ba9c80b9b4
The previous COPY instruction with --chown flag was not recursively setting permissions. Explicitly set directory and file permissions for the www-data user and remove unnecessary CI directories to reduce image size and potential security exposure.
43 lines
1.1 KiB
Docker
43 lines
1.1 KiB
Docker
FROM php:8.4-fpm
|
|
|
|
# Set working directory early to avoid conflicts with host files
|
|
WORKDIR /var/www
|
|
|
|
# Install system dependencies
|
|
RUN apt-get update && apt-get install -y \
|
|
git \
|
|
curl \
|
|
libpng-dev \
|
|
libonig-dev \
|
|
libxml2-dev \
|
|
zip \
|
|
unzip \
|
|
libzip-dev \
|
|
libicu-dev
|
|
|
|
# Install PHP extensions installer
|
|
ADD https://github.com/mlocati/docker-php-extension-installer/releases/latest/download/install-php-extensions /usr/local/bin/
|
|
|
|
RUN chmod +x /usr/local/bin/install-php-extensions && \
|
|
install-php-extensions pdo_mysql mbstring exif pcntl bcmath gd zip intl
|
|
|
|
# Clear cache
|
|
RUN apt-get clean && rm -rf /var/lib/apt/lists/*
|
|
|
|
# Get latest Composer
|
|
COPY --from=docker.io/library/composer:latest /usr/bin/composer /usr/bin/composer
|
|
|
|
# Copy application files and fix permissions
|
|
COPY . /var/www
|
|
RUN chown -R www-data:www-data /var/www && \
|
|
find /var/www -type d -exec chmod 755 {} + && \
|
|
find /var/www -type f -exec chmod 644 {} + && \
|
|
rm -rf /var/www/.circleci /var/www/.github
|
|
|
|
# Change current user to www
|
|
USER www-data
|
|
|
|
# Expose port 8000
|
|
EXPOSE 8000
|
|
|
|
CMD ["php", "artisan", "serve", "--host=0.0.0.0", "--port=8000"] |