Archive-Team
/
docker-mailserver
2
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Modify the Dockerfile attempting to use alpine 

Alpine linux would allow the final docker container to be much smaller
than the existing debain based image.
This commit is contained in:
Kyle Ondy 2016-04-22 08:58:52 -04:00
parent 2c4d7a425a
commit c590c0a226
No known key found for this signature in database
GPG Key ID: 8D6B17000513440D
1 changed files with 53 additions and 26 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

79
Dockerfile
View File

@ -1,27 +1,50 @@
FROM ubuntu:14.04
FROM gliderlabs/alpine:3.3
MAINTAINER Thomas VIAL
# Packages
RUN apt-get update -q --fix-missing
RUN apt-get -y upgrade
RUN DEBIAN_FRONTEND=noninteractive apt-get -y install --no-install-recommends \
postfix dovecot-core dovecot-imapd dovecot-pop3d gamin amavisd-new spamassassin razor pyzor \
clamav clamav-daemon libnet-dns-perl libmail-spf-perl bzip2 file gzip p7zip unzip zip rsyslog \
opendkim opendkim-tools opendmarc curl fail2ban && apt-get autoclean && rm -rf /var/lib/apt/lists/*
RUN apk add --no-cache \
amavisd-new \
# bash until start-mailserver.sh is ported so /bin/sh, if it can be
bash \
clamav \
clamav-daemon \
# clamav-dev is needed for libclamunrar_iface.so
clamav-dev \
curl \
dovecot \
fail2ban \
freshclam \
postfix \
rsyslog \
spamassassin
#################################
# opendkim is not in the edge repo.
# dkimproxy is in main, is it a replacemnts?
# https://pkgs.alpinelinux.org/package/v3.3/main/x86/dkimproxy
#RUN apk add opendkim --update-cache --repository http://dl-3.alpinelinux.org/alpine/edge/testing/ --allow-untrusted
#################################
# Configures Dovecot
RUN sed -i -e 's/include_try \/usr\/share\/dovecot\/protocols\.d/include_try \/etc\/dovecot\/protocols\.d/g' /etc/dovecot/dovecot.conf
RUN cp -a /etc/ssl/dovecot/server.pem /etc/dovecot/dovecot.pem
RUN mkdir /etc/dovecot/private && cp -a /etc/ssl/dovecot/server.pem /etc/dovecot/private/dovecot.pem
ADD target/dovecot/auth-passwdfile.inc /etc/dovecot/conf.d/
ADD target/dovecot/10-*.conf /etc/dovecot/conf.d/
# Enables Spamassassin and CRON updates
RUN sed -i -r 's/^(CRON|ENABLED)=0/\1=1/g' /etc/default/spamassassin
RUN sed -i -r 's/^(CRON|ENABLED)=0/\1=1/g' /etc/conf.d/spamd
#################################
# Haven't had time to look into amavis. I know to add uses you need the `shadow` package which is in the edge repo.
#################################
# Enables Amavis
RUN sed -i -r 's/#(@| \\%)bypass/\1bypass/g' /etc/amavis/conf.d/15-content_filter_mode
RUN adduser clamav amavis
RUN adduser amavis clamav
RUN useradd -u 5000 -d /home/docker -s /bin/bash -p $(echo docker | openssl passwd -1 -stdin) docker
#RUN sed -i -r 's/#(@| \\%)bypass/\1bypass/g' /etc/amavis/conf.d/15-content_filter_mode
#RUN adduser clamav amavis
#RUN adduser amavis clamav
#RUN useradd -u 5000 -d /home/docker -s /bin/bash -p $(echo docker | openssl passwd -1 -stdin) docker
# Configure Fail2ban
ADD target/fail2ban/jail.conf /etc/fail2ban/jail.conf
@ -29,16 +52,18 @@ ADD target/fail2ban/filters.d/dovecot.conf /etc/fail2ban/filters.d/dovecot.conf
RUN echo "ignoreregex =" >> /etc/fail2ban/filter.d/postfix-sasl.conf
# Enables Clamav
RUN cp /etc/clamav/freshclam.conf.sample /etc/clamav/freshclam.conf
RUN cp /etc/clamav/clamd.conf.sample /etc/clamav/clamd.conf
RUN chmod 644 /etc/clamav/freshclam.conf
RUN (crontab; echo "0 1 * * * /usr/bin/freshclam --quiet") | sort - | uniq - | crontab -
RUN freshclam
# Enables Pyzor and Razor
USER amavis
RUN razor-admin -create && razor-admin -register && pyzor discover
USER root
RUN (crontab -l; echo "0 1 * * * /usr/bin/freshclam --quiet") | sort - | uniq - | crontab -
#################################
# Updates are working. Builds are much faster if we disable the updates though.
#RUN freshclam
#################################
# Configure DKIM (opendkim)
RUN mkdir -p /etc/opendkim/keys
ADD target/opendkim/TrustedHosts /etc/opendkim/TrustedHosts
# DKIM config files
ADD target/opendkim/opendkim.conf /etc/opendkim.conf
ADD target/opendkim/default-opendkim /etc/default/opendkim
@ -48,20 +73,22 @@ ADD target/opendmarc/opendmarc.conf /etc/opendmarc.conf
ADD target/opendmarc/default-opendmarc /etc/default/opendmarc
# Configures Postfix
ADD target/postfix/main.cf target/postfix/master.cf /etc/postfix/
ADD target/bin/generate-ssl-certificate target/bin/generate-dkim-config /usr/local/bin/
RUN chmod +x /usr/local/bin/*
ADD target/postfix/main.cf /etc/postfix/main.cf
ADD target/postfix/master.cf /etc/postfix/master.cf
ADD target/bin/generate-ssl-certificate /usr/local/bin/generate-ssl-certificate
RUN chmod +x /usr/local/bin/generate-ssl-certificate
# Configuring Logs
RUN sed -i -r "/^#?compress/c\compress\ncopytruncate" /etc/logrotate.conf
RUN mkdir -p /var/log/mail && chown syslog:root /var/log/mail
# rsyslog runs as root under alpine
RUN mkdir -p /var/log/mail && chown root:root /var/log/mail
RUN touch /var/log/mail/clamav.log && chown -R clamav:root /var/log/mail/clamav.log
RUN touch /var/log/mail/freshclam.log && chown -R clamav:root /var/log/mail/freshclam.log
RUN sed -i -r 's|/var/log/mail|/var/log/mail/mail|g' /etc/rsyslog.d/50-default.conf
RUN sed -i -r 's|/var/log/mail|/var/log/mail/mail|g' /etc/rsyslog.conf
RUN sed -i -r 's|LogFile /var/log/clamav/|LogFile /var/log/mail/|g' /etc/clamav/clamd.conf
RUN sed -i -r 's|UpdateLogFile /var/log/clamav/|UpdateLogFile /var/log/mail/|g' /etc/clamav/freshclam.conf
RUN sed -i -r 's|/var/log/clamav|/var/log/mail|g' /etc/logrotate.d/clamav-daemon
RUN sed -i -r 's|/var/log/clamav|/var/log/mail|g' /etc/logrotate.d/clamav-freshclam
RUN sed -i -r 's|/var/log/clamav|/var/log/mail|g' /etc/logrotate.d/clamd
RUN sed -i -r 's|/var/log/clamav|/var/log/mail|g' /etc/logrotate.d/freshclam
RUN sed -i -r 's|/var/log/mail|/var/log/mail/mail|g' /etc/logrotate.d/rsyslog
# Get LetsEncrypt signed certificate