This repo builds two different images, plus a -dev image for each containing composer,
bash, git, ssh, strace, gdb, and make, and a -root image for all *(-dev) images where the default user is root. All the images
are based on Alpine Linux and Debian Linux. All images come with
extensions used to increase the performance of ReactPHP (such as event loop extensions). Such extensions
are highlighted build in the extensions list below. All the Alpine Linux images are scanned for vulnerabilities, and not pushed
if any are found. The Debian Linux containers easily a few hundred so those aren't scanned. (There is no use in doing so.)
Sometimes big changes happen to images, to stay informed please subscribe to this thread: #46
Currently Alpine and Debian images are treated differently, this matrix defines the differences between Alpine and Debian images:
| Base Image | Description |
|---|---|
| Alpine | Don't push when CVE's are found when building |
| Debian | Not scanned for CVE's due to the ton of low CVE's found in there |
The docker registry prefix is wyrihaximusnet/php, thus wyrihaximusnet/php:OUR-TAGS
In order to provide upgrade path we intend to keep one or more versions of PHP.
Currently Available tags on Docker hub
The tag naming strategy consists of (Read as a regex):
- PHP:
(phpMajor).(phpMinor)-(nts|zts)-(alpine((alpineMajor).(alpineMinor))|bullseye|buster|strech)(-slim)(-dev)(-root)?- Example:
8.2-zts-alpine-slim,8.4-nts-alpine3.13-dev,8.1-zts-buster-slim
- Example:
The following example has two build staging, the first for leading in any required dependencies, and the second the actual image we'd want to use. In the second stage we copy the dependencies in without needing composer in the production image. We create the image with the following command:
docker build . -t IMAGE_NAME:TAG --target=runtimeFROM ghcr.io/wyrihaximusnet/php:8.4-zts-alpine-slim-dev AS install-dependencies
WORKDIR /opt/app
COPY ./composer.lock /opt/app/composer.lock
COPY ./composer.json /opt/app/composer.json
COPY ./src/ /opt/app/src/
RUN composer install --ansi --no-interaction --prefer-dist --no-dev -o
FROM ghcr.io/wyrihaximusnet/php:8.4-zts-alpine-slim AS runtime
WORKDIR /opt/app
COPY ./composer.lock /opt/app/composer.lock
COPY ./composer.json /opt/app/composer.json
COPY --from=install-dependencies /opt/app/vendor/ /opt/app/vendor/
COPY ./src/ /opt/app/src/
COPY ./app.php /opt/app/app.php
ENTRYPOINT ["php", "/opt/app/app.php"]NTS, or non-thread safe is the PHP version most people use. This image comes with the following extensions:
| Extension | Description |
|---|---|
| ext-eio | Provides interface to the libeio library |
| ext-pcntl | PCNTL OS signals |
| ext-uv | LibUV event loop |
| ext-event | Libevent event loop |
ZTS, or zend thread safe is the PHP version that is safe to be used and required my threading extensions such as pthreads or parallel. This image comes with the following extensions:
| Extension | Description |
|---|---|
| ext-eio | Provides interface to the libeio library |
| ext-parallel | A succinct parallel concurrency API for PHP7 using threads |
| ext-pcntl | PCNTL OS signals |
| ext-uv | LibUV event loop |
Both versions come with the following list of non-non-blocking related (core-) extensions:
- bcmath
- Core
- ctype
- curl
- date
- dom
- fileinfo
- filter
- ftp
- gd
- gmp
- hash
- iconv
- json
- libxml
- mbstring
- mysqlnd
- openssl
- pcre
- PDO
- pdo_pgsql
- pdo_sqlite
- pgsql
- Phar
- posix
- random
- readline
- Reflection
- session
- SimpleXML
- sodium
- SPL
- sqlite3
- standard
- tokenizer
- vips
- xml
- xmlreader
- xmlwriter
- zip
- zlib
Slim images include all the above extensions except the following, as those notoriously require heavy dependencies:
- gd
- vips
This project is based on Usabilla's PHP Docker Template. Lots of the documentation on that repository also applies here, with the big difference that this project only supplies CLI images.