php.Dockerfile

FROM --platform=linux/amd64 vapor/runtime/compiler:latest as php_builder

SHELL ["/bin/bash", "-c"]

ENV BUILD_DIR="/tmp/build"
ENV INSTALL_DIR="/opt/vapor"

# Configure Default Compiler Variables

ENV PKG_CONFIG_PATH="${INSTALL_DIR}/lib64/pkgconfig:${INSTALL_DIR}/lib/pkgconfig:/usr/local/lib64/pkgconfig:/usr/local/lib/pkgconfig" \
    PKG_CONFIG="/usr/bin/pkg-config" \
    PATH="${INSTALL_DIR}/bin:${PATH}"

ENV LD_LIBRARY_PATH="${INSTALL_DIR}/lib64:${INSTALL_DIR}/lib"

# Create All The Necessary Build Directories

RUN mkdir -p ${BUILD_DIR}  \
    ${INSTALL_DIR}/bin \
    ${INSTALL_DIR}/doc \
    ${INSTALL_DIR}/etc/php \
    ${INSTALL_DIR}/etc/php/conf.d \
    ${INSTALL_DIR}/include \
    ${INSTALL_DIR}/lib \
    ${INSTALL_DIR}/lib64 \
    ${INSTALL_DIR}/libexec \
    ${INSTALL_DIR}/sbin \
    ${INSTALL_DIR}/share


# Build ZLIB (https://github.com/madler/zlib/releases)

ARG zlib
ENV VERSION_ZLIB=${zlib}
ENV ZLIB_BUILD_DIR=${BUILD_DIR}/zlib

RUN set -xe; \
    mkdir -p ${ZLIB_BUILD_DIR}; \
    curl -Ls https://github.com/madler/zlib/releases/download/v${VERSION_ZLIB}/zlib-${VERSION_ZLIB}.tar.xz \
    | tar xJC ${ZLIB_BUILD_DIR} --strip-components=1

WORKDIR  ${ZLIB_BUILD_DIR}/

RUN set -xe; \
    make distclean \
    && CFLAGS="" \
    CPPFLAGS="-I${INSTALL_DIR}/include  -I/usr/include" \
    LDFLAGS="-L${INSTALL_DIR}/lib64 -L${INSTALL_DIR}/lib" \
    ./configure \
        --prefix=${INSTALL_DIR} \
        --64

RUN set -xe; \
    make install \
    && rm ${INSTALL_DIR}/lib/libz.a

# Build OpenSSL (https://github.com/openssl/openssl/releases)

ARG openssl
ENV VERSION_OPENSSL=${openssl}
ENV OPENSSL_BUILD_DIR=${BUILD_DIR}/openssl
ENV CA_BUNDLE_SOURCE="https://curl.se/ca/cacert.pem"
ENV CA_BUNDLE="${INSTALL_DIR}/ssl/cert.pem"

RUN set -xe; \
    mkdir -p ${OPENSSL_BUILD_DIR}; \
    curl -Ls  https://github.com/openssl/openssl/archive/openssl-${VERSION_OPENSSL}.tar.gz \
    | tar xzC ${OPENSSL_BUILD_DIR} --strip-components=1

WORKDIR  ${OPENSSL_BUILD_DIR}/

RUN set -xe; \
    CFLAGS="" \
    CPPFLAGS="-I${INSTALL_DIR}/include  -I/usr/include" \
    LDFLAGS="-L${INSTALL_DIR}/lib64 -L${INSTALL_DIR}/lib" \
    ./config \
        --prefix=${INSTALL_DIR} \
        --openssldir=${INSTALL_DIR}/ssl \
        --release \
        enable-tls1_3 \
        no-tests \
        shared \
        zlib

RUN set -xe; \
    make install \
    && curl -L -k -o ${CA_BUNDLE} ${CA_BUNDLE_SOURCE}

# Build LibXML2 (https://gitlab.gnome.org/GNOME/libxml2/-/releases)

ARG libxml2
ENV VERSION_XML2=${libxml2}
ENV XML2_BUILD_DIR=${BUILD_DIR}/xml2

RUN set -xe; \
    mkdir -p ${XML2_BUILD_DIR}; \
    curl -Ls https://download.gnome.org/sources/libxml2/${VERSION_XML2%.*}/libxml2-${VERSION_XML2}.tar.xz \
    | tar xJC ${XML2_BUILD_DIR} --strip-components=1

WORKDIR  ${XML2_BUILD_DIR}/

RUN set -xe; \
    CFLAGS="" \
    CPPFLAGS="-I${INSTALL_DIR}/include  -I/usr/include" \
    LDFLAGS="-L${INSTALL_DIR}/lib64 -L${INSTALL_DIR}/lib" \
    ./configure \
        --prefix=${INSTALL_DIR} \
        --with-sysroot=${INSTALL_DIR} \
        --enable-shared \
        --disable-static \
        --with-html \
        --with-history \
        --enable-ipv6=no \
        --with-icu \
        --with-zlib=${INSTALL_DIR} \
        --without-python

RUN set -xe; \
    make install \
    && cp xml2-config ${INSTALL_DIR}/bin/xml2-config

# Build LibSSH2 (https://github.com/libssh2/libssh2/releases/)

ARG libssh2
ENV VERSION_LIBSSH2=${libssh2}
ENV LIBSSH2_BUILD_DIR=${BUILD_DIR}/libssh2

RUN set -xe; \
    mkdir -p ${LIBSSH2_BUILD_DIR}/bin; \
    curl -Ls https://github.com/libssh2/libssh2/releases/download/libssh2-${VERSION_LIBSSH2}/libssh2-${VERSION_LIBSSH2}.tar.gz \
    | tar xzC ${LIBSSH2_BUILD_DIR} --strip-components=1

WORKDIR  ${LIBSSH2_BUILD_DIR}/bin/

RUN set -xe; \
    CFLAGS="" \
    CPPFLAGS="-I${INSTALL_DIR}/include  -I/usr/include" \
    LDFLAGS="-L${INSTALL_DIR}/lib64 -L${INSTALL_DIR}/lib" \
    cmake .. \
        -DBUILD_SHARED_LIBS=ON \
        -DCRYPTO_BACKEND=OpenSSL \
        -DENABLE_ZLIB_COMPRESSION=ON \
        -DCMAKE_INSTALL_PREFIX=${INSTALL_DIR} \
        -DCMAKE_BUILD_TYPE=RELEASE

RUN set -xe; \
    cmake  --build . --target install

# Build nghttp2 (https://github.com/nghttp2/nghttp2/releases/)

ARG nghttp2
ENV VERSION_NGHTTP2=${nghttp2}
ENV NGHTTP2_BUILD_DIR=${BUILD_DIR}/nghttp2

RUN set -xe; \
    mkdir -p ${NGHTTP2_BUILD_DIR}/bin; \
    curl -Ls https://github.com/nghttp2/nghttp2/releases/download/v${VERSION_NGHTTP2}/nghttp2-${VERSION_NGHTTP2}.tar.gz \
    | tar xzC ${NGHTTP2_BUILD_DIR} --strip-components=1

WORKDIR  ${NGHTTP2_BUILD_DIR}/

RUN set -xe; \
    autoreconf -i && \
    automake && \
    autoconf && \
    ./configure --enable-lib-only --prefix=${INSTALL_DIR} && \
    make -j $(nproc) && \
    make install

# Build Curl (https://github.com/curl/curl/releases/)

ARG curl
ENV VERSION_CURL=${curl}
ENV CURL_BUILD_DIR=${BUILD_DIR}/curl

RUN set -xe; \
    mkdir -p ${CURL_BUILD_DIR}/bin; \
    curl -Ls https://github.com/curl/curl/archive/curl-${VERSION_CURL//./_}.tar.gz \
    | tar xzC ${CURL_BUILD_DIR} --strip-components=1

WORKDIR  ${CURL_BUILD_DIR}/

RUN set -xe; \
    ./buildconf \
     && CFLAGS="" \
        CPPFLAGS="-I${INSTALL_DIR}/include  -I/usr/include" \
        LDFLAGS="-L${INSTALL_DIR}/lib64 -L${INSTALL_DIR}/lib" \
        ./configure \
            --prefix=${INSTALL_DIR} \
            --with-ca-bundle=${CA_BUNDLE} \
            --enable-shared \
            --disable-static \
            --enable-optimize \
            --disable-warnings \
            --disable-dependency-tracking \
            --with-zlib \
            --enable-http \
            --enable-ftp  \
            --enable-file \
            --enable-ldaps  \
            --enable-proxy  \
            --enable-tftp \
            --enable-ipv6 \
            --enable-openssl-auto-load-config \
            --enable-cookies \
            --with-gnu-ld \
            --with-ssl \
            --with-libssh2 \
            --with-nghttp2

RUN set -xe; \
    make install

# Build Libzip (https://github.com/nih-at/libzip/releases)

ARG libzip
ENV VERSION_ZIP=${libzip}
ENV ZIP_BUILD_DIR=${BUILD_DIR}/zip

RUN set -xe; \
    mkdir -p ${ZIP_BUILD_DIR}/bin/; \
# Download and upack the source code
    curl -Ls https://github.com/nih-at/libzip/releases/download/v${VERSION_ZIP}/libzip-${VERSION_ZIP}.tar.gz \
  | tar xzC ${ZIP_BUILD_DIR} --strip-components=1

# Move into the unpackaged code directory
WORKDIR  ${ZIP_BUILD_DIR}/bin/

# Configure the build
RUN set -xe; \
    CFLAGS="" \
    CPPFLAGS="-I${INSTALL_DIR}/include  -I/usr/include" \
    LDFLAGS="-L${INSTALL_DIR}/lib64 -L${INSTALL_DIR}/lib" \
    cmake .. \
    -DCMAKE_INSTALL_PREFIX=${INSTALL_DIR} \
    -DCMAKE_BUILD_TYPE=RELEASE

RUN set -xe; \
    cmake  --build . --target install

# Build Libsodium (https://github.com/jedisct1/libsodium/releases)

ARG libsodium
ENV VERSION_LIBSODIUM=${libsodium}
ENV LIBSODIUM_BUILD_DIR=${BUILD_DIR}/libsodium

RUN set -xe; \
    mkdir -p ${LIBSODIUM_BUILD_DIR}; \
    curl -Ls https://github.com/jedisct1/libsodium/archive/${VERSION_LIBSODIUM}.tar.gz \
    | tar xzC ${LIBSODIUM_BUILD_DIR} --strip-components=1

WORKDIR  ${LIBSODIUM_BUILD_DIR}/

RUN set -xe; \
    CFLAGS="" \
    CPPFLAGS="-I${INSTALL_DIR}/include  -I/usr/include" \
    LDFLAGS="-L${INSTALL_DIR}/lib64 -L${INSTALL_DIR}/lib" \
    ./autogen.sh \
    && ./configure --prefix=${INSTALL_DIR}

RUN set -xe; \
    make install

# Build Postgres (https://github.com/postgres/postgres/releases/)

ARG postgres
ENV VERSION_POSTGRES=${postgres}
ENV POSTGRES_BUILD_DIR=${BUILD_DIR}/postgres

RUN set -xe; \
    mkdir -p ${POSTGRES_BUILD_DIR}/bin; \
    curl -Ls https://github.com/postgres/postgres/archive/REL_${VERSION_POSTGRES//./_}.tar.gz \
    | tar xzC ${POSTGRES_BUILD_DIR} --strip-components=1

WORKDIR  ${POSTGRES_BUILD_DIR}/

RUN set -xe; \
    CFLAGS="" \
    CPPFLAGS="-I${INSTALL_DIR}/include  -I/usr/include" \
    LDFLAGS="-L${INSTALL_DIR}/lib64 -L${INSTALL_DIR}/lib" \
    ./configure --prefix=${INSTALL_DIR} --with-openssl --without-readline

RUN set -xe; cd ${POSTGRES_BUILD_DIR}/src/interfaces/libpq && make && make install
RUN set -xe; cd ${POSTGRES_BUILD_DIR}/src/bin/pg_config && make && make install
RUN set -xe; cd ${POSTGRES_BUILD_DIR}/src/backend && make generated-headers
RUN set -xe; cd ${POSTGRES_BUILD_DIR}/src/include && make install

# Build libjpeg

ARG libjpeg
ENV VERSION_LIBJPEG=${libjpeg}
ENV LIBJPEG_BUILD_DIR=${BUILD_DIR}/libjpeg

RUN set -xe; \
    mkdir -p ${LIBJPEG_BUILD_DIR}/bin; \
    curl -Ls http://www.ijg.org/files/jpegsrc.${VERSION_LIBJPEG}.tar.gz \
    | tar xzC ${LIBJPEG_BUILD_DIR} --strip-components=1

WORKDIR  ${LIBJPEG_BUILD_DIR}/

RUN set -xe; \
    CFLAGS="" \
    CPPFLAGS="-I${INSTALL_DIR}/include  -I/usr/include" \
    LDFLAGS="-L${INSTALL_DIR}/lib64 -L${INSTALL_DIR}/lib" \
    ./configure \
        --prefix=${INSTALL_DIR} \
        --enable-shared \
        --disable-static

RUN set -xe; \
    make install

# Build libpng

ARG libpng
ENV VERSION_LIBPNG=${libpng}
ENV LIBPNG_BUILD_DIR=${BUILD_DIR}/libpng

RUN set -xe; \
    mkdir -p ${LIBPNG_BUILD_DIR}/bin; \
    curl -Ls https://download.sourceforge.net/libpng/libpng-${VERSION_LIBPNG}.tar.gz \
    | tar xzC ${LIBPNG_BUILD_DIR} --strip-components=1

WORKDIR  ${LIBPNG_BUILD_DIR}/

RUN set -xe; \
    CFLAGS="" \
    CPPFLAGS="-I${INSTALL_DIR}/include  -I/usr/include" \
    LDFLAGS="-L${INSTALL_DIR}/lib64 -L${INSTALL_DIR}/lib" \
    ./configure \
        --prefix=${INSTALL_DIR} \
        --enable-shared \
        --disable-static

RUN set -xe; \
    make install

# Build Oniguruma

ARG oniguruma
ENV VERSION_ONIGURUMA=${oniguruma}
ENV LIBONIG_BUILD_DIR=${BUILD_DIR}/libonig

RUN  set -xe \
    && mkdir -p ${LIBONIG_BUILD_DIR}/bin \
    && curl -Ls https://github.com/kkos/oniguruma/releases/download/v${VERSION_ONIGURUMA}/onig-${VERSION_ONIGURUMA}.tar.gz \
    | tar xzC ${LIBONIG_BUILD_DIR} --strip-components=1

WORKDIR  ${LIBONIG_BUILD_DIR}/

RUN set -xe; \
    CFLAGS="" \
    CPPFLAGS="-I${INSTALL_DIR}/include  -I/usr/include" \
    LDFLAGS="-L${INSTALL_DIR}/lib64 -L${INSTALL_DIR}/lib" \
    && ./configure \
        --prefix=${INSTALL_DIR} \
        --enable-shared \
        --disable-static

RUN set -xe; \
    make install

# Build PHP

ARG php
ENV VERSION_PHP=${php}
ENV PHP_BUILD_DIR=${BUILD_DIR}/php

RUN set -xe; \
    mkdir -p ${PHP_BUILD_DIR}; \
    curl -Ls https://php.net/distributions/php-${VERSION_PHP}.tar.gz \
    | tar xzC ${PHP_BUILD_DIR} --strip-components=1

# Configure The PHP Build

WORKDIR  ${PHP_BUILD_DIR}/

RUN LD_LIBRARY_PATH= yum install -y readline-devel gettext-devel libicu-devel sqlite-devel libxslt-devel ImageMagick-devel libzstd libzstd-devel

RUN cp -a /usr/lib64/libgpg-error.so* ${INSTALL_DIR}/lib64/
RUN cp -a /usr/lib64/libtinfo.so* ${INSTALL_DIR}/lib64/
RUN cp -a /usr/lib64/libgcrypt.so* ${INSTALL_DIR}/lib64/
RUN cp -a /usr/lib64/libreadline.so?* ${INSTALL_DIR}/lib64/
RUN cp -a /usr/lib64/libasprintf.so* ${INSTALL_DIR}/lib64/
RUN cp -a /usr/lib64/libgettextpo.so* ${INSTALL_DIR}/lib64/
RUN cp -a /usr/lib64/preloadable_libintl.so* ${INSTALL_DIR}/lib64/
RUN cp -a /usr/lib64/lib*xslt*.so* ${INSTALL_DIR}/lib64/
RUN cp -a /usr/lib64/libsqlite3*.so* ${INSTALL_DIR}/lib64/
RUN cp -a /usr/lib64/libzstd.so* ${INSTALL_DIR}/lib64/

RUN set -xe \
 && ./buildconf --force \
 && CFLAGS="-fstack-protector-strong -fpic -fpie -Os -I${INSTALL_DIR}/include -I/usr/include -ffunction-sections -fdata-sections" \
    CPPFLAGS="-fstack-protector-strong -fpic -fpie -Os -I${INSTALL_DIR}/include -I/usr/include -ffunction-sections -fdata-sections" \
    LDFLAGS="-L${INSTALL_DIR}/lib64 -L${INSTALL_DIR}/lib -Wl,-O1 -Wl,--strip-all -Wl,--hash-style=both -pie" \
    ./configure \
        --build=x86_64-pc-linux-gnu \
        --prefix=${INSTALL_DIR} \
        --enable-option-checking=fatal \
        --with-config-file-path=${INSTALL_DIR}/etc/php \
        --with-config-file-scan-dir=${INSTALL_DIR}/etc/php/conf.d:/var/task/php/conf.d \
        --enable-fpm \
        --disable-cgi \
        --enable-cli \
        --with-jpeg=${INSTALL_DIR} \
        --with-xsl=${INSTALL_DIR} \
        --enable-gd \
        --disable-phpdbg \
        # --disable-phpdbg-webhelper \
        --with-sodium \
        --with-readline \
        --with-openssl \
        --with-zlib=${INSTALL_DIR} \
        --with-curl \
        --enable-bcmath \
        --enable-sockets \
        --enable-exif \
        --enable-ftp \
        --with-gettext \
        --with-pear \
        --enable-mbstring \
        --enable-soap \
        --with-pdo-mysql=shared,mysqlnd \
        --enable-pcntl \
        --with-zip \
        --with-pdo-pgsql=shared,${INSTALL_DIR} \
        --enable-intl=shared

RUN make -j $(nproc)

# Override PEAR URL Since It Is Down

RUN set -xe; \
    make install PEAR_INSTALLER_URL='https://github.com/pear/pearweb_phars/raw/master/install-pear-nozlib.phar'; \
    { find ${INSTALL_DIR}/bin ${INSTALL_DIR}/sbin -type f -perm +0111 -exec strip --strip-all '{}' + || true; }; \
    make clean; \
    cp php.ini-production ${INSTALL_DIR}/etc/php/php.ini

# Build Redis (https://pecl.php.net/package/redis/)

ARG redis
ENV VERSION_REDIS=${redis}

RUN pecl install -f --configureoptions 'enable-redis-zstd="yes"' redis-${VERSION_REDIS}

# Strip All Unneeded Symbols

RUN find ${INSTALL_DIR} -type f -name "*.so*" -o -name "*.a"  -exec strip --strip-unneeded {} \;
RUN find ${INSTALL_DIR} -type f -executable -exec sh -c "file -i '{}' | grep -q 'x-executable; charset=binary'" \; -print|xargs strip --strip-all

# Symlink All Binaries / Libaries

RUN mkdir -p /opt/bin
RUN mkdir -p /opt/lib
RUN mkdir -p /opt/lib/curl

RUN cp /opt/vapor/bin/* /opt/bin
RUN cp /opt/vapor/sbin/* /opt/bin
RUN cp /opt/vapor/lib/php/extensions/no-debug-non-zts-20220829/* /opt/bin

RUN cp /opt/vapor/lib/* /opt/lib || true
RUN cp /opt/vapor/lib/libcurl* /opt/lib/curl || true

RUN cp "${INSTALL_DIR}/ssl/cert.pem" /opt/lib/curl/cert.pem
RUN cp /opt/vapor/lib64/* /opt/lib || true

RUN ls /opt/bin
RUN /opt/bin/php -i | grep curl

# Copy Everything To The Base Container

FROM amazonlinux:2

ENV INSTALL_DIR="/opt/vapor"

ENV PATH="/opt/bin:${PATH}" \
    LD_LIBRARY_PATH="${INSTALL_DIR}/lib64:${INSTALL_DIR}/lib"

RUN mkdir -p /opt

WORKDIR /opt

COPY --from=php_builder /opt /opt
RUN LD_LIBRARY_PATH= yum -y install zip