Commit 28cac3fa authored by nimrod's avatar nimrod
Browse files

Add the cgit image.

parent a318b7da

.gitlab-ci.yml

+52 −0
Original line number Diff line number Diff line
@@ -2,3 +2,55 @@ 
include:

  - project: shore/ci-templates

    file: templates/pre-commit.yml



stages:

  - test

  - build

  - deploy



# One day I may want to start tagging release and for that the TAG variable is

# needed, but that would mean releasing ALL of the images when tagging (sort of

# a periodic release). The images are not really related so for now TAG is

# hard-coded to latest.

variables:

  TAG: latest



.build:

  stage: build

  variables:

    DOCKER_BUILDKIT: "1"

  tags: &tags [ns4.shore.co.il]

  script:

    - docker build --pull --no-cache --iidfile iid "$IMAGE"

  after_script:

    - echo "HASH=$(cat iid)" > dot.env

  artifacts:

    reports:

      dotenv: dot.env

  rules: &rules

    - if: $CI_PIPELINE_SOURCE == "schedule"

    - if: $CI_PIPELINE_SOURCE == "push"

      changes:

        - $IMAGE/*

        - $IMAGE/**/*



.push:

  stage: deploy

  tags: *tags

  script:

    - docker tag "$HASH" "registry.shore.co.il/$IMAGE:$TAG"

    - docker push "registry.shore.co.il/$IMAGE:$TAG"

  rules: *rules



build-cgit:

  extends: .build

  variables:

    IMAGE: cgit



push-cgit:

  extends: .push

  variables:

    IMAGE: cgit

  needs:

    - job: build-cgit

      artifacts: true

.pre-commit-config.yaml

+1 −0
Original line number Diff line number Diff line
@@ -8,6 +8,7 @@ repos: 
      - id: check-merge-conflict

      - id: check-symlinks

      - id: trailing-whitespace

        exclude: .\.diff$



  - repo: https://github.com/Yelp/detect-secrets

    rev: v1.1.0

cgit/.dockerignore

0 → 100644
+3 −0
Original line number Diff line number Diff line 
*

!cgitrc

!patch.diff

cgit/Dockerfile

0 → 100644
+40 −0
Original line number Diff line number Diff line 
FROM debian:buster-slim

# hadolint ignore=DL3008,DL3015

RUN apt-get update && \

    DEBIAN_FRONTEND=noninteractive apt-get install -y \

        apache2 \

        cgit \

        groff-base \

        libcap2-bin \

        patch \

        python3-docutils \

        python3-markdown \

        python3-pygments \

        wget \

    && \

    setcap CAP_NET_BIND_SERVICE=+ep /usr/sbin/apache2 && \

    a2enmod cgid && \

    a2enconf cgit && \

    a2enmod status && \

    install -d -o www-data -g www-data -m 755 /var/cache/cgit && \

    install -d -o www-data -g www-data -m 755 /run/apache2 && \

    install -d -o www-data -g www-data -m 755 /var/log/apache2 && \

    ln -sf /dev/stdout /var/log/apache2/access.log && \

    ln -sf /dev/stderr /var/log/apache2/error.log && \

    ln -sf /dev/stdout /var/log/apache2/other_vhosts_access.log && \

    rm -rf /tmp/* /var/tmp/* /var/lib/apt/lists/* /var/cache/apt/archives/*

COPY --chown=root:root patch.diff /root/

COPY --chown=root:root cgitrc /etc/

ENV APACHE_RUN_DIR=/run/apache2 \

    APACHE_LOG_DIR=/var/log/apache2 \

    APACHE_RUN_USER=www-data \

    APACHE_RUN_GROUP=www-data \

    APACHE_PID_FILE=/run/apache2/apache2.pid

RUN patch --strip 0 --verbose --directory /etc/apache2 --input /root/patch.diff && \

    apache2 -t

EXPOSE 80

CMD [ "apache2", "-DFOREGROUND" ]

VOLUME ["/srv/git"]

USER "www-data"

WORKDIR /var/www

HEALTHCHECK CMD wget --spider --quiet http://localhost:80/cgit/ --user-agent 'Healthcheck' || exit 1

cgit/README.md

0 → 100644
+17 −0
Original line number Diff line number Diff line 
# cgit



cgit container image.



## Usage



This container runs Apache that is configured with cgit at `/cgit`. It exposes

port 80 and serves the repositories under `/srv/git`. The container runs as

a limited user (`www-data`), so make sure to have the content of `/srv/git`

readble by it. Also, if you wish to persist the cache, the location is

`/var/cache/cgit`.



## Example



```

docker -v '/srv/git:/srv/git:ro' -p '80:80' adarnimrod/cgit

```