Use a custom base Docker image for proxy images

instead of using ficusio/openresty:1.7.7.1, which is based on another image (alpinelinux/base) that no longer seems to exist on Docker Hub.
This will also give us more control with how we're configuring Nginx/Openresty.

Author: twistedstream

hosts/proxy/Dockerfile

@@ -0,0 +1,60 @@
+FROM ubuntu:14.04.2
+
+RUN apt-get update \
+ && apt-get install -y --no-install-recommends \
+    curl perl make build-essential procps \
+    libreadline-dev libncurses5-dev libpcre3-dev libssl-dev \
+ && rm -rf /var/lib/apt/lists/*
+
+ENV OPENRESTY_VERSION 1.7.7.1
+ENV OPENRESTY_PREFIX /opt/openresty
+ENV NGINX_PREFIX /opt/openresty/nginx
+ENV VAR_PREFIX /var/nginx
+
+# NginX prefix is automatically set by OpenResty to $OPENRESTY_PREFIX/nginx
+# look for $ngx_prefix in https://github.com/openresty/ngx_openresty/blob/master/util/configure
+
+RUN cd /root \
+ && echo "==> Downloading OpenResty..." \
+ && curl -sSL http://openresty.org/download/ngx_openresty-${OPENRESTY_VERSION}.tar.gz | tar -xvz \
+ && echo "==> Configuring OpenResty..." \
+ && cd ngx_openresty-* \
+ && readonly NPROC=$(grep -c ^processor /proc/cpuinfo 2>/dev/null || 1) \
+ && echo "using upto $NPROC threads" \
+ && ./configure \
+    --prefix=$OPENRESTY_PREFIX \
+    --http-client-body-temp-path=$VAR_PREFIX/client_body_temp \
+    --http-proxy-temp-path=$VAR_PREFIX/proxy_temp \
+    --http-log-path=$VAR_PREFIX/access.log \
+    --error-log-path=$VAR_PREFIX/error.log \
+    --pid-path=$VAR_PREFIX/nginx.pid \
+    --lock-path=$VAR_PREFIX/nginx.lock \
+    --with-luajit \
+    --with-pcre-jit \
+    --with-ipv6 \
+    --with-http_ssl_module \
+    --without-http_ssi_module \
+    --without-http_userid_module \
+    --without-http_fastcgi_module \
+    --without-http_uwsgi_module \
+    --without-http_scgi_module \
+    --without-http_memcached_module \
+    -j${NPROC} \
+ && echo "==> Building OpenResty..." \
+ && make -j${NPROC} \
+ && echo "==> Installing OpenResty..." \
+ && make install \
+ && echo "==> Finishing..." \
+ && ln -sf $NGINX_PREFIX/sbin/nginx /usr/local/bin/nginx \
+ && ln -sf $NGINX_PREFIX/sbin/nginx /usr/local/bin/openresty \
+ && ln -sf $OPENRESTY_PREFIX/bin/resty /usr/local/bin/resty \
+ && ln -sf $OPENRESTY_PREFIX/luajit/bin/luajit-* $OPENRESTY_PREFIX/luajit/bin/lua \
+ && ln -sf $OPENRESTY_PREFIX/luajit/bin/luajit-* /usr/local/bin/lua \
+ && rm -rf /root/ngx_openresty*
+
+WORKDIR $NGINX_PREFIX/
+
+ONBUILD RUN rm -rf conf/* html/*
+ONBUILD COPY nginx $NGINX_PREFIX/
+
+CMD ["nginx", "-g", "daemon off; error_log /dev/stderr info;"]

hosts/proxy/base64-secret/Dockerfile

@@ -1,4 +1,4 @@
-FROM ficusio/openresty:1.7.7.1
+FROM proxy-base-image
 
 # secret is base-64 encoded and URL-safe
 ENV JWT_SECRET="VGhpcyBzZWNyZXQgaXMgc3RvcmVkIGJhc2UtNjQgZW5jb2RlZCBvbiB0aGUgcHJveHkgaG9zdA"

hosts/proxy/config-claim_specs-not-table/Dockerfile

@@ -1,4 +1,4 @@
-FROM ficusio/openresty:1.7.7.1
+FROM proxy-base-image
 
 ENV JWT_SECRET="JWTs are the best!"
 

hosts/proxy/config-unsupported-claim-spec-type/Dockerfile

@@ -1,4 +1,4 @@
-FROM ficusio/openresty:1.7.7.1
+FROM proxy-base-image
 
 ENV JWT_SECRET="JWTs are the best!"
 

hosts/proxy/default/Dockerfile

@@ -1,4 +1,4 @@
-FROM ficusio/openresty:1.7.7.1
+FROM proxy-base-image
 
 ENV JWT_SECRET="JWTs are the best!"
 

run.sh

@@ -35,6 +35,15 @@ load_dependency "lib/basexx.lua" "aiq" "basexx" "c91cf5438385d9f84f53d3ef27f855c
 
 # build proxy containers and images
 
+echo "${cyan}Building base proxy image, if necessary...${NC}"
+image_exists=$(docker images | grep "proxy-base-image") || true
+if [ -z "$image_exists" ]; then
+    echo "${blue}Building image${no_color}"
+    docker build -t="proxy-base-image" --force-rm hosts/proxy
+else
+    echo "${blue}Base image already exists${no_color}"
+fi
+
 for proxy_dir in hosts/proxy/*; do
     [ -d "${proxy_dir}" ] || continue # if not a directory, skip