Add Dockerfile and build steps for custom image

Author: geographika

docker/.dockerignore

@@ -0,0 +1,4 @@
+*
+!runtime
+!instantclient
+!templates

docker/Dockerfile

@@ -0,0 +1,131 @@
+FROM ghcr.io/osgeo/gdal:ubuntu-full-3.11.0 AS gdal
+# see https://github.com/OSGeo/gdal/tree/master/docker#ubuntu-based
+
+FROM gdal AS builder
+LABEL maintainer="[email protected]"
+SHELL ["/bin/bash", "-o", "pipefail", "-cux"]
+
+RUN --mount=type=cache,target=/var/cache,sharing=locked \
+    --mount=type=cache,target=/root/.cache \
+    apt-get update \
+    && apt-get upgrade --assume-yes \
+    && DEBIAN_FRONTEND=noninteractive apt-get install --assume-yes --no-install-recommends bison \
+        flex python3-lxml libfribidi-dev swig \
+        cmake librsvg2-dev colordiff libpq-dev libpng-dev libjpeg-dev libgif-dev libgeos-dev libgd-dev \
+        libfreetype6-dev libfcgi-dev libcurl4-gnutls-dev libcairo2-dev libxml2-dev \
+        libxslt1-dev python3-dev python3-pip python3-setuptools python3-venv php-dev libexempi-dev lcov lftp ninja-build git curl \
+        clang libprotobuf-c-dev protobuf-c-compiler libharfbuzz-dev libcairo2-dev librsvg2-dev \
+        unixodbc-dev \
+    && ln -s /usr/lib/*-linux-gnu/libproj.so.*[0] $(echo /usr/lib/*-linux-gnu)/libproj.so
+
+ARG MAPSERVER_BRANCH
+ARG MAPSERVER_REPO
+
+RUN git clone ${MAPSERVER_REPO} --branch=${MAPSERVER_BRANCH} --depth=100 /src \
+    && cd /src
+
+RUN --mount=type=cache,target=/var/cache,sharing=locked \
+    --mount=type=cache,target=/root/.cache
+
+WORKDIR /src/build
+RUN cmake .. \
+    -GNinja \
+    -DCMAKE_C_FLAGS="-O2 -DPROJ_RENAME_SYMBOLS" \
+    -DCMAKE_CXX_FLAGS="-O2 -DPROJ_RENAME_SYMBOLS" \
+    -DCMAKE_BUILD_TYPE=Release \
+    -DCMAKE_INSTALL_PREFIX=/usr/local \
+    -DWITH_CLIENT_WMS=1 \
+    -DWITH_CLIENT_WFS=1 \
+    -DWITH_OGCAPI=1 \
+    -DWITH_KML=0 \
+    -DWITH_SOS=0 \
+    -DWITH_XMLMAPFILE=0 \
+    -DWITH_CAIRO=1 \
+    -DWITH_RSVG=1 \
+    -DUSE_PROJ=1 \
+    -DUSE_WFS_SVR=1 \
+    -DUSE_OGCAPI_SVR=1 \
+    -DWITH_ORACLESPATIAL=0 \
+    -DWITH_PYTHON=1 \
+    -DWITH_MSSQL2008=0
+
+RUN ninja install
+
+# Run the make command for pythonmapscript-wheel
+# RUN cmake --build . --target pythonmapscript-wheel
+
+FROM gdal AS runner
+LABEL maintainer="[email protected]"
+SHELL ["/bin/bash", "-o", "pipefail", "-cux"]
+
+# Let's copy a few of the settings from /etc/init.d/apache2
+ENV APACHE_CONFDIR=/etc/apache2 \
+    APACHE_ENVVARS=/etc/apache2/envvars \
+    # And then a few more from $APACHE_CONFDIR/envvars itself
+    APACHE_RUN_USER=www-data \
+    APACHE_RUN_GROUP=www-data \
+    APACHE_RUN_DIR=/tmp/apache2 \
+    APACHE_PID_FILE=/tmp/apache2/apache2.pid \
+    APACHE_LOCK_DIR=/var/lock/apache2 \
+    APACHE_LOG_DIR=/var/log/apache2
+    # MS_MAP_PATTERN=^\\/etc\\/mapserver\\/([^\\.][-_A-Za-z0-9\\.]+\\/{1})*([-_A-Za-z0-9\\.]+\\.map)$
+
+RUN --mount=type=cache,target=/var/cache,sharing=locked \
+    --mount=type=cache,target=/root/.cache \
+    apt-get update \
+    && apt-get upgrade --assume-yes \
+    && apt-get install --assume-yes --no-install-recommends ca-certificates apache2 libapache2-mod-fcgid \
+        libfribidi0 librsvg2-2 libpng16-16 libgif7 libfcgi0ldbl \
+        libxslt1.1 libprotobuf-c1 libaio1t64 libpcre2-posix3 glibc-tools
+
+RUN a2enmod fcgid headers status \
+    && a2dismod -f auth_basic authn_file authn_core authz_user autoindex dir \
+    && rm /etc/apache2/mods-enabled/alias.conf \
+    && mkdir --mode=go+w --parent ${APACHE_RUN_DIR} ${APACHE_LOCK_DIR} \
+    && mkdir --parent /etc/mapserver \
+    && chmod o+w /var/lib/apache2/fcgid /var/lib/apache2/fcgid/sock \
+    && find "$APACHE_CONFDIR" -type f -exec sed -ri ' \
+    s!^(\s*CustomLog)\s+\S+!\1 /proc/self/fd/1!g; \
+    s!^(\s*ErrorLog)\s+\S+!\1 /proc/self/fd/2!g; \
+    ' '{}' ';' \
+    && sed -ri 's!LogFormat "(.*)" combined!LogFormat "%{us}T %{X-Request-Id}i \1" combined!g' /etc/apache2/apache2.conf \
+    && echo 'ErrorLogFormat "%{X-Request-Id}i [%l] [pid %P] %M"' >> /etc/apache2/apache2.conf \
+    && sed -i -e 's/<VirtualHost \*:80>/<VirtualHost *:8080>/' /etc/apache2/sites-available/000-default.conf \
+    && sed -i -e 's/Listen 80$/Listen 8080/' /etc/apache2/ports.conf \
+    && rm -rf /etc/apache2/conf-enabled/other-vhosts-access-log.conf
+
+# Create a writable directory for MapServer temporary data
+RUN mkdir -p /tmp/mapserver-data && \
+    chown www-data:www-data /tmp/mapserver-data && \
+    chmod 755 /tmp/mapserver-data
+
+EXPOSE 8080
+
+COPY --from=builder /usr/local/bin /usr/local/bin/
+COPY --from=builder /usr/local/lib /usr/local/lib/
+COPY --from=builder /usr/local/share/mapserver /usr/local/share/mapserver/
+COPY --from=builder /src/share/ogcapi/templates/html-bootstrap4 /usr/local/share/mapserver/ogcapi/templates/html-bootstrap4/
+
+COPY runtime /
+
+RUN ldconfig
+
+ENV MS_DEBUGLEVEL=0 \
+    MS_ERRORFILE=stderr \
+    MAPSERVER_CONFIG_FILE=/usr/local/share/mapserver/config/index.conf \
+    MAPSERVER_BASE_PATH= \
+    MAX_REQUESTS_PER_PROCESS=1000 \
+    MIN_PROCESSES=1 \
+    MAX_PROCESSES=5 \
+    BUSY_TIMEOUT=300 \
+    IDLE_TIMEOUT=300 \
+    IO_TIMEOUT=40 \
+    APACHE_LIMIT_REQUEST_LINE=8190 \
+    GET_ENV=env \
+    SERVER=apache
+
+CMD ["/usr/local/bin/start-server"]
+
+VOLUME /tmp
+
+WORKDIR /etc/mapserver

docker/ReadMe.md

@@ -0,0 +1,29 @@
+# Creating the Docker Image
+
+```
+start "C:\Program Files\Docker\Docker\Docker Desktop.exe"
+cd C:\GitHub\getting-started-with-mapserver\docker
+
+docker build `
+    --tag "mapserver-workshop" `
+    --target=runner `
+    --build-arg=MAPSERVER_BRANCH=main `
+    --build-arg=MAPSERVER_REPO=https://github.com/mapserver/mapserver `
+    .
+
+docker run -it --name mapserver-workshop -p 8080:8080 mapserver-workshop
+
+docker tag mapserver-workshop geographika/mapserver-workshop
+
+docker login
+# geographika
+# docker images
+docker push geographika/mapserver-workshop
+```
+
+## Testing
+
+```
+docker start mapserver-workshop
+docker exec -it mapserver-workshop bash
+```

docker/runtime/etc/apache2/conf-enabled/mapserver.conf

@@ -0,0 +1,36 @@
+# Mapserver has memory leaks, this limit should improve long term memory usage
+FcgidMaxRequestsPerProcess ${MAX_REQUESTS_PER_PROCESS}
+FcgidMinProcessesPerClass ${MIN_PROCESSES}
+FcgidMaxProcessesPerClass ${MAX_PROCESSES}
+FcgidBusyTimeout ${BUSY_TIMEOUT}
+FcgidIdleTimeout ${IDLE_TIMEOUT}
+FcgidIOTimeout ${IO_TIMEOUT}
+LimitRequestLine ${APACHE_LIMIT_REQUEST_LINE}
+FcgidProcessTableFile /tmp/fcgid_shm
+FcgidIPCDir /tmp/mod_fcgid
+
+ScriptAliasMatch "^${MAPSERVER_BASE_PATH}/(.*)" /usr/local/bin/mapserv_wrapper/$1
+ScriptAliasMatch "^${MAPSERVER_BASE_PATH}" /usr/local/bin/mapserv_wrapper
+<LocationMatch "^/.*">
+  # Enable CORS (required for WFS requests)
+  Header set Access-Control-Allow-Origin "*"
+  Header set Cache-Control "max-age=0, must-revalidate, no-cache, no-store"
+
+  SetHandler fcgid-script
+  Options +ExecCGI -MultiViews +SymLinksIfOwnerMatch
+  Require all granted
+  Include /tmp/pass-env
+  # Digital Ocean does not seem to pass this header back
+  # even though HTTP_X_FORWARDED_HOST is
+  # SetEnv HTTP_X_FORWARDED_PORT 443
+  RequestHeader set X-Forwarded-Port "443"
+</LocationMatch>
+
+ExtendedStatus On
+
+# Remove below for production
+<Location "/server-status-remote">
+    SetHandler server-status
+</Location>
+
+ServerName localhost

docker/runtime/usr/local/bin/mapserv_wrapper

@@ -0,0 +1,14 @@
+#!/bin/bash -a
+
+# Add the environment variables that were set when apache was started
+# shellcheck source=/dev/null
+source /tmp/init_env
+
+# GDAL uses CWD to write temporary files. So we better be in a location writable by www-data.
+cd /tmp || exit 1
+
+if [[ "${MAPSERVER_CATCH_SEGV}" == 1 ]]; then
+    exec catchsegv /usr/local/bin/mapserv "$@"
+else
+    exec /usr/local/bin/mapserv "$@"
+fi

docker/runtime/usr/local/bin/start-server

@@ -0,0 +1,23 @@
+#!/bin/bash -e
+
+echo "Starting with apache2"
+
+# save the environment to be able to restore it in the FCGI daemon (used
+# in /usr/local/bin/qgis_mapsev_wrapper) for the startup code.
+${GET_ENV} | sed -e 's/^\([^=]*\)=.*/PassEnv \1/' > /tmp/pass-env
+
+# Save the environment to be able to restore it in the FCGI daemon (used in /usr/local/bin/mapserv_wrapper)
+${GET_ENV} | sed -e 's/.\+/export "\0"/' > /tmp/init_env
+
+#if [[ "${UID}" == 0 ]]; then
+#    echo "Switching listen port to 80"
+#    cd /tmp
+#    sed -i -e 's/<VirtualHost \*:8080>/<VirtualHost *:80>/' /etc/apache2/sites-available/000-default.conf
+#    sed -i -e 's/Listen 8080$/Listen 80/' /etc/apache2/ports.conf
+#fi
+
+trap '' WINCH
+
+rm -f "${APACHE_PID_FILE}"
+
+exec apache2 -DFOREGROUND