Merge pull request #32 from shyim/add-fpm-base-image

feat: add nginx base image

.github/workflows/docker.yaml

@@ -116,3 +116,39 @@ jobs:
 
           - name: Sign image
             run: cosign sign --yes ghcr.io/shyim/wolfi-php/fpm:${{ matrix.php }}
+
+    nginx:
+      runs-on: ubuntu-latest
+      needs: fpm
+      strategy:
+        matrix:
+          php:
+            - 8.2
+            - 8.3
+      steps:
+          - name: Checkout
+            uses: actions/checkout@v4
+
+          - name: Install Cosign
+            uses: sigstore/cosign-installer@v3
+
+          - name: Set up QEMU
+            uses: docker/setup-qemu-action@v3
+
+          - name: Set up Docker Buildx
+            uses: docker/setup-buildx-action@v3
+
+          - name: Login into Github Docker Registery
+            run: echo "${{ secrets.GITHUB_TOKEN }}" | docker login ghcr.io -u ${{ github.actor }} --password-stdin
+
+          - uses: docker/build-push-action@v5
+            with:
+              tags: ghcr.io/shyim/wolfi-php/nginx:${{ matrix.php }}
+              platforms: linux/amd64,linux/arm64
+              context: images/nginx
+              build-args: PHP_VERSION=${{ matrix.php }}
+              push: true
+              provenance: false
+
+          - name: Sign image
+            run: cosign sign --yes ghcr.io/shyim/wolfi-php/nginx:${{ matrix.php }}

README.md

@@ -101,7 +101,8 @@ To learn more about FrankenPHP, [see here](./images/frankenphp)
 We provide also base image for ready to start without touching configuration:
 
 - [FrankenPHP](./images/frankenphp)
-- [FPM](./images/fpm)
+- [Nginx + PHP-FPM](./images/nginx)
+- [FPM standalone](./images/fpm)
 
 ### Pinning package versions
 
@@ -119,6 +120,6 @@ To get the excact current version of a package, you can run `apk info php-8.2`.
 
 ## Examples
 
-- [Symfony Demo with FrankenPHP](examples/frankenphp-symfony-demo/README.md)
-- [Symfony demo with FPM](examples/fpm-symfony-demo/README.md)
-- [Nginx + PHP-FPM](examples/nginx-php-fpm/README.md)
+- [Symfony Demo with FrankenPHP](examples/frankenphp-symfony-demo/)
+- [Symfony Demo with FPM](examples/fpm-symfony-demo/)
+- [Symfony Demo with Nginx](examples/nginx-symfony-demo/)

examples/nginx-symfony-demo/Dockerfile

@@ -0,0 +1,38 @@
+# runtime dependencies
+FROM ghcr.io/shyim/wolfi-php/nginx:8.2 as base
+ENV APP_ENV=prod
+
+RUN apk add --no-cache \
+    php-8.2-intl \
+    php-8.2-simplexml \
+    php-8.2-iconv \
+    php-8.2-dom \
+    php-8.2-xml \
+    php-8.2-simplexml \
+    php-8.2-pdo \
+    php-8.2-pdo_sqlite
+
+# download symfony demo and build it
+FROM base as composer
+
+RUN apk add --no-cache \
+    git \
+    composer \
+    unzip \
+    php-8.2 \
+    php-8.2-curl \
+    php-8.2-openssl \
+    php-8.2-phar
+
+WORKDIR /app
+RUN git clone https://github.com/symfony/demo.git --depth=1 .
+RUN composer install
+RUN bin/console asset-map:compile
+RUN rm -rf .git
+
+# build final image
+
+FROM base
+
+# uid 82 is www-data
+COPY --from=composer --chown=82 /app /var/www/html

examples/nginx-symfony-demo/README.md

@@ -0,0 +1,12 @@
+# Symfony Demo with Nginx
+
+This is a Dockerfile to set up a Symfony Demo application with Nginx.
+
+This example is using this [Nginx image](../../images/nginx/).
+
+```bash
+docker build -t symfony-demo .
+docker run -p 8000:8000 symfony-demo
+```
+
+and then open http://localhost:8000 in your browser.

images/fpm/rootfs/etc/php/php-fpm.d/zz-b-default.conf

@@ -2,6 +2,8 @@
 user = ${PHP_FPM_USER}
 group = ${PHP_FPM_GROUP}
 listen = ${PHP_FPM_LISTEN}
+listen.owner = ${PHP_FPM_USER}
+listen.group = ${PHP_FPM_GROUP}
 pm = ${PHP_FPM_PM}
 pm.max_children = ${PHP_FPM_PM_MAX_CHILDREN}
 pm.start_servers = ${PHP_FPM_PM_START_SERVERS}

images/nginx/Dockerfile

@@ -0,0 +1,16 @@
+ARG PHP_VERSION=8.3
+FROM ghcr.io/shyim/wolfi-php/fpm:${PHP_VERSION}
+
+ENV PHP_FPM_LISTEN=/tmp/php-fpm.sock
+
+RUN <<EOF
+set -eo pipefail
+apk add --no-cache \
+    overmind \
+    nginx
+EOF
+
+COPY --link rootfs /
+EXPOSE 8000
+
+ENTRYPOINT ["/usr/bin/overmind", "start", "-f", "/etc/Procfile", "-s", "/tmp/overmind.sock"]

images/nginx/README.md

@@ -0,0 +1,44 @@
+# Nginx + PHP-FPM
+
+This image contains Nginx and PHP-FPM in the same container. To run both processes in the same container, we use overmind a Procfile compatible process manager.
+
+## Usage
+
+```dockerfile
+FROM ghcr.io/shyim/wolfi-php/fpm:8.3
+
+# Install missing extensions
+RUN apk add --no-cache php-8.3-redis php-8.3-gd
+
+# Copy your files
+COPY . /var/www/html
+```
+
+```shell
+docker build -t my-image .
+docker run -p 8080:8080 my-image
+```
+
+You can run it for testing purposes also directly, `docker run --rm -p 8080:8080 ghcr.io/shyim/wolfi-php/fpm:8.3` and you should see at `http://localhost:8000` the php info page.
+
+## PHP Extensions / PHP Configuration
+
+As this image bases on [fpm](../fpm/), you can check out there how to configure PHP / PHP-FPM and install php extensions.
+
+## Overwrite Nginx Configuration
+
+You can overwrite the Nginx configuration by copying your own configuration to `/etc/nginx/nginx.conf`:
+
+```dockerfile
+COPY nginx.conf /etc/nginx/nginx.conf
+```
+
+You can find the default configuration [here](./rootfs/etc/nginx/nginx.conf).
+
+## Running rootless
+
+You can run the container as a non-root user. The image has a user `www-data` with UID 82. You can use it like this:
+
+```dockerfile
+USER www-data
+```

examples/nginx-php-fpm/rootfs/etc/nginx/nginx.conf → images/nginx/rootfs/etc/nginx/nginx.conf

@@ -1,6 +1,7 @@
 worker_processes auto;
 pid /tmp/nginx.pid;
 daemon off;
+user www-data;
 
 events {
     worker_connections  1024;
@@ -22,6 +23,10 @@ http {
         index  index.php;
         include /etc/nginx/mime.types;
 
+        location / {
+            try_files $uri /index.php$is_args$args;
+        }
+
         location ~ \.php$ {
             fastcgi_split_path_info ^(.+\.php)(/.+)$;
             include fastcgi.conf;