Dockerfile-cvte

FROM openjdk:8u191-jdk-alpine

RUN sed -i 's/dl-cdn.alpinelinux.org/mirrors.ustc.edu.cn/g' /etc/apk/repositories
RUN apk add --no-cache git openssh-client curl unzip bash ttf-dejavu coreutils tini

ARG user=jenkins
ARG group=jenkins
ARG uid=1000
ARG gid=1000
ARG http_port=8080
ARG agent_port=50000
ARG JENKINS_HOME=/var/jenkins_home

ENV JENKINS_HOME $JENKINS_HOME
ENV JENKINS_SLAVE_AGENT_PORT ${agent_port}

# Jenkins is run with user `jenkins`, uid = 1000
# If you bind mount a volume from the host or a data container,
# ensure you use the same uid
RUN mkdir -p $JENKINS_HOME \
  && chown ${uid}:${gid} $JENKINS_HOME \
  && addgroup -g ${gid} ${group} \
  && adduser -h "$JENKINS_HOME" -u ${uid} -G ${group} -s /bin/bash -D ${user}

# Jenkins home directory is a volume, so configuration and build history
# can be persisted and survive image upgrades
VOLUME $JENKINS_HOME

# `/usr/share/jenkins/ref/` contains all reference configuration we want
# to set on a fresh new installation. Use it to bundle additional plugins
# or config file with your custom jenkins Docker image.
RUN mkdir -p /usr/share/jenkins/ref/init.groovy.d

COPY init.groovy /usr/share/jenkins/ref/init.groovy.d/tcp-slave-agent-port.groovy

# jenkins version being bundled in this docker image
ARG JENKINS_VERSION
ENV JENKINS_VERSION ${JENKINS_VERSION:-2.295}

# jenkins.war checksum, download will be validated using it
# https://updates.jenkins-ci.org/download/war/
ARG JENKINS_SHA=0c5e985cdb434fe8932c07f9f30e5e369bf6892a51c6b8431ffa4fa8509dd604


# Can be used to customize where jenkins.war get downloaded from
ARG JENKINS_URL=https://repo.jenkins-ci.org/public/org/jenkins-ci/main/jenkins-war/${JENKINS_VERSION}/jenkins-war-${JENKINS_VERSION}.war

# could use ADD but this one does not check Last-Modified header neither does it allow to control checksum
# see https://github.com/docker/docker/issues/8331
RUN curl -fsSL ${JENKINS_URL} -o /usr/share/jenkins/jenkins.war \
  && echo "${JENKINS_SHA}  /usr/share/jenkins/jenkins.war" | sha256sum -c -

ENV JENKINS_UC https://updates.jenkins.io
ENV JENKINS_UC_EXPERIMENTAL=https://updates.jenkins.io/experimental
ENV JENKINS_INCREMENTALS_REPO_MIRROR=https://repo.jenkins-ci.org/incrementals
RUN chown -R ${user} "$JENKINS_HOME" /usr/share/jenkins/ref

# for main web interface:
EXPOSE ${http_port}

# will be used by attached slave agents:
EXPOSE ${agent_port}

ENV COPY_REFERENCE_FILE_LOG $JENKINS_HOME/copy_reference_file.log
ENV JAVA_OPTS -Djenkins.install.runSetupWizard=false -Dhudson.remoting.ClassFilter=hudson.model.Actionable,hudson.model.CauseAction

USER ${user}

ENV JENKINS_USER admin
ENV JENKINS_PASS admin

COPY jenkins-support /usr/local/bin/jenkins-support
COPY jenkins.cvte.sh /usr/local/bin/jenkins.sh
COPY tini-shim.sh /bin/tini
# from a derived Dockerfile, can use `RUN plugins.sh active.txt` to setup /usr/share/jenkins/ref/plugins from a support bundle
COPY plugins.sh /usr/local/bin/plugins.sh
COPY install-plugins.sh /usr/local/bin/install-plugins.sh
COPY cvte/plugins.txt /usr/share/jenkins/ref/plugins.txt

COPY cvte/basic-security.groovy /usr/share/jenkins/ref/init.groovy.d/basic-security.groovy
COPY cvte/plugins/* /usr/share/jenkins/ref/plugins/

USER root

RUN /usr/local/bin/install-plugins.sh < /usr/share/jenkins/ref/plugins.txt

ENV JENKINS_REF /usr/share/jenkins/ref
ENV TASK_HOST task.gz.cvte.cn

COPY ./cvte/jenkins-home/*.* $JENKINS_REF/
COPY ./cvte/jenkins-home/jobs $JENKINS_REF/jobs/
COPY ./cvte/jenkins-home/init.groovy.d $JENKINS_REF/init.groovy.d/
COPY ./cvte/jenkins-home/secrets $JENKINS_REF/secrets/

RUN wget "https://github.com/stedolan/jq/releases/download/jq-1.6/jq-linux64" -O /usr/bin/jq && chmod +x /usr/bin/jq

ENTRYPOINT ["/sbin/tini", "--", "/usr/local/bin/jenkins.sh"]