Dockerfile.tmpl

# syntax=docker/dockerfile:1
# check=error=true

# Latest version of php-extension-installer: https://hub.docker.com/r/mlocati/php-extension-installer/tags
FROM {{ getenv "PHP_EXTENSION_INSTALLER_IMAGE" }} AS php_extension_installer

# Latest version of {{ .image_label }}: {{ .image_url }}
FROM {{ getenv "BASE_IMAGE" }} AS runtime

ARG DEBIAN_FRONTEND=noninteractive

ENV LANG=C.UTF-8

ARG XDG_CONFIG_HOME=/config
ENV XDG_CONFIG_HOME="$XDG_CONFIG_HOME"

ARG XDG_DATA_HOME=/data
ENV XDG_DATA_HOME="$XDG_DATA_HOME"

ARG XDG_CACHE_HOME=/cache
ENV XDG_CACHE_HOME="$XDG_CACHE_HOME"

# Latest version of event-extension: https://pecl.php.net/package/event
ARG PHP_EVENT_VERSION=3.1.6
# Latest version of igbinary-extension: https://pecl.php.net/package/igbinary
ARG PHP_IGBINARY_VERSION=3.2.17RC1
# Latest version of redis-extension: https://pecl.php.net/package/redis
ARG PHP_REDIS_VERSION=6.3.0
# Latest version of amqp-extension: https://pecl.php.net/package/amqp
ARG PHP_AMQP_VERSION=2.2.0
{{ if .is_frankenphp }}
# Default to classic mode (no workers). To enable worker mode, set:
# FRANKENPHP_CONFIG="worker /var/www/public/index.php"
ENV FRANKENPHP_CONFIG=""
{{ end }}
WORKDIR /var/www

RUN --mount=type=bind,from=php_extension_installer,source=/usr/bin/install-php-extensions,target=/usr/local/bin/install-php-extensions \
    apt-get update \
    && apt-get install --assume-yes --no-install-recommends \
        apt-transport-https \
        ca-certificates \
        openssl \
    && install-php-extensions \
        pdo_mysql \
        pdo_pgsql \
        intl \
        pcntl \
        gd \
        bcmath \
        zip \
        soap \
        xsl \
        sockets \
        "event-$PHP_EVENT_VERSION" \
        "igbinary-$PHP_IGBINARY_VERSION" \
        "redis-$PHP_REDIS_VERSION" \
        "amqp-$PHP_AMQP_VERSION" \
    && cp "$PHP_INI_DIR/php.ini-production" "$PHP_INI_DIR/php.ini" \
    && mkdir -p \
        "$XDG_CONFIG_HOME" \
        "$XDG_DATA_HOME" \
        "$XDG_CACHE_HOME" \
    && rm -rf /var/www/* \
    # Cleanup
    && apt-get autoremove --assume-yes \
    && apt-get clean --assume-yes \
    && rm -rf /var/lib/apt/lists/* \
    && rm -rf /tmp/*

COPY files/general /
{{ if .is_frankenphp -}}
COPY files/frankenphp /
{{ end }}
# Latest version of Composer: https://hub.docker.com/r/composer/composer/tags
FROM {{ getenv "COMPOSER_IMAGE" }} AS composer

# Latest version of node: https://hub.docker.com/_/node/tags
FROM {{ getenv "NODE_IMAGE" }} AS node

FROM runtime AS builder

ARG TARGETARCH
ARG DEBIAN_FRONTEND=noninteractive

# Latest version of Xdebug: https://pecl.php.net/package/xdebug
ARG XDEBUG_VERSION=3.5.3
# Latest version of pcov: https://pecl.php.net/package/pcov
ARG PCOV_VERSION=1.0.12

# Latest version of fixuid: https://github.com/boxboat/fixuid/releases/latest
ARG FIXUID_VERSION=0.6.0

ARG USER=code
ARG GROUP=code
ARG USER_UID=1000
ARG USER_GID=1000

SHELL ["/bin/bash", "-o", "pipefail", "-c"]

RUN --mount=type=bind,from=php_extension_installer,source=/usr/bin/install-php-extensions,target=/usr/local/bin/install-php-extensions \
    apt-get update \
    && apt-get install --assume-yes --no-install-recommends \
        vim \
        git \
        sqlite3 \
        wait-for-it \
        p7zip-full \
        unzip \
        curl \
        gcc \
        g++ \
        make \
    # Download Composer keys
    && mkdir -p "$XDG_CONFIG_HOME/composer" \
    && curl -fsSLo "$XDG_CONFIG_HOME/composer/keys.dev.pub" https://composer.github.io/snapshots.pub \
    && curl -fsSLo "$XDG_CONFIG_HOME/composer/keys.tags.pub" https://composer.github.io/releases.pub \
    && chmod 644 "$XDG_CONFIG_HOME/composer/keys.dev.pub" "$XDG_CONFIG_HOME/composer/keys.tags.pub" \
    # Install Xdebug and pcov PHP extensions
    && install-php-extensions \
        "xdebug-$XDEBUG_VERSION" \
        "pcov-$PCOV_VERSION" \
    && cp "$PHP_INI_DIR/php.ini-development" "$PHP_INI_DIR/php.ini" \
    # Install fixuid
    && curl -fsSLo /tmp/fixuid.tar.gz "https://github.com/boxboat/fixuid/releases/download/v$FIXUID_VERSION/fixuid-${FIXUID_VERSION}-linux-${TARGETARCH}.tar.gz" \
    && tar -xf /tmp/fixuid.tar.gz -C /usr/local/bin fixuid \
    && chown root:root /usr/local/bin/fixuid \
    && chmod 4755 /usr/local/bin/fixuid \
    && rm /tmp/fixuid.tar.gz \
    # Create user and group, and setup fixuid configuration
    && existing_group="$(getent group "$USER_GID" | cut -d: -f1 || true)" \
    && if [ -z "$existing_group" ]; then \
           groupadd --gid "$USER_GID" "$GROUP"; \
           existing_group="$GROUP"; \
       fi \
    && useradd --uid "$USER_UID" --gid "$USER_GID" --create-home "$USER" --shell /bin/bash \
    && mkdir -p \
        /etc/fixuid \
        "$XDG_CACHE_HOME/npm" \
        "$XDG_CACHE_HOME/node" \
        "$XDG_CACHE_HOME/yarn" \
        "$XDG_DATA_HOME/pnpm/store" \
        "$XDG_DATA_HOME/yarn/berry" \
    && chown -R "$USER_UID":"$USER_GID" \
        "$XDG_DATA_HOME" \
        "$XDG_CONFIG_HOME" \
        "$XDG_CACHE_HOME" \
    # Cleanup
    && apt-get autoremove --assume-yes \
    && apt-get clean --assume-yes \
    && rm -rf /var/lib/apt/lists/* \
    && rm -rf /tmp/* \
    && cat <<EOF > /etc/fixuid/config.yml
user: $USER
group: $existing_group
paths:
  - /var/www
  - "/home/$USER"
  - "$XDG_DATA_HOME"
  - "$XDG_CONFIG_HOME"
  - "$XDG_CACHE_HOME"

EOF

ENV COREPACK_ENABLE_DOWNLOAD_PROMPT=0
ENV npm_config_cache="$XDG_CACHE_HOME/npm"
ENV PNPM_CONFIG_STORE_DIR="$XDG_DATA_HOME/pnpm/store"

COPY --from=node /usr/local/bin/node /usr/local/bin/node
COPY --from=node /usr/local/lib/node_modules /usr/local/lib/node_modules

# Latest version of corepack: https://www.npmjs.com/package/corepack
ARG COREPACK_VERSION=0.36.0

# Node.js 25+ no longer bundles corepack. npm's bin links are not copied from the node stage, and its cache goes to /tmp
# so no root-owned files end up in npm_config_cache.
RUN node /usr/local/lib/node_modules/npm/bin/npm-cli.js install --global \
        --cache /tmp/npm-cache --no-update-notifier --no-audit --no-fund \
        "corepack@$COREPACK_VERSION" \
    && corepack install --global npm@12.x yarn@4.x pnpm@12.x \
    && corepack enable npm yarn pnpm \
    # pnpm downloads its platform-specific binary on first run
    && pnpm --version \
    && chown -R --reference="$XDG_CACHE_HOME" "$XDG_CACHE_HOME/node" \
    # Cleanup
    && rm -rf /tmp/*

COPY --from=composer /composer /usr/local/bin/composer