[Koha-devel] Minimal docker images for Koha
dcook at prosentient.com.au
dcook at prosentient.com.au
Wed Feb 19 01:21:03 CET 2020
Funny I was just looking at https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=15032.
One of these days we should push forward more on queues: https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=22417.
David Cook
Systems Librarian
Prosentient Systems
72/330 Wattle St
Ultimo, NSW 2007
Australia
Office: 02 9212 0899
Direct: 02 8005 0595
-----Original Message-----
From: Koha-devel <koha-devel-bounces at lists.koha-community.org> On Behalf Of Julian Maurice
Sent: Tuesday, 18 February 2020 11:11 PM
To: Kyle Hall <kyle.m.hall at gmail.com>
Cc: koha-devel <koha-devel at lists.koha-community.org>
Subject: Re: [Koha-devel] Minimal docker images for Koha
Are you talking about these files
https://github.com/Koha-Community/Koha/blob/master/debian/templates/apache-shared-intranet-plack.conf#L14-L21
?
I did nothing specific, so they are probably broken :)
Le 18/02/2020 à 12:45, Kyle Hall a écrit :
> One other question, how does this handle scripts that Koha
> specifically does not execute using plack?
>
> Kyle
>
> ---
> http://www.kylehall.info
> ByWater Solutions ( http://bywatersolutions.com ) Meadville Public
> Library ( http://www.meadvillelibrary.org ) Crawford County Federated
> Library System ( http://www.ccfls.org )
>
>
> On Tue, Feb 18, 2020 at 6:43 AM Kyle Hall <kyle.m.hall at gmail.com
> <mailto:kyle.m.hall at gmail.com>> wrote:
>
> This is fantastic Julian! The only thing I can contribute that
> hasn't already been said by you or David is to suggest taking a look
> at MiniDeb as a base image ( https://github.com/bitnami/minideb ). I
> would also suggest using quay.io <http://quay.io> to build and host
> your Docker images, as it has built in security scanning. I prefer
> minimal install images not for size reduction ( though it is nice ),
> but for the smaller attack surface they provide. Fewer things
> installed means fewer exploits available!
>
> Kyle
>
> ---
> http://www.kylehall.info
> ByWater Solutions ( http://bywatersolutions.com )
> Meadville Public Library ( http://www.meadvillelibrary.org )
> Crawford County Federated Library System ( http://www.ccfls.org )
>
>
> On Mon, Feb 17, 2020 at 12:59 PM Julian Maurice
> <julian.maurice at biblibre.com <mailto:julian.maurice at biblibre.com>>
> wrote:
>
> Hi all,
>
> I've been playing with docker lately, and I tried to build a
> minimal
> docker image for Koha. Here are the results.
>
> My goals were:
> * Install only required "things" to get Koha up and running, and
> nothing
> else (no testing or dev tools),
> * No external dependencies except CPAN
> * Follow Docker best practices as much as possible
>
> The resulting images are here:
> https://hub.docker.com/repository/docker/julianmaurice/koha
>
> and the Dockerfiles are here:
> https://github.com/jajm/koha-docker
>
> A few things worth mentioning:
>
> * I tried to build the smallest image possible by using alpine
> or perl
> slim images at first but it was not that great, because the perl
> version
> shipped with those images is missing some libs, which cause
> MARC::Charset to build a database of several hundreds MBs (which
> is only
> 5MBs with a standard perl version). So I chose a more standard
> image
> (debian:buster) as base.
>
> * Koha doesn't work well when running with a perl version
> different than
> the system perl installed in /usr/bin/perl. For example, the
> updatedatabase doesn't work when called from the web installer.
> This is
> because Perl scripts are called directly as executable files, and
> shebangs contain '/usr/bin/perl'. Same problem from
> misc/translator/translate which calls tmpl_process3.pl
> <http://tmpl_process3.pl>.
>
> * I tried to make the Koha installation as self-contained as
> possible.
> Almost everything is installed as a non-root user in /home/koha,
> including Perl dependencies.
>
> * It doesn't need a reverse proxy such as apache or nginx. The
> necessary
> URL rewriting is handled in PSGI file. The container expose two
> ports,
> one for intranet, the other one for OPAC.
>
> * Each Perl dependency is installed in its latest version, so
> expect
> things to break. I can only confirm that the webinstaller, basic
> cataloguing and search/indexation work. I did not test anything
> else.
>
> * There are docker-compose.yml files in the github repository to
> get
> Koha running quickly with mariadb, memcached and elasticsearch.
>
> * Zebra is not installed
>
> * Images weigh ~1.15GB uncompressed (koha sources included)
>
> If you made it this far, thanks for reading :)
> And if you want to use these docker images, you should start by
> reading
> https://github.com/jajm/koha-docker/blob/master/README.md
>
> --
> Julian Maurice
> BibLibre
> _______________________________________________
> Koha-devel mailing list
> Koha-devel at lists.koha-community.org
> <mailto:Koha-devel at lists.koha-community.org>
> https://lists.koha-community.org/cgi-bin/mailman/listinfo/koha-devel
> website : http://www.koha-community.org/
> git : http://git.koha-community.org/
> bugs : http://bugs.koha-community.org/
>
--
Julian Maurice
BibLibre
_______________________________________________
Koha-devel mailing list
Koha-devel at lists.koha-community.org
https://lists.koha-community.org/cgi-bin/mailman/listinfo/koha-devel
website : http://www.koha-community.org/ git : http://git.koha-community.org/ bugs : http://bugs.koha-community.org/
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 484 bytes
Desc: not available
URL: <http://lists.koha-community.org/pipermail/koha-devel/attachments/20200219/43f7e6cc/attachment.sig>
More information about the Koha-devel
mailing list