.2.tar.gz"
|
||||
ENV UPLOAD_PROGRESS_SHA256="fe3f6cdfcedad563c970c4fd1cda31e422cfc0df5cc9a217d8c80ed3c8d137f5"
|
||||
|
||||
# Install dependencies
|
||||
RUN set -ex; \
|
||||
\
|
||||
apt-get update; \
|
||||
apt-get install -y --no-install-recommends \
|
||||
gnupg \
|
||||
dirmngr \
|
||||
; \
|
||||
\
|
||||
savedAptMark="$(apt-mark showmanual)"; \
|
||||
\
|
||||
apt-get install -y --no-install-recommends \
|
||||
libbz2-dev \
|
||||
libfreetype6-dev \
|
||||
libjpeg-dev \
|
||||
libpng-dev \
|
||||
libwebp-dev \
|
||||
libxpm-dev \
|
||||
libzip-dev \
|
||||
; \
|
||||
\
|
||||
mkdir -p /usr/src/php/ext/uploadprogress; \
|
||||
curl -fsSL -o uploadprogress.tar.gz "$UPLOAD_PROGRESS_EXT_URL"; \
|
||||
echo "$UPLOAD_PROGRESS_SHA256 uploadprogress.tar.gz" | sha256sum -c -; \
|
||||
tar -xf uploadprogress.tar.gz -C /usr/src/php/ext/uploadprogress --strip-components=1; \
|
||||
\
|
||||
docker-php-ext-configure gd --with-freetype --with-jpeg --with-webp --with-xpm; \
|
||||
docker-php-ext-install -j "$(nproc)" \
|
||||
bz2 \
|
||||
gd \
|
||||
mysqli \
|
||||
opcache \
|
||||
zip \
|
||||
bcmath \
|
||||
uploadprogress \
|
||||
; \
|
||||
\
|
||||
rm -r /usr/src/php/ext/uploadprogress; \
|
||||
\
|
||||
apt-mark auto '.*' > /dev/null; \
|
||||
apt-mark manual $savedAptMark; \
|
||||
extdir="$(php -r 'echo ini_get("extension_dir");')"; \
|
||||
ldd "$extdir"/*.so \
|
||||
| awk '/=>/ { so = $(NF-1); if (index(so, "/usr/local/") == 1) { next }; gsub("^/(usr/)?", "", so); print so }' \
|
||||
| sort -u \
|
||||
| xargs -r dpkg-query -S \
|
||||
| cut -d: -f1 \
|
||||
| sort -u \
|
||||
| xargs -rt apt-mark manual; \
|
||||
\
|
||||
# start: Apache specific build
|
||||
a2enmod remoteip; \
|
||||
# end: Apache specific build
|
||||
\
|
||||
apt-get purge -y --auto-remove -o APT::AutoRemove::RecommendsImportant=false; \
|
||||
rm -rf /var/lib/apt/lists/*; \
|
||||
ldd "$extdir"/*.so | grep -qzv "=> not found" || (echo "Sanity check failed: missing libraries:"; ldd "$extdir"/*.so | grep " => not found"; exit 1); \
|
||||
ldd "$extdir"/*.so | grep -q "libzip.so.* => .*/libzip.so.*" || (echo "Sanity check failed: libzip.so is not referenced"; ldd "$extdir"/*.so; exit 1); \
|
||||
err="$(php --version 3>&1 1>&2 2>&3)"; \
|
||||
[ -z "$err" ] || (echo "Sanity check failed: php returned errors; $err"; exit 1;);
|
||||
|
||||
# set recommended PHP.ini settings
|
||||
# see https://secure.php.net/manual/en/opcache.installation.php
|
||||
ENV PMA_SSL_DIR=/etc/phpmyadmin/ssl
|
||||
ENV MAX_EXECUTION_TIME=600
|
||||
ENV MEMORY_LIMIT=512M
|
||||
ENV UPLOAD_LIMIT=2048K
|
||||
ENV TZ=UTC
|
||||
ENV SESSION_SAVE_PATH=/sessions
|
||||
RUN set -ex; \
|
||||
mkdir $SESSION_SAVE_PATH; \
|
||||
mkdir -p $PMA_SSL_DIR; \
|
||||
chmod 1777 $SESSION_SAVE_PATH; \
|
||||
chmod 755 $PMA_SSL_DIR; \
|
||||
chown www-data:www-data /etc/phpmyadmin; \
|
||||
chown www-data:www-data $PMA_SSL_DIR; \
|
||||
chown www-data:www-data $SESSION_SAVE_PATH; \
|
||||
\
|
||||
{ \
|
||||
echo 'opcache.memory_consumption=128'; \
|
||||
echo 'opcache.interned_strings_buffer=8'; \
|
||||
echo 'opcache.max_accelerated_files=4000'; \
|
||||
echo 'opcache.revalidate_freq=2'; \
|
||||
echo 'opcache.fast_shutdown=1'; \
|
||||
} > $PHP_INI_DIR/conf.d/opcache-recommended.ini; \
|
||||
\
|
||||
{ \
|
||||
echo 'session.cookie_httponly=1'; \
|
||||
echo 'session.use_strict_mode=1'; \
|
||||
} > $PHP_INI_DIR/conf.d/session-strict.ini; \
|
||||
\
|
||||
{ \
|
||||
echo 'allow_url_fopen=Off'; \
|
||||
echo 'max_execution_time=${MAX_EXECUTION_TIME}'; \
|
||||
echo 'max_input_vars=10000'; \
|
||||
echo 'memory_limit=${MEMORY_LIMIT}'; \
|
||||
echo 'post_max_size=${UPLOAD_LIMIT}'; \
|
||||
echo 'upload_max_filesize=${UPLOAD_LIMIT}'; \
|
||||
echo 'date.timezone=${TZ}'; \
|
||||
echo 'session.save_path=${SESSION_SAVE_PATH}'; \
|
||||
} > $PHP_INI_DIR/conf.d/phpmyadmin-misc.ini
|
||||
|
||||
USER www-data:www-data
|
||||
|
||||
# Calculate download URL
|
||||
ENV VERSION=5.2.3
|
||||
ENV SHA256=57881348297c4412f86c410547cf76b4d8a236574dd2c6b7d6a2beebe7fc44e3
|
||||
ENV URL=https://files.phpmyadmin.net/phpMyAdmin/${VERSION}/phpMyAdmin-${VERSION}-all-languages.tar.xz
|
||||
|
||||
LABEL org.opencontainers.image.title="Official phpMyAdmin Docker image" \
|
||||
org.opencontainers.image.description="Run phpMyAdmin with Alpine, Apache and PHP FPM." \
|
||||
org.opencontainers.image.authors="The phpMyAdmin Team <developers@phpmyadmin.net>" \
|
||||
org.opencontainers.image.vendor="phpMyAdmin" \
|
||||
org.opencontainers.image.documentation="https://github.com/phpmyadmin/docker#readme" \
|
||||
org.opencontainers.image.licenses="GPL-2.0-only" \
|
||||
org.opencontainers.image.version="${VERSION}" \
|
||||
org.opencontainers.image.url="https://github.com/phpmyadmin/docker#readme" \
|
||||
org.opencontainers.image.source="https://github.com/phpmyadmin/docker.git"
|
||||
|
||||
# Download tarball, verify it using gpg and extract
|
||||
RUN set -ex; \
|
||||
export GNUPGHOME="$(mktemp -d)"; \
|
||||
export GPGKEY="3D06A59ECE730EB71B511C17CE752F178259BD92"; \
|
||||
curl -fsSL -o phpMyAdmin.tar.xz $URL; \
|
||||
curl -fsSL -o phpMyAdmin.tar.xz.asc $URL.asc; \
|
||||
echo "$SHA256 *phpMyAdmin.tar.xz" | sha256sum -c -; \
|
||||
gpg --batch --keyserver keyserver.ubuntu.com --recv-keys "$GPGKEY" \
|
||||
|| gpg --batch --keyserver pgp.mit.edu --recv-keys "$GPGKEY" \
|
||||
|| gpg --batch --keyserver keyserver.pgp.com --recv-keys "$GPGKEY" \
|
||||
|| gpg --batch --keyserver keys.openpgp.org --recv-keys "$GPGKEY"; \
|
||||
gpg --batch --verify phpMyAdmin.tar.xz.asc phpMyAdmin.tar.xz; \
|
||||
tar -xf phpMyAdmin.tar.xz -C /var/www/html --strip-components=1; \
|
||||
mkdir -p /var/www/html/tmp; \
|
||||
gpgconf --kill all; \
|
||||
rm -r "$GNUPGHOME" phpMyAdmin.tar.xz phpMyAdmin.tar.xz.asc; \
|
||||
rm -r -v /var/www/html/setup/ /var/www/html/examples/ /var/www/html/js/src/ /var/www/html/babel.config.json /var/www/html/doc/html/_sources/ /var/www/html/RELEASE-DATE-$VERSION /var/www/html/CONTRIBUTING.md; \
|
||||
grep -q -F "'configFile' => ROOT_PATH . 'config.inc.php'," /var/www/html/libraries/vendor_config.php; \
|
||||
sed -i "s@'configFile' => .*@'configFile' => '/etc/phpmyadmin/config.inc.php',@" /var/www/html/libraries/vendor_config.php; \
|
||||
grep -q -F "'configFile' => '/etc/phpmyadmin/config.inc.php'," /var/www/html/libraries/vendor_config.php; \
|
||||
php -l /var/www/html/libraries/vendor_config.php; \
|
||||
find /var/www/html -type d -exec chmod 555 {} \;; \
|
||||
find /var/www/html -type f -exec chmod 444 {} \;; \
|
||||
chmod 1777 /var/www/html/tmp;
|
||||
|
||||
# Copy configuration
|
||||
COPY --chown=www-data:www-data config.inc.php /etc/phpmyadmin/config.inc.php
|
||||
COPY --chown=www-data:www-data helpers.php /etc/phpmyadmin/helpers.php
|
||||
|
||||
# Copy main script
|
||||
COPY docker-entrypoint.sh /docker-entrypoint.sh
|
||||
|
||||
USER root
|
||||
ENTRYPOINT [ "/docker-entrypoint.sh" ]
|
||||
CMD ["apache2-foreground"]
|
||||
@@ -1,246 +0,0 @@
|
||||
<?php
|
||||
|
||||
require_once '/etc/phpmyadmin/config.secret.inc.php';
|
||||
require_once '/etc/phpmyadmin/helpers.php';
|
||||
|
||||
/* Ensure we got the environment */
|
||||
$vars = [
|
||||
'PMA_ARBITRARY',
|
||||
'PMA_HOST',
|
||||
'PMA_HOSTS',
|
||||
'PMA_VERBOSE',
|
||||
'PMA_VERBOSES',
|
||||
'PMA_PORT',
|
||||
'PMA_PORTS',
|
||||
'PMA_SOCKET',
|
||||
'PMA_SOCKETS',
|
||||
'PMA_USER',
|
||||
'PMA_PASSWORD',
|
||||
'PMA_ABSOLUTE_URI',
|
||||
'PMA_CONTROLHOST',
|
||||
'PMA_CONTROLPORT',
|
||||
'PMA_PMADB',
|
||||
'PMA_CONTROLUSER',
|
||||
'PMA_CONTROLPASS',
|
||||
'PMA_QUERYHISTORYDB',
|
||||
'PMA_QUERYHISTORYMAX',
|
||||
'MAX_EXECUTION_TIME',
|
||||
'MEMORY_LIMIT',
|
||||
'PMA_UPLOADDIR',
|
||||
'PMA_SAVEDIR',
|
||||
'PMA_SSL',
|
||||
'PMA_SSLS',
|
||||
'PMA_SSL_DIR',
|
||||
'PMA_SSL_VERIFY',
|
||||
'PMA_SSL_VERIFIES',
|
||||
'PMA_SSL_CA',
|
||||
'PMA_SSL_CAS',
|
||||
'PMA_SSL_CA_BASE64',
|
||||
'PMA_SSL_CAS_BASE64',
|
||||
'PMA_SSL_KEY',
|
||||
'PMA_SSL_KEYS',
|
||||
'PMA_SSL_KEY_BASE64',
|
||||
'PMA_SSL_KEYS_BASE64',
|
||||
'PMA_SSL_CERT',
|
||||
'PMA_SSL_CERTS',
|
||||
'PMA_SSL_CERT_BASE64',
|
||||
'PMA_SSL_CERTS_BASE64',
|
||||
];
|
||||
|
||||
foreach ($vars as $var) {
|
||||
$env = getenv($var);
|
||||
if (!isset($_ENV[$var]) && $env !== false) {
|
||||
$_ENV[$var] = $env;
|
||||
}
|
||||
}
|
||||
|
||||
if (! defined('PMA_SSL_DIR')) {
|
||||
define('PMA_SSL_DIR', $_ENV['PMA_SSL_DIR'] ?? '/etc/phpmyadmin/ssl');
|
||||
}
|
||||
|
||||
if (isset($_ENV['PMA_QUERYHISTORYDB'])) {
|
||||
$cfg['QueryHistoryDB'] = (bool) $_ENV['PMA_QUERYHISTORYDB'];
|
||||
}
|
||||
|
||||
if (isset($_ENV['PMA_QUERYHISTORYMAX'])) {
|
||||
$cfg['QueryHistoryMax'] = (int) $_ENV['PMA_QUERYHISTORYMAX'];
|
||||
}
|
||||
|
||||
/* Arbitrary server connection */
|
||||
if (isset($_ENV['PMA_ARBITRARY']) && $_ENV['PMA_ARBITRARY'] === '1') {
|
||||
$cfg['AllowArbitraryServer'] = true;
|
||||
}
|
||||
|
||||
/* Play nice behind reverse proxys */
|
||||
if (isset($_ENV['PMA_ABSOLUTE_URI'])) {
|
||||
$cfg['PmaAbsoluteUri'] = trim($_ENV['PMA_ABSOLUTE_URI']);
|
||||
}
|
||||
|
||||
if (isset($_ENV['PMA_SSL_CA_BASE64'])) {
|
||||
$_ENV['PMA_SSL_CA'] = decodeBase64AndSaveFiles($_ENV['PMA_SSL_CA_BASE64'], 'phpmyadmin-ssl-CA', 'pem', PMA_SSL_DIR);
|
||||
}
|
||||
|
||||
/* Decode and save the SSL key from base64 */
|
||||
if (isset($_ENV['PMA_SSL_KEY_BASE64'])) {
|
||||
$_ENV['PMA_SSL_KEY'] = decodeBase64AndSaveFiles($_ENV['PMA_SSL_KEY_BASE64'], 'phpmyadmin-ssl-CERT', 'cert', PMA_SSL_DIR);
|
||||
}
|
||||
|
||||
/* Decode and save the SSL certificate from base64 */
|
||||
if (isset($_ENV['PMA_SSL_CERT_BASE64'])) {
|
||||
$_ENV['PMA_SSL_CERT'] = decodeBase64AndSaveFiles($_ENV['PMA_SSL_CERT_BASE64'], 'phpmyadmin-ssl-CERT', 'cert', PMA_SSL_DIR);
|
||||
}
|
||||
|
||||
/* Decode and save multiple SSL CA certificates from base64 */
|
||||
if (isset($_ENV['PMA_SSL_CAS_BASE64'])) {
|
||||
$_ENV['PMA_SSL_CAS'] = decodeBase64AndSaveFiles($_ENV['PMA_SSL_CAS_BASE64'], 'phpmyadmin-ssl-CA', 'pem', PMA_SSL_DIR);
|
||||
}
|
||||
|
||||
/* Decode and save multiple SSL keys from base64 */
|
||||
if (isset($_ENV['PMA_SSL_KEYS_BASE64'])) {
|
||||
$_ENV['PMA_SSL_KEYS'] = decodeBase64AndSaveFiles($_ENV['PMA_SSL_KEYS_BASE64'], 'phpmyadmin-ssl-CERT', 'cert', PMA_SSL_DIR);
|
||||
}
|
||||
|
||||
/* Decode and save multiple SSL certificates from base64 */
|
||||
if (isset($_ENV['PMA_SSL_CERTS_BASE64'])) {
|
||||
$_ENV['PMA_SSL_CERTS'] = decodeBase64AndSaveFiles($_ENV['PMA_SSL_CERTS_BASE64'], 'phpmyadmin-ssl-KEY', 'key', PMA_SSL_DIR);
|
||||
}
|
||||
|
||||
/* Figure out hosts */
|
||||
|
||||
/* Fallback to default linked */
|
||||
$hosts = ['db'];
|
||||
|
||||
/* Set by environment */
|
||||
if (! empty($_ENV['PMA_HOST'])) {
|
||||
$hosts = [$_ENV['PMA_HOST']];
|
||||
$verbose = [$_ENV['PMA_VERBOSE']];
|
||||
$ports = [$_ENV['PMA_PORT']];
|
||||
$ssls = [$_ENV['PMA_SSL']];
|
||||
$ssl_verifies = [$_ENV['PMA_SSL_VERIFY']];
|
||||
$ssl_cas = [$_ENV['PMA_SSL_CA']];
|
||||
$ssl_keys = [$_ENV['PMA_SSL_KEY']];
|
||||
$ssl_certs = [$_ENV['PMA_SSL_CERT']];
|
||||
} elseif (! empty($_ENV['PMA_HOSTS'])) {
|
||||
$hosts = array_map('trim', explode(',', $_ENV['PMA_HOSTS']));
|
||||
$verbose = array_map('trim', explode(',', $_ENV['PMA_VERBOSES']));
|
||||
$ports = array_map('trim', explode(',', $_ENV['PMA_PORTS']));
|
||||
$ssls = array_map('trim', explode(',', $_ENV['PMA_SSLS']));
|
||||
$ssl_verifies = array_map('trim', explode(',', $_ENV['PMA_SSL_VERIFIES']));
|
||||
$ssl_cas = array_map('trim', explode(',', $_ENV['PMA_SSL_CAS']));
|
||||
$ssl_keys = array_map('trim', explode(',', $_ENV['PMA_SSL_KEYS']));
|
||||
$ssl_certs = array_map('trim', explode(',', $_ENV['PMA_SSL_CERTS']));
|
||||
}
|
||||
|
||||
if (! empty($_ENV['PMA_SOCKET'])) {
|
||||
$sockets = [$_ENV['PMA_SOCKET']];
|
||||
} elseif (! empty($_ENV['PMA_SOCKETS'])) {
|
||||
$sockets = explode(',', $_ENV['PMA_SOCKETS']);
|
||||
}
|
||||
|
||||
/* Server settings */
|
||||
for ($i = 1; isset($hosts[$i - 1]); $i++) {
|
||||
if (isset($ssls[$i - 1]) && $ssls[$i - 1] === '1') {
|
||||
$cfg['Servers'][$i]['ssl'] = $ssls[$i - 1];
|
||||
}
|
||||
if (isset($ssl_verifies[$i - 1]) && $ssl_verifies[$i - 1] === '1') {
|
||||
$cfg['Servers'][$i]['ssl_verify'] = $ssl_verifies[$i - 1];
|
||||
}
|
||||
if (isset($ssl_cas[$i - 1])) {
|
||||
$cfg['Servers'][$i]['ssl_ca'] = $ssl_cas[$i - 1];
|
||||
}
|
||||
if (isset($ssl_keys[$i - 1])) {
|
||||
$cfg['Servers'][$i]['ssl_key'] = $ssl_keys[$i - 1];
|
||||
}
|
||||
if (isset($ssl_certs[$i - 1])) {
|
||||
$cfg['Servers'][$i]['ssl_cert'] = $ssl_certs[$i - 1];
|
||||
}
|
||||
$cfg['Servers'][$i]['host'] = $hosts[$i - 1];
|
||||
if (isset($verbose[$i - 1])) {
|
||||
$cfg['Servers'][$i]['verbose'] = $verbose[$i - 1];
|
||||
}
|
||||
if (isset($ports[$i - 1])) {
|
||||
$cfg['Servers'][$i]['port'] = $ports[$i - 1];
|
||||
}
|
||||
if (isset($_ENV['PMA_USER'])) {
|
||||
$cfg['Servers'][$i]['auth_type'] = 'config';
|
||||
$cfg['Servers'][$i]['user'] = $_ENV['PMA_USER'];
|
||||
$cfg['Servers'][$i]['password'] = isset($_ENV['PMA_PASSWORD']) ? $_ENV['PMA_PASSWORD'] : '';
|
||||
} else {
|
||||
$cfg['Servers'][$i]['auth_type'] = 'cookie';
|
||||
}
|
||||
if (isset($_ENV['PMA_PMADB'])) {
|
||||
$cfg['Servers'][$i]['pmadb'] = $_ENV['PMA_PMADB'];
|
||||
$cfg['Servers'][$i]['relation'] = 'pma__relation';
|
||||
$cfg['Servers'][$i]['table_info'] = 'pma__table_info';
|
||||
$cfg['Servers'][$i]['table_coords'] = 'pma__table_coords';
|
||||
$cfg['Servers'][$i]['pdf_pages'] = 'pma__pdf_pages';
|
||||
$cfg['Servers'][$i]['column_info'] = 'pma__column_info';
|
||||
$cfg['Servers'][$i]['bookmarktable'] = 'pma__bookmark';
|
||||
$cfg['Servers'][$i]['history'] = 'pma__history';
|
||||
$cfg['Servers'][$i]['recent'] = 'pma__recent';
|
||||
$cfg['Servers'][$i]['favorite'] = 'pma__favorite';
|
||||
$cfg['Servers'][$i]['table_uiprefs'] = 'pma__table_uiprefs';
|
||||
$cfg['Servers'][$i]['tracking'] = 'pma__tracking';
|
||||
$cfg['Servers'][$i]['userconfig'] = 'pma__userconfig';
|
||||
$cfg['Servers'][$i]['users'] = 'pma__users';
|
||||
$cfg['Servers'][$i]['usergroups'] = 'pma__usergroups';
|
||||
$cfg['Servers'][$i]['navigationhiding'] = 'pma__navigationhiding';
|
||||
$cfg['Servers'][$i]['savedsearches'] = 'pma__savedsearches';
|
||||
$cfg['Servers'][$i]['central_columns'] = 'pma__central_columns';
|
||||
$cfg['Servers'][$i]['designer_settings'] = 'pma__designer_settings';
|
||||
$cfg['Servers'][$i]['export_templates'] = 'pma__export_templates';
|
||||
}
|
||||
if (isset($_ENV['PMA_CONTROLHOST'])) {
|
||||
$cfg['Servers'][$i]['controlhost'] = $_ENV['PMA_CONTROLHOST'];
|
||||
}
|
||||
if (isset($_ENV['PMA_CONTROLPORT'])) {
|
||||
$cfg['Servers'][$i]['controlport'] = $_ENV['PMA_CONTROLPORT'];
|
||||
}
|
||||
if (isset($_ENV['PMA_CONTROLUSER'])) {
|
||||
$cfg['Servers'][$i]['controluser'] = $_ENV['PMA_CONTROLUSER'];
|
||||
}
|
||||
if (isset($_ENV['PMA_CONTROLPASS'])) {
|
||||
$cfg['Servers'][$i]['controlpass'] = $_ENV['PMA_CONTROLPASS'];
|
||||
}
|
||||
$cfg['Servers'][$i]['compress'] = false;
|
||||
$cfg['Servers'][$i]['AllowNoPassword'] = true;
|
||||
}
|
||||
// Avoid overwriting the last server id $i, use another variable name
|
||||
for ($socketHostId = 1; isset($sockets[$socketHostId - 1]); $socketHostId++) {
|
||||
$cfg['Servers'][$socketHostId]['socket'] = $sockets[$socketHostId - 1];
|
||||
$cfg['Servers'][$socketHostId]['host'] = 'localhost';
|
||||
}
|
||||
/*
|
||||
* Revert back to last configured server to make
|
||||
* it easier in config.user.inc.php
|
||||
*/
|
||||
$i--;
|
||||
|
||||
/* Uploads setup */
|
||||
if (isset($_ENV['PMA_UPLOADDIR'])) {
|
||||
$cfg['UploadDir'] = $_ENV['PMA_UPLOADDIR'];
|
||||
}
|
||||
|
||||
if (isset($_ENV['PMA_SAVEDIR'])) {
|
||||
$cfg['SaveDir'] = $_ENV['PMA_SAVEDIR'];
|
||||
}
|
||||
|
||||
if (isset($_ENV['MAX_EXECUTION_TIME'])) {
|
||||
$cfg['ExecTimeLimit'] = $_ENV['MAX_EXECUTION_TIME'];
|
||||
}
|
||||
|
||||
if (isset($_ENV['MEMORY_LIMIT'])) {
|
||||
$cfg['MemoryLimit'] = $_ENV['MEMORY_LIMIT'];
|
||||
}
|
||||
|
||||
/* Include User Defined Settings Hook */
|
||||
if (file_exists('/etc/phpmyadmin/config.user.inc.php')) {
|
||||
include '/etc/phpmyadmin/config.user.inc.php';
|
||||
}
|
||||
|
||||
/* Support additional configurations */
|
||||
if (is_dir('/etc/phpmyadmin/conf.d/')) {
|
||||
foreach (glob('/etc/phpmyadmin/conf.d/*.php') as $filename) {
|
||||
include $filename;
|
||||
}
|
||||
}
|
||||
@@ -1,63 +0,0 @@
|
||||
#!/bin/bash
|
||||
if [[ "$1" == apache2* ]] || [ "$1" == php-fpm ]; then
|
||||
|
||||
if [ ! -f /etc/phpmyadmin/config.secret.inc.php ]; then
|
||||
cat > /etc/phpmyadmin/config.secret.inc.php <<EOT
|
||||
<?php
|
||||
\$cfg['blowfish_secret'] = '$(tr -dc 'a-zA-Z0-9~!@#$%^&*_()+}{?></";.,[]=-' < /dev/urandom | fold -w 32 | head -n 1)';
|
||||
EOT
|
||||
fi
|
||||
chgrp www-data /etc/phpmyadmin/config.secret.inc.php
|
||||
|
||||
if [ ! -f /etc/phpmyadmin/config.user.inc.php ]; then
|
||||
touch /etc/phpmyadmin/config.user.inc.php
|
||||
fi
|
||||
fi
|
||||
|
||||
if [ ! -z "${HIDE_PHP_VERSION}" ]; then
|
||||
echo "PHP version is now hidden."
|
||||
echo -e 'expose_php = Off\n' > $PHP_INI_DIR/conf.d/phpmyadmin-hide-php-version.ini
|
||||
fi
|
||||
|
||||
if [ ! -z "${PMA_CONFIG_BASE64}" ]; then
|
||||
echo "Adding the custom config.inc.php from base64."
|
||||
echo "${PMA_CONFIG_BASE64}" | base64 -d > /etc/phpmyadmin/config.inc.php
|
||||
fi
|
||||
|
||||
if [ ! -z "${PMA_USER_CONFIG_BASE64}" ]; then
|
||||
echo "Adding the custom config.user.inc.php from base64."
|
||||
echo "${PMA_USER_CONFIG_BASE64}" | base64 -d > /etc/phpmyadmin/config.user.inc.php
|
||||
fi
|
||||
|
||||
# start: Apache specific settings
|
||||
if [ -n "${APACHE_PORT+x}" ]; then
|
||||
echo "Setting apache port to ${APACHE_PORT}."
|
||||
sed -i "/VirtualHost \*:80/c\\<VirtualHost \*:${APACHE_PORT}\>" /etc/apache2/sites-enabled/000-default.conf
|
||||
sed -i "/Listen 80/c\Listen ${APACHE_PORT}" /etc/apache2/ports.conf
|
||||
apachectl configtest
|
||||
fi
|
||||
# end: Apache specific settings
|
||||
|
||||
get_docker_secret() {
|
||||
local env_var="${1}"
|
||||
local env_var_file="${env_var}_FILE"
|
||||
|
||||
# Check if the variable with name $env_var_file (which is $PMA_PASSWORD_FILE for example)
|
||||
# is not empty and export $PMA_PASSWORD as the password in the Docker secrets file
|
||||
|
||||
if [[ -n "${!env_var_file}" ]]; then
|
||||
export "${env_var}"="$(cat "${!env_var_file}")"
|
||||
fi
|
||||
}
|
||||
|
||||
get_docker_secret PMA_USER
|
||||
get_docker_secret PMA_PASSWORD
|
||||
get_docker_secret MYSQL_ROOT_PASSWORD
|
||||
get_docker_secret MYSQL_PASSWORD
|
||||
get_docker_secret PMA_HOSTS
|
||||
get_docker_secret PMA_HOST
|
||||
get_docker_secret PMA_CONTROLHOST
|
||||
get_docker_secret PMA_CONTROLUSER
|
||||
get_docker_secret PMA_CONTROLPASS
|
||||
|
||||
exec "$@"
|
||||
@@ -1,51 +0,0 @@
|
||||
<?php
|
||||
|
||||
declare(strict_types=1);
|
||||
|
||||
/**
|
||||
* Helper function to decode and save multiple SSL files from base64.
|
||||
*
|
||||
* @param string $base64FilesContents The base64 encoded string containing multiple files separated by commas.
|
||||
* If no commas are present, the entire string is treated as a single file.
|
||||
* @param string $prefix The prefix to use for the generated file names.
|
||||
* @param string $extension The file extension to use for the generated files.
|
||||
* @param string $storageFolder The folder where to store the generated files.
|
||||
*
|
||||
* @return string A comma-separated list of paths to the generated files.
|
||||
*/
|
||||
function decodeBase64AndSaveFiles(string $base64FilesContents, string $prefix, string $extension, string $storageFolder): string
|
||||
{
|
||||
// Ensure the output directory exists
|
||||
if (! is_dir($storageFolder)) {
|
||||
mkdir($storageFolder, 0755, true);
|
||||
}
|
||||
|
||||
// Split the base64 string into an array of files
|
||||
$base64FilesContents = explode(',', trim($base64FilesContents));
|
||||
$counter = 1;
|
||||
$outputFiles = [];
|
||||
|
||||
// Process each file
|
||||
foreach ($base64FilesContents as $base64FileContent) {
|
||||
$outputFile = $storageFolder . '/' . $prefix . '-' . $counter . '.' . $extension;
|
||||
|
||||
$fileContent = base64_decode($base64FileContent, true);
|
||||
if ($fileContent === false) {
|
||||
echo 'Failed to decode: ' . $base64FileContent;
|
||||
exit(1);
|
||||
}
|
||||
|
||||
// Write the decoded file to the output directory
|
||||
if (file_put_contents($outputFile, $fileContent) === false) {
|
||||
echo 'Failed to write to ' . $outputFile;
|
||||
exit(1);
|
||||
}
|
||||
|
||||
// Add the output file path to the list
|
||||
$outputFiles[] = $outputFile;
|
||||
$counter++;
|
||||
}
|
||||
|
||||
// Return a comma-separated list of the generated file paths
|
||||
return implode(',', $outputFiles);
|
||||
}
|
||||
-246
@@ -1,246 +0,0 @@
|
||||
<?php
|
||||
|
||||
require_once '/etc/phpmyadmin/config.secret.inc.php';
|
||||
require_once '/etc/phpmyadmin/helpers.php';
|
||||
|
||||
/* Ensure we got the environment */
|
||||
$vars = [
|
||||
'PMA_ARBITRARY',
|
||||
'PMA_HOST',
|
||||
'PMA_HOSTS',
|
||||
'PMA_VERBOSE',
|
||||
'PMA_VERBOSES',
|
||||
'PMA_PORT',
|
||||
'PMA_PORTS',
|
||||
'PMA_SOCKET',
|
||||
'PMA_SOCKETS',
|
||||
'PMA_USER',
|
||||
'PMA_PASSWORD',
|
||||
'PMA_ABSOLUTE_URI',
|
||||
'PMA_CONTROLHOST',
|
||||
'PMA_CONTROLPORT',
|
||||
'PMA_PMADB',
|
||||
'PMA_CONTROLUSER',
|
||||
'PMA_CONTROLPASS',
|
||||
'PMA_QUERYHISTORYDB',
|
||||
'PMA_QUERYHISTORYMAX',
|
||||
'MAX_EXECUTION_TIME',
|
||||
'MEMORY_LIMIT',
|
||||
'PMA_UPLOADDIR',
|
||||
'PMA_SAVEDIR',
|
||||
'PMA_SSL',
|
||||
'PMA_SSLS',
|
||||
'PMA_SSL_DIR',
|
||||
'PMA_SSL_VERIFY',
|
||||
'PMA_SSL_VERIFIES',
|
||||
'PMA_SSL_CA',
|
||||
'PMA_SSL_CAS',
|
||||
'PMA_SSL_CA_BASE64',
|
||||
'PMA_SSL_CAS_BASE64',
|
||||
'PMA_SSL_KEY',
|
||||
'PMA_SSL_KEYS',
|
||||
'PMA_SSL_KEY_BASE64',
|
||||
'PMA_SSL_KEYS_BASE64',
|
||||
'PMA_SSL_CERT',
|
||||
'PMA_SSL_CERTS',
|
||||
'PMA_SSL_CERT_BASE64',
|
||||
'PMA_SSL_CERTS_BASE64',
|
||||
];
|
||||
|
||||
foreach ($vars as $var) {
|
||||
$env = getenv($var);
|
||||
if (!isset($_ENV[$var]) && $env !== false) {
|
||||
$_ENV[$var] = $env;
|
||||
}
|
||||
}
|
||||
|
||||
if (! defined('PMA_SSL_DIR')) {
|
||||
define('PMA_SSL_DIR', $_ENV['PMA_SSL_DIR'] ?? '/etc/phpmyadmin/ssl');
|
||||
}
|
||||
|
||||
if (isset($_ENV['PMA_QUERYHISTORYDB'])) {
|
||||
$cfg['QueryHistoryDB'] = (bool) $_ENV['PMA_QUERYHISTORYDB'];
|
||||
}
|
||||
|
||||
if (isset($_ENV['PMA_QUERYHISTORYMAX'])) {
|
||||
$cfg['QueryHistoryMax'] = (int) $_ENV['PMA_QUERYHISTORYMAX'];
|
||||
}
|
||||
|
||||
/* Arbitrary server connection */
|
||||
if (isset($_ENV['PMA_ARBITRARY']) && $_ENV['PMA_ARBITRARY'] === '1') {
|
||||
$cfg['AllowArbitraryServer'] = true;
|
||||
}
|
||||
|
||||
/* Play nice behind reverse proxys */
|
||||
if (isset($_ENV['PMA_ABSOLUTE_URI'])) {
|
||||
$cfg['PmaAbsoluteUri'] = trim($_ENV['PMA_ABSOLUTE_URI']);
|
||||
}
|
||||
|
||||
if (isset($_ENV['PMA_SSL_CA_BASE64'])) {
|
||||
$_ENV['PMA_SSL_CA'] = decodeBase64AndSaveFiles($_ENV['PMA_SSL_CA_BASE64'], 'phpmyadmin-ssl-CA', 'pem', PMA_SSL_DIR);
|
||||
}
|
||||
|
||||
/* Decode and save the SSL key from base64 */
|
||||
if (isset($_ENV['PMA_SSL_KEY_BASE64'])) {
|
||||
$_ENV['PMA_SSL_KEY'] = decodeBase64AndSaveFiles($_ENV['PMA_SSL_KEY_BASE64'], 'phpmyadmin-ssl-CERT', 'cert', PMA_SSL_DIR);
|
||||
}
|
||||
|
||||
/* Decode and save the SSL certificate from base64 */
|
||||
if (isset($_ENV['PMA_SSL_CERT_BASE64'])) {
|
||||
$_ENV['PMA_SSL_CERT'] = decodeBase64AndSaveFiles($_ENV['PMA_SSL_CERT_BASE64'], 'phpmyadmin-ssl-CERT', 'cert', PMA_SSL_DIR);
|
||||
}
|
||||
|
||||
/* Decode and save multiple SSL CA certificates from base64 */
|
||||
if (isset($_ENV['PMA_SSL_CAS_BASE64'])) {
|
||||
$_ENV['PMA_SSL_CAS'] = decodeBase64AndSaveFiles($_ENV['PMA_SSL_CAS_BASE64'], 'phpmyadmin-ssl-CA', 'pem', PMA_SSL_DIR);
|
||||
}
|
||||
|
||||
/* Decode and save multiple SSL keys from base64 */
|
||||
if (isset($_ENV['PMA_SSL_KEYS_BASE64'])) {
|
||||
$_ENV['PMA_SSL_KEYS'] = decodeBase64AndSaveFiles($_ENV['PMA_SSL_KEYS_BASE64'], 'phpmyadmin-ssl-CERT', 'cert', PMA_SSL_DIR);
|
||||
}
|
||||
|
||||
/* Decode and save multiple SSL certificates from base64 */
|
||||
if (isset($_ENV['PMA_SSL_CERTS_BASE64'])) {
|
||||
$_ENV['PMA_SSL_CERTS'] = decodeBase64AndSaveFiles($_ENV['PMA_SSL_CERTS_BASE64'], 'phpmyadmin-ssl-KEY', 'key', PMA_SSL_DIR);
|
||||
}
|
||||
|
||||
/* Figure out hosts */
|
||||
|
||||
/* Fallback to default linked */
|
||||
$hosts = ['db'];
|
||||
|
||||
/* Set by environment */
|
||||
if (! empty($_ENV['PMA_HOST'])) {
|
||||
$hosts = [$_ENV['PMA_HOST']];
|
||||
$verbose = [$_ENV['PMA_VERBOSE']];
|
||||
$ports = [$_ENV['PMA_PORT']];
|
||||
$ssls = [$_ENV['PMA_SSL']];
|
||||
$ssl_verifies = [$_ENV['PMA_SSL_VERIFY']];
|
||||
$ssl_cas = [$_ENV['PMA_SSL_CA']];
|
||||
$ssl_keys = [$_ENV['PMA_SSL_KEY']];
|
||||
$ssl_certs = [$_ENV['PMA_SSL_CERT']];
|
||||
} elseif (! empty($_ENV['PMA_HOSTS'])) {
|
||||
$hosts = array_map('trim', explode(',', $_ENV['PMA_HOSTS']));
|
||||
$verbose = array_map('trim', explode(',', $_ENV['PMA_VERBOSES']));
|
||||
$ports = array_map('trim', explode(',', $_ENV['PMA_PORTS']));
|
||||
$ssls = array_map('trim', explode(',', $_ENV['PMA_SSLS']));
|
||||
$ssl_verifies = array_map('trim', explode(',', $_ENV['PMA_SSL_VERIFIES']));
|
||||
$ssl_cas = array_map('trim', explode(',', $_ENV['PMA_SSL_CAS']));
|
||||
$ssl_keys = array_map('trim', explode(',', $_ENV['PMA_SSL_KEYS']));
|
||||
$ssl_certs = array_map('trim', explode(',', $_ENV['PMA_SSL_CERTS']));
|
||||
}
|
||||
|
||||
if (! empty($_ENV['PMA_SOCKET'])) {
|
||||
$sockets = [$_ENV['PMA_SOCKET']];
|
||||
} elseif (! empty($_ENV['PMA_SOCKETS'])) {
|
||||
$sockets = explode(',', $_ENV['PMA_SOCKETS']);
|
||||
}
|
||||
|
||||
/* Server settings */
|
||||
for ($i = 1; isset($hosts[$i - 1]); $i++) {
|
||||
if (isset($ssls[$i - 1]) && $ssls[$i - 1] === '1') {
|
||||
$cfg['Servers'][$i]['ssl'] = $ssls[$i - 1];
|
||||
}
|
||||
if (isset($ssl_verifies[$i - 1]) && $ssl_verifies[$i - 1] === '1') {
|
||||
$cfg['Servers'][$i]['ssl_verify'] = $ssl_verifies[$i - 1];
|
||||
}
|
||||
if (isset($ssl_cas[$i - 1])) {
|
||||
$cfg['Servers'][$i]['ssl_ca'] = $ssl_cas[$i - 1];
|
||||
}
|
||||
if (isset($ssl_keys[$i - 1])) {
|
||||
$cfg['Servers'][$i]['ssl_key'] = $ssl_keys[$i - 1];
|
||||
}
|
||||
if (isset($ssl_certs[$i - 1])) {
|
||||
$cfg['Servers'][$i]['ssl_cert'] = $ssl_certs[$i - 1];
|
||||
}
|
||||
$cfg['Servers'][$i]['host'] = $hosts[$i - 1];
|
||||
if (isset($verbose[$i - 1])) {
|
||||
$cfg['Servers'][$i]['verbose'] = $verbose[$i - 1];
|
||||
}
|
||||
if (isset($ports[$i - 1])) {
|
||||
$cfg['Servers'][$i]['port'] = $ports[$i - 1];
|
||||
}
|
||||
if (isset($_ENV['PMA_USER'])) {
|
||||
$cfg['Servers'][$i]['auth_type'] = 'config';
|
||||
$cfg['Servers'][$i]['user'] = $_ENV['PMA_USER'];
|
||||
$cfg['Servers'][$i]['password'] = isset($_ENV['PMA_PASSWORD']) ? $_ENV['PMA_PASSWORD'] : '';
|
||||
} else {
|
||||
$cfg['Servers'][$i]['auth_type'] = 'cookie';
|
||||
}
|
||||
if (isset($_ENV['PMA_PMADB'])) {
|
||||
$cfg['Servers'][$i]['pmadb'] = $_ENV['PMA_PMADB'];
|
||||
$cfg['Servers'][$i]['relation'] = 'pma__relation';
|
||||
$cfg['Servers'][$i]['table_info'] = 'pma__table_info';
|
||||
$cfg['Servers'][$i]['table_coords'] = 'pma__table_coords';
|
||||
$cfg['Servers'][$i]['pdf_pages'] = 'pma__pdf_pages';
|
||||
$cfg['Servers'][$i]['column_info'] = 'pma__column_info';
|
||||
$cfg['Servers'][$i]['bookmarktable'] = 'pma__bookmark';
|
||||
$cfg['Servers'][$i]['history'] = 'pma__history';
|
||||
$cfg['Servers'][$i]['recent'] = 'pma__recent';
|
||||
$cfg['Servers'][$i]['favorite'] = 'pma__favorite';
|
||||
$cfg['Servers'][$i]['table_uiprefs'] = 'pma__table_uiprefs';
|
||||
$cfg['Servers'][$i]['tracking'] = 'pma__tracking';
|
||||
$cfg['Servers'][$i]['userconfig'] = 'pma__userconfig';
|
||||
$cfg['Servers'][$i]['users'] = 'pma__users';
|
||||
$cfg['Servers'][$i]['usergroups'] = 'pma__usergroups';
|
||||
$cfg['Servers'][$i]['navigationhiding'] = 'pma__navigationhiding';
|
||||
$cfg['Servers'][$i]['savedsearches'] = 'pma__savedsearches';
|
||||
$cfg['Servers'][$i]['central_columns'] = 'pma__central_columns';
|
||||
$cfg['Servers'][$i]['designer_settings'] = 'pma__designer_settings';
|
||||
$cfg['Servers'][$i]['export_templates'] = 'pma__export_templates';
|
||||
}
|
||||
if (isset($_ENV['PMA_CONTROLHOST'])) {
|
||||
$cfg['Servers'][$i]['controlhost'] = $_ENV['PMA_CONTROLHOST'];
|
||||
}
|
||||
if (isset($_ENV['PMA_CONTROLPORT'])) {
|
||||
$cfg['Servers'][$i]['controlport'] = $_ENV['PMA_CONTROLPORT'];
|
||||
}
|
||||
if (isset($_ENV['PMA_CONTROLUSER'])) {
|
||||
$cfg['Servers'][$i]['controluser'] = $_ENV['PMA_CONTROLUSER'];
|
||||
}
|
||||
if (isset($_ENV['PMA_CONTROLPASS'])) {
|
||||
$cfg['Servers'][$i]['controlpass'] = $_ENV['PMA_CONTROLPASS'];
|
||||
}
|
||||
$cfg['Servers'][$i]['compress'] = false;
|
||||
$cfg['Servers'][$i]['AllowNoPassword'] = true;
|
||||
}
|
||||
// Avoid overwriting the last server id $i, use another variable name
|
||||
for ($socketHostId = 1; isset($sockets[$socketHostId - 1]); $socketHostId++) {
|
||||
$cfg['Servers'][$socketHostId]['socket'] = $sockets[$socketHostId - 1];
|
||||
$cfg['Servers'][$socketHostId]['host'] = 'localhost';
|
||||
}
|
||||
/*
|
||||
* Revert back to last configured server to make
|
||||
* it easier in config.user.inc.php
|
||||
*/
|
||||
$i--;
|
||||
|
||||
/* Uploads setup */
|
||||
if (isset($_ENV['PMA_UPLOADDIR'])) {
|
||||
$cfg['UploadDir'] = $_ENV['PMA_UPLOADDIR'];
|
||||
}
|
||||
|
||||
if (isset($_ENV['PMA_SAVEDIR'])) {
|
||||
$cfg['SaveDir'] = $_ENV['PMA_SAVEDIR'];
|
||||
}
|
||||
|
||||
if (isset($_ENV['MAX_EXECUTION_TIME'])) {
|
||||
$cfg['ExecTimeLimit'] = $_ENV['MAX_EXECUTION_TIME'];
|
||||
}
|
||||
|
||||
if (isset($_ENV['MEMORY_LIMIT'])) {
|
||||
$cfg['MemoryLimit'] = $_ENV['MEMORY_LIMIT'];
|
||||
}
|
||||
|
||||
/* Include User Defined Settings Hook */
|
||||
if (file_exists('/etc/phpmyadmin/config.user.inc.php')) {
|
||||
include '/etc/phpmyadmin/config.user.inc.php';
|
||||
}
|
||||
|
||||
/* Support additional configurations */
|
||||
if (is_dir('/etc/phpmyadmin/conf.d/')) {
|
||||
foreach (glob('/etc/phpmyadmin/conf.d/*.php') as $filename) {
|
||||
include $filename;
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,3 @@
|
||||
phpmyadmin:
|
||||
external_links:
|
||||
- db_server:db
|
||||
@@ -0,0 +1,29 @@
|
||||
version: '2'
|
||||
|
||||
services:
|
||||
mariadb:
|
||||
image: mariadb:latest
|
||||
container_name: phpmyadmin_testing_mariadb
|
||||
environment:
|
||||
- MYSQL_ROOT_PASSWORD=test123
|
||||
|
||||
mysql:
|
||||
image: mysql:latest
|
||||
container_name: phpmyadmin_testing_mysql
|
||||
environment:
|
||||
- MYSQL_ROOT_PASSWORD=test123
|
||||
|
||||
phpmyadmin:
|
||||
build:
|
||||
context: testing/
|
||||
container_name: phpmyadmin_testing
|
||||
volumes:
|
||||
- /sessions
|
||||
ports:
|
||||
- 8090:80
|
||||
environment:
|
||||
- PMA_ARBITRARY=1
|
||||
- TESTSUITE_PASSWORD=test123
|
||||
depends_on:
|
||||
- mariadb
|
||||
- mysql
|
||||
+1
-1
@@ -1,5 +1,5 @@
|
||||
phpmyadmin:
|
||||
image: phpmyadmin
|
||||
image: phpmyadmin/phpmyadmin
|
||||
container_name: phpmyadmin
|
||||
environment:
|
||||
- PMA_ARBITRARY=1
|
||||
|
||||
@@ -1,63 +0,0 @@
|
||||
#!/bin/bash
|
||||
if [[ "$1" == apache2* ]] || [ "$1" == php-fpm ]; then
|
||||
|
||||
if [ ! -f /etc/phpmyadmin/config.secret.inc.php ]; then
|
||||
cat > /etc/phpmyadmin/config.secret.inc.php <<EOT
|
||||
<?php
|
||||
\$cfg['blowfish_secret'] = '$(tr -dc 'a-zA-Z0-9~!@#$%^&*_()+}{?></";.,[]=-' < /dev/urandom | fold -w 32 | head -n 1)';
|
||||
EOT
|
||||
fi
|
||||
chgrp www-data /etc/phpmyadmin/config.secret.inc.php
|
||||
|
||||
if [ ! -f /etc/phpmyadmin/config.user.inc.php ]; then
|
||||
touch /etc/phpmyadmin/config.user.inc.php
|
||||
fi
|
||||
fi
|
||||
|
||||
if [ ! -z "${HIDE_PHP_VERSION}" ]; then
|
||||
echo "PHP version is now hidden."
|
||||
echo -e 'expose_php = Off\n' > $PHP_INI_DIR/conf.d/phpmyadmin-hide-php-version.ini
|
||||
fi
|
||||
|
||||
if [ ! -z "${PMA_CONFIG_BASE64}" ]; then
|
||||
echo "Adding the custom config.inc.php from base64."
|
||||
echo "${PMA_CONFIG_BASE64}" | base64 -d > /etc/phpmyadmin/config.inc.php
|
||||
fi
|
||||
|
||||
if [ ! -z "${PMA_USER_CONFIG_BASE64}" ]; then
|
||||
echo "Adding the custom config.user.inc.php from base64."
|
||||
echo "${PMA_USER_CONFIG_BASE64}" | base64 -d > /etc/phpmyadmin/config.user.inc.php
|
||||
fi
|
||||
|
||||
# start: Apache specific settings
|
||||
if [ -n "${APACHE_PORT+x}" ]; then
|
||||
echo "Setting apache port to ${APACHE_PORT}."
|
||||
sed -i "/VirtualHost \*:80/c\\<VirtualHost \*:${APACHE_PORT}\>" /etc/apache2/sites-enabled/000-default.conf
|
||||
sed -i "/Listen 80/c\Listen ${APACHE_PORT}" /etc/apache2/ports.conf
|
||||
apachectl configtest
|
||||
fi
|
||||
# end: Apache specific settings
|
||||
|
||||
get_docker_secret() {
|
||||
local env_var="${1}"
|
||||
local env_var_file="${env_var}_FILE"
|
||||
|
||||
# Check if the variable with name $env_var_file (which is $PMA_PASSWORD_FILE for example)
|
||||
# is not empty and export $PMA_PASSWORD as the password in the Docker secrets file
|
||||
|
||||
if [[ -n "${!env_var_file}" ]]; then
|
||||
export "${env_var}"="$(cat "${!env_var_file}")"
|
||||
fi
|
||||
}
|
||||
|
||||
get_docker_secret PMA_USER
|
||||
get_docker_secret PMA_PASSWORD
|
||||
get_docker_secret MYSQL_ROOT_PASSWORD
|
||||
get_docker_secret MYSQL_PASSWORD
|
||||
get_docker_secret PMA_HOSTS
|
||||
get_docker_secret PMA_HOST
|
||||
get_docker_secret PMA_CONTROLHOST
|
||||
get_docker_secret PMA_CONTROLUSER
|
||||
get_docker_secret PMA_CONTROLPASS
|
||||
|
||||
exec "$@"
|
||||
+132
@@ -0,0 +1,132 @@
|
||||
user nobody;
|
||||
worker_processes 4;
|
||||
|
||||
daemon off;
|
||||
|
||||
pid /nginx.pid;
|
||||
|
||||
error_log /var/log/nginx-error.log;
|
||||
|
||||
events {
|
||||
worker_connections 1024;
|
||||
}
|
||||
|
||||
http {
|
||||
types {
|
||||
text/html html htm shtml;
|
||||
text/css css;
|
||||
text/xml xml;
|
||||
image/gif gif;
|
||||
image/jpeg jpeg jpg;
|
||||
application/javascript js;
|
||||
application/atom+xml atom;
|
||||
application/rss+xml rss;
|
||||
}
|
||||
|
||||
default_type application/octet-stream;
|
||||
|
||||
sendfile on;
|
||||
tcp_nopush on;
|
||||
tcp_nodelay on;
|
||||
|
||||
client_body_timeout 12;
|
||||
client_header_timeout 12;
|
||||
keepalive_timeout 15;
|
||||
send_timeout 10;
|
||||
server_tokens off;
|
||||
|
||||
client_body_buffer_size 512K;
|
||||
client_body_temp_path /var/nginx/client_body_temp;
|
||||
client_header_buffer_size 16k;
|
||||
client_max_body_size 512M;
|
||||
large_client_header_buffers 4 8k;
|
||||
|
||||
gzip on;
|
||||
gzip_comp_level 2;
|
||||
gzip_min_length 1000;
|
||||
gzip_proxied expired no-cache no-store private auth;
|
||||
gzip_types text/plain application/x-javascript text/xml text/css application/xml;
|
||||
|
||||
access_log off;
|
||||
|
||||
server {
|
||||
listen 80 default_server;
|
||||
server_name _;
|
||||
|
||||
root /www;
|
||||
|
||||
index index.php index.html index.htm;
|
||||
|
||||
charset utf-8;
|
||||
|
||||
if ($request_method !~ ^(GET|HEAD|POST)$ ) {
|
||||
return 405;
|
||||
}
|
||||
|
||||
location / {
|
||||
try_files $uri $uri/ =404;
|
||||
}
|
||||
|
||||
location ~* .(jpg|jpeg|png|gif|ico|css|js)$ {
|
||||
expires 365d;
|
||||
}
|
||||
|
||||
location ~ \.php$ {
|
||||
fastcgi_intercept_errors on;
|
||||
fastcgi_pass unix:/var/run/php/php-fpm.sock;
|
||||
|
||||
# regex to split $uri to $fastcgi_script_name and $fastcgi_path
|
||||
fastcgi_split_path_info ^(.+\.php)(/.+)$;
|
||||
|
||||
# Check that the PHP script exists before passing it
|
||||
try_files $fastcgi_script_name =404;
|
||||
|
||||
# Bypass the fact that try_files resets $fastcgi_path_info
|
||||
# see: https://trac.nginx.org/nginx/ticket/321
|
||||
set $path_info $fastcgi_path_info;
|
||||
fastcgi_param PATH_INFO $path_info;
|
||||
|
||||
fastcgi_read_timeout 1200;
|
||||
fastcgi_buffering off;
|
||||
fastcgi_buffers 16 16k;
|
||||
fastcgi_buffer_size 32k;
|
||||
|
||||
fastcgi_index index.php;
|
||||
|
||||
fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
|
||||
fastcgi_param QUERY_STRING $query_string;
|
||||
fastcgi_param REQUEST_METHOD $request_method;
|
||||
fastcgi_param CONTENT_TYPE $content_type;
|
||||
fastcgi_param CONTENT_LENGTH $content_length;
|
||||
|
||||
fastcgi_param SCRIPT_NAME $fastcgi_script_name;
|
||||
fastcgi_param REQUEST_URI $request_uri;
|
||||
fastcgi_param DOCUMENT_URI $document_uri;
|
||||
fastcgi_param DOCUMENT_ROOT $document_root;
|
||||
fastcgi_param SERVER_PROTOCOL $server_protocol;
|
||||
fastcgi_param REQUEST_SCHEME $scheme;
|
||||
fastcgi_param HTTPS $https if_not_empty;
|
||||
|
||||
fastcgi_param GATEWAY_INTERFACE CGI/1.1;
|
||||
fastcgi_param SERVER_SOFTWARE nginx;
|
||||
|
||||
fastcgi_param REMOTE_ADDR $remote_addr;
|
||||
fastcgi_param REMOTE_PORT $remote_port;
|
||||
fastcgi_param SERVER_ADDR $server_addr;
|
||||
fastcgi_param SERVER_PORT $server_port;
|
||||
fastcgi_param SERVER_NAME $server_name;
|
||||
|
||||
# PHP only, required if PHP was built with --enable-force-cgi-redirect
|
||||
fastcgi_param REDIRECT_STATUS 200;
|
||||
}
|
||||
|
||||
location ~ /\. {
|
||||
deny all;
|
||||
}
|
||||
|
||||
location ~ /(libraries|templates) {
|
||||
deny all;
|
||||
}
|
||||
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,17 @@
|
||||
[global]
|
||||
error_log = /var/log/php-fpm.log
|
||||
log_level = warning
|
||||
|
||||
[www]
|
||||
user = nobody
|
||||
group = nobody
|
||||
listen = /var/run/php/php-fpm.sock
|
||||
listen.mode = 0660
|
||||
chdir = /www
|
||||
pm = dynamic
|
||||
pm.max_children = 5
|
||||
pm.start_servers = 2
|
||||
pm.min_spare_servers = 1
|
||||
pm.max_spare_servers = 3
|
||||
catch_workers_output = Yes
|
||||
clear_env = No
|
||||
+1918
File diff suppressed because it is too large
Load Diff
@@ -0,0 +1,126 @@
|
||||
<?php
|
||||
|
||||
require('/etc/phpmyadmin/config.secret.inc.php');
|
||||
|
||||
/* Ensure we got the environment */
|
||||
$vars = array(
|
||||
'PMA_ARBITRARY',
|
||||
'PMA_HOST',
|
||||
'PMA_HOSTS',
|
||||
'PMA_VERBOSE',
|
||||
'PMA_VERBOSES',
|
||||
'PMA_PORT',
|
||||
'PMA_PORTS',
|
||||
'PMA_USER',
|
||||
'PMA_PASSWORD',
|
||||
'PMA_ABSOLUTE_URI',
|
||||
'PMA_CONTROLHOST',
|
||||
'PMA_CONTROLPORT',
|
||||
'PMA_PMADB',
|
||||
'PMA_CONTROLUSER',
|
||||
'PMA_CONTROLPASS',
|
||||
'PMA_QUERYHISTORYDB'
|
||||
);
|
||||
foreach ($vars as $var) {
|
||||
$env = getenv($var);
|
||||
if (!isset($_ENV[$var]) && $env !== false) {
|
||||
$_ENV[$var] = $env;
|
||||
}
|
||||
}
|
||||
if (isset($_ENV['PMA_QUERYHISTORYDB'])) {
|
||||
$cfg['QueryHistoryDB'] = boolval($_ENV['PMA_QUERYHISTORYDB']);
|
||||
}
|
||||
|
||||
/* Arbitrary server connection */
|
||||
if (isset($_ENV['PMA_ARBITRARY']) && $_ENV['PMA_ARBITRARY'] === '1') {
|
||||
$cfg['AllowArbitraryServer'] = true;
|
||||
}
|
||||
|
||||
/* Play nice behind reverse proxys */
|
||||
if (isset($_ENV['PMA_ABSOLUTE_URI'])) {
|
||||
$cfg['PmaAbsoluteUri'] = trim($_ENV['PMA_ABSOLUTE_URI']);
|
||||
}
|
||||
|
||||
/* Figure out hosts */
|
||||
|
||||
/* Fallback to default linked */
|
||||
$hosts = array('db');
|
||||
|
||||
/* Set by environment */
|
||||
if (!empty($_ENV['PMA_HOST'])) {
|
||||
$hosts = array($_ENV['PMA_HOST']);
|
||||
$verbose = array($_ENV['PMA_VERBOSE']);
|
||||
$ports = array($_ENV['PMA_PORT']);
|
||||
} elseif (!empty($_ENV['PMA_HOSTS'])) {
|
||||
$hosts = explode(',', $_ENV['PMA_HOSTS']);
|
||||
$verbose = explode(',', $_ENV['PMA_VERBOSES']);
|
||||
$ports = explode(',', $_ENV['PMA_PORTS']);
|
||||
}
|
||||
|
||||
/* Server settings */
|
||||
for ($i = 1; isset($hosts[$i - 1]); $i++) {
|
||||
$cfg['Servers'][$i]['host'] = $hosts[$i - 1];
|
||||
if (isset($verbose[$i - 1])) {
|
||||
$cfg['Servers'][$i]['verbose'] = $verbose[$i - 1];
|
||||
}
|
||||
if (isset($ports[$i - 1])) {
|
||||
$cfg['Servers'][$i]['port'] = $ports[$i - 1];
|
||||
}
|
||||
if (isset($_ENV['PMA_USER'])) {
|
||||
$cfg['Servers'][$i]['auth_type'] = 'config';
|
||||
$cfg['Servers'][$i]['user'] = $_ENV['PMA_USER'];
|
||||
$cfg['Servers'][$i]['password'] = isset($_ENV['PMA_PASSWORD']) ? $_ENV['PMA_PASSWORD'] : '';
|
||||
} else {
|
||||
$cfg['Servers'][$i]['auth_type'] = 'cookie';
|
||||
}
|
||||
if (isset($_ENV['PMA_PMADB'])) {
|
||||
$cfg['Servers'][$i]['pmadb'] = $_ENV['PMA_PMADB'];
|
||||
$cfg['Servers'][$i]['relation'] = 'pma__relation';
|
||||
$cfg['Servers'][$i]['table_info'] = 'pma__table_info';
|
||||
$cfg['Servers'][$i]['table_coords'] = 'pma__table_coords';
|
||||
$cfg['Servers'][$i]['pdf_pages'] = 'pma__pdf_pages';
|
||||
$cfg['Servers'][$i]['column_info'] = 'pma__column_info';
|
||||
$cfg['Servers'][$i]['bookmarktable'] = 'pma__bookmark';
|
||||
$cfg['Servers'][$i]['history'] = 'pma__history';
|
||||
$cfg['Servers'][$i]['recent'] = 'pma__recent';
|
||||
$cfg['Servers'][$i]['favorite'] = 'pma__favorite';
|
||||
$cfg['Servers'][$i]['table_uiprefs'] = 'pma__table_uiprefs';
|
||||
$cfg['Servers'][$i]['tracking'] = 'pma__tracking';
|
||||
$cfg['Servers'][$i]['userconfig'] = 'pma__userconfig';
|
||||
$cfg['Servers'][$i]['users'] = 'pma__users';
|
||||
$cfg['Servers'][$i]['usergroups'] = 'pma__usergroups';
|
||||
$cfg['Servers'][$i]['navigationhiding'] = 'pma__navigationhiding';
|
||||
$cfg['Servers'][$i]['savedsearches'] = 'pma__savedsearches';
|
||||
$cfg['Servers'][$i]['central_columns'] = 'pma__central_columns';
|
||||
$cfg['Servers'][$i]['designer_settings'] = 'pma__designer_settings';
|
||||
$cfg['Servers'][$i]['export_templates'] = 'pma__export_templates';
|
||||
$cfg['Servers'][$i]['compress'] = false;
|
||||
$cfg['Servers'][$i]['AllowNoPassword'] = true;
|
||||
}
|
||||
if (isset($_ENV['PMA_CONTROLHOST'])) {
|
||||
$cfg['Servers'][$i]['controlhost'] = $_ENV['PMA_CONTROLHOST'];
|
||||
}
|
||||
if (isset($_ENV['PMA_CONTROLPORT'])) {
|
||||
$cfg['Servers'][$i]['controlport'] = $_ENV['PMA_CONTROLPORT'];
|
||||
}
|
||||
if (isset($_ENV['PMA_CONTROLUSER'])) {
|
||||
$cfg['Servers'][$i]['controluser'] = $_ENV['PMA_CONTROLUSER'];
|
||||
}
|
||||
if (isset($_ENV['PMA_CONTROLPASS'])) {
|
||||
$cfg['Servers'][$i]['controlpass'] = $_ENV['PMA_CONTROLPASS'];
|
||||
}
|
||||
}
|
||||
/*
|
||||
* Revert back to last configured server to make
|
||||
* it easier in config.user.inc.php
|
||||
*/
|
||||
$i--;
|
||||
|
||||
/* Uploads setup */
|
||||
$cfg['UploadDir'] = '';
|
||||
$cfg['SaveDir'] = '';
|
||||
|
||||
/* Include User Defined Settings Hook */
|
||||
if (file_exists('/etc/phpmyadmin/config.user.inc.php')) {
|
||||
include('/etc/phpmyadmin/config.user.inc.php');
|
||||
}
|
||||
@@ -0,0 +1,12 @@
|
||||
[program:nginx]
|
||||
command=nginx -c /etc/nginx.conf
|
||||
autostart=true
|
||||
autorestart=true
|
||||
priority=2
|
||||
startretries=3
|
||||
stopwaitsecs=10
|
||||
stdout_logfile=/dev/stdout
|
||||
stdout_logfile_maxbytes=0
|
||||
stderr_logfile=/dev/stderr
|
||||
stderr_logfile_maxbytes=0
|
||||
|
||||
@@ -0,0 +1,13 @@
|
||||
[program:php-fpm]
|
||||
command=php-fpm --nodaemonize --fpm-config /etc/php-fpm.conf -c /etc/php.ini
|
||||
user=nobody
|
||||
autostart=true
|
||||
autorestart=true
|
||||
priority=1
|
||||
startretries=3
|
||||
stopwaitsecs=10
|
||||
stdout_logfile=/dev/stdout
|
||||
stdout_logfile_maxbytes=0
|
||||
stderr_logfile=/dev/stderr
|
||||
stderr_logfile_maxbytes=0
|
||||
|
||||
@@ -1,146 +0,0 @@
|
||||
# DO NOT EDIT: created by update.sh from Dockerfile-alpine.template
|
||||
FROM php:8.3-fpm-alpine
|
||||
|
||||
ENV UPLOAD_PROGRESS_EXT_URL="https://github.com/php/pecl-php-uploadprogress/archive/refs/tags/uploadprogress-2.0.2.tar.gz"
|
||||
ENV UPLOAD_PROGRESS_SHA256="fe3f6cdfcedad563c970c4fd1cda31e422cfc0df5cc9a217d8c80ed3c8d137f5"
|
||||
|
||||
# install and docker-entrypoint.sh dependencies
|
||||
RUN apk add --no-cache \
|
||||
bash \
|
||||
tzdata \
|
||||
gnupg
|
||||
|
||||
# Install dependencies
|
||||
RUN set -ex; \
|
||||
\
|
||||
apk add --no-cache --virtual .build-deps \
|
||||
bzip2-dev \
|
||||
freetype-dev \
|
||||
libjpeg-turbo-dev \
|
||||
libpng-dev \
|
||||
libwebp-dev \
|
||||
libxpm-dev \
|
||||
libzip-dev \
|
||||
; \
|
||||
\
|
||||
mkdir -p /usr/src/php/ext/uploadprogress; \
|
||||
curl -fsSL -o uploadprogress.tar.gz "$UPLOAD_PROGRESS_EXT_URL"; \
|
||||
echo "$UPLOAD_PROGRESS_SHA256 uploadprogress.tar.gz" | sha256sum -c -; \
|
||||
tar -xf uploadprogress.tar.gz -C /usr/src/php/ext/uploadprogress --strip-components=1; \
|
||||
\
|
||||
docker-php-ext-configure gd --with-freetype --with-jpeg --with-webp --with-xpm; \
|
||||
docker-php-ext-install -j "$(nproc)" \
|
||||
bz2 \
|
||||
gd \
|
||||
mysqli \
|
||||
opcache \
|
||||
zip \
|
||||
bcmath \
|
||||
uploadprogress \
|
||||
; \
|
||||
\
|
||||
rm -r /usr/src/php/ext/uploadprogress; \
|
||||
\
|
||||
runDeps="$( \
|
||||
scanelf --needed --nobanner --format '%n#p' --recursive /usr/local/lib/php/extensions \
|
||||
| tr ',' '\n' \
|
||||
| sort -u \
|
||||
| awk 'system("[ -e /usr/local/lib/" $1 " ]") == 0 { next } { print "so:" $1 }' \
|
||||
)"; \
|
||||
apk add --no-network --virtual .phpmyadmin-phpexts-rundeps $runDeps; \
|
||||
apk del --no-network .build-deps
|
||||
|
||||
# set recommended PHP.ini settings
|
||||
# see https://secure.php.net/manual/en/opcache.installation.php
|
||||
ENV PMA_SSL_DIR=/etc/phpmyadmin/ssl
|
||||
ENV MAX_EXECUTION_TIME=600
|
||||
ENV MEMORY_LIMIT=512M
|
||||
ENV UPLOAD_LIMIT=2048K
|
||||
ENV TZ=UTC
|
||||
ENV SESSION_SAVE_PATH=/sessions
|
||||
RUN set -ex; \
|
||||
mkdir $SESSION_SAVE_PATH; \
|
||||
mkdir -p $PMA_SSL_DIR; \
|
||||
chmod 1777 $SESSION_SAVE_PATH; \
|
||||
chmod 755 $PMA_SSL_DIR; \
|
||||
chown www-data:www-data /etc/phpmyadmin; \
|
||||
chown www-data:www-data $PMA_SSL_DIR; \
|
||||
chown www-data:www-data $SESSION_SAVE_PATH; \
|
||||
\
|
||||
{ \
|
||||
echo 'opcache.memory_consumption=128'; \
|
||||
echo 'opcache.interned_strings_buffer=8'; \
|
||||
echo 'opcache.max_accelerated_files=4000'; \
|
||||
echo 'opcache.revalidate_freq=2'; \
|
||||
echo 'opcache.fast_shutdown=1'; \
|
||||
} > $PHP_INI_DIR/conf.d/opcache-recommended.ini; \
|
||||
\
|
||||
{ \
|
||||
echo 'session.cookie_httponly=1'; \
|
||||
echo 'session.use_strict_mode=1'; \
|
||||
} > $PHP_INI_DIR/conf.d/session-strict.ini; \
|
||||
\
|
||||
{ \
|
||||
echo 'allow_url_fopen=Off'; \
|
||||
echo 'max_execution_time=${MAX_EXECUTION_TIME}'; \
|
||||
echo 'max_input_vars=10000'; \
|
||||
echo 'memory_limit=${MEMORY_LIMIT}'; \
|
||||
echo 'post_max_size=${UPLOAD_LIMIT}'; \
|
||||
echo 'upload_max_filesize=${UPLOAD_LIMIT}'; \
|
||||
echo 'date.timezone=${TZ}'; \
|
||||
echo 'session.save_path=${SESSION_SAVE_PATH}'; \
|
||||
} > $PHP_INI_DIR/conf.d/phpmyadmin-misc.ini
|
||||
|
||||
USER www-data:www-data
|
||||
|
||||
# Calculate download URL
|
||||
ENV VERSION=5.2.3
|
||||
ENV SHA256=57881348297c4412f86c410547cf76b4d8a236574dd2c6b7d6a2beebe7fc44e3
|
||||
ENV URL=https://files.phpmyadmin.net/phpMyAdmin/${VERSION}/phpMyAdmin-${VERSION}-all-languages.tar.xz
|
||||
|
||||
LABEL org.opencontainers.image.title="Official phpMyAdmin Docker image" \
|
||||
org.opencontainers.image.description="Run phpMyAdmin with Alpine, Apache and PHP FPM." \
|
||||
org.opencontainers.image.authors="The phpMyAdmin Team <developers@phpmyadmin.net>" \
|
||||
org.opencontainers.image.vendor="phpMyAdmin" \
|
||||
org.opencontainers.image.documentation="https://github.com/phpmyadmin/docker#readme" \
|
||||
org.opencontainers.image.licenses="GPL-2.0-only" \
|
||||
org.opencontainers.image.version="${VERSION}" \
|
||||
org.opencontainers.image.url="https://github.com/phpmyadmin/docker#readme" \
|
||||
org.opencontainers.image.source="https://github.com/phpmyadmin/docker.git"
|
||||
|
||||
# Download tarball, verify it using gpg and extract
|
||||
RUN set -ex; \
|
||||
\
|
||||
export GNUPGHOME="$(mktemp -d)"; \
|
||||
export GPGKEY="3D06A59ECE730EB71B511C17CE752F178259BD92"; \
|
||||
curl -fsSL -o phpMyAdmin.tar.xz $URL; \
|
||||
curl -fsSL -o phpMyAdmin.tar.xz.asc $URL.asc; \
|
||||
echo "$SHA256 *phpMyAdmin.tar.xz" | sha256sum -c -; \
|
||||
gpg --batch --keyserver keyserver.ubuntu.com --recv-keys "$GPGKEY" \
|
||||
|| gpg --batch --keyserver pgp.mit.edu --recv-keys "$GPGKEY" \
|
||||
|| gpg --batch --keyserver keyserver.pgp.com --recv-keys "$GPGKEY" \
|
||||
|| gpg --batch --keyserver keys.openpgp.org --recv-keys "$GPGKEY"; \
|
||||
gpg --batch --verify phpMyAdmin.tar.xz.asc phpMyAdmin.tar.xz; \
|
||||
tar -xf phpMyAdmin.tar.xz -C /var/www/html --strip-components=1; \
|
||||
mkdir -p /var/www/html/tmp; \
|
||||
gpgconf --kill all; \
|
||||
rm -r "$GNUPGHOME" phpMyAdmin.tar.xz phpMyAdmin.tar.xz.asc; \
|
||||
rm -r -v /var/www/html/setup/ /var/www/html/examples/ /var/www/html/js/src/ /var/www/html/babel.config.json /var/www/html/doc/html/_sources/ /var/www/html/RELEASE-DATE-$VERSION /var/www/html/CONTRIBUTING.md; \
|
||||
grep -q -F "'configFile' => ROOT_PATH . 'config.inc.php'," /var/www/html/libraries/vendor_config.php; \
|
||||
sed -i "s@'configFile' => .*@'configFile' => '/etc/phpmyadmin/config.inc.php',@" /var/www/html/libraries/vendor_config.php; \
|
||||
grep -q -F "'configFile' => '/etc/phpmyadmin/config.inc.php'," /var/www/html/libraries/vendor_config.php; \
|
||||
php -l /var/www/html/libraries/vendor_config.php; \
|
||||
find /var/www/html -type d -exec chmod 555 {} \;; \
|
||||
find /var/www/html -type f -exec chmod 444 {} \;; \
|
||||
chmod 1777 /var/www/html/tmp;
|
||||
|
||||
# Copy configuration
|
||||
COPY --chown=www-data:www-data config.inc.php /etc/phpmyadmin/config.inc.php
|
||||
COPY --chown=www-data:www-data helpers.php /etc/phpmyadmin/helpers.php
|
||||
|
||||
# Copy main script
|
||||
COPY docker-entrypoint.sh /docker-entrypoint.sh
|
||||
|
||||
USER root
|
||||
ENTRYPOINT [ "/docker-entrypoint.sh" ]
|
||||
CMD ["php-fpm"]
|
||||
@@ -1,246 +0,0 @@
|
||||
<?php
|
||||
|
||||
require_once '/etc/phpmyadmin/config.secret.inc.php';
|
||||
require_once '/etc/phpmyadmin/helpers.php';
|
||||
|
||||
/* Ensure we got the environment */
|
||||
$vars = [
|
||||
'PMA_ARBITRARY',
|
||||
'PMA_HOST',
|
||||
'PMA_HOSTS',
|
||||
'PMA_VERBOSE',
|
||||
'PMA_VERBOSES',
|
||||
'PMA_PORT',
|
||||
'PMA_PORTS',
|
||||
'PMA_SOCKET',
|
||||
'PMA_SOCKETS',
|
||||
'PMA_USER',
|
||||
'PMA_PASSWORD',
|
||||
'PMA_ABSOLUTE_URI',
|
||||
'PMA_CONTROLHOST',
|
||||
'PMA_CONTROLPORT',
|
||||
'PMA_PMADB',
|
||||
'PMA_CONTROLUSER',
|
||||
'PMA_CONTROLPASS',
|
||||
'PMA_QUERYHISTORYDB',
|
||||
'PMA_QUERYHISTORYMAX',
|
||||
'MAX_EXECUTION_TIME',
|
||||
'MEMORY_LIMIT',
|
||||
'PMA_UPLOADDIR',
|
||||
'PMA_SAVEDIR',
|
||||
'PMA_SSL',
|
||||
'PMA_SSLS',
|
||||
'PMA_SSL_DIR',
|
||||
'PMA_SSL_VERIFY',
|
||||
'PMA_SSL_VERIFIES',
|
||||
'PMA_SSL_CA',
|
||||
'PMA_SSL_CAS',
|
||||
'PMA_SSL_CA_BASE64',
|
||||
'PMA_SSL_CAS_BASE64',
|
||||
'PMA_SSL_KEY',
|
||||
'PMA_SSL_KEYS',
|
||||
'PMA_SSL_KEY_BASE64',
|
||||
'PMA_SSL_KEYS_BASE64',
|
||||
'PMA_SSL_CERT',
|
||||
'PMA_SSL_CERTS',
|
||||
'PMA_SSL_CERT_BASE64',
|
||||
'PMA_SSL_CERTS_BASE64',
|
||||
];
|
||||
|
||||
foreach ($vars as $var) {
|
||||
$env = getenv($var);
|
||||
if (!isset($_ENV[$var]) && $env !== false) {
|
||||
$_ENV[$var] = $env;
|
||||
}
|
||||
}
|
||||
|
||||
if (! defined('PMA_SSL_DIR')) {
|
||||
define('PMA_SSL_DIR', $_ENV['PMA_SSL_DIR'] ?? '/etc/phpmyadmin/ssl');
|
||||
}
|
||||
|
||||
if (isset($_ENV['PMA_QUERYHISTORYDB'])) {
|
||||
$cfg['QueryHistoryDB'] = (bool) $_ENV['PMA_QUERYHISTORYDB'];
|
||||
}
|
||||
|
||||
if (isset($_ENV['PMA_QUERYHISTORYMAX'])) {
|
||||
$cfg['QueryHistoryMax'] = (int) $_ENV['PMA_QUERYHISTORYMAX'];
|
||||
}
|
||||
|
||||
/* Arbitrary server connection */
|
||||
if (isset($_ENV['PMA_ARBITRARY']) && $_ENV['PMA_ARBITRARY'] === '1') {
|
||||
$cfg['AllowArbitraryServer'] = true;
|
||||
}
|
||||
|
||||
/* Play nice behind reverse proxys */
|
||||
if (isset($_ENV['PMA_ABSOLUTE_URI'])) {
|
||||
$cfg['PmaAbsoluteUri'] = trim($_ENV['PMA_ABSOLUTE_URI']);
|
||||
}
|
||||
|
||||
if (isset($_ENV['PMA_SSL_CA_BASE64'])) {
|
||||
$_ENV['PMA_SSL_CA'] = decodeBase64AndSaveFiles($_ENV['PMA_SSL_CA_BASE64'], 'phpmyadmin-ssl-CA', 'pem', PMA_SSL_DIR);
|
||||
}
|
||||
|
||||
/* Decode and save the SSL key from base64 */
|
||||
if (isset($_ENV['PMA_SSL_KEY_BASE64'])) {
|
||||
$_ENV['PMA_SSL_KEY'] = decodeBase64AndSaveFiles($_ENV['PMA_SSL_KEY_BASE64'], 'phpmyadmin-ssl-CERT', 'cert', PMA_SSL_DIR);
|
||||
}
|
||||
|
||||
/* Decode and save the SSL certificate from base64 */
|
||||
if (isset($_ENV['PMA_SSL_CERT_BASE64'])) {
|
||||
$_ENV['PMA_SSL_CERT'] = decodeBase64AndSaveFiles($_ENV['PMA_SSL_CERT_BASE64'], 'phpmyadmin-ssl-CERT', 'cert', PMA_SSL_DIR);
|
||||
}
|
||||
|
||||
/* Decode and save multiple SSL CA certificates from base64 */
|
||||
if (isset($_ENV['PMA_SSL_CAS_BASE64'])) {
|
||||
$_ENV['PMA_SSL_CAS'] = decodeBase64AndSaveFiles($_ENV['PMA_SSL_CAS_BASE64'], 'phpmyadmin-ssl-CA', 'pem', PMA_SSL_DIR);
|
||||
}
|
||||
|
||||
/* Decode and save multiple SSL keys from base64 */
|
||||
if (isset($_ENV['PMA_SSL_KEYS_BASE64'])) {
|
||||
$_ENV['PMA_SSL_KEYS'] = decodeBase64AndSaveFiles($_ENV['PMA_SSL_KEYS_BASE64'], 'phpmyadmin-ssl-CERT', 'cert', PMA_SSL_DIR);
|
||||
}
|
||||
|
||||
/* Decode and save multiple SSL certificates from base64 */
|
||||
if (isset($_ENV['PMA_SSL_CERTS_BASE64'])) {
|
||||
$_ENV['PMA_SSL_CERTS'] = decodeBase64AndSaveFiles($_ENV['PMA_SSL_CERTS_BASE64'], 'phpmyadmin-ssl-KEY', 'key', PMA_SSL_DIR);
|
||||
}
|
||||
|
||||
/* Figure out hosts */
|
||||
|
||||
/* Fallback to default linked */
|
||||
$hosts = ['db'];
|
||||
|
||||
/* Set by environment */
|
||||
if (! empty($_ENV['PMA_HOST'])) {
|
||||
$hosts = [$_ENV['PMA_HOST']];
|
||||
$verbose = [$_ENV['PMA_VERBOSE']];
|
||||
$ports = [$_ENV['PMA_PORT']];
|
||||
$ssls = [$_ENV['PMA_SSL']];
|
||||
$ssl_verifies = [$_ENV['PMA_SSL_VERIFY']];
|
||||
$ssl_cas = [$_ENV['PMA_SSL_CA']];
|
||||
$ssl_keys = [$_ENV['PMA_SSL_KEY']];
|
||||
$ssl_certs = [$_ENV['PMA_SSL_CERT']];
|
||||
} elseif (! empty($_ENV['PMA_HOSTS'])) {
|
||||
$hosts = array_map('trim', explode(',', $_ENV['PMA_HOSTS']));
|
||||
$verbose = array_map('trim', explode(',', $_ENV['PMA_VERBOSES']));
|
||||
$ports = array_map('trim', explode(',', $_ENV['PMA_PORTS']));
|
||||
$ssls = array_map('trim', explode(',', $_ENV['PMA_SSLS']));
|
||||
$ssl_verifies = array_map('trim', explode(',', $_ENV['PMA_SSL_VERIFIES']));
|
||||
$ssl_cas = array_map('trim', explode(',', $_ENV['PMA_SSL_CAS']));
|
||||
$ssl_keys = array_map('trim', explode(',', $_ENV['PMA_SSL_KEYS']));
|
||||
$ssl_certs = array_map('trim', explode(',', $_ENV['PMA_SSL_CERTS']));
|
||||
}
|
||||
|
||||
if (! empty($_ENV['PMA_SOCKET'])) {
|
||||
$sockets = [$_ENV['PMA_SOCKET']];
|
||||
} elseif (! empty($_ENV['PMA_SOCKETS'])) {
|
||||
$sockets = explode(',', $_ENV['PMA_SOCKETS']);
|
||||
}
|
||||
|
||||
/* Server settings */
|
||||
for ($i = 1; isset($hosts[$i - 1]); $i++) {
|
||||
if (isset($ssls[$i - 1]) && $ssls[$i - 1] === '1') {
|
||||
$cfg['Servers'][$i]['ssl'] = $ssls[$i - 1];
|
||||
}
|
||||
if (isset($ssl_verifies[$i - 1]) && $ssl_verifies[$i - 1] === '1') {
|
||||
$cfg['Servers'][$i]['ssl_verify'] = $ssl_verifies[$i - 1];
|
||||
}
|
||||
if (isset($ssl_cas[$i - 1])) {
|
||||
$cfg['Servers'][$i]['ssl_ca'] = $ssl_cas[$i - 1];
|
||||
}
|
||||
if (isset($ssl_keys[$i - 1])) {
|
||||
$cfg['Servers'][$i]['ssl_key'] = $ssl_keys[$i - 1];
|
||||
}
|
||||
if (isset($ssl_certs[$i - 1])) {
|
||||
$cfg['Servers'][$i]['ssl_cert'] = $ssl_certs[$i - 1];
|
||||
}
|
||||
$cfg['Servers'][$i]['host'] = $hosts[$i - 1];
|
||||
if (isset($verbose[$i - 1])) {
|
||||
$cfg['Servers'][$i]['verbose'] = $verbose[$i - 1];
|
||||
}
|
||||
if (isset($ports[$i - 1])) {
|
||||
$cfg['Servers'][$i]['port'] = $ports[$i - 1];
|
||||
}
|
||||
if (isset($_ENV['PMA_USER'])) {
|
||||
$cfg['Servers'][$i]['auth_type'] = 'config';
|
||||
$cfg['Servers'][$i]['user'] = $_ENV['PMA_USER'];
|
||||
$cfg['Servers'][$i]['password'] = isset($_ENV['PMA_PASSWORD']) ? $_ENV['PMA_PASSWORD'] : '';
|
||||
} else {
|
||||
$cfg['Servers'][$i]['auth_type'] = 'cookie';
|
||||
}
|
||||
if (isset($_ENV['PMA_PMADB'])) {
|
||||
$cfg['Servers'][$i]['pmadb'] = $_ENV['PMA_PMADB'];
|
||||
$cfg['Servers'][$i]['relation'] = 'pma__relation';
|
||||
$cfg['Servers'][$i]['table_info'] = 'pma__table_info';
|
||||
$cfg['Servers'][$i]['table_coords'] = 'pma__table_coords';
|
||||
$cfg['Servers'][$i]['pdf_pages'] = 'pma__pdf_pages';
|
||||
$cfg['Servers'][$i]['column_info'] = 'pma__column_info';
|
||||
$cfg['Servers'][$i]['bookmarktable'] = 'pma__bookmark';
|
||||
$cfg['Servers'][$i]['history'] = 'pma__history';
|
||||
$cfg['Servers'][$i]['recent'] = 'pma__recent';
|
||||
$cfg['Servers'][$i]['favorite'] = 'pma__favorite';
|
||||
$cfg['Servers'][$i]['table_uiprefs'] = 'pma__table_uiprefs';
|
||||
$cfg['Servers'][$i]['tracking'] = 'pma__tracking';
|
||||
$cfg['Servers'][$i]['userconfig'] = 'pma__userconfig';
|
||||
$cfg['Servers'][$i]['users'] = 'pma__users';
|
||||
$cfg['Servers'][$i]['usergroups'] = 'pma__usergroups';
|
||||
$cfg['Servers'][$i]['navigationhiding'] = 'pma__navigationhiding';
|
||||
$cfg['Servers'][$i]['savedsearches'] = 'pma__savedsearches';
|
||||
$cfg['Servers'][$i]['central_columns'] = 'pma__central_columns';
|
||||
$cfg['Servers'][$i]['designer_settings'] = 'pma__designer_settings';
|
||||
$cfg['Servers'][$i]['export_templates'] = 'pma__export_templates';
|
||||
}
|
||||
if (isset($_ENV['PMA_CONTROLHOST'])) {
|
||||
$cfg['Servers'][$i]['controlhost'] = $_ENV['PMA_CONTROLHOST'];
|
||||
}
|
||||
if (isset($_ENV['PMA_CONTROLPORT'])) {
|
||||
$cfg['Servers'][$i]['controlport'] = $_ENV['PMA_CONTROLPORT'];
|
||||
}
|
||||
if (isset($_ENV['PMA_CONTROLUSER'])) {
|
||||
$cfg['Servers'][$i]['controluser'] = $_ENV['PMA_CONTROLUSER'];
|
||||
}
|
||||
if (isset($_ENV['PMA_CONTROLPASS'])) {
|
||||
$cfg['Servers'][$i]['controlpass'] = $_ENV['PMA_CONTROLPASS'];
|
||||
}
|
||||
$cfg['Servers'][$i]['compress'] = false;
|
||||
$cfg['Servers'][$i]['AllowNoPassword'] = true;
|
||||
}
|
||||
// Avoid overwriting the last server id $i, use another variable name
|
||||
for ($socketHostId = 1; isset($sockets[$socketHostId - 1]); $socketHostId++) {
|
||||
$cfg['Servers'][$socketHostId]['socket'] = $sockets[$socketHostId - 1];
|
||||
$cfg['Servers'][$socketHostId]['host'] = 'localhost';
|
||||
}
|
||||
/*
|
||||
* Revert back to last configured server to make
|
||||
* it easier in config.user.inc.php
|
||||
*/
|
||||
$i--;
|
||||
|
||||
/* Uploads setup */
|
||||
if (isset($_ENV['PMA_UPLOADDIR'])) {
|
||||
$cfg['UploadDir'] = $_ENV['PMA_UPLOADDIR'];
|
||||
}
|
||||
|
||||
if (isset($_ENV['PMA_SAVEDIR'])) {
|
||||
$cfg['SaveDir'] = $_ENV['PMA_SAVEDIR'];
|
||||
}
|
||||
|
||||
if (isset($_ENV['MAX_EXECUTION_TIME'])) {
|
||||
$cfg['ExecTimeLimit'] = $_ENV['MAX_EXECUTION_TIME'];
|
||||
}
|
||||
|
||||
if (isset($_ENV['MEMORY_LIMIT'])) {
|
||||
$cfg['MemoryLimit'] = $_ENV['MEMORY_LIMIT'];
|
||||
}
|
||||
|
||||
/* Include User Defined Settings Hook */
|
||||
if (file_exists('/etc/phpmyadmin/config.user.inc.php')) {
|
||||
include '/etc/phpmyadmin/config.user.inc.php';
|
||||
}
|
||||
|
||||
/* Support additional configurations */
|
||||
if (is_dir('/etc/phpmyadmin/conf.d/')) {
|
||||
foreach (glob('/etc/phpmyadmin/conf.d/*.php') as $filename) {
|
||||
include $filename;
|
||||
}
|
||||
}
|
||||
@@ -1,55 +0,0 @@
|
||||
#!/bin/bash
|
||||
if [[ "$1" == apache2* ]] || [ "$1" == php-fpm ]; then
|
||||
|
||||
if [ ! -f /etc/phpmyadmin/config.secret.inc.php ]; then
|
||||
cat > /etc/phpmyadmin/config.secret.inc.php <<EOT
|
||||
<?php
|
||||
\$cfg['blowfish_secret'] = '$(tr -dc 'a-zA-Z0-9~!@#$%^&*_()+}{?></";.,[]=-' < /dev/urandom | fold -w 32 | head -n 1)';
|
||||
EOT
|
||||
fi
|
||||
chgrp www-data /etc/phpmyadmin/config.secret.inc.php
|
||||
|
||||
if [ ! -f /etc/phpmyadmin/config.user.inc.php ]; then
|
||||
touch /etc/phpmyadmin/config.user.inc.php
|
||||
fi
|
||||
fi
|
||||
|
||||
if [ ! -z "${HIDE_PHP_VERSION}" ]; then
|
||||
echo "PHP version is now hidden."
|
||||
echo -e 'expose_php = Off\n' > $PHP_INI_DIR/conf.d/phpmyadmin-hide-php-version.ini
|
||||
fi
|
||||
|
||||
if [ ! -z "${PMA_CONFIG_BASE64}" ]; then
|
||||
echo "Adding the custom config.inc.php from base64."
|
||||
echo "${PMA_CONFIG_BASE64}" | base64 -d > /etc/phpmyadmin/config.inc.php
|
||||
fi
|
||||
|
||||
if [ ! -z "${PMA_USER_CONFIG_BASE64}" ]; then
|
||||
echo "Adding the custom config.user.inc.php from base64."
|
||||
echo "${PMA_USER_CONFIG_BASE64}" | base64 -d > /etc/phpmyadmin/config.user.inc.php
|
||||
fi
|
||||
|
||||
|
||||
get_docker_secret() {
|
||||
local env_var="${1}"
|
||||
local env_var_file="${env_var}_FILE"
|
||||
|
||||
# Check if the variable with name $env_var_file (which is $PMA_PASSWORD_FILE for example)
|
||||
# is not empty and export $PMA_PASSWORD as the password in the Docker secrets file
|
||||
|
||||
if [[ -n "${!env_var_file}" ]]; then
|
||||
export "${env_var}"="$(cat "${!env_var_file}")"
|
||||
fi
|
||||
}
|
||||
|
||||
get_docker_secret PMA_USER
|
||||
get_docker_secret PMA_PASSWORD
|
||||
get_docker_secret MYSQL_ROOT_PASSWORD
|
||||
get_docker_secret MYSQL_PASSWORD
|
||||
get_docker_secret PMA_HOSTS
|
||||
get_docker_secret PMA_HOST
|
||||
get_docker_secret PMA_CONTROLHOST
|
||||
get_docker_secret PMA_CONTROLUSER
|
||||
get_docker_secret PMA_CONTROLPASS
|
||||
|
||||
exec "$@"
|
||||
@@ -1,51 +0,0 @@
|
||||
<?php
|
||||
|
||||
declare(strict_types=1);
|
||||
|
||||
/**
|
||||
* Helper function to decode and save multiple SSL files from base64.
|
||||
*
|
||||
* @param string $base64FilesContents The base64 encoded string containing multiple files separated by commas.
|
||||
* If no commas are present, the entire string is treated as a single file.
|
||||
* @param string $prefix The prefix to use for the generated file names.
|
||||
* @param string $extension The file extension to use for the generated files.
|
||||
* @param string $storageFolder The folder where to store the generated files.
|
||||
*
|
||||
* @return string A comma-separated list of paths to the generated files.
|
||||
*/
|
||||
function decodeBase64AndSaveFiles(string $base64FilesContents, string $prefix, string $extension, string $storageFolder): string
|
||||
{
|
||||
// Ensure the output directory exists
|
||||
if (! is_dir($storageFolder)) {
|
||||
mkdir($storageFolder, 0755, true);
|
||||
}
|
||||
|
||||
// Split the base64 string into an array of files
|
||||
$base64FilesContents = explode(',', trim($base64FilesContents));
|
||||
$counter = 1;
|
||||
$outputFiles = [];
|
||||
|
||||
// Process each file
|
||||
foreach ($base64FilesContents as $base64FileContent) {
|
||||
$outputFile = $storageFolder . '/' . $prefix . '-' . $counter . '.' . $extension;
|
||||
|
||||
$fileContent = base64_decode($base64FileContent, true);
|
||||
if ($fileContent === false) {
|
||||
echo 'Failed to decode: ' . $base64FileContent;
|
||||
exit(1);
|
||||
}
|
||||
|
||||
// Write the decoded file to the output directory
|
||||
if (file_put_contents($outputFile, $fileContent) === false) {
|
||||
echo 'Failed to write to ' . $outputFile;
|
||||
exit(1);
|
||||
}
|
||||
|
||||
// Add the output file path to the list
|
||||
$outputFiles[] = $outputFile;
|
||||
$counter++;
|
||||
}
|
||||
|
||||
// Return a comma-separated list of the generated file paths
|
||||
return implode(',', $outputFiles);
|
||||
}
|
||||
-157
@@ -1,157 +0,0 @@
|
||||
# DO NOT EDIT: created by update.sh from Dockerfile-debian.template
|
||||
FROM php:8.3-fpm
|
||||
|
||||
ENV UPLOAD_PROGRESS_EXT_URL="https://github.com/php/pecl-php-uploadprogress/archive/refs/tags/uploadprogress-2.0.2.tar.gz"
|
||||
ENV UPLOAD_PROGRESS_SHA256="fe3f6cdfcedad563c970c4fd1cda31e422cfc0df5cc9a217d8c80ed3c8d137f5"
|
||||
|
||||
# Install dependencies
|
||||
RUN set -ex; \
|
||||
\
|
||||
apt-get update; \
|
||||
apt-get install -y --no-install-recommends \
|
||||
gnupg \
|
||||
dirmngr \
|
||||
; \
|
||||
\
|
||||
savedAptMark="$(apt-mark showmanual)"; \
|
||||
\
|
||||
apt-get install -y --no-install-recommends \
|
||||
libbz2-dev \
|
||||
libfreetype6-dev \
|
||||
libjpeg-dev \
|
||||
libpng-dev \
|
||||
libwebp-dev \
|
||||
libxpm-dev \
|
||||
libzip-dev \
|
||||
; \
|
||||
\
|
||||
mkdir -p /usr/src/php/ext/uploadprogress; \
|
||||
curl -fsSL -o uploadprogress.tar.gz "$UPLOAD_PROGRESS_EXT_URL"; \
|
||||
echo "$UPLOAD_PROGRESS_SHA256 uploadprogress.tar.gz" | sha256sum -c -; \
|
||||
tar -xf uploadprogress.tar.gz -C /usr/src/php/ext/uploadprogress --strip-components=1; \
|
||||
\
|
||||
docker-php-ext-configure gd --with-freetype --with-jpeg --with-webp --with-xpm; \
|
||||
docker-php-ext-install -j "$(nproc)" \
|
||||
bz2 \
|
||||
gd \
|
||||
mysqli \
|
||||
opcache \
|
||||
zip \
|
||||
bcmath \
|
||||
uploadprogress \
|
||||
; \
|
||||
\
|
||||
rm -r /usr/src/php/ext/uploadprogress; \
|
||||
\
|
||||
apt-mark auto '.*' > /dev/null; \
|
||||
apt-mark manual $savedAptMark; \
|
||||
extdir="$(php -r 'echo ini_get("extension_dir");')"; \
|
||||
ldd "$extdir"/*.so \
|
||||
| awk '/=>/ { so = $(NF-1); if (index(so, "/usr/local/") == 1) { next }; gsub("^/(usr/)?", "", so); print so }' \
|
||||
| sort -u \
|
||||
| xargs -r dpkg-query -S \
|
||||
| cut -d: -f1 \
|
||||
| sort -u \
|
||||
| xargs -rt apt-mark manual; \
|
||||
\
|
||||
\
|
||||
apt-get purge -y --auto-remove -o APT::AutoRemove::RecommendsImportant=false; \
|
||||
rm -rf /var/lib/apt/lists/*; \
|
||||
ldd "$extdir"/*.so | grep -qzv "=> not found" || (echo "Sanity check failed: missing libraries:"; ldd "$extdir"/*.so | grep " => not found"; exit 1); \
|
||||
ldd "$extdir"/*.so | grep -q "libzip.so.* => .*/libzip.so.*" || (echo "Sanity check failed: libzip.so is not referenced"; ldd "$extdir"/*.so; exit 1); \
|
||||
err="$(php --version 3>&1 1>&2 2>&3)"; \
|
||||
[ -z "$err" ] || (echo "Sanity check failed: php returned errors; $err"; exit 1;);
|
||||
|
||||
# set recommended PHP.ini settings
|
||||
# see https://secure.php.net/manual/en/opcache.installation.php
|
||||
ENV PMA_SSL_DIR=/etc/phpmyadmin/ssl
|
||||
ENV MAX_EXECUTION_TIME=600
|
||||
ENV MEMORY_LIMIT=512M
|
||||
ENV UPLOAD_LIMIT=2048K
|
||||
ENV TZ=UTC
|
||||
ENV SESSION_SAVE_PATH=/sessions
|
||||
RUN set -ex; \
|
||||
mkdir $SESSION_SAVE_PATH; \
|
||||
mkdir -p $PMA_SSL_DIR; \
|
||||
chmod 1777 $SESSION_SAVE_PATH; \
|
||||
chmod 755 $PMA_SSL_DIR; \
|
||||
chown www-data:www-data /etc/phpmyadmin; \
|
||||
chown www-data:www-data $PMA_SSL_DIR; \
|
||||
chown www-data:www-data $SESSION_SAVE_PATH; \
|
||||
\
|
||||
{ \
|
||||
echo 'opcache.memory_consumption=128'; \
|
||||
echo 'opcache.interned_strings_buffer=8'; \
|
||||
echo 'opcache.max_accelerated_files=4000'; \
|
||||
echo 'opcache.revalidate_freq=2'; \
|
||||
echo 'opcache.fast_shutdown=1'; \
|
||||
} > $PHP_INI_DIR/conf.d/opcache-recommended.ini; \
|
||||
\
|
||||
{ \
|
||||
echo 'session.cookie_httponly=1'; \
|
||||
echo 'session.use_strict_mode=1'; \
|
||||
} > $PHP_INI_DIR/conf.d/session-strict.ini; \
|
||||
\
|
||||
{ \
|
||||
echo 'allow_url_fopen=Off'; \
|
||||
echo 'max_execution_time=${MAX_EXECUTION_TIME}'; \
|
||||
echo 'max_input_vars=10000'; \
|
||||
echo 'memory_limit=${MEMORY_LIMIT}'; \
|
||||
echo 'post_max_size=${UPLOAD_LIMIT}'; \
|
||||
echo 'upload_max_filesize=${UPLOAD_LIMIT}'; \
|
||||
echo 'date.timezone=${TZ}'; \
|
||||
echo 'session.save_path=${SESSION_SAVE_PATH}'; \
|
||||
} > $PHP_INI_DIR/conf.d/phpmyadmin-misc.ini
|
||||
|
||||
USER www-data:www-data
|
||||
|
||||
# Calculate download URL
|
||||
ENV VERSION=5.2.3
|
||||
ENV SHA256=57881348297c4412f86c410547cf76b4d8a236574dd2c6b7d6a2beebe7fc44e3
|
||||
ENV URL=https://files.phpmyadmin.net/phpMyAdmin/${VERSION}/phpMyAdmin-${VERSION}-all-languages.tar.xz
|
||||
|
||||
LABEL org.opencontainers.image.title="Official phpMyAdmin Docker image" \
|
||||
org.opencontainers.image.description="Run phpMyAdmin with Alpine, Apache and PHP FPM." \
|
||||
org.opencontainers.image.authors="The phpMyAdmin Team <developers@phpmyadmin.net>" \
|
||||
org.opencontainers.image.vendor="phpMyAdmin" \
|
||||
org.opencontainers.image.documentation="https://github.com/phpmyadmin/docker#readme" \
|
||||
org.opencontainers.image.licenses="GPL-2.0-only" \
|
||||
org.opencontainers.image.version="${VERSION}" \
|
||||
org.opencontainers.image.url="https://github.com/phpmyadmin/docker#readme" \
|
||||
org.opencontainers.image.source="https://github.com/phpmyadmin/docker.git"
|
||||
|
||||
# Download tarball, verify it using gpg and extract
|
||||
RUN set -ex; \
|
||||
export GNUPGHOME="$(mktemp -d)"; \
|
||||
export GPGKEY="3D06A59ECE730EB71B511C17CE752F178259BD92"; \
|
||||
curl -fsSL -o phpMyAdmin.tar.xz $URL; \
|
||||
curl -fsSL -o phpMyAdmin.tar.xz.asc $URL.asc; \
|
||||
echo "$SHA256 *phpMyAdmin.tar.xz" | sha256sum -c -; \
|
||||
gpg --batch --keyserver keyserver.ubuntu.com --recv-keys "$GPGKEY" \
|
||||
|| gpg --batch --keyserver pgp.mit.edu --recv-keys "$GPGKEY" \
|
||||
|| gpg --batch --keyserver keyserver.pgp.com --recv-keys "$GPGKEY" \
|
||||
|| gpg --batch --keyserver keys.openpgp.org --recv-keys "$GPGKEY"; \
|
||||
gpg --batch --verify phpMyAdmin.tar.xz.asc phpMyAdmin.tar.xz; \
|
||||
tar -xf phpMyAdmin.tar.xz -C /var/www/html --strip-components=1; \
|
||||
mkdir -p /var/www/html/tmp; \
|
||||
gpgconf --kill all; \
|
||||
rm -r "$GNUPGHOME" phpMyAdmin.tar.xz phpMyAdmin.tar.xz.asc; \
|
||||
rm -r -v /var/www/html/setup/ /var/www/html/examples/ /var/www/html/js/src/ /var/www/html/babel.config.json /var/www/html/doc/html/_sources/ /var/www/html/RELEASE-DATE-$VERSION /var/www/html/CONTRIBUTING.md; \
|
||||
grep -q -F "'configFile' => ROOT_PATH . 'config.inc.php'," /var/www/html/libraries/vendor_config.php; \
|
||||
sed -i "s@'configFile' => .*@'configFile' => '/etc/phpmyadmin/config.inc.php',@" /var/www/html/libraries/vendor_config.php; \
|
||||
grep -q -F "'configFile' => '/etc/phpmyadmin/config.inc.php'," /var/www/html/libraries/vendor_config.php; \
|
||||
php -l /var/www/html/libraries/vendor_config.php; \
|
||||
find /var/www/html -type d -exec chmod 555 {} \;; \
|
||||
find /var/www/html -type f -exec chmod 444 {} \;; \
|
||||
chmod 1777 /var/www/html/tmp;
|
||||
|
||||
# Copy configuration
|
||||
COPY --chown=www-data:www-data config.inc.php /etc/phpmyadmin/config.inc.php
|
||||
COPY --chown=www-data:www-data helpers.php /etc/phpmyadmin/helpers.php
|
||||
|
||||
# Copy main script
|
||||
COPY docker-entrypoint.sh /docker-entrypoint.sh
|
||||
|
||||
USER root
|
||||
ENTRYPOINT [ "/docker-entrypoint.sh" ]
|
||||
CMD ["php-fpm"]
|
||||
@@ -1,246 +0,0 @@
|
||||
<?php
|
||||
|
||||
require_once '/etc/phpmyadmin/config.secret.inc.php';
|
||||
require_once '/etc/phpmyadmin/helpers.php';
|
||||
|
||||
/* Ensure we got the environment */
|
||||
$vars = [
|
||||
'PMA_ARBITRARY',
|
||||
'PMA_HOST',
|
||||
'PMA_HOSTS',
|
||||
'PMA_VERBOSE',
|
||||
'PMA_VERBOSES',
|
||||
'PMA_PORT',
|
||||
'PMA_PORTS',
|
||||
'PMA_SOCKET',
|
||||
'PMA_SOCKETS',
|
||||
'PMA_USER',
|
||||
'PMA_PASSWORD',
|
||||
'PMA_ABSOLUTE_URI',
|
||||
'PMA_CONTROLHOST',
|
||||
'PMA_CONTROLPORT',
|
||||
'PMA_PMADB',
|
||||
'PMA_CONTROLUSER',
|
||||
'PMA_CONTROLPASS',
|
||||
'PMA_QUERYHISTORYDB',
|
||||
'PMA_QUERYHISTORYMAX',
|
||||
'MAX_EXECUTION_TIME',
|
||||
'MEMORY_LIMIT',
|
||||
'PMA_UPLOADDIR',
|
||||
'PMA_SAVEDIR',
|
||||
'PMA_SSL',
|
||||
'PMA_SSLS',
|
||||
'PMA_SSL_DIR',
|
||||
'PMA_SSL_VERIFY',
|
||||
'PMA_SSL_VERIFIES',
|
||||
'PMA_SSL_CA',
|
||||
'PMA_SSL_CAS',
|
||||
'PMA_SSL_CA_BASE64',
|
||||
'PMA_SSL_CAS_BASE64',
|
||||
'PMA_SSL_KEY',
|
||||
'PMA_SSL_KEYS',
|
||||
'PMA_SSL_KEY_BASE64',
|
||||
'PMA_SSL_KEYS_BASE64',
|
||||
'PMA_SSL_CERT',
|
||||
'PMA_SSL_CERTS',
|
||||
'PMA_SSL_CERT_BASE64',
|
||||
'PMA_SSL_CERTS_BASE64',
|
||||
];
|
||||
|
||||
foreach ($vars as $var) {
|
||||
$env = getenv($var);
|
||||
if (!isset($_ENV[$var]) && $env !== false) {
|
||||
$_ENV[$var] = $env;
|
||||
}
|
||||
}
|
||||
|
||||
if (! defined('PMA_SSL_DIR')) {
|
||||
define('PMA_SSL_DIR', $_ENV['PMA_SSL_DIR'] ?? '/etc/phpmyadmin/ssl');
|
||||
}
|
||||
|
||||
if (isset($_ENV['PMA_QUERYHISTORYDB'])) {
|
||||
$cfg['QueryHistoryDB'] = (bool) $_ENV['PMA_QUERYHISTORYDB'];
|
||||
}
|
||||
|
||||
if (isset($_ENV['PMA_QUERYHISTORYMAX'])) {
|
||||
$cfg['QueryHistoryMax'] = (int) $_ENV['PMA_QUERYHISTORYMAX'];
|
||||
}
|
||||
|
||||
/* Arbitrary server connection */
|
||||
if (isset($_ENV['PMA_ARBITRARY']) && $_ENV['PMA_ARBITRARY'] === '1') {
|
||||
$cfg['AllowArbitraryServer'] = true;
|
||||
}
|
||||
|
||||
/* Play nice behind reverse proxys */
|
||||
if (isset($_ENV['PMA_ABSOLUTE_URI'])) {
|
||||
$cfg['PmaAbsoluteUri'] = trim($_ENV['PMA_ABSOLUTE_URI']);
|
||||
}
|
||||
|
||||
if (isset($_ENV['PMA_SSL_CA_BASE64'])) {
|
||||
$_ENV['PMA_SSL_CA'] = decodeBase64AndSaveFiles($_ENV['PMA_SSL_CA_BASE64'], 'phpmyadmin-ssl-CA', 'pem', PMA_SSL_DIR);
|
||||
}
|
||||
|
||||
/* Decode and save the SSL key from base64 */
|
||||
if (isset($_ENV['PMA_SSL_KEY_BASE64'])) {
|
||||
$_ENV['PMA_SSL_KEY'] = decodeBase64AndSaveFiles($_ENV['PMA_SSL_KEY_BASE64'], 'phpmyadmin-ssl-CERT', 'cert', PMA_SSL_DIR);
|
||||
}
|
||||
|
||||
/* Decode and save the SSL certificate from base64 */
|
||||
if (isset($_ENV['PMA_SSL_CERT_BASE64'])) {
|
||||
$_ENV['PMA_SSL_CERT'] = decodeBase64AndSaveFiles($_ENV['PMA_SSL_CERT_BASE64'], 'phpmyadmin-ssl-CERT', 'cert', PMA_SSL_DIR);
|
||||
}
|
||||
|
||||
/* Decode and save multiple SSL CA certificates from base64 */
|
||||
if (isset($_ENV['PMA_SSL_CAS_BASE64'])) {
|
||||
$_ENV['PMA_SSL_CAS'] = decodeBase64AndSaveFiles($_ENV['PMA_SSL_CAS_BASE64'], 'phpmyadmin-ssl-CA', 'pem', PMA_SSL_DIR);
|
||||
}
|
||||
|
||||
/* Decode and save multiple SSL keys from base64 */
|
||||
if (isset($_ENV['PMA_SSL_KEYS_BASE64'])) {
|
||||
$_ENV['PMA_SSL_KEYS'] = decodeBase64AndSaveFiles($_ENV['PMA_SSL_KEYS_BASE64'], 'phpmyadmin-ssl-CERT', 'cert', PMA_SSL_DIR);
|
||||
}
|
||||
|
||||
/* Decode and save multiple SSL certificates from base64 */
|
||||
if (isset($_ENV['PMA_SSL_CERTS_BASE64'])) {
|
||||
$_ENV['PMA_SSL_CERTS'] = decodeBase64AndSaveFiles($_ENV['PMA_SSL_CERTS_BASE64'], 'phpmyadmin-ssl-KEY', 'key', PMA_SSL_DIR);
|
||||
}
|
||||
|
||||
/* Figure out hosts */
|
||||
|
||||
/* Fallback to default linked */
|
||||
$hosts = ['db'];
|
||||
|
||||
/* Set by environment */
|
||||
if (! empty($_ENV['PMA_HOST'])) {
|
||||
$hosts = [$_ENV['PMA_HOST']];
|
||||
$verbose = [$_ENV['PMA_VERBOSE']];
|
||||
$ports = [$_ENV['PMA_PORT']];
|
||||
$ssls = [$_ENV['PMA_SSL']];
|
||||
$ssl_verifies = [$_ENV['PMA_SSL_VERIFY']];
|
||||
$ssl_cas = [$_ENV['PMA_SSL_CA']];
|
||||
$ssl_keys = [$_ENV['PMA_SSL_KEY']];
|
||||
$ssl_certs = [$_ENV['PMA_SSL_CERT']];
|
||||
} elseif (! empty($_ENV['PMA_HOSTS'])) {
|
||||
$hosts = array_map('trim', explode(',', $_ENV['PMA_HOSTS']));
|
||||
$verbose = array_map('trim', explode(',', $_ENV['PMA_VERBOSES']));
|
||||
$ports = array_map('trim', explode(',', $_ENV['PMA_PORTS']));
|
||||
$ssls = array_map('trim', explode(',', $_ENV['PMA_SSLS']));
|
||||
$ssl_verifies = array_map('trim', explode(',', $_ENV['PMA_SSL_VERIFIES']));
|
||||
$ssl_cas = array_map('trim', explode(',', $_ENV['PMA_SSL_CAS']));
|
||||
$ssl_keys = array_map('trim', explode(',', $_ENV['PMA_SSL_KEYS']));
|
||||
$ssl_certs = array_map('trim', explode(',', $_ENV['PMA_SSL_CERTS']));
|
||||
}
|
||||
|
||||
if (! empty($_ENV['PMA_SOCKET'])) {
|
||||
$sockets = [$_ENV['PMA_SOCKET']];
|
||||
} elseif (! empty($_ENV['PMA_SOCKETS'])) {
|
||||
$sockets = explode(',', $_ENV['PMA_SOCKETS']);
|
||||
}
|
||||
|
||||
/* Server settings */
|
||||
for ($i = 1; isset($hosts[$i - 1]); $i++) {
|
||||
if (isset($ssls[$i - 1]) && $ssls[$i - 1] === '1') {
|
||||
$cfg['Servers'][$i]['ssl'] = $ssls[$i - 1];
|
||||
}
|
||||
if (isset($ssl_verifies[$i - 1]) && $ssl_verifies[$i - 1] === '1') {
|
||||
$cfg['Servers'][$i]['ssl_verify'] = $ssl_verifies[$i - 1];
|
||||
}
|
||||
if (isset($ssl_cas[$i - 1])) {
|
||||
$cfg['Servers'][$i]['ssl_ca'] = $ssl_cas[$i - 1];
|
||||
}
|
||||
if (isset($ssl_keys[$i - 1])) {
|
||||
$cfg['Servers'][$i]['ssl_key'] = $ssl_keys[$i - 1];
|
||||
}
|
||||
if (isset($ssl_certs[$i - 1])) {
|
||||
$cfg['Servers'][$i]['ssl_cert'] = $ssl_certs[$i - 1];
|
||||
}
|
||||
$cfg['Servers'][$i]['host'] = $hosts[$i - 1];
|
||||
if (isset($verbose[$i - 1])) {
|
||||
$cfg['Servers'][$i]['verbose'] = $verbose[$i - 1];
|
||||
}
|
||||
if (isset($ports[$i - 1])) {
|
||||
$cfg['Servers'][$i]['port'] = $ports[$i - 1];
|
||||
}
|
||||
if (isset($_ENV['PMA_USER'])) {
|
||||
$cfg['Servers'][$i]['auth_type'] = 'config';
|
||||
$cfg['Servers'][$i]['user'] = $_ENV['PMA_USER'];
|
||||
$cfg['Servers'][$i]['password'] = isset($_ENV['PMA_PASSWORD']) ? $_ENV['PMA_PASSWORD'] : '';
|
||||
} else {
|
||||
$cfg['Servers'][$i]['auth_type'] = 'cookie';
|
||||
}
|
||||
if (isset($_ENV['PMA_PMADB'])) {
|
||||
$cfg['Servers'][$i]['pmadb'] = $_ENV['PMA_PMADB'];
|
||||
$cfg['Servers'][$i]['relation'] = 'pma__relation';
|
||||
$cfg['Servers'][$i]['table_info'] = 'pma__table_info';
|
||||
$cfg['Servers'][$i]['table_coords'] = 'pma__table_coords';
|
||||
$cfg['Servers'][$i]['pdf_pages'] = 'pma__pdf_pages';
|
||||
$cfg['Servers'][$i]['column_info'] = 'pma__column_info';
|
||||
$cfg['Servers'][$i]['bookmarktable'] = 'pma__bookmark';
|
||||
$cfg['Servers'][$i]['history'] = 'pma__history';
|
||||
$cfg['Servers'][$i]['recent'] = 'pma__recent';
|
||||
$cfg['Servers'][$i]['favorite'] = 'pma__favorite';
|
||||
$cfg['Servers'][$i]['table_uiprefs'] = 'pma__table_uiprefs';
|
||||
$cfg['Servers'][$i]['tracking'] = 'pma__tracking';
|
||||
$cfg['Servers'][$i]['userconfig'] = 'pma__userconfig';
|
||||
$cfg['Servers'][$i]['users'] = 'pma__users';
|
||||
$cfg['Servers'][$i]['usergroups'] = 'pma__usergroups';
|
||||
$cfg['Servers'][$i]['navigationhiding'] = 'pma__navigationhiding';
|
||||
$cfg['Servers'][$i]['savedsearches'] = 'pma__savedsearches';
|
||||
$cfg['Servers'][$i]['central_columns'] = 'pma__central_columns';
|
||||
$cfg['Servers'][$i]['designer_settings'] = 'pma__designer_settings';
|
||||
$cfg['Servers'][$i]['export_templates'] = 'pma__export_templates';
|
||||
}
|
||||
if (isset($_ENV['PMA_CONTROLHOST'])) {
|
||||
$cfg['Servers'][$i]['controlhost'] = $_ENV['PMA_CONTROLHOST'];
|
||||
}
|
||||
if (isset($_ENV['PMA_CONTROLPORT'])) {
|
||||
$cfg['Servers'][$i]['controlport'] = $_ENV['PMA_CONTROLPORT'];
|
||||
}
|
||||
if (isset($_ENV['PMA_CONTROLUSER'])) {
|
||||
$cfg['Servers'][$i]['controluser'] = $_ENV['PMA_CONTROLUSER'];
|
||||
}
|
||||
if (isset($_ENV['PMA_CONTROLPASS'])) {
|
||||
$cfg['Servers'][$i]['controlpass'] = $_ENV['PMA_CONTROLPASS'];
|
||||
}
|
||||
$cfg['Servers'][$i]['compress'] = false;
|
||||
$cfg['Servers'][$i]['AllowNoPassword'] = true;
|
||||
}
|
||||
// Avoid overwriting the last server id $i, use another variable name
|
||||
for ($socketHostId = 1; isset($sockets[$socketHostId - 1]); $socketHostId++) {
|
||||
$cfg['Servers'][$socketHostId]['socket'] = $sockets[$socketHostId - 1];
|
||||
$cfg['Servers'][$socketHostId]['host'] = 'localhost';
|
||||
}
|
||||
/*
|
||||
* Revert back to last configured server to make
|
||||
* it easier in config.user.inc.php
|
||||
*/
|
||||
$i--;
|
||||
|
||||
/* Uploads setup */
|
||||
if (isset($_ENV['PMA_UPLOADDIR'])) {
|
||||
$cfg['UploadDir'] = $_ENV['PMA_UPLOADDIR'];
|
||||
}
|
||||
|
||||
if (isset($_ENV['PMA_SAVEDIR'])) {
|
||||
$cfg['SaveDir'] = $_ENV['PMA_SAVEDIR'];
|
||||
}
|
||||
|
||||
if (isset($_ENV['MAX_EXECUTION_TIME'])) {
|
||||
$cfg['ExecTimeLimit'] = $_ENV['MAX_EXECUTION_TIME'];
|
||||
}
|
||||
|
||||
if (isset($_ENV['MEMORY_LIMIT'])) {
|
||||
$cfg['MemoryLimit'] = $_ENV['MEMORY_LIMIT'];
|
||||
}
|
||||
|
||||
/* Include User Defined Settings Hook */
|
||||
if (file_exists('/etc/phpmyadmin/config.user.inc.php')) {
|
||||
include '/etc/phpmyadmin/config.user.inc.php';
|
||||
}
|
||||
|
||||
/* Support additional configurations */
|
||||
if (is_dir('/etc/phpmyadmin/conf.d/')) {
|
||||
foreach (glob('/etc/phpmyadmin/conf.d/*.php') as $filename) {
|
||||
include $filename;
|
||||
}
|
||||
}
|
||||
@@ -1,55 +0,0 @@
|
||||
#!/bin/bash
|
||||
if [[ "$1" == apache2* ]] || [ "$1" == php-fpm ]; then
|
||||
|
||||
if [ ! -f /etc/phpmyadmin/config.secret.inc.php ]; then
|
||||
cat > /etc/phpmyadmin/config.secret.inc.php <<EOT
|
||||
<?php
|
||||
\$cfg['blowfish_secret'] = '$(tr -dc 'a-zA-Z0-9~!@#$%^&*_()+}{?></";.,[]=-' < /dev/urandom | fold -w 32 | head -n 1)';
|
||||
EOT
|
||||
fi
|
||||
chgrp www-data /etc/phpmyadmin/config.secret.inc.php
|
||||
|
||||
if [ ! -f /etc/phpmyadmin/config.user.inc.php ]; then
|
||||
touch /etc/phpmyadmin/config.user.inc.php
|
||||
fi
|
||||
fi
|
||||
|
||||
if [ ! -z "${HIDE_PHP_VERSION}" ]; then
|
||||
echo "PHP version is now hidden."
|
||||
echo -e 'expose_php = Off\n' > $PHP_INI_DIR/conf.d/phpmyadmin-hide-php-version.ini
|
||||
fi
|
||||
|
||||
if [ ! -z "${PMA_CONFIG_BASE64}" ]; then
|
||||
echo "Adding the custom config.inc.php from base64."
|
||||
echo "${PMA_CONFIG_BASE64}" | base64 -d > /etc/phpmyadmin/config.inc.php
|
||||
fi
|
||||
|
||||
if [ ! -z "${PMA_USER_CONFIG_BASE64}" ]; then
|
||||
echo "Adding the custom config.user.inc.php from base64."
|
||||
echo "${PMA_USER_CONFIG_BASE64}" | base64 -d > /etc/phpmyadmin/config.user.inc.php
|
||||
fi
|
||||
|
||||
|
||||
get_docker_secret() {
|
||||
local env_var="${1}"
|
||||
local env_var_file="${env_var}_FILE"
|
||||
|
||||
# Check if the variable with name $env_var_file (which is $PMA_PASSWORD_FILE for example)
|
||||
# is not empty and export $PMA_PASSWORD as the password in the Docker secrets file
|
||||
|
||||
if [[ -n "${!env_var_file}" ]]; then
|
||||
export "${env_var}"="$(cat "${!env_var_file}")"
|
||||
fi
|
||||
}
|
||||
|
||||
get_docker_secret PMA_USER
|
||||
get_docker_secret PMA_PASSWORD
|
||||
get_docker_secret MYSQL_ROOT_PASSWORD
|
||||
get_docker_secret MYSQL_PASSWORD
|
||||
get_docker_secret PMA_HOSTS
|
||||
get_docker_secret PMA_HOST
|
||||
get_docker_secret PMA_CONTROLHOST
|
||||
get_docker_secret PMA_CONTROLUSER
|
||||
get_docker_secret PMA_CONTROLPASS
|
||||
|
||||
exec "$@"
|
||||
@@ -1,51 +0,0 @@
|
||||
<?php
|
||||
|
||||
declare(strict_types=1);
|
||||
|
||||
/**
|
||||
* Helper function to decode and save multiple SSL files from base64.
|
||||
*
|
||||
* @param string $base64FilesContents The base64 encoded string containing multiple files separated by commas.
|
||||
* If no commas are present, the entire string is treated as a single file.
|
||||
* @param string $prefix The prefix to use for the generated file names.
|
||||
* @param string $extension The file extension to use for the generated files.
|
||||
* @param string $storageFolder The folder where to store the generated files.
|
||||
*
|
||||
* @return string A comma-separated list of paths to the generated files.
|
||||
*/
|
||||
function decodeBase64AndSaveFiles(string $base64FilesContents, string $prefix, string $extension, string $storageFolder): string
|
||||
{
|
||||
// Ensure the output directory exists
|
||||
if (! is_dir($storageFolder)) {
|
||||
mkdir($storageFolder, 0755, true);
|
||||
}
|
||||
|
||||
// Split the base64 string into an array of files
|
||||
$base64FilesContents = explode(',', trim($base64FilesContents));
|
||||
$counter = 1;
|
||||
$outputFiles = [];
|
||||
|
||||
// Process each file
|
||||
foreach ($base64FilesContents as $base64FileContent) {
|
||||
$outputFile = $storageFolder . '/' . $prefix . '-' . $counter . '.' . $extension;
|
||||
|
||||
$fileContent = base64_decode($base64FileContent, true);
|
||||
if ($fileContent === false) {
|
||||
echo 'Failed to decode: ' . $base64FileContent;
|
||||
exit(1);
|
||||
}
|
||||
|
||||
// Write the decoded file to the output directory
|
||||
if (file_put_contents($outputFile, $fileContent) === false) {
|
||||
echo 'Failed to write to ' . $outputFile;
|
||||
exit(1);
|
||||
}
|
||||
|
||||
// Add the output file path to the list
|
||||
$outputFiles[] = $outputFile;
|
||||
$counter++;
|
||||
}
|
||||
|
||||
// Return a comma-separated list of the generated file paths
|
||||
return implode(',', $outputFiles);
|
||||
}
|
||||
@@ -1,95 +0,0 @@
|
||||
#!/usr/bin/env bash
|
||||
set -Eeuo pipefail
|
||||
|
||||
self="$(basename "$BASH_SOURCE")"
|
||||
cd "$(dirname "$(readlink -f "$BASH_SOURCE")")"
|
||||
|
||||
# get the most recent commit which modified any of "$@"
|
||||
fileCommit() {
|
||||
git log -1 --format='format:%H' HEAD -- "$@"
|
||||
}
|
||||
|
||||
# get the most recent commit which modified "$1/Dockerfile" or any file COPY'd from "$1/Dockerfile"
|
||||
dirCommit() {
|
||||
local dir="$1"; shift
|
||||
(
|
||||
cd "$dir"
|
||||
fileCommit \
|
||||
Dockerfile \
|
||||
$(git show HEAD:./Dockerfile | awk '
|
||||
toupper($1) == "COPY" {
|
||||
for (i = 2; i < NF; i++) {
|
||||
print $i
|
||||
}
|
||||
}
|
||||
')
|
||||
)
|
||||
}
|
||||
|
||||
getArches() {
|
||||
local repo="$1"; shift
|
||||
local officialImagesUrl='https://github.com/docker-library/official-images/raw/master/library/'
|
||||
|
||||
eval "declare -A -g parentRepoToArches=( $(
|
||||
find -name 'Dockerfile' -exec awk '
|
||||
toupper($1) == "FROM" && $2 !~ /^('"$repo"'|scratch|.*\/.*)(:|$)/ {
|
||||
print "'"$officialImagesUrl"'" $2
|
||||
}
|
||||
' '{}' + \
|
||||
| sort -u \
|
||||
| xargs bashbrew cat --format '[{{ .RepoName }}:{{ .TagName }}]="{{ join " " .TagEntry.Architectures }}"'
|
||||
) )"
|
||||
}
|
||||
getArches 'phpmyadmin'
|
||||
|
||||
if ! command -v bashbrew --version &> /dev/null
|
||||
then
|
||||
echo "bashbrew could not be found"
|
||||
echo "You can download it from Jenkins at https://github.com/docker-library/bashbrew#installing"
|
||||
exit 1
|
||||
fi
|
||||
|
||||
cat <<-EOH
|
||||
# This file is generated via https://github.com/phpmyadmin/docker/blob/$(fileCommit "$self")/$self
|
||||
Maintainers: Isaac Bennetch <bennetch@gmail.com> (@ibennetch),
|
||||
William Desportes <williamdes@wdes.fr> (@williamdes)
|
||||
GitRepo: https://github.com/phpmyadmin/docker.git
|
||||
EOH
|
||||
|
||||
# prints "$2$1$3$1...$N"
|
||||
join() {
|
||||
local sep="$1"; shift
|
||||
local out; printf -v out "${sep//%/%%}%s" "$@"
|
||||
echo "${out#$sep}"
|
||||
}
|
||||
|
||||
latest="$(curl -fsSL 'https://www.phpmyadmin.net/home_page/version.json' | jq -r '.version' | grep -E '^[0-9]{1,}.[0-9]{1,}.[0-9]{1,}$')"
|
||||
|
||||
for variant in apache fpm fpm-alpine; do
|
||||
commit="$(dirCommit "$variant")"
|
||||
fullversion="$(git show "$commit":"$variant/Dockerfile" | awk -F" |=" '$1 == "ENV" && $2 == "VERSION" { print $3; exit }')"
|
||||
|
||||
versionAliases=( "$fullversion" "${fullversion%.*}" "${fullversion%.*.*}" )
|
||||
if [ "$fullversion" = "$latest" ]; then
|
||||
versionAliases+=( "latest" )
|
||||
fi
|
||||
|
||||
variantAliases=( "${versionAliases[@]/%/-$variant}" )
|
||||
variantAliases=( "${variantAliases[@]//latest-}" )
|
||||
|
||||
if [ "$variant" = "apache" ]; then
|
||||
variantAliases+=( "${versionAliases[@]}" )
|
||||
fi
|
||||
|
||||
variantParent="$(awk 'toupper($1) == "FROM" { print $2 }' "$variant/Dockerfile")"
|
||||
|
||||
variantArches="${parentRepoToArches[$variantParent]}"
|
||||
|
||||
cat <<-EOE
|
||||
|
||||
Tags: $(join ', ' "${variantAliases[@]}")
|
||||
Architectures: $(join ', ' $variantArches)
|
||||
GitCommit: $commit
|
||||
Directory: $variant
|
||||
EOE
|
||||
done
|
||||
-51
@@ -1,51 +0,0 @@
|
||||
<?php
|
||||
|
||||
declare(strict_types=1);
|
||||
|
||||
/**
|
||||
* Helper function to decode and save multiple SSL files from base64.
|
||||
*
|
||||
* @param string $base64FilesContents The base64 encoded string containing multiple files separated by commas.
|
||||
* If no commas are present, the entire string is treated as a single file.
|
||||
* @param string $prefix The prefix to use for the generated file names.
|
||||
* @param string $extension The file extension to use for the generated files.
|
||||
* @param string $storageFolder The folder where to store the generated files.
|
||||
*
|
||||
* @return string A comma-separated list of paths to the generated files.
|
||||
*/
|
||||
function decodeBase64AndSaveFiles(string $base64FilesContents, string $prefix, string $extension, string $storageFolder): string
|
||||
{
|
||||
// Ensure the output directory exists
|
||||
if (! is_dir($storageFolder)) {
|
||||
mkdir($storageFolder, 0755, true);
|
||||
}
|
||||
|
||||
// Split the base64 string into an array of files
|
||||
$base64FilesContents = explode(',', trim($base64FilesContents));
|
||||
$counter = 1;
|
||||
$outputFiles = [];
|
||||
|
||||
// Process each file
|
||||
foreach ($base64FilesContents as $base64FileContent) {
|
||||
$outputFile = $storageFolder . '/' . $prefix . '-' . $counter . '.' . $extension;
|
||||
|
||||
$fileContent = base64_decode($base64FileContent, true);
|
||||
if ($fileContent === false) {
|
||||
echo 'Failed to decode: ' . $base64FileContent;
|
||||
exit(1);
|
||||
}
|
||||
|
||||
// Write the decoded file to the output directory
|
||||
if (file_put_contents($outputFile, $fileContent) === false) {
|
||||
echo 'Failed to write to ' . $outputFile;
|
||||
exit(1);
|
||||
}
|
||||
|
||||
// Add the output file path to the list
|
||||
$outputFiles[] = $outputFile;
|
||||
$counter++;
|
||||
}
|
||||
|
||||
// Return a comma-separated list of the generated file paths
|
||||
return implode(',', $outputFiles);
|
||||
}
|
||||
@@ -1,4 +0,0 @@
|
||||
#!/bin/sh
|
||||
# This file is used by docker hub to build the image
|
||||
|
||||
docker build -t $IMAGE_NAME .
|
||||
@@ -0,0 +1,22 @@
|
||||
#!/bin/sh
|
||||
if [ ! -f /etc/phpmyadmin/config.secret.inc.php ] ; then
|
||||
cat > /etc/phpmyadmin/config.secret.inc.php <<EOT
|
||||
<?php
|
||||
\$cfg['blowfish_secret'] = '$(tr -dc 'a-zA-Z0-9~!@#$%^&*_()+}{?></";.,[]=-' < /dev/urandom | fold -w 32 | head -n 1)';
|
||||
EOT
|
||||
fi
|
||||
|
||||
if [ ! -f /etc/phpmyadmin/config.user.inc.php ] ; then
|
||||
touch /etc/phpmyadmin/config.user.inc.php
|
||||
fi
|
||||
|
||||
mkdir -p /var/nginx/client_body_temp
|
||||
chown nobody:nobody /sessions /var/nginx/client_body_temp
|
||||
mkdir -p /var/run/php/
|
||||
chown nobody:nobody /var/run/php/
|
||||
touch /var/log/php-fpm.log
|
||||
chown nobody:nobody /var/log/php-fpm.log
|
||||
|
||||
if [ "$1" = 'phpmyadmin' ]; then
|
||||
exec supervisord --nodaemon --configuration="/etc/supervisord.conf" --loglevel=info
|
||||
fi
|
||||
+6
-5
@@ -1,9 +1,10 @@
|
||||
# Testing image for phpMyAdmin
|
||||
|
||||
FROM alpine:3.21
|
||||
FROM phpmyadmin/phpmyadmin
|
||||
|
||||
# Install test dependencies
|
||||
RUN set -ex; \
|
||||
\
|
||||
apk add --no-cache --update mariadb-client mariadb-connector-c bash \
|
||||
py3-html5lib py3-pytest py3-mechanize curl
|
||||
RUN apk add --no-cache curl py2-pip
|
||||
RUN pip install mechanize html5lib
|
||||
|
||||
COPY test-mariadb.ini test-mysql.ini /etc/supervisor.d/
|
||||
COPY phpmyadmin_test.py test-docker.sh world.sql /
|
||||
|
||||
@@ -1,3 +0,0 @@
|
||||
<?php
|
||||
|
||||
$cfg['ShowPhpInfo'] = true;
|
||||
@@ -1,33 +0,0 @@
|
||||
import pytest
|
||||
|
||||
def pytest_addoption(parser):
|
||||
parser.addoption("--url")
|
||||
parser.addoption("--username")
|
||||
parser.addoption("--password")
|
||||
parser.addoption("--root-password")
|
||||
parser.addoption("--server")
|
||||
parser.addoption("--sqlfile")
|
||||
|
||||
@pytest.fixture
|
||||
def url(request):
|
||||
return request.config.getoption("--url")
|
||||
|
||||
@pytest.fixture
|
||||
def username(request):
|
||||
return request.config.getoption("--username")
|
||||
|
||||
@pytest.fixture
|
||||
def password(request):
|
||||
return request.config.getoption("--password")
|
||||
|
||||
@pytest.fixture
|
||||
def root_password(request):
|
||||
return request.config.getoption("--root-password")
|
||||
|
||||
@pytest.fixture
|
||||
def server(request):
|
||||
return request.config.getoption("--server")
|
||||
|
||||
@pytest.fixture
|
||||
def sqlfile(request):
|
||||
return request.config.getoption("--sqlfile")
|
||||
@@ -1,69 +0,0 @@
|
||||
version: "3.1"
|
||||
|
||||
services:
|
||||
db_server:
|
||||
image: ${DB:-mariadb:10.11}
|
||||
environment:
|
||||
MARIADB_ROOT_PASSWORD: "${TESTSUITE_PASSWORD:-my-secret-pw}"
|
||||
healthcheck:
|
||||
test: ["CMD", "mariadb-admin", "ping", "-uroot", "-p${TESTSUITE_PASSWORD:-my-secret-pw}"]
|
||||
start_period: 10s
|
||||
interval: 5s
|
||||
timeout: 60s
|
||||
retries: 10
|
||||
networks:
|
||||
testing:
|
||||
aliases:
|
||||
- phpmyadmin_testing_db
|
||||
tmpfs:
|
||||
- /var/lib/mysql:rw,noexec,nosuid,size=300m
|
||||
|
||||
phpmyadmin:
|
||||
build:
|
||||
context: ../../apache
|
||||
environment:
|
||||
PMA_HOST: db_server
|
||||
UPLOAD_LIMIT: 123M
|
||||
MAX_EXECUTION_TIME: 125
|
||||
HIDE_PHP_VERSION: 1
|
||||
volumes:
|
||||
- ../config.user.inc.php:/etc/phpmyadmin/conf.d/config.test.php:ro
|
||||
healthcheck:
|
||||
test: ["CMD", "curl", "-Ss", "http://localhost/robots.txt"]
|
||||
start_period: 5s
|
||||
interval: 3s
|
||||
timeout: 60s
|
||||
retries: 10
|
||||
networks:
|
||||
testing:
|
||||
aliases:
|
||||
- phpmyadmin_testing_apache
|
||||
depends_on:
|
||||
db_server:
|
||||
condition: service_healthy
|
||||
|
||||
sut:
|
||||
depends_on:
|
||||
phpmyadmin:
|
||||
condition: service_healthy
|
||||
db_server:
|
||||
condition: service_healthy
|
||||
build:
|
||||
context: ../
|
||||
command: "/tests/testing/test-docker.sh"
|
||||
networks:
|
||||
testing:
|
||||
environment:
|
||||
TESTSUITE_HOSTNAME: phpmyadmin_testing_apache
|
||||
TESTSUITE_PORT: 80
|
||||
TESTSUITE_PASSWORD: "${TESTSUITE_PASSWORD:-my-secret-pw}"
|
||||
PMA_HOST: phpmyadmin_testing_db
|
||||
PMA_PORT: 3306
|
||||
volumes:
|
||||
- ../../:/tests:ro
|
||||
- /var/run/docker.sock:/var/run/docker.sock
|
||||
working_dir: /tests
|
||||
|
||||
networks:
|
||||
testing:
|
||||
driver: bridge
|
||||
@@ -1,69 +0,0 @@
|
||||
version: "3.1"
|
||||
|
||||
services:
|
||||
db_server:
|
||||
image: ${DB:-mariadb:10.11}
|
||||
environment:
|
||||
MARIADB_ROOT_PASSWORD: "${TESTSUITE_PASSWORD:-my-secret-pw}"
|
||||
healthcheck:
|
||||
test: ["CMD", "mariadb-admin", "ping", "-uroot", "-p${TESTSUITE_PASSWORD:-my-secret-pw}"]
|
||||
start_period: 10s
|
||||
interval: 5s
|
||||
timeout: 60s
|
||||
retries: 10
|
||||
networks:
|
||||
testing:
|
||||
aliases:
|
||||
- phpmyadmin_testing_db
|
||||
tmpfs:
|
||||
- /var/lib/mysql:rw,noexec,nosuid,size=300m
|
||||
|
||||
phpmyadmin:
|
||||
build:
|
||||
context: ../../apache
|
||||
environment:
|
||||
PMA_ARBITRARY: 1
|
||||
UPLOAD_LIMIT: 123M
|
||||
MAX_EXECUTION_TIME: 125
|
||||
HIDE_PHP_VERSION: 1
|
||||
volumes:
|
||||
- ../config.user.inc.php:/etc/phpmyadmin/config.user.inc.php:ro
|
||||
healthcheck:
|
||||
test: ["CMD", "curl", "-Ss", "http://localhost/robots.txt"]
|
||||
start_period: 5s
|
||||
interval: 3s
|
||||
timeout: 60s
|
||||
retries: 10
|
||||
networks:
|
||||
testing:
|
||||
aliases:
|
||||
- phpmyadmin_testing_apache
|
||||
depends_on:
|
||||
db_server:
|
||||
condition: service_healthy
|
||||
|
||||
sut:
|
||||
depends_on:
|
||||
phpmyadmin:
|
||||
condition: service_healthy
|
||||
db_server:
|
||||
condition: service_healthy
|
||||
build:
|
||||
context: ../
|
||||
command: "/tests/testing/test-docker.sh"
|
||||
networks:
|
||||
testing:
|
||||
environment:
|
||||
TESTSUITE_HOSTNAME_ARBITRARY: 1
|
||||
TESTSUITE_HOSTNAME: phpmyadmin_testing_apache
|
||||
PMA_HOST: phpmyadmin_testing_db
|
||||
TESTSUITE_PORT: 80
|
||||
TESTSUITE_PASSWORD: "${TESTSUITE_PASSWORD:-my-secret-pw}"
|
||||
volumes:
|
||||
- ../../:/tests:ro
|
||||
- /var/run/docker.sock:/var/run/docker.sock
|
||||
working_dir: /tests
|
||||
|
||||
networks:
|
||||
testing:
|
||||
driver: bridge
|
||||
@@ -1,70 +0,0 @@
|
||||
version: "3.1"
|
||||
|
||||
services:
|
||||
db_server:
|
||||
image: ${DB:-mariadb:10.11}
|
||||
environment:
|
||||
MARIADB_ROOT_PASSWORD: "${TESTSUITE_PASSWORD:-my-secret-pw}"
|
||||
healthcheck:
|
||||
test: ["CMD", "mariadb-admin", "ping", "-uroot", "-p${TESTSUITE_PASSWORD:-my-secret-pw}"]
|
||||
start_period: 10s
|
||||
interval: 5s
|
||||
timeout: 60s
|
||||
retries: 10
|
||||
networks:
|
||||
testing:
|
||||
aliases:
|
||||
- phpmyadmin_testing_db
|
||||
tmpfs:
|
||||
- /var/lib/mysql:rw,noexec,nosuid,size=300m
|
||||
|
||||
phpmyadmin:
|
||||
build:
|
||||
context: ../../apache
|
||||
environment:
|
||||
PMA_HOST: db_server
|
||||
UPLOAD_LIMIT: 123M
|
||||
MAX_EXECUTION_TIME: 125
|
||||
HIDE_PHP_VERSION: 1
|
||||
APACHE_PORT: 8090
|
||||
volumes:
|
||||
- ../config.user.inc.php:/etc/phpmyadmin/config.user.inc.php:ro
|
||||
healthcheck:
|
||||
test: ["CMD", "curl", "-Ss", "http://localhost:8090/robots.txt"]
|
||||
start_period: 5s
|
||||
interval: 3s
|
||||
timeout: 60s
|
||||
retries: 10
|
||||
networks:
|
||||
testing:
|
||||
aliases:
|
||||
- phpmyadmin_testing_apache
|
||||
depends_on:
|
||||
db_server:
|
||||
condition: service_healthy
|
||||
|
||||
sut:
|
||||
depends_on:
|
||||
phpmyadmin:
|
||||
condition: service_healthy
|
||||
db_server:
|
||||
condition: service_healthy
|
||||
build:
|
||||
context: ../
|
||||
command: "/tests/testing/test-docker.sh"
|
||||
networks:
|
||||
testing:
|
||||
environment:
|
||||
TESTSUITE_HOSTNAME: phpmyadmin_testing_apache
|
||||
TESTSUITE_PORT: 8090
|
||||
TESTSUITE_PASSWORD: "${TESTSUITE_PASSWORD:-my-secret-pw}"
|
||||
PMA_HOST: phpmyadmin_testing_db
|
||||
PMA_PORT: 3306
|
||||
volumes:
|
||||
- ../../:/tests:ro
|
||||
- /var/run/docker.sock:/var/run/docker.sock
|
||||
working_dir: /tests
|
||||
|
||||
networks:
|
||||
testing:
|
||||
driver: bridge
|
||||
@@ -1,80 +0,0 @@
|
||||
version: "3.1"
|
||||
|
||||
services:
|
||||
db_server:
|
||||
image: ${DB:-mariadb:10.11}
|
||||
environment:
|
||||
MARIADB_ROOT_PASSWORD: "${TESTSUITE_PASSWORD:-my-secret-pw}"
|
||||
healthcheck:
|
||||
test: ["CMD", "mariadb-admin", "ping", "-uroot", "-p${TESTSUITE_PASSWORD:-my-secret-pw}"]
|
||||
start_period: 10s
|
||||
interval: 5s
|
||||
timeout: 60s
|
||||
retries: 10
|
||||
networks:
|
||||
testing:
|
||||
aliases:
|
||||
- phpmyadmin_testing_db
|
||||
tmpfs:
|
||||
- /var/lib/mysql:rw,noexec,nosuid,size=300m
|
||||
|
||||
phpmyadmin:
|
||||
build:
|
||||
context: ../../apache
|
||||
environment:
|
||||
PMA_HOST: db_server
|
||||
UPLOAD_LIMIT: 123M
|
||||
MAX_EXECUTION_TIME: 125
|
||||
HIDE_PHP_VERSION: 1
|
||||
PMA_UPLOADDIR: /etc/phpmyadmin/imports
|
||||
PMA_SAVEDIR: /etc/phpmyadmin/exports
|
||||
volumes:
|
||||
- ../config.user.inc.php:/etc/phpmyadmin/config.user.inc.php:ro
|
||||
- phpmyadmin-data:/etc/phpmyadmin/imports:ro
|
||||
- phpmyadmin-data:/etc/phpmyadmin/exports
|
||||
healthcheck:
|
||||
test: ["CMD", "curl", "-Ss", "http://localhost/robots.txt"]
|
||||
start_period: 5s
|
||||
interval: 3s
|
||||
timeout: 60s
|
||||
retries: 10
|
||||
networks:
|
||||
testing:
|
||||
aliases:
|
||||
- phpmyadmin_testing_apache
|
||||
depends_on:
|
||||
db_server:
|
||||
condition: service_healthy
|
||||
|
||||
sut:
|
||||
depends_on:
|
||||
phpmyadmin:
|
||||
condition: service_healthy
|
||||
db_server:
|
||||
condition: service_healthy
|
||||
build:
|
||||
context: ../
|
||||
command: "/tests/testing/test-docker.sh"
|
||||
networks:
|
||||
testing:
|
||||
environment:
|
||||
TESTSUITE_HOSTNAME: phpmyadmin_testing_apache
|
||||
TESTSUITE_PORT: 80
|
||||
TESTSUITE_PASSWORD: "${TESTSUITE_PASSWORD:-my-secret-pw}"
|
||||
PMA_HOST: phpmyadmin_testing_db
|
||||
PMA_PORT: 3306
|
||||
PMA_UPLOADDIR: /etc/phpmyadmin/imports
|
||||
PMA_SAVEDIR: /etc/phpmyadmin/exports
|
||||
volumes:
|
||||
- ../../:/tests:ro
|
||||
- /var/run/docker.sock:/var/run/docker.sock
|
||||
- phpmyadmin-data:/etc/phpmyadmin/imports
|
||||
- phpmyadmin-data:/etc/phpmyadmin/exports
|
||||
working_dir: /tests
|
||||
|
||||
networks:
|
||||
testing:
|
||||
driver: bridge
|
||||
|
||||
volumes:
|
||||
phpmyadmin-data:
|
||||
@@ -1,69 +0,0 @@
|
||||
version: "3.1"
|
||||
|
||||
services:
|
||||
db_server:
|
||||
image: ${DB:-mariadb:10.11}
|
||||
environment:
|
||||
MARIADB_ROOT_PASSWORD: "${TESTSUITE_PASSWORD:-my-secret-pw}"
|
||||
healthcheck:
|
||||
test: ["CMD", "mariadb-admin", "ping", "-uroot", "-p${TESTSUITE_PASSWORD:-my-secret-pw}"]
|
||||
start_period: 10s
|
||||
interval: 5s
|
||||
timeout: 60s
|
||||
retries: 10
|
||||
networks:
|
||||
testing:
|
||||
aliases:
|
||||
- phpmyadmin_testing_db
|
||||
tmpfs:
|
||||
- /var/lib/mysql:rw,noexec,nosuid,size=300m
|
||||
|
||||
phpmyadmin:
|
||||
build:
|
||||
context: ../../apache
|
||||
environment:
|
||||
PMA_HOST: db_server
|
||||
UPLOAD_LIMIT: 123M
|
||||
MAX_EXECUTION_TIME: 125
|
||||
HIDE_PHP_VERSION: 1
|
||||
volumes:
|
||||
- ../config.user.inc.php:/etc/phpmyadmin/config.user.inc.php:ro
|
||||
healthcheck:
|
||||
test: ["CMD", "curl", "-Ss", "http://localhost/robots.txt"]
|
||||
start_period: 5s
|
||||
interval: 3s
|
||||
timeout: 60s
|
||||
retries: 10
|
||||
networks:
|
||||
testing:
|
||||
aliases:
|
||||
- phpmyadmin_testing_apache
|
||||
depends_on:
|
||||
db_server:
|
||||
condition: service_healthy
|
||||
|
||||
sut:
|
||||
depends_on:
|
||||
phpmyadmin:
|
||||
condition: service_healthy
|
||||
db_server:
|
||||
condition: service_healthy
|
||||
build:
|
||||
context: ../
|
||||
command: "/tests/testing/test-docker.sh"
|
||||
networks:
|
||||
testing:
|
||||
environment:
|
||||
TESTSUITE_HOSTNAME: phpmyadmin_testing_apache
|
||||
TESTSUITE_PORT: 80
|
||||
TESTSUITE_PASSWORD: "${TESTSUITE_PASSWORD:-my-secret-pw}"
|
||||
PMA_HOST: phpmyadmin_testing_db
|
||||
PMA_PORT: 3306
|
||||
volumes:
|
||||
- ../../:/tests:ro
|
||||
- /var/run/docker.sock:/var/run/docker.sock
|
||||
working_dir: /tests
|
||||
|
||||
networks:
|
||||
testing:
|
||||
driver: bridge
|
||||
@@ -1,75 +0,0 @@
|
||||
version: "3.1"
|
||||
|
||||
services:
|
||||
db_server:
|
||||
image: ${DB:-mariadb:10.11}
|
||||
environment:
|
||||
MARIADB_ROOT_PASSWORD: "${TESTSUITE_PASSWORD:-my-secret-pw}"
|
||||
healthcheck:
|
||||
test: ["CMD", "mariadb-admin", "ping", "-uroot", "-p${TESTSUITE_PASSWORD:-my-secret-pw}"]
|
||||
start_period: 10s
|
||||
interval: 5s
|
||||
timeout: 60s
|
||||
retries: 10
|
||||
networks:
|
||||
testing:
|
||||
aliases:
|
||||
- phpmyadmin_testing_db
|
||||
tmpfs:
|
||||
- /var/lib/mysql:rw,noexec,nosuid,size=300m
|
||||
volumes:
|
||||
- db-socket:/run/mysqld/
|
||||
|
||||
phpmyadmin:
|
||||
build:
|
||||
context: ../../apache
|
||||
environment:
|
||||
PMA_SOCKET: /run/mysqld/mysqld.sock
|
||||
UPLOAD_LIMIT: 123M
|
||||
MAX_EXECUTION_TIME: 125
|
||||
HIDE_PHP_VERSION: 1
|
||||
volumes:
|
||||
- ../config.user.inc.php:/etc/phpmyadmin/config.user.inc.php:ro
|
||||
- db-socket:/run/mysqld/
|
||||
healthcheck:
|
||||
test: ["CMD", "curl", "-Ss", "http://localhost/robots.txt"]
|
||||
start_period: 5s
|
||||
interval: 3s
|
||||
timeout: 60s
|
||||
retries: 10
|
||||
networks:
|
||||
testing:
|
||||
aliases:
|
||||
- phpmyadmin_testing_apache
|
||||
depends_on:
|
||||
db_server:
|
||||
condition: service_healthy
|
||||
|
||||
sut:
|
||||
depends_on:
|
||||
phpmyadmin:
|
||||
condition: service_healthy
|
||||
db_server:
|
||||
condition: service_healthy
|
||||
build:
|
||||
context: ../
|
||||
command: "/tests/testing/test-docker.sh"
|
||||
networks:
|
||||
testing:
|
||||
environment:
|
||||
TESTSUITE_HOSTNAME: phpmyadmin_testing_apache
|
||||
TESTSUITE_PORT: 80
|
||||
TESTSUITE_PASSWORD: "${TESTSUITE_PASSWORD:-my-secret-pw}"
|
||||
PMA_HOST: phpmyadmin_testing_db
|
||||
PMA_PORT: 3306
|
||||
volumes:
|
||||
- ../../:/tests:ro
|
||||
- /var/run/docker.sock:/var/run/docker.sock
|
||||
working_dir: /tests
|
||||
|
||||
networks:
|
||||
testing:
|
||||
driver: bridge
|
||||
|
||||
volumes:
|
||||
db-socket:
|
||||
@@ -1,99 +0,0 @@
|
||||
version: "3.1"
|
||||
|
||||
services:
|
||||
db_server:
|
||||
image: ${DB:-mariadb:11}
|
||||
command:
|
||||
- "--ssl-ca=/etc/phpmyadmin/ssl/ca-cert.pem"
|
||||
- "--ssl-cert=/etc/phpmyadmin/ssl/server-cert.pem"
|
||||
- "--ssl-key=/etc/phpmyadmin/ssl/server-key.pem"
|
||||
- "--require-secure-transport=ON"
|
||||
environment:
|
||||
MARIADB_USER: secure-user
|
||||
MARIADB_PASSWORD: "${TESTSUITE_PASSWORD:-my-secret-pw}"
|
||||
MARIADB_ROOT_PASSWORD: "${TESTSUITE_ROOT_PASSWORD:-random-pass}"
|
||||
# The database name used in the import test
|
||||
MARIADB_DATABASE: World
|
||||
healthcheck:
|
||||
test: ["CMD", "mariadb-admin", "ping", "-uroot", "-prandom-pass"]
|
||||
start_period: 10s
|
||||
interval: 5s
|
||||
timeout: 60s
|
||||
retries: 10
|
||||
networks:
|
||||
testing:
|
||||
aliases:
|
||||
- mariadb.phpmyadmin.local
|
||||
tmpfs:
|
||||
- /var/lib/mysql:rw,noexec,nosuid,size=300m
|
||||
volumes:
|
||||
#- ../secure-user.sql:/docker-entrypoint-initdb.d/secure-user.sql:ro
|
||||
- ../ca-cert.pem:/etc/phpmyadmin/ssl/ca-cert.pem:ro
|
||||
- ../ca-key.pem:/etc/phpmyadmin/ssl/ca-key.pem:ro
|
||||
- ../server-cert.pem:/etc/phpmyadmin/ssl/server-cert.pem:ro
|
||||
- ../server-key.pem:/etc/phpmyadmin/ssl/server-key.pem:ro
|
||||
#- ../mariadb-audit:/var/log/mariadb-audit
|
||||
|
||||
phpmyadmin:
|
||||
build:
|
||||
context: ../../apache
|
||||
environment:
|
||||
PMA_HOST: mariadb.phpmyadmin.local
|
||||
PMA_SSL: 1
|
||||
PMA_SSL_VERIFY: 1
|
||||
PMA_SSL_CA: /etc/phpmyadmin/ssl/ca-cert.pem
|
||||
PMA_SSL_CERT: /etc/phpmyadmin/ssl/client-cert.pem
|
||||
PMA_SSL_KEY: /etc/phpmyadmin/ssl/client-key.pem
|
||||
UPLOAD_LIMIT: 123M
|
||||
MAX_EXECUTION_TIME: 125
|
||||
HIDE_PHP_VERSION: 1
|
||||
volumes:
|
||||
- ../config.user.inc.php:/etc/phpmyadmin/config.user.inc.php:ro
|
||||
- ../ca-cert.pem:/etc/phpmyadmin/ssl/ca-cert.pem:ro
|
||||
- ../client-cert.pem:/etc/phpmyadmin/ssl/client-cert.pem:ro
|
||||
- ../client-key.pem:/etc/phpmyadmin/ssl/client-key.pem:ro
|
||||
healthcheck:
|
||||
test: ["CMD", "curl", "-Ss", "http://localhost/robots.txt"]
|
||||
start_period: 5s
|
||||
interval: 3s
|
||||
timeout: 60s
|
||||
retries: 10
|
||||
networks:
|
||||
testing:
|
||||
aliases:
|
||||
- phpmyadmin_testing_apache
|
||||
depends_on:
|
||||
db_server:
|
||||
condition: service_healthy
|
||||
|
||||
sut:
|
||||
depends_on:
|
||||
phpmyadmin:
|
||||
condition: service_healthy
|
||||
db_server:
|
||||
condition: service_healthy
|
||||
build:
|
||||
context: ../
|
||||
command: "/tests/testing/test-docker.sh"
|
||||
networks:
|
||||
testing:
|
||||
environment:
|
||||
TESTSUITE_HOSTNAME: phpmyadmin_testing_apache
|
||||
TESTSUITE_PORT: 80
|
||||
TESTSUITE_USER: secure-user
|
||||
TESTSUITE_PASSWORD: "${TESTSUITE_PASSWORD:-my-secret-pw}"
|
||||
TESTSUITE_ROOT_PASSWORD: "${TESTSUITE_ROOT_PASSWORD:-random-pass}"
|
||||
PMA_HOST: mariadb.phpmyadmin.local
|
||||
PMA_PORT: 3306
|
||||
IS_USING_SSL: true
|
||||
volumes:
|
||||
- ../ca-cert.pem:/etc/phpmyadmin/ssl/ca-cert.pem:ro
|
||||
- ../server-cert.pem:/etc/phpmyadmin/ssl/server-cert.pem:ro
|
||||
- ../client-cert.pem:/etc/phpmyadmin/ssl/client-cert.pem:ro
|
||||
- ../client-key.pem:/etc/phpmyadmin/ssl/client-key.pem:ro
|
||||
- ../../:/tests:ro
|
||||
working_dir: /tests
|
||||
|
||||
networks:
|
||||
testing:
|
||||
driver: bridge
|
||||
@@ -1,76 +0,0 @@
|
||||
services:
|
||||
db_server:
|
||||
image: ${DB:-mariadb:10.11}
|
||||
# mysql:mysql in MariaDB for Docker (https://stackoverflow.com/a/55241769/5155484)
|
||||
user: 999:999
|
||||
environment:
|
||||
MARIADB_ROOT_PASSWORD: "${TESTSUITE_PASSWORD:-my-secret-pw}"
|
||||
healthcheck:
|
||||
test: ["CMD", "mariadb-admin", "ping", "-uroot", "-p${TESTSUITE_PASSWORD:-my-secret-pw}"]
|
||||
start_period: 10s
|
||||
interval: 5s
|
||||
timeout: 60s
|
||||
retries: 10
|
||||
networks:
|
||||
testing:
|
||||
aliases:
|
||||
- phpmyadmin_testing_db
|
||||
volumes:
|
||||
- mariadb-data:/var/lib/mysql
|
||||
|
||||
phpmyadmin:
|
||||
build:
|
||||
context: ../../apache
|
||||
# www-data:www-data in Debian (https://stackoverflow.com/a/69290889/5155484)
|
||||
user: 33:33
|
||||
environment:
|
||||
PMA_HOST: db_server
|
||||
UPLOAD_LIMIT: 123M
|
||||
MAX_EXECUTION_TIME: 125
|
||||
volumes:
|
||||
- ../config.user.inc.php:/etc/phpmyadmin/config.user.inc.php:ro
|
||||
healthcheck:
|
||||
test: ["CMD", "curl", "-Ss", "http://localhost/robots.txt"]
|
||||
start_period: 5s
|
||||
interval: 3s
|
||||
timeout: 60s
|
||||
retries: 10
|
||||
networks:
|
||||
testing:
|
||||
aliases:
|
||||
- phpmyadmin_testing_apache
|
||||
depends_on:
|
||||
db_server:
|
||||
condition: service_healthy
|
||||
|
||||
sut:
|
||||
# nobody:nobody
|
||||
user: 65534:65534
|
||||
depends_on:
|
||||
phpmyadmin:
|
||||
condition: service_healthy
|
||||
db_server:
|
||||
condition: service_healthy
|
||||
build:
|
||||
context: ../
|
||||
command: "/tests/testing/test-docker.sh"
|
||||
networks:
|
||||
testing:
|
||||
environment:
|
||||
TESTSUITE_HOSTNAME: phpmyadmin_testing_apache
|
||||
TESTSUITE_PORT: 80
|
||||
TESTSUITE_PASSWORD: "${TESTSUITE_PASSWORD:-my-secret-pw}"
|
||||
PMA_HOST: phpmyadmin_testing_db
|
||||
PMA_PORT: 3306
|
||||
SKIP_EXPOSE_PHP_TEST: true
|
||||
volumes:
|
||||
- ../../:/tests:ro
|
||||
- /var/run/docker.sock:/var/run/docker.sock
|
||||
working_dir: /tests
|
||||
|
||||
networks:
|
||||
testing:
|
||||
driver: bridge
|
||||
|
||||
volumes:
|
||||
mariadb-data:
|
||||
@@ -1,37 +0,0 @@
|
||||
#!/bin/sh
|
||||
|
||||
set -eu
|
||||
|
||||
# Source: https://github.com/chio-nzgft/docker-MariaDB-with-SSL
|
||||
# See: https://dev.mysql.com/doc/refman/5.7/en/creating-ssl-files-using-openssl.html
|
||||
|
||||
|
||||
ROOT_DIR="$(realpath $(dirname $0))"
|
||||
echo "Using root dir: $ROOT_DIR"
|
||||
|
||||
cd "$ROOT_DIR"
|
||||
|
||||
rm -f *.pem
|
||||
|
||||
SUBJECT_CA="/C=US/O=phpMyAdmin testing/OU=Docker/CN=ssl-ca.phpmyadmin.local/emailAddress=ssl-ca@example.org"
|
||||
SUBJECT_CLIENT="/C=US/O=phpMyAdmin testing/OU=Docker/CN=client.phpmyadmin.local/emailAddress=secure-user@example.org"
|
||||
SUBJECT_SERVER="/C=US/O=phpMyAdmin testing/OU=Docker/CN=mariadb.phpmyadmin.local"
|
||||
|
||||
echo "CA key"
|
||||
|
||||
openssl genrsa 2048 > ca-key.pem
|
||||
openssl req -new -x509 -nodes -days 3600 -subj "${SUBJECT_CA}" -key ca-key.pem -out ca-cert.pem
|
||||
echo "server key"
|
||||
|
||||
openssl req -subj "${SUBJECT_SERVER}" -newkey rsa:2048 -days 3600 -nodes -keyout server-key.pem -out server-req.pem
|
||||
openssl rsa -in server-key.pem -out server-key.pem
|
||||
openssl x509 -req -in server-req.pem -days 3600 -CA ca-cert.pem -CAkey ca-key.pem -set_serial 01 -out server-cert.pem
|
||||
echo "client key"
|
||||
|
||||
openssl req -subj "${SUBJECT_CLIENT}" -newkey rsa:2048 -days 3600 -nodes -keyout client-key.pem -out client-req.pem
|
||||
openssl rsa -in client-key.pem -out client-key.pem
|
||||
openssl x509 -req -in client-req.pem -days 3600 -CA ca-cert.pem -CAkey ca-key.pem -set_serial 01 -out client-cert.pem
|
||||
echo "check key ok"
|
||||
|
||||
openssl verify -CAfile ca-cert.pem server-cert.pem client-cert.pem
|
||||
chmod 666 *.pem
|
||||
+37
-176
@@ -1,22 +1,31 @@
|
||||
#!/usr/bin/env python3
|
||||
#!/usr/bin/env python
|
||||
import argparse
|
||||
import os
|
||||
import subprocess
|
||||
import re
|
||||
import sys
|
||||
|
||||
import mechanize
|
||||
import tempfile
|
||||
import pytest
|
||||
|
||||
def create_browser():
|
||||
|
||||
def test_content(match, content):
|
||||
if not match in content:
|
||||
print(content)
|
||||
raise Exception('{0} not found in content!'.format(match))
|
||||
|
||||
|
||||
def test_phpmyadmin(url, username, password, server=None, sqlfile=None):
|
||||
if sqlfile is None:
|
||||
if os.path.exists('/world.sql'):
|
||||
sqlfile = '/world.sql'
|
||||
elif os.path.exists('./world.sql'):
|
||||
sqlfile = './world.sql'
|
||||
else:
|
||||
sqlfile = './testing/world.sql'
|
||||
br = mechanize.Browser()
|
||||
|
||||
# Ignore robots.txt
|
||||
br.set_handle_robots(False)
|
||||
return br
|
||||
|
||||
def do_login(br, url, username, password, server):
|
||||
# Login page
|
||||
br.open(url)
|
||||
|
||||
@@ -27,186 +36,38 @@ def do_login(br, url, username, password, server):
|
||||
if server is not None:
|
||||
br['pma_servername'] = server
|
||||
|
||||
# Login and check if logged in
|
||||
# Login and check if loggged in
|
||||
response = br.submit()
|
||||
return response
|
||||
|
||||
def get_world_sql_path():
|
||||
if os.path.exists('/world.sql'):
|
||||
return '/world.sql'
|
||||
elif os.path.exists('./world.sql'):
|
||||
return './world.sql'
|
||||
else:
|
||||
path = os.path.dirname(os.path.realpath(__file__))
|
||||
return path + '/world.sql'
|
||||
|
||||
def test_import(url, username, password, server, sqlfile):
|
||||
if sqlfile is None:
|
||||
sqlfile = get_world_sql_path()
|
||||
|
||||
br = create_browser()
|
||||
|
||||
response = do_login(br, url, username, password, server)
|
||||
|
||||
assert(b'Server version' in response.read())
|
||||
test_content('Server version', response.read())
|
||||
|
||||
# Open server import
|
||||
response = br.follow_link(text_regex=re.compile('Import'))
|
||||
assert(b'OpenDocument Spreadsheet' in response.read())
|
||||
test_content('OpenDocument Spreadsheet', response.read())
|
||||
|
||||
# Upload SQL file
|
||||
br.select_form('import')
|
||||
br.form.add_file(open(sqlfile), 'text/plain', sqlfile)
|
||||
response = br.submit()
|
||||
response = response.read()
|
||||
|
||||
assert(b'5326 queries executed' in response)
|
||||
test_content('5326 queries executed', response.read())
|
||||
|
||||
|
||||
def docker_secret(env_name):
|
||||
dir_path = os.path.dirname(os.path.realpath(__file__))
|
||||
secret_file = tempfile.mkstemp()
|
||||
def main():
|
||||
parser = argparse.ArgumentParser()
|
||||
parser.add_argument('--url', required=True)
|
||||
parser.add_argument('--username', required=True)
|
||||
parser.add_argument('--password', required=True)
|
||||
parser.add_argument('--server')
|
||||
parser.add_argument('--sqlfile', default=None)
|
||||
args = parser.parse_args()
|
||||
|
||||
password = "The_super_secret_password"
|
||||
password_file = open(secret_file[1], 'wb')
|
||||
password_file.write(str.encode(password))
|
||||
password_file.close()
|
||||
test_phpmyadmin(
|
||||
args.url,
|
||||
args.username,
|
||||
args.password,
|
||||
args.server,
|
||||
args.sqlfile
|
||||
)
|
||||
|
||||
test_env = {env_name + '_FILE': secret_file[1]}
|
||||
|
||||
# Run entrypoint and afterwards echo the environment variables
|
||||
result = subprocess.Popen("bash " +dir_path+ "/../docker-entrypoint.sh 'env'", shell=True, stdout=subprocess.PIPE, env=test_env)
|
||||
output = result.stdout.read().decode()
|
||||
|
||||
assert (env_name + "=" + password) in output
|
||||
|
||||
def test_phpmyadmin_secrets():
|
||||
docker_secret('MYSQL_PASSWORD')
|
||||
docker_secret('MYSQL_ROOT_PASSWORD')
|
||||
docker_secret('PMA_USER')
|
||||
docker_secret('PMA_PASSWORD')
|
||||
docker_secret('PMA_HOSTS')
|
||||
docker_secret('PMA_HOST')
|
||||
docker_secret('PMA_CONTROLHOST')
|
||||
docker_secret('PMA_CONTROLUSER')
|
||||
docker_secret('PMA_CONTROLPASS')
|
||||
|
||||
def test_is_using_ssl(url, username, password, server):
|
||||
is_using_ssl = os.environ.get('IS_USING_SSL');
|
||||
|
||||
br = create_browser()
|
||||
response = do_login(br, url, username, password, server)
|
||||
response = response.read()
|
||||
|
||||
assert(b'Server connection' in response)
|
||||
|
||||
if is_using_ssl:
|
||||
assert(b'SSL is used' in response)
|
||||
assert(b'SSL is not being used' not in response)
|
||||
else:
|
||||
assert(b'SSL is used' not in response)
|
||||
assert(b'SSL is not being used' in response)
|
||||
|
||||
def test_is_using_ssl_client_cert(url, server):
|
||||
is_using_ssl = os.environ.get('IS_USING_SSL');
|
||||
if not is_using_ssl:
|
||||
pytest.skip("Missing IS_USING_SSL ENV", allow_module_level=True)
|
||||
|
||||
br = create_browser()
|
||||
password = ""
|
||||
response = do_login(br, url, "ssl-specific-user", password, server)
|
||||
response = response.read()
|
||||
|
||||
assert(b'Server connection' in response)
|
||||
assert(b'ssl-specific-user@' in response)
|
||||
|
||||
assert(b'SSL is used' in response)
|
||||
assert(b'SSL is not being used' not in response)
|
||||
|
||||
def test_php_ini(url, username, password, server):
|
||||
skip_expose_php_test = os.environ.get('SKIP_EXPOSE_PHP_TEST');
|
||||
|
||||
br = create_browser()
|
||||
response = do_login(br, url, username, password, server)
|
||||
response = response.read()
|
||||
|
||||
assert(b'Show PHP information' in response)
|
||||
|
||||
# Open Show PHP information
|
||||
response = br.follow_link(text_regex=re.compile('Show PHP information'))
|
||||
response = response.read()
|
||||
assert(b'PHP Version' in response)
|
||||
|
||||
assert(b'upload_max_filesize' in response)
|
||||
assert(b'post_max_size' in response)
|
||||
assert(b'expose_php' in response)
|
||||
assert(b'session.save_path' in response)
|
||||
|
||||
assert(b'<tr><td class="e">max_execution_time</td><td class="v">125</td><td class="v">125</td></tr>' in response)
|
||||
|
||||
assert(b'<tr><td class="e">upload_max_filesize</td><td class="v">123M</td><td class="v">123M</td></tr>' in response)
|
||||
assert(b'<tr><td class="e">post_max_size</td><td class="v">123M</td><td class="v">123M</td></tr>' in response)
|
||||
|
||||
if not skip_expose_php_test:
|
||||
assert(b'<tr><td class="e">expose_php</td><td class="v">Off</td><td class="v">Off</td></tr>' in response)
|
||||
|
||||
assert(b'<tr><td class="e">session.save_path</td><td class="v">/sessions</td><td class="v">/sessions</td></tr>' in response)
|
||||
|
||||
def test_import_from_folder(url, username, password, server, sqlfile):
|
||||
upload_dir = os.environ.get('PMA_UPLOADDIR');
|
||||
if not upload_dir:
|
||||
pytest.skip("Missing PMA_UPLOADDIR ENV", allow_module_level=True)
|
||||
|
||||
# Copy file into the volume
|
||||
with open(get_world_sql_path(), 'rb') as src, open(upload_dir + '/world-data.sql', 'wb') as dst:
|
||||
dst.write(src.read())
|
||||
|
||||
br = create_browser()
|
||||
|
||||
response = do_login(br, url, username, password, server)
|
||||
|
||||
assert(b'Server version' in response.read())
|
||||
|
||||
# Open server import
|
||||
response = br.follow_link(text_regex=re.compile('Import'))
|
||||
response = response.read()
|
||||
|
||||
assert(b'Browse your computer:' in response)
|
||||
assert(upload_dir.encode() in response)
|
||||
assert(b'world-data.sql' in response)
|
||||
|
||||
def test_export_to_folder(url, username, password, server, sqlfile):
|
||||
save_dir = os.environ.get('PMA_SAVEDIR');
|
||||
if not save_dir:
|
||||
pytest.skip("Missing PMA_SAVEDIR ENV", allow_module_level=True)
|
||||
|
||||
# Delete file from previous runs
|
||||
if os.path.exists(save_dir + "/db_server.sql"):
|
||||
os.remove(save_dir + "/db_server.sql")
|
||||
|
||||
assert os.path.exists(save_dir + "/db_server.sql") == False
|
||||
|
||||
# Avoid: "The web server does not have permission to save the file"
|
||||
os.chmod(save_dir , 0o777)
|
||||
|
||||
br = create_browser()
|
||||
|
||||
response = do_login(br, url, username, password, server)
|
||||
|
||||
assert(b'Server version' in response.read())
|
||||
|
||||
# Open server export
|
||||
response = br.follow_link(text_regex=re.compile('Export'))
|
||||
response = response.read()
|
||||
assert(b'Save on server in the directory' in response)
|
||||
assert(save_dir.encode() in response)
|
||||
|
||||
br.select_form('dump')
|
||||
br.find_control("quick_export_onserver").items[0].selected=True
|
||||
|
||||
response = br.submit()
|
||||
response = response.read()
|
||||
|
||||
assert(b'Dump has been saved to file' in response)
|
||||
assert(b'Dump has been saved to file /etc/phpmyadmin/exports/db_server.sql' in response)
|
||||
assert os.path.exists(save_dir + "/db_server.sql") == True
|
||||
if __name__ == '__main__':
|
||||
main()
|
||||
|
||||
+72
-84
@@ -1,106 +1,94 @@
|
||||
#!/bin/sh
|
||||
|
||||
set -eu
|
||||
NAME="$1"
|
||||
|
||||
# Set phpMyAdmin environment
|
||||
if [ -n "$2" ] ; then
|
||||
PORT="$2"
|
||||
TESTSUITE_PORT=$2
|
||||
fi
|
||||
|
||||
if [ -n "$3" ] ; then
|
||||
SERVER="--server $3"
|
||||
PMA_HOST=$3
|
||||
else
|
||||
SERVER=''
|
||||
fi
|
||||
|
||||
# Set PHPMyAdmin environment
|
||||
PHPMYADMIN_HOSTNAME=${TESTSUITE_HOSTNAME:=localhost}
|
||||
PHPMYADMIN_PORT=${TESTSUITE_PORT:=80}
|
||||
PHPMYADMIN_URL=http://${PHPMYADMIN_HOSTNAME}:${PHPMYADMIN_PORT}/
|
||||
PHPMYADMIN_URL=http://$PHPMYADMIN_HOSTNAME:$PORT/
|
||||
|
||||
# Set database environment
|
||||
PHPMYADMIN_DB_HOSTNAME=${PMA_HOST:=localhost}
|
||||
PHPMYADMIN_DB_PORT=${PMA_PORT:=3306}
|
||||
TESTSUITE_USER=${TESTSUITE_USER:=root}
|
||||
TESTSUITE_ROOT_PASSWORD=${TESTSUITE_ROOT_PASSWORD:-}
|
||||
# Color text output
|
||||
GREEN="\033[0;32m"
|
||||
RED="\033[0;31m"
|
||||
NC="\033[0m" # No Color
|
||||
|
||||
SUBJECT_CA="/C=US/O=phpMyAdmin testing/OU=Docker/CN=ssl-ca.phpmyadmin.local/emailAddress=ssl-ca@example.org"
|
||||
SUBJECT_CLIENT="/C=US/O=phpMyAdmin testing/OU=Docker/CN=client.phpmyadmin.local/emailAddress=secure-user@example.org"
|
||||
ret=0
|
||||
# Check if script is running inside container
|
||||
if [ -f /.dockerenv ] ; then
|
||||
echo "Tests running inside container..."
|
||||
|
||||
if [ "${TESTSUITE_USER}" = "root" ] && [ -n "${TESTSUITE_ROOT_PASSWORD}" ]; then
|
||||
echo "Do not use TESTSUITE_ROOT_PASSWORD with TESTSUITE_USER=root"
|
||||
exit 1
|
||||
fi
|
||||
# Set database environment
|
||||
PHPMYADMIN_DB_HOSTNAME=${PMA_HOST:=localhost}
|
||||
PHPMYADMIN_DB_PORT=${PMA_PORT:=3306}
|
||||
PHPMYADMIN_DB_URL=http://$PHPMYADMIN_DB_HOSTNAME:$PHPMYADMIN_DB_PORT/
|
||||
|
||||
TEST_CLI_ARGS=""
|
||||
if [ -n "${TESTSUITE_HOSTNAME_ARBITRARY:-}" ]; then
|
||||
TEST_CLI_ARGS="$TEST_CLI_ARGS --server ${PHPMYADMIN_DB_HOSTNAME}"
|
||||
fi
|
||||
|
||||
if [ -n "${TESTSUITE_ROOT_PASSWORD}" ]; then
|
||||
TEST_CLI_ARGS="$TEST_CLI_ARGS --root-password ${TESTSUITE_ROOT_PASSWORD}"
|
||||
fi
|
||||
|
||||
# Find test script
|
||||
if [ -f ./phpmyadmin_test.py ] ; then
|
||||
FILENAME=./phpmyadmin_test.py
|
||||
# Wait for database to start
|
||||
TIMEOUT=0
|
||||
while ! curl "$PHPMYADMIN_DB_URL" &>/dev/null; do
|
||||
echo "Waiting for ${PHPMYADMIN_DB_HOSTNAME} database start..."
|
||||
sleep 10
|
||||
TIMEOUT=$((TIMEOUT + 1))
|
||||
if [ $TIMEOUT -gt 3 ] ; then
|
||||
echo "Failed to connect ${PHPMYADMIN_DB_HOSTNAME} database!"
|
||||
echo "Result of ${PHPMYADMIN_DB_HOSTNAME} tests: ${RED}FAILED${NC}"
|
||||
ret=1
|
||||
exit 1
|
||||
fi
|
||||
done
|
||||
else
|
||||
FILENAME=./testing/phpmyadmin_test.py
|
||||
echo "Tests running outside container..."
|
||||
docker ps -a
|
||||
COMMAND_HOST="docker exec ${NAME}"
|
||||
fi
|
||||
|
||||
SSL_FLAG="--skip-ssl"
|
||||
|
||||
if [ -n "${IS_USING_SSL:-}" ]; then
|
||||
SSL_FLAG="--ssl --ssl-verify-server-cert --ssl-ca=/etc/phpmyadmin/ssl/ca-cert.pem"
|
||||
fi
|
||||
|
||||
mariadb $SSL_FLAG -h "${PHPMYADMIN_DB_HOSTNAME}" -P"${PHPMYADMIN_DB_PORT}" -u"$TESTSUITE_USER" -p"${TESTSUITE_PASSWORD}" -e "SELECT @@version;SHOW VARIABLES LIKE 'require_secure_transport';SHOW VARIABLES LIKE '%ssl%';"
|
||||
|
||||
if [ -n "${IS_USING_SSL:-}" ]; then
|
||||
set +e
|
||||
mariadb --skip-ssl -h "${PHPMYADMIN_DB_HOSTNAME}" -P"${PHPMYADMIN_DB_PORT}" -u"$TESTSUITE_USER" -p"${TESTSUITE_PASSWORD}" -e "SELECT @@version;SHOW VARIABLES LIKE 'require_secure_transport';" 1> /dev/null 2> /dev/null
|
||||
if [ $? != 1 ]; then
|
||||
echo "The server does not enforce SSL connections, stopping the test."
|
||||
# Wait for container to start
|
||||
TIMEOUT=0
|
||||
while ! $COMMAND_HOST ps aux | grep -q nginx ; do
|
||||
echo "Waiting for PHPMyAdmin start..."
|
||||
sleep 1
|
||||
TIMEOUT=$((TIMEOUT + 1))
|
||||
if [ $TIMEOUT -gt 10 ] ; then
|
||||
echo "Failed to connect PHPMyAdmin!"
|
||||
echo "Result of ${PHPMYADMIN_DB_HOSTNAME} tests: ${RED}FAILED${NC}"
|
||||
ret=1
|
||||
exit 1
|
||||
fi
|
||||
set -e
|
||||
fi
|
||||
|
||||
if [ -n "${IS_USING_SSL:-}" ] && [ -n "${TESTSUITE_ROOT_PASSWORD}" ]; then
|
||||
mariadb $SSL_FLAG -h "${PHPMYADMIN_DB_HOSTNAME}" -P"${PHPMYADMIN_DB_PORT}" -u"root" -p"${TESTSUITE_ROOT_PASSWORD}" \
|
||||
-e "CREATE USER 'ssl-specific-user'@'%' REQUIRE SUBJECT '$SUBJECT_CLIENT' AND ISSUER '$SUBJECT_CA';"
|
||||
|
||||
set +e
|
||||
mariadb $SSL_FLAG --ssl-cert=/etc/phpmyadmin/ssl/client-cert.pem --ssl-key=/etc/phpmyadmin/ssl/client-key.pem -h "${PHPMYADMIN_DB_HOSTNAME}" -P"${PHPMYADMIN_DB_PORT}" -u"ssl-specific-user" -e "SELECT @@version;SHOW VARIABLES LIKE 'require_secure_transport';" 1> /dev/null 2> /dev/null
|
||||
if [ $? != 0 ]; then
|
||||
echo "The server should accept the SSL client cert login, stopping the test."
|
||||
exit 1
|
||||
fi
|
||||
set -e
|
||||
|
||||
set +e
|
||||
mariadb $SSL_FLAG -h "${PHPMYADMIN_DB_HOSTNAME}" -P"${PHPMYADMIN_DB_PORT}" -u"ssl-specific-user" -e "SELECT @@version;SHOW VARIABLES LIKE 'require_secure_transport';" 1> /dev/null 2> /dev/null
|
||||
if [ $? != 1 ]; then
|
||||
echo "The server should refuse the login without a client cert, stopping the test."
|
||||
exit 1
|
||||
fi
|
||||
set -e
|
||||
fi
|
||||
|
||||
ret=$?
|
||||
|
||||
if [ $ret -ne 0 ] ; then
|
||||
echo "Could not connect to ${PHPMYADMIN_DB_HOSTNAME} on port ${PHPMYADMIN_DB_PORT}"
|
||||
exit $ret
|
||||
fi
|
||||
|
||||
curl -fsSL --output /dev/null "${PHPMYADMIN_URL}"
|
||||
ret=$?
|
||||
|
||||
if [ $ret -ne 0 ] ; then
|
||||
echo "Could not connect to ${PHPMYADMIN_URL}"
|
||||
exit $ret
|
||||
fi
|
||||
done
|
||||
|
||||
# Perform tests
|
||||
ret=0
|
||||
pytest -p no:cacheprovider -q --url "$PHPMYADMIN_URL" --username $TESTSUITE_USER --password "$TESTSUITE_PASSWORD" $TEST_CLI_ARGS $FILENAME
|
||||
ret=$?
|
||||
if [ $ret -eq 0 ] ; then
|
||||
if [ -f /phpmyadmin_test.py ] ; then
|
||||
FILENAME=/phpmyadmin_test.py
|
||||
elif [ -f ./phpmyadmin_test.py ] ; then
|
||||
FILENAME=./phpmyadmin_test.py
|
||||
else
|
||||
FILENAME=./testing/phpmyadmin_test.py
|
||||
fi
|
||||
python $FILENAME --url "$PHPMYADMIN_URL" --username root --password $TESTSUITE_PASSWORD $SERVER
|
||||
ret=$?
|
||||
fi
|
||||
|
||||
# Show debug output in case of failure
|
||||
if [ $ret -ne 0 ] ; then
|
||||
${COMMAND_HOST} ps faux
|
||||
echo "Result of ${PHPMYADMIN_DB_HOSTNAME} tests: FAILED"
|
||||
curl "$PHPMYADMIN_URL"
|
||||
$COMMAND_HOST ps faux
|
||||
$COMMAND_HOST cat /var/log/php-fpm.log
|
||||
$COMMAND_HOST cat /var/log/nginx-error.log
|
||||
$COMMAND_HOST cat /var/log/supervisord.log
|
||||
echo "Result of ${PHPMYADMIN_DB_HOSTNAME} tests: ${RED}FAILED${NC}"
|
||||
exit $ret
|
||||
fi
|
||||
|
||||
echo "Result of ${PHPMYADMIN_DB_HOSTNAME} tests: SUCCESS"
|
||||
echo "Result of ${PHPMYADMIN_DB_HOSTNAME} tests: ${GREEN}SUCCESS${NC}"
|
||||
|
||||
@@ -0,0 +1,11 @@
|
||||
[program:test-mariadb]
|
||||
command=/test-docker.sh test 80 mariadb
|
||||
autostart=true
|
||||
autorestart=false
|
||||
priority=3
|
||||
startretries=1
|
||||
stopwaitsecs=20
|
||||
stdout_logfile=/dev/stdout
|
||||
stdout_logfile_maxbytes=0
|
||||
stderr_logfile=/dev/stderr
|
||||
stderr_logfile_maxbytes=0
|
||||
@@ -0,0 +1,11 @@
|
||||
[program:test-mysql]
|
||||
command=/test-docker.sh test 80 mysql
|
||||
autostart=true
|
||||
autorestart=false
|
||||
priority=3
|
||||
startretries=1
|
||||
stopwaitsecs=20
|
||||
stdout_logfile=/dev/stdout
|
||||
stdout_logfile_maxbytes=0
|
||||
stderr_logfile=/dev/stderr
|
||||
stderr_logfile_maxbytes=0
|
||||
Executable
+32
@@ -0,0 +1,32 @@
|
||||
#!/bin/sh
|
||||
|
||||
# Helper script to wait for testing inside container completes
|
||||
# Needs running docker-compose container based on docker-compose.testing.yml
|
||||
|
||||
GREEN="\033[0;32m"
|
||||
RED="\033[0;31m"
|
||||
NC="\033[0m" # No Color
|
||||
|
||||
TIMEOUT=0
|
||||
|
||||
sleep 5
|
||||
|
||||
while [ `docker-compose -f docker-compose.testing.yml logs phpmyadmin | grep -c 'Result of \(mysql\|mariadb\) tests'` -lt 2 ] ; do
|
||||
sleep 1
|
||||
TIMEOUT=$(($TIMEOUT + 1))
|
||||
if [ $TIMEOUT -gt 20 ] ; then
|
||||
docker-compose -f docker-compose.testing.yml logs phpmyadmin
|
||||
echo "${RED}Timeout!${NC}"
|
||||
exit 1
|
||||
fi
|
||||
done
|
||||
|
||||
if [ `docker-compose -f docker-compose.testing.yml logs phpmyadmin | grep -c 'Result of \(mysql\|mariadb\) tests.*SUCCESS'` -lt 2 ] ; then
|
||||
docker-compose -f docker-compose.testing.yml logs phpmyadmin
|
||||
echo "${RED}Failed${NC}"
|
||||
exit 2
|
||||
fi
|
||||
|
||||
docker-compose -f docker-compose.testing.yml logs phpmyadmin
|
||||
echo "${GREEN}Success${NC}"
|
||||
exit 0
|
||||
@@ -1,101 +0,0 @@
|
||||
#!/bin/bash
|
||||
set -eu -o pipefail
|
||||
|
||||
variants=(
|
||||
apache
|
||||
fpm
|
||||
fpm-alpine
|
||||
)
|
||||
|
||||
declare -A base=(
|
||||
[apache]='debian'
|
||||
[fpm]='debian'
|
||||
[fpm-alpine]='alpine'
|
||||
)
|
||||
|
||||
declare -A php_version=(
|
||||
[default]='8.3'
|
||||
)
|
||||
|
||||
declare -A cmd=(
|
||||
[apache]='apache2-foreground'
|
||||
[fpm]='php-fpm'
|
||||
[fpm-alpine]='php-fpm'
|
||||
)
|
||||
|
||||
gpg_key='3D06A59ECE730EB71B511C17CE752F178259BD92'
|
||||
|
||||
function download_url() {
|
||||
echo "https://files.phpmyadmin.net/phpMyAdmin/$1/phpMyAdmin-$1-all-languages.tar.xz"
|
||||
}
|
||||
|
||||
function create_variant() {
|
||||
local variant="$1"
|
||||
local version="$2"
|
||||
local sha256="$3"
|
||||
|
||||
local branch="$(sed -ne 's/^\([0-9]*\.[0-9]*\)\..*$/\1/p' <<< "$version")"
|
||||
local url="$(download_url "$version")"
|
||||
local ascUrl="$(download_url "$version").asc"
|
||||
local phpVersion="${php_version[$version]-${php_version[default]}}"
|
||||
|
||||
echo "updating $version [$branch] $variant"
|
||||
|
||||
# Create the variant directory with a Dockerfile
|
||||
mkdir -p "$variant"
|
||||
|
||||
local template="Dockerfile-${base[$variant]}.template"
|
||||
echo "# DO NOT EDIT: created by update.sh from $template" > "$variant/Dockerfile"
|
||||
cat "$template" >> "$variant/Dockerfile"
|
||||
|
||||
# Replace Dockerfile variables
|
||||
sed -ri -e '
|
||||
s/%%VARIANT%%/'"$variant"'/;
|
||||
s/%%VERSION%%/'"$version"'/;
|
||||
s/%%SHA256%%/'"$sha256"'/;
|
||||
s/%%DOWNLOAD_URL%%/'"$(sed -e 's/[\/&]/\\&/g' <<< "$url")"'/;
|
||||
s/%%DOWNLOAD_URL_ASC%%/'"$(sed -e 's/[\/&]/\\&/g' <<< "$ascUrl")"'/;
|
||||
s/%%PHP_VERSION%%/'"$phpVersion"'/g;
|
||||
s/%%GPG_KEY%%/'"$gpg_key"'/g;
|
||||
s/%%CMD%%/'"${cmd[$variant]}"'/;
|
||||
' "$variant/Dockerfile"
|
||||
|
||||
# Copy docker-entrypoint.sh
|
||||
cp docker-entrypoint.sh "$variant/docker-entrypoint.sh"
|
||||
if [ "$variant" != "apache" ]; then
|
||||
sed -i "/^# start: Apache specific settings$/,/^# end: Apache specific settings$/d" "$variant/docker-entrypoint.sh"
|
||||
sed -i "/^\s*# start: Apache specific build$/,/^\s*# end: Apache specific build$/d" "$variant/Dockerfile"
|
||||
fi
|
||||
|
||||
# Copy config.inc.php and helpers.php
|
||||
cp config.inc.php "$variant/config.inc.php"
|
||||
cp helpers.php "$variant/helpers.php"
|
||||
|
||||
# Add variant to versions.json
|
||||
versionVariantsJson="$(jq -e \
|
||||
--arg branch "$branch" --arg variant "$variant" --arg base "${base[$variant]}" --arg phpVersion "$phpVersion" \
|
||||
'.[$branch].variants[$variant] = {"variant": $variant, "base": $base, "phpVersion": $phpVersion}' versions.json)"
|
||||
versionJson="$(jq -e \
|
||||
--arg branch "$branch" --arg version "$version" --arg sha256 "$sha256" --arg url "$url" --arg ascUrl "$ascUrl" --argjson variants "$versionVariantsJson" \
|
||||
'.[$branch] = {"branch": $branch, "version": $version, "sha256": $sha256, "url": $url, "ascUrl": $ascUrl, "variants": $variants[$branch].variants}' versions.json)"
|
||||
printf '%s\n' "$versionJson" > versions.json
|
||||
}
|
||||
|
||||
# Check script dependencies
|
||||
command -v curl >/dev/null 2>&1 || { echo >&2 "'curl' is required but not found. Aborting."; exit 1; }
|
||||
command -v jq >/dev/null 2>&1 || { echo >&2 "'jq' is required but not found. Aborting."; exit 1; }
|
||||
[ -n "${BASH_VERSINFO}" ] && [ -n "${BASH_VERSINFO[0]}" ] && [ ${BASH_VERSINFO[0]} -ge 4 ] \
|
||||
|| { echo >&2 "Bash 4.0 or greater is required. Aborting."; exit 1; }
|
||||
|
||||
# Create variants
|
||||
printf '%s\n' "{}" > versions.json
|
||||
|
||||
latest="$(curl -fsSL 'https://www.phpmyadmin.net/home_page/version.json' | jq -r '.version' | grep -E '^[0-9]{1,}.[0-9]{1,}.[0-9]{1,}$')"
|
||||
sha256="$(curl -fsSL "$(download_url "$latest").sha256" | cut -f1 -d ' ' | tr -cd 'a-f0-9' | cut -c 1-64)"
|
||||
|
||||
for variant in "${variants[@]}"; do
|
||||
create_variant "$variant" "$latest" "$sha256"
|
||||
done
|
||||
|
||||
# Cleanup the file as for now it's not wanted in the repository
|
||||
rm versions.json
|
||||
Reference in New Issue
Block a user