From 9dd8cd771caa132f10ad8dcb6dab029b469bcddf Mon Sep 17 00:00:00 2001
From: Sebastian Sdorra <sebastian.sdorra@cloudogu.com>
Date: Sun, 26 Apr 2020 12:31:19 +0200
Subject: [PATCH] added packaging for docker

---
 scm-packaging/docker/Dockerfile               |  43 ++++
 scm-packaging/docker/pom.xml                  | 166 +++++++++++++++
 .../docker/src/main/fs/etc/scm/logging.xml    |  84 ++++++++
 .../src/main/fs/etc/scm/server-config.xml     | 193 ++++++++++++++++++
 .../scm-server/var/webapp/docroot/index.html  |  35 ++++
 scm-packaging/pom.xml                         |   1 +
 6 files changed, 522 insertions(+)
 create mode 100644 scm-packaging/docker/Dockerfile
 create mode 100644 scm-packaging/docker/pom.xml
 create mode 100644 scm-packaging/docker/src/main/fs/etc/scm/logging.xml
 create mode 100644 scm-packaging/docker/src/main/fs/etc/scm/server-config.xml
 create mode 100644 scm-packaging/docker/src/main/fs/opt/scm-server/var/webapp/docroot/index.html

diff --git a/scm-packaging/docker/Dockerfile b/scm-packaging/docker/Dockerfile
new file mode 100644
index 0000000000..558222631f
--- /dev/null
+++ b/scm-packaging/docker/Dockerfile
@@ -0,0 +1,43 @@
+#
+# MIT License
+#
+# Copyright (c) 2020-present Cloudogu GmbH and Contributors
+#
+# Permission is hereby granted, free of charge, to any person obtaining a copy
+# of this software and associated documentation files (the "Software"), to deal
+# in the Software without restriction, including without limitation the rights
+# to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+# copies of the Software, and to permit persons to whom the Software is
+# furnished to do so, subject to the following conditions:
+#
+# The above copyright notice and this permission notice shall be included in all
+# copies or substantial portions of the Software.
+#
+# THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+# IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+# FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+# AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+# LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+# OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+# SOFTWARE.
+#
+
+FROM adoptopenjdk/openjdk11:jdk-11.0.7_10-alpine-slim
+ENV SCM_HOME=/var/lib/scm
+ENV CACHE_DIR=/var/cache/scm/work
+
+COPY . /
+
+RUN set -x \
+ && apk add --no-cache mercurial bash \
+ && addgroup -S -g 1000 scm \
+ && adduser -S -s /bin/false -G scm -h ${SCM_HOME} -D -H -u 1000 scm \
+ && mkdir -p ${SCM_HOME} ${CACHE_DIR} \
+ && chown scm:scm ${SCM_HOME} ${CACHE_DIR}
+
+WORKDIR "/opt/scm-server"
+VOLUME ["${SCM_HOME}", "${CACHE_DIR}"]
+EXPOSE 8080
+USER scm
+
+CMD [ "java", "-cp", "/etc/scm:/opt/scm-server/lib/*", "-Djava.awt.headless=true", "-Dlogback.configurationFile=logging.xml", "sonia.scm.server.ScmServerDaemon" ]
diff --git a/scm-packaging/docker/pom.xml b/scm-packaging/docker/pom.xml
new file mode 100644
index 0000000000..62984ad60b
--- /dev/null
+++ b/scm-packaging/docker/pom.xml
@@ -0,0 +1,166 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+
+    MIT License
+
+    Copyright (c) 2020-present Cloudogu GmbH and Contributors
+
+    Permission is hereby granted, free of charge, to any person obtaining a copy
+    of this software and associated documentation files (the "Software"), to deal
+    in the Software without restriction, including without limitation the rights
+    to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+    copies of the Software, and to permit persons to whom the Software is
+    furnished to do so, subject to the following conditions:
+
+    The above copyright notice and this permission notice shall be included in all
+    copies or substantial portions of the Software.
+
+    THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+    IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+    FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+    AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+    LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+    OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+    SOFTWARE.
+
+-->
+<project xmlns="http://maven.apache.org/POM/4.0.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
+         xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 http://maven.apache.org/maven-v4_0_0.xsd">
+
+  <modelVersion>4.0.0</modelVersion>
+
+  <parent>
+    <groupId>sonia.scm.packaging</groupId>
+    <artifactId>scm-packaging</artifactId>
+    <version>2.0.0-SNAPSHOT</version>
+  </parent>
+
+  <artifactId>docker</artifactId>
+  <packaging>pom</packaging>
+  <version>2.0.0-SNAPSHOT</version>
+
+  <dependencies>
+
+    <dependency>
+      <groupId>sonia.scm</groupId>
+      <artifactId>scm-server</artifactId>
+      <version>${project.version}</version>
+    </dependency>
+
+  </dependencies>
+
+  <build>
+    <plugins>
+
+      <plugin>
+        <groupId>org.apache.maven.plugins</groupId>
+        <artifactId>maven-resources-plugin</artifactId>
+        <version>3.1.0</version>
+        <executions>
+          <execution>
+            <id>copy-dockerfile</id>
+            <phase>prepare-package</phase>
+            <goals>
+              <goal>copy-resources</goal>
+            </goals>
+
+            <configuration>
+              <outputDirectory>${project.build.directory}/build</outputDirectory>
+              <resources>
+                <resource>
+                  <directory>.</directory>
+                  <includes>
+                    <include>Dockerfile</include>
+                  </includes>
+                  <filtering>false</filtering>
+                </resource>
+              </resources>
+            </configuration>
+
+          </execution>
+          <execution>
+            <id>copy-sources</id>
+            <phase>prepare-package</phase>
+            <goals>
+              <goal>copy-resources</goal>
+            </goals>
+
+            <configuration>
+              <outputDirectory>${project.build.directory}/build</outputDirectory>
+              <resources>
+                <resource>
+                  <directory>src/main/fs</directory>
+                  <filtering>false</filtering>
+                </resource>
+              </resources>
+            </configuration>
+
+          </execution>
+        </executions>
+      </plugin>
+
+      <plugin>
+        <groupId>org.apache.maven.plugins</groupId>
+        <artifactId>maven-dependency-plugin</artifactId>
+        <version>3.1.2</version>
+        <executions>
+          <execution>
+            <id>copy-server</id>
+            <phase>prepare-package</phase>
+            <goals>
+              <goal>copy-dependencies</goal>
+            </goals>
+            <configuration>
+              <includeScope>runtime</includeScope>
+              <outputDirectory>${project.build.directory}/build/opt/scm-server/lib</outputDirectory>
+              <overWriteReleases>false</overWriteReleases>
+              <overWriteSnapshots>false</overWriteSnapshots>
+              <overWriteIfNewer>true</overWriteIfNewer>
+            </configuration>
+          </execution>
+          <execution>
+            <id>copy-webapp</id>
+            <phase>prepare-package</phase>
+            <goals>
+              <goal>copy</goal>
+            </goals>
+            <configuration>
+              <artifactItems>
+                <artifactItem>
+                  <groupId>sonia.scm</groupId>
+                  <artifactId>scm-webapp</artifactId>
+                  <version>${project.version}</version>
+                  <type>war</type>
+                  <outputDirectory>${project.build.directory}/build/opt/scm-server/var/webapp</outputDirectory>
+                  <destFileName>scm-webapp.war</destFileName>
+                </artifactItem>
+              </artifactItems>
+            </configuration>
+          </execution>
+        </executions>
+      </plugin>
+
+      <plugin>
+        <groupId>com.spotify</groupId>
+        <artifactId>dockerfile-maven-plugin</artifactId>
+        <version>1.4.13</version>
+        <executions>
+          <execution>
+            <id>default</id>
+            <phase>package</phase>
+            <goals>
+              <goal>build</goal>
+            </goals>
+          </execution>
+        </executions>
+        <configuration>
+          <repository>docker.io/scmmanager/scm-manager</repository>
+          <tag>${project.version}</tag>
+          <contextDirectory>target/build</contextDirectory>
+        </configuration>
+      </plugin>
+
+    </plugins>
+  </build>
+
+</project>
diff --git a/scm-packaging/docker/src/main/fs/etc/scm/logging.xml b/scm-packaging/docker/src/main/fs/etc/scm/logging.xml
new file mode 100644
index 0000000000..bc0f6fc1b4
--- /dev/null
+++ b/scm-packaging/docker/src/main/fs/etc/scm/logging.xml
@@ -0,0 +1,84 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+
+    MIT License
+
+    Copyright (c) 2020-present Cloudogu GmbH and Contributors
+
+    Permission is hereby granted, free of charge, to any person obtaining a copy
+    of this software and associated documentation files (the "Software"), to deal
+    in the Software without restriction, including without limitation the rights
+    to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+    copies of the Software, and to permit persons to whom the Software is
+    furnished to do so, subject to the following conditions:
+
+    The above copyright notice and this permission notice shall be included in all
+    copies or substantial portions of the Software.
+
+    THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+    IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+    FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+    AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+    LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+    OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+    SOFTWARE.
+
+-->
+<!--
+    Document   : logback.release.xml
+    Created on : February 3, 2011, 6:36 PM
+    Author     : sdorra
+    Description:
+        Purpose of the document follows.
+-->
+
+<configuration>
+
+  <appender name="STDOUT" class="ch.qos.logback.core.ConsoleAppender">
+
+    <encoder>
+      <pattern>%d{yyyy-MM-dd HH:mm:ss.SSS} [%thread] [%-10X{transaction_id}] %-5level %logger - %msg%n</pattern>
+    </encoder>
+
+  </appender>
+
+  <logger name="sonia.scm" level="INFO" />
+  <logger name="com.cloudogu.scm" level="INFO" />
+
+  <!-- suppress massive gzip logging -->
+  <logger name="sonia.scm.filter.GZipFilter" level="WARN" />
+  <logger name="sonia.scm.filter.GZipResponseStream" level="WARN" />
+
+  <logger name="sonia.scm.util.ServiceUtil" level="WARN" />
+
+  <!-- event bus -->
+  <logger name="sonia.scm.event.LegmanScmEventBus" level="INFO" />
+
+  <!-- shiro -->
+  <!--
+  <logger name="org.apache.shiro" level="INFO" />
+  <logger name="org.apache.shiro.authc.pam.ModularRealmAuthenticator" level="DEBUG" />
+  -->
+
+  <!-- svnkit -->
+  <!--
+  <logger name="svnkit" level="WARN" />
+  <logger name="svnkit.network" level="DEBUG" />
+  <logger name="svnkit.fsfs" level="WARN" />
+  -->
+
+  <!-- javahg -->
+  <!--
+  <logger name="com.aragost.javahg" level="DEBUG" />
+  -->
+
+  <!-- ehcache -->
+  <!--
+  <logger name="net.sf.ehcache" level="DEBUG" />
+  -->
+
+  <root level="WARN">
+    <appender-ref ref="STDOUT" />
+  </root>
+
+</configuration>
diff --git a/scm-packaging/docker/src/main/fs/etc/scm/server-config.xml b/scm-packaging/docker/src/main/fs/etc/scm/server-config.xml
new file mode 100644
index 0000000000..b7a5a7efef
--- /dev/null
+++ b/scm-packaging/docker/src/main/fs/etc/scm/server-config.xml
@@ -0,0 +1,193 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+
+    MIT License
+
+    Copyright (c) 2020-present Cloudogu GmbH and Contributors
+
+    Permission is hereby granted, free of charge, to any person obtaining a copy
+    of this software and associated documentation files (the "Software"), to deal
+    in the Software without restriction, including without limitation the rights
+    to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+    copies of the Software, and to permit persons to whom the Software is
+    furnished to do so, subject to the following conditions:
+
+    The above copyright notice and this permission notice shall be included in all
+    copies or substantial portions of the Software.
+
+    THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+    IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+    FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+    AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+    LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+    OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+    SOFTWARE.
+
+-->
+<!DOCTYPE Configure PUBLIC "-//Jetty//Configure//EN" "http://www.eclipse.org/jetty/configure_9_0.dtd">
+<Configure id="ScmServer" class="org.eclipse.jetty.server.Server">
+
+  <New id="httpConfig" class="org.eclipse.jetty.server.HttpConfiguration">
+    <!-- increase header size for mercurial -->
+    <Set name="requestHeaderSize">16384</Set>
+    <Set name="responseHeaderSize">16384</Set>
+
+    <Call name="addCustomizer">
+      <Arg><New class="org.eclipse.jetty.server.ForwardedRequestCustomizer"/></Arg>
+    </Call>
+  </New>
+  
+  <!--
+  Connectors
+  -->
+  <Call name="addConnector">
+    <Arg>
+      <New class="org.eclipse.jetty.server.ServerConnector">
+        <Arg name="server">
+          <Ref refid="ScmServer" />
+        </Arg>
+        <Arg name="factories">
+          <Array type="org.eclipse.jetty.server.ConnectionFactory">
+            <Item>
+              <New class="org.eclipse.jetty.server.HttpConnectionFactory">
+                <Arg name="config">
+                  <Ref refid="httpConfig" />
+                </Arg>
+              </New>
+            </Item>
+          </Array>
+        </Arg>
+        <Set name="port">
+          <SystemProperty name="jetty.port" default="8080" />
+        </Set>
+      </New>
+    </Arg>
+  </Call>
+
+  <New id="scm-webapp" class="org.eclipse.jetty.webapp.WebAppContext">
+    <Set name="contextPath">/scm</Set>
+    <Set name="war">
+      <SystemProperty name="basedir" default="."/>/var/webapp/scm-webapp.war</Set>
+    <!-- disable directory listings -->
+    <Call name="setInitParameter">
+      <Arg>org.eclipse.jetty.servlet.Default.dirAllowed</Arg>
+      <Arg>false</Arg>
+    </Call>
+    <Set name="tempDirectory">/var/cache/scm/work/webapp</Set>
+  </New>
+
+  <New id="docroot" class="org.eclipse.jetty.webapp.WebAppContext">
+    <Set name="contextPath">/</Set>
+    <Set name="baseResource">
+      <New class="org.eclipse.jetty.util.resource.ResourceCollection">
+        <Arg>
+          <Array type="java.lang.String">
+            <Item>
+              <SystemProperty name="basedir" default="."/>/var/webapp/docroot</Item>
+          </Array>
+        </Arg>
+      </New>
+    </Set>
+    <Set name="tempDirectory">/var/cache/scm/work/work/docroot</Set>
+  </New>
+  
+  <Set name="handler">
+    <New class="org.eclipse.jetty.server.handler.HandlerCollection">
+      <Set name="handlers">
+        <Array type="org.eclipse.jetty.server.Handler">
+          <Item>
+            <Ref id="scm-webapp" />
+          </Item>
+          <Item>
+            <Ref id="docroot" />
+          </Item>
+        </Array>
+      </Set>
+    </New>
+  </Set>
+  
+  <!-- TODO fix for jetty 9.2.x -->
+  
+  <!-- request logging -->
+  <!--
+  <Ref id="RequestLog">
+    <Set name="requestLog">
+      <New id="RequestLogImpl" class="org.eclipse.jetty.server.NCSARequestLog">
+        <Arg><SystemProperty name="basedir" default="."/>/var/log/yyyy_mm_dd.request.log</Arg>
+        <Set name="retainDays">90</Set>
+        <Set name="append">true</Set>
+        <Set name="extended">false</Set>
+        <Set name="LogTimeZone">GMT</Set>
+       </New>
+    </Set>
+  </Ref>
+  -->
+
+  <!-- mod_proxy_ajp or mod_jk -->
+  <!--
+  <Call name="addConnector">
+    <Arg>
+       <New class="org.eclipse.jetty.ajp.Ajp13SocketConnector">
+         <Set name="port">8009</Set>
+       </New>
+    </Arg>
+  </Call>
+  -->
+
+  <!-- SSL-Connector -->
+  <!--
+     Documentation for the SSL-Connector: 
+     http://wiki.eclipse.org/Jetty/Reference/SSL_Connectors
+  -->
+  <!--
+  Besure SSLv3 protocol is excluded to avoid POODLE vulnerability.
+  See https://groups.google.com/d/msg/scmmanager/sX_Ydy-wAPA/-Dvs5i7RHtQJ
+  -->
+  <!--
+  <Call name="addConnector">
+    <Arg>
+      <New class="org.eclipse.jetty.server.ssl.SslSelectChannelConnector">
+        <Arg>
+          <New class="org.eclipse.jetty.http.ssl.SslContextFactory">
+            <Set name="excludeProtocols">
+              <Array type="java.lang.String">
+                <Item>SSLv2Hello</Item>
+                <Item>SSLv3</Item>
+              </Array>
+            </Set>
+          </New>
+        </Arg>
+        <Set name="Port">8181</Set>
+        <Set name="maxIdleTime">30000</Set>
+        <Set name="requestHeaderSize">16384</Set>
+        <Set name="keystore"><SystemProperty name="basedir" default="." />/conf/keystore.jks</Set>
+        <Set name="password">OBF:xxx</Set>
+        <Set name="keyPassword">OBF:xxx</Set>
+        <Set name="truststore"><SystemProperty name="basedir" default="." />/conf/keystore.jks</Set>
+        <Set name="trustPassword">OBF:xxx</Set>
+      </New>
+    </Arg>
+  </Call>
+  -->
+
+  <!-- JMX support -->
+  <!--
+  <Call id="MBeanServer" class="java.lang.management.ManagementFactory"
+    name="getPlatformMBeanServer" />
+
+  <New id="MBeanContainer" class="org.eclipse.jetty.jmx.MBeanContainer">
+    <Arg>
+      <Ref id="MBeanServer" />
+    </Arg>
+  </New>
+
+  <Get id="Container" name="container">
+    <Call name="addEventListener">
+      <Arg>
+        <Ref id="MBeanContainer" />
+      </Arg>
+    </Call>
+  </Get>
+  -->
+
+</Configure>
diff --git a/scm-packaging/docker/src/main/fs/opt/scm-server/var/webapp/docroot/index.html b/scm-packaging/docker/src/main/fs/opt/scm-server/var/webapp/docroot/index.html
new file mode 100644
index 0000000000..a3bff3f8b3
--- /dev/null
+++ b/scm-packaging/docker/src/main/fs/opt/scm-server/var/webapp/docroot/index.html
@@ -0,0 +1,35 @@
+<!--
+
+    MIT License
+
+    Copyright (c) 2020-present Cloudogu GmbH and Contributors
+
+    Permission is hereby granted, free of charge, to any person obtaining a copy
+    of this software and associated documentation files (the "Software"), to deal
+    in the Software without restriction, including without limitation the rights
+    to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+    copies of the Software, and to permit persons to whom the Software is
+    furnished to do so, subject to the following conditions:
+
+    The above copyright notice and this permission notice shall be included in all
+    copies or substantial portions of the Software.
+
+    THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+    IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+    FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+    AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+    LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+    OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+    SOFTWARE.
+
+-->
+<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
+<html>
+  <head>
+    <title>SCM-Server</title>
+    <meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
+    <meta http-equiv="refresh" content="0;url=/scm">
+  </head>
+  <body>
+  </body>
+</html>
diff --git a/scm-packaging/pom.xml b/scm-packaging/pom.xml
index 69f40c26e3..586a2a3092 100644
--- a/scm-packaging/pom.xml
+++ b/scm-packaging/pom.xml
@@ -43,6 +43,7 @@
     <module>rpm</module>
     <module>deb</module>
     <module>unix</module>
+    <module>docker</module>
   </modules>
 
 </project>