FROM python:2.7.13-slim

RUN groupadd -r sentry && useradd -r -m -g sentry sentry

RUN apt-get update && apt-get install -y --no-install-recommends \

gcc \

git \

libffi-dev \

libjpeg-dev \

libpq-dev \

libxml2-dev \

libxslt-dev \

libyaml-dev \

&& rm -rf /var/lib/apt/lists/*

ENV PIP_NO_CACHE_DIR off

ENV PIP_DISABLE_PIP_VERSION_CHECK on

RUN set -x \

&& export GOSU_VERSION=1.10 \

&& apt-get update && apt-get install -y --no-install-recommends wget && rm -rf /var/lib/apt/lists/* \

&& wget -O /usr/local/bin/gosu "https://github.com/tianon/gosu/releases/download/$GOSU_VERSION/gosu-$(dpkg --print-architecture)" \

&& wget -O /usr/local/bin/gosu.asc "https://github.com/tianon/gosu/releases/download/$GOSU_VERSION/gosu-$(dpkg --print-architecture).asc" \

&& export GNUPGHOME="$(mktemp -d)" \

&& gpg --keyserver ha.pool.sks-keyservers.net --recv-keys B42F6819007F00F88E364FD4036A9C25BF357DD4 \

&& gpg --batch --verify /usr/local/bin/gosu.asc /usr/local/bin/gosu \

&& rm -r "$GNUPGHOME" /usr/local/bin/gosu.asc \

&& chmod +x /usr/local/bin/gosu \

&& gosu nobody true \

&& apt-get purge -y --auto-remove wget

RUN set -x \

&& export TINI_VERSION=0.13.1 \

&& apt-get update && apt-get install -y --no-install-recommends wget && rm -rf /var/lib/apt/lists/* \

&& wget -O /usr/local/bin/tini "https://github.com/krallin/tini/releases/download/v$TINI_VERSION/tini" \

&& wget -O /usr/local/bin/tini.asc "https://github.com/krallin/tini/releases/download/v$TINI_VERSION/tini.asc" \

&& export GNUPGHOME="$(mktemp -d)" \

&& gpg --keyserver ha.pool.sks-keyservers.net --recv-keys 6380DC428747F6C393FEACA59A84159D7001A4E5 \

&& gpg --batch --verify /usr/local/bin/tini.asc /usr/local/bin/tini \

&& rm -r "$GNUPGHOME" /usr/local/bin/tini.asc \

&& chmod +x /usr/local/bin/tini \

&& tini -h \

&& apt-get purge -y --auto-remove wget

RUN set -x \

&& apt-get update && apt-get install -y --no-install-recommends make && rm -rf /var/lib/apt/lists/* \

&& pip install librabbitmq==1.6.1 \

&& python -c 'import librabbitmq' \

&& apt-get purge -y --auto-remove make

ARG SENTRY_BUILD=master

ENV SENTRY_BUILD $SENTRY_BUILD

RUN [ "$SENTRY_BUILD" != '' ] \

# Install node to build assets

&& export NODE_VERSION=4.6.0 \

&& export GNUPGHOME="$(mktemp -d)" \

# gpg keys listed at https://github.com/nodejs/node

&& for key in \

9554F04D7259F04124DE6B476D5A82AC7E37093B \

94AE36675C464D64BAFA68DD7434390BDBE9B9C5 \

0034A06D9D9B0064CE8ADF6BF1747F4AD2306D93 \

FD3A5288F042B6850C66B31F09FE44734EB7990E \

71DCFD284A79C3B38668286BC97EC7A07EDE3FC1 \

DD8F2338BAE7501E3DD5AC78C273792F7D83545D \

B9AE9905FFD7803F25714661B63B535A4C206CA9 \

C4F0DFFF4E8C1A8236409D08E73BC641CC11F4C8 \

; do \

gpg --keyserver ha.pool.sks-keyservers.net --recv-keys "$key"; \

done \

&& mkdir -p /usr/local/node && PATH=/usr/local/node/bin:$PATH \

&& apt-get update && apt-get install -y --no-install-recommends make g++ wget \

&& rm -rf /var/lib/apt/lists/* \

&& wget "https://nodejs.org/dist/v$NODE_VERSION/node-v$NODE_VERSION-linux-x64.tar.gz" \

&& wget "https://nodejs.org/dist/v$NODE_VERSION/SHASUMS256.txt.asc" \

&& gpg --verify SHASUMS256.txt.asc \

&& grep " node-v$NODE_VERSION-linux-x64.tar.gz\$" SHASUMS256.txt.asc | sha256sum -c - \

&& tar -xzf "node-v$NODE_VERSION-linux-x64.tar.gz" -C /usr/local/node --strip-components=1 \

&& rm -r "$GNUPGHOME" "node-v$NODE_VERSION-linux-x64.tar.gz" SHASUMS256.txt.asc \

&& mkdir -p /usr/src/sentry \

&& cd /usr/src/sentry \

&& wget -qO - "https://github.com/getsentry/sentry/archive/${SENTRY_BUILD}.tar.gz" | tar -xzf - --strip-components=1 \

&& python setup.py bdist_wheel \

# Now remove node since it's not needed anymore in the final container

&& npm cache clear \

&& rm -rf /usr/local/node \

&& pip install dist/*.whl \

&& apt-get purge -y --auto-remove make g++ wget \

&& rm -rf /usr/src/sentry

ENV SENTRY_CONF=/etc/sentry \

SENTRY_FILESTORE_DIR=/var/lib/sentry/files

RUN mkdir -p $SENTRY_CONF && mkdir -p $SENTRY_FILESTORE_DIR

COPY sentry.conf.py /etc/sentry/

COPY config.yml /etc/sentry/

COPY docker-entrypoint.sh /entrypoint.sh

EXPOSE 9000

VOLUME /var/lib/sentry/files

ENTRYPOINT ["/entrypoint.sh"]

CMD ["run", "web"]