Dockerfile

FROM maven:3.6.3-jdk-11 as maven

# download and extract Jena

ARG JENA_VERSION=3.16.0

ARG JENA_TAR_URL="https://archive.apache.org/dist/jena/binaries/apache-jena-${JENA_VERSION}.tar.gz"

RUN mkdir /jena && \
    curl -SL "$JENA_TAR_URL" | \
    tar -xzf - -C /jena

# copy trust manager source code

WORKDIR /usr/src/trust-manager

COPY platform/trust-manager /usr/src/trust-manager

# build trust manager

RUN mvn clean install # builds target/trust-manager-1.0.0-SNAPSHOT.jar

# copy platform source code and POM

WORKDIR /usr/src/platform

COPY src /usr/src/platform/src

COPY pom.xml /usr/src/platform/pom.xml

RUN mvn -Pstandalone clean install

# ==============================

FROM atomgraph/letsencrypt-tomcat:4da3d91f434dd0875ef0bbdf771eb13751400f47

LABEL maintainer="martynas@atomgraph.com"

# hash of the current commit

ARG SOURCE_COMMIT=

ENV SOURCE_COMMIT=$SOURCE_COMMIT

WORKDIR $CATALINA_HOME

# add XSLT stylesheet that makes changes to server.xml

COPY platform/server.xsl conf/server.xsl

# add XSLT stylesheet that makes changes to ROOT.xml

COPY platform/context.xsl conf/context.xsl

# copy trust manager from the maven stage of the build

COPY --from=maven /usr/src/trust-manager/target/trust-manager-1.0.0-SNAPSHOT.jar lib/ldh-trust-manager.jar

ENV CACHE_MODEL_LOADS=true

ENV STYLESHEET=static/com/atomgraph/linkeddatahub/xsl/bootstrap/2.3.2/layout.xsl

ENV CACHE_STYLESHEET=true

ENV ATOMGRAPH_UPLOAD_ROOT=

ENV PROXY_HOST=

ENV TIMEOUT=20

ENV PROTOCOL=https

ENV HOST=localhost

ENV ABS_PATH=/

ENV PROXY_HTTP_PORT=80

ENV HTTP_REDIRECT_PORT=443

ENV HTTP_COMPRESSION=on

ENV PROXY_HTTPS_PORT=443

ENV HTTPS_CLIENT_AUTH=want

ENV HTTPS_COMPRESSION=on

ENV P12_FILE=/var/linkeddatahub/certs/server.p12

ENV PKCS12_KEY_PASSWORD=

ENV PKCS12_STORE_PASSWORD=

ENV SECRETARY_REL_URI=admin/acl/agents/e413f97b-15ee-47ea-ba65-4479aa7f1f9e/#this

ENV SECRETARY_KEY_PASSWORD=LinkedDataHub

ENV SECRETARY_CERT_ALIAS=ldh

ENV SECRETARY_CERT_VALIDITY=36500

ENV CLIENT_KEYSTORE="$CATALINA_HOME/webapps/ROOT/certs/secretary.p12"

ENV CLIENT_TRUSTSTORE="$CATALINA_HOME/webapps/ROOT/certs/secretary.truststore"

ENV OWNER_CERT_ALIAS=root-owner

ENV OWNER_CERT_VALIDITY=36500

ENV OWNER_KEYSTORE="$CATALINA_HOME/webapps/ROOT/certs/owner.p12"

ENV OWNER_URI=

ENV OWNER_DOC_URI=

ENV LOAD_DATASETS=

ENV CONTEXT_DATASET=/var/linkeddatahub/datasets/system.trig

ENV ADMIN_DATASET=/var/linkeddatahub/datasets/admin.trig

ENV END_USER_DATASET=/var/linkeddatahub/datasets/end-user.trig

ENV UPLOAD_CONTAINER_PATH=uploads

ENV MAX_CONTENT_LENGTH=

ENV MAX_CONN_PER_ROUTE=20

ENV MAX_TOTAL_CONN=40

ENV IMPORT_KEEPALIVE=

ENV GOOGLE_CLIENT_ID=

ENV GOOGLE_CLIENT_SECRET=

# remove default Tomcat webapps and install xmlstarlet (used for XPath queries) and envsubst (for variable substitution)

RUN rm -rf webapps/* && \
    apt-get update && \
    apt-get install -y xmlstarlet && \
    apt-get install -y gettext-base && \
    apt-get install -y uuid-runtime

# copy entrypoint

COPY platform/entrypoint.sh entrypoint.sh

# copy SPARQL query used to split the default graph into named graphs

COPY platform/split-default-graph.rq.template split-default-graph.rq.template

# copy SPARQL query used to get metadata of the root app service from the system dataset

COPY platform/select-root-services.rq.template select-root-services.rq.template

# copy the metadata of the built-in secretary agent

COPY platform/root-secretary.trig.template root-secretary.trig.template

COPY platform/root-owner.trig.template root-owner.trig.template

# copy default datasets

COPY platform/datasets/admin.trig /var/linkeddatahub/datasets/admin.trig

COPY platform/datasets/end-user.trig /var/linkeddatahub/datasets/end-user.trig

# copy webapp config

COPY platform/conf/ROOT.xml conf/Catalina/localhost/ROOT.xml

# copy platform webapp (exploded) from the maven stage of the build

COPY --from=maven /usr/src/platform/target/ROOT webapps/ROOT/

# copy extracted Jena from the maven stage of the build

COPY --from=maven /jena/* /jena

# setup Jena

ENV JENA_HOME=/jena

ENV PATH="${PATH}:${JENA_HOME}/bin"

# persist certificates in a volume

VOLUME /var/linkeddatahub/certs "$CATALINA_HOME/webapps/ROOT/certs"

ENTRYPOINT ["/bin/sh", "entrypoint.sh"]