Dockerfile

# alpine:3.23.2
ARG ALPINE_IMAGE=alpine@sha256:865b95f46d98cf867a156fe4a135ad3fe50d2056aa3f25ed31662dff6da4eb62

# ---------------------------------------------------------------- [Build Stage]
FROM ${ALPINE_IMAGE} AS build

ENV GEARMAND_VERSION=1.1.22

SHELL ["/bin/ash", "-euxo", "pipefail", "-c"]

COPY pubkey.asc /pubkey.asc

# Package list 'runDeps' is programmatically generated.
# hadolint ignore=SC2086, DL3019
RUN apk add --no-cache --virtual .build-deps \
	wget \
	tar \
	ca-certificates \
	file \
	alpine-sdk \
	gperf \
	libuuid \
	boost-dev \
	libevent-dev \
	util-linux-dev \
	hiredis-dev \
	mariadb-dev \
	libmemcached-dev \
	gnupg \
	&& wget -O gearmand.tar.gz -q "https://github.com/gearman/gearmand/releases/download/$GEARMAND_VERSION/gearmand-$GEARMAND_VERSION.tar.gz" \
	&& wget -O gearmand.tar.gz.asc -q "https://github.com/gearman/gearmand/releases/download/$GEARMAND_VERSION/gearmand-$GEARMAND_VERSION.tar.gz.asc" \
	&& gpg --import /pubkey.asc \
	&& gpg --verify gearmand.tar.gz.asc gearmand.tar.gz \
	&& mkdir -p /usr/src/gearmand \
	&& tar -xzf gearmand.tar.gz -C /usr/src/gearmand --strip-components=1 \
	&& rm gearmand.tar.gz gearmand.tar.gz.asc \
	&& cd /usr/src/gearmand \
	&& ./configure \
	--sysconfdir=/etc \
	--localstatedir=/var \
	--with-mysql=yes \
	--with-postgresql=no \
	--disable-libpq \
	--disable-libtokyocabinet \
	--disable-libdrizzle \
	--enable-ssl \
	--enable-hiredis \
	--enable-jobserver=no \
	&& make \
	&& make install \
	&& cd / \
	&& rm -rf /usr/src/gearmand \
	&& runDeps="$( \
	scanelf --needed --nobanner --recursive /usr/local \
	| awk '{ gsub(/,/, "\nso:", $2); print "so:" $2 }' \
	| sort -u \
	| xargs -r apk info --installed || true \
	| sort -u \
	)" \
	&& echo "${runDeps}" > /run-deps.txt

# -------------------------------------------------------------- [Runtime Stage]

FROM ${ALPINE_IMAGE}

ENV GEARMAND_LISTEN_PORT=4730

COPY --from=build /usr/local /usr/local
COPY --from=build /run-deps.txt /run-deps.txt

COPY docker-entrypoint.sh /usr/local/bin/

RUN set -eux; \
	xargs apk add --no-cache bash < /run-deps.txt; \
	addgroup -S gearman; \
	adduser -S -D -H -s /sbin/nologin -G gearman -g "Gearman Server" gearman; \
	install -o gearman -g gearman -m 0644 /dev/null /etc/gearmand.conf; \
	ln -s /usr/local/bin/docker-entrypoint.sh /entrypoint.sh

HEALTHCHECK --interval=5m --timeout=3s --retries=2 \
	CMD test $(netstat -ltn | grep -c :$GEARMAND_LISTEN_PORT) -eq 1 || exit 1

USER gearman
EXPOSE ${GEARMAND_LISTEN_PORT}
ENTRYPOINT ["docker-entrypoint.sh"]
CMD ["gearmand"]