/bin/sh -c #(nop) ARG RELEASE

/bin/sh -c #(nop) ARG LAUNCHPAD_BUILD_ARCH

/bin/sh -c #(nop) LABEL org.opencontainers.image.version=24.04

/bin/sh -c #(nop) ADD file:8c609c85109d07bf47cf268a175b3be8bbe34fc0c41d15d99b090d099f4dc837 in /

/bin/sh -c #(nop) CMD ["/bin/bash"]

LABEL maintainer=Evan Wies <evan@neomantra.net>

ARG RESTY_IMAGE_BASE=ubuntu

ARG RESTY_IMAGE_TAG=noble

ARG RESTY_VERSION=1.31.1.1

ARG RESTY_LUAROCKS_VERSION=3.13.0

ARG RESTY_OPENSSL_VERSION=3.5.7

ARG RESTY_OPENSSL_PATCH_VERSION=3.5.5

ARG RESTY_OPENSSL_URL_BASE=https://github.com/openssl/openssl/releases/download/openssl-3.5.7

ARG RESTY_OPENSSL_BUILD_OPTIONS=enable-camellia enable-seed enable-rfc3779 enable-cms enable-md2 enable-rc5 enable-weak-ssl-ciphers enable-ssl3 enable-ssl3-method enable-md2 enable-ktls enable-fips

ARG RESTY_PCRE_VERSION=10.47

ARG RESTY_PCRE_SHA256=c08ae2388ef333e8403e670ad70c0a11f1eed021fd88308d7e02f596fcd9dc16

ARG RESTY_PCRE_BUILD_OPTIONS=--enable-jit --enable-pcre2grep-jit --disable-bsr-anycrlf --disable-coverage --disable-ebcdic --disable-fuzz-support --disable-jit-sealloc --disable-never-backslash-C --enable-newline-is-lf --enable-pcre2-8 --enable-pcre2-16 --enable-pcre2-32 --enable-pcre2grep-callout --enable-pcre2grep-callout-fork --disable-pcre2grep-libbz2 --disable-pcre2grep-libz --disable-pcre2test-libedit --enable-percent-zt --disable-rebuild-chartables --enable-shared --disable-static --disable-silent-rules --enable-unicode --disable-valgrind

ARG RESTY_J=1

ARG RESTY_CONFIG_OPTIONS= --with-compat --without-http_rds_json_module --without-http_rds_csv_module --without-lua_rds_parser --without-mail_pop3_module --without-mail_imap_module --without-mail_smtp_module --with-http_addition_module --with-http_auth_request_module --with-http_dav_module --with-http_flv_module --with-http_geoip_module=dynamic --with-http_gunzip_module --with-http_gzip_static_module --with-http_image_filter_module=dynamic --with-http_mp4_module --with-http_random_index_module --with-http_realip_module --with-http_secure_link_module --with-http_slice_module --with-http_ssl_module --with-http_stub_status_module --with-http_sub_module --with-http_v2_module --with-http_v3_module --with-http_xslt_module=dynamic --with-ipv6 --with-mail --with-mail_ssl_module --with-md5-asm --with-sha1-asm --with-stream --with-stream_ssl_module --with-stream_ssl_preread_module --with-threads

ARG RESTY_CONFIG_OPTIONS_MORE=

ARG RESTY_LUAJIT_OPTIONS=--with-luajit-xcflags='-DLUAJIT_NUMMODE=2 -DLUAJIT_ENABLE_LUA52COMPAT'

ARG RESTY_PCRE_OPTIONS=--with-pcre-jit

ARG RESTY_ADD_PACKAGE_BUILDDEPS=

ARG RESTY_ADD_PACKAGE_RUNDEPS=

ARG RESTY_EVAL_PRE_CONFIGURE=

ARG RESTY_EVAL_POST_DOWNLOAD_PRE_CONFIGURE=

ARG RESTY_EVAL_PRE_MAKE=

ARG RESTY_EVAL_POST_MAKE=

ARG _RESTY_CONFIG_DEPS=--with-pcre --with-cc-opt='-DNGX_LUA_ABORT_AT_PANIC -I/usr/local/openresty/pcre2/include -I/usr/local/openresty/openssl3/include' --with-ld-opt='-L/usr/local/openresty/pcre2/lib -L/usr/local/openresty/openssl3/lib -Wl,-rpath,/usr/local/openresty/pcre2/lib:/usr/local/openresty/openssl3/lib'

LABEL resty_image_base=ubuntu

LABEL resty_image_tag=noble

LABEL resty_version=1.31.1.1

LABEL resty_luarocks_version=3.13.0

LABEL resty_openssl_version=3.5.7

LABEL resty_openssl_patch_version=3.5.5

LABEL resty_openssl_url_base=https://github.com/openssl/openssl/releases/download/openssl-3.5.7

LABEL resty_openssl_build_options=enable-camellia enable-seed enable-rfc3779 enable-cms enable-md2 enable-rc5 enable-weak-ssl-ciphers enable-ssl3 enable-ssl3-method enable-md2 enable-ktls enable-fips

LABEL resty_pcre_version=10.47

LABEL resty_pcre_build_options=--enable-jit --enable-pcre2grep-jit --disable-bsr-anycrlf --disable-coverage --disable-ebcdic --disable-fuzz-support --disable-jit-sealloc --disable-never-backslash-C --enable-newline-is-lf --enable-pcre2-8 --enable-pcre2-16 --enable-pcre2-32 --enable-pcre2grep-callout --enable-pcre2grep-callout-fork --disable-pcre2grep-libbz2 --disable-pcre2grep-libz --disable-pcre2test-libedit --enable-percent-zt --disable-rebuild-chartables --enable-shared --disable-static --disable-silent-rules --enable-unicode --disable-valgrind

LABEL resty_pcre_sha256=c08ae2388ef333e8403e670ad70c0a11f1eed021fd88308d7e02f596fcd9dc16

LABEL resty_config_options= --with-compat --without-http_rds_json_module --without-http_rds_csv_module --without-lua_rds_parser --without-mail_pop3_module --without-mail_imap_module --without-mail_smtp_module --with-http_addition_module --with-http_auth_request_module --with-http_dav_module --with-http_flv_module --with-http_geoip_module=dynamic --with-http_gunzip_module --with-http_gzip_static_module --with-http_image_filter_module=dynamic --with-http_mp4_module --with-http_random_index_module --with-http_realip_module --with-http_secure_link_module --with-http_slice_module --with-http_ssl_module --with-http_stub_status_module --with-http_sub_module --with-http_v2_module --with-http_v3_module --with-http_xslt_module=dynamic --with-ipv6 --with-mail --with-mail_ssl_module --with-md5-asm --with-sha1-asm --with-stream --with-stream_ssl_module --with-stream_ssl_preread_module --with-threads

LABEL resty_config_options_more=

LABEL resty_config_deps=--with-pcre --with-cc-opt='-DNGX_LUA_ABORT_AT_PANIC -I/usr/local/openresty/pcre2/include -I/usr/local/openresty/openssl3/include' --with-ld-opt='-L/usr/local/openresty/pcre2/lib -L/usr/local/openresty/openssl3/lib -Wl,-rpath,/usr/local/openresty/pcre2/lib:/usr/local/openresty/openssl3/lib'

LABEL resty_add_package_builddeps=

LABEL resty_add_package_rundeps=

LABEL resty_eval_pre_configure=

LABEL resty_eval_post_download_pre_configure=

LABEL resty_eval_pre_make=

LABEL resty_eval_post_make=

LABEL resty_luajit_options=--with-luajit-xcflags='-DLUAJIT_NUMMODE=2 -DLUAJIT_ENABLE_LUA52COMPAT'

LABEL resty_pcre_options=--with-pcre-jit

RUN |23 RESTY_IMAGE_BASE=ubuntu RESTY_IMAGE_TAG=noble RESTY_VERSION=1.31.1.1 RESTY_LUAROCKS_VERSION=3.13.0 RESTY_OPENSSL_VERSION=3.5.7 RESTY_OPENSSL_PATCH_VERSION=3.5.5 RESTY_OPENSSL_URL_BASE=https://github.com/openssl/openssl/releases/download/openssl-3.5.7 RESTY_OPENSSL_BUILD_OPTIONS=enable-camellia enable-seed enable-rfc3779 enable-cms enable-md2 enable-rc5 enable-weak-ssl-ciphers enable-ssl3 enable-ssl3-method enable-md2 enable-ktls enable-fips RESTY_PCRE_VERSION=10.47 RESTY_PCRE_SHA256=c08ae2388ef333e8403e670ad70c0a11f1eed021fd88308d7e02f596fcd9dc16 RESTY_PCRE_BUILD_OPTIONS=--enable-jit --enable-pcre2grep-jit --disable-bsr-anycrlf --disable-coverage --disable-ebcdic --disable-fuzz-support --disable-jit-sealloc --disable-never-backslash-C --enable-newline-is-lf --enable-pcre2-8 --enable-pcre2-16 --enable-pcre2-32 --enable-pcre2grep-callout --enable-pcre2grep-callout-fork --disable-pcre2grep-libbz2 --disable-pcre2grep-libz --disable-pcre2test-libedit --enable-percent-zt --disable-rebuild-chartables --enable-shared --disable-static --disable-silent-rules --enable-unicode --disable-valgrind RESTY_J=1 RESTY_CONFIG_OPTIONS= --with-compat --without-http_rds_json_module --without-http_rds_csv_module --without-lua_rds_parser --without-mail_pop3_module --without-mail_imap_module --without-mail_smtp_module --with-http_addition_module --with-http_auth_request_module --with-http_dav_module --with-http_flv_module --with-http_geoip_module=dynamic --with-http_gunzip_module --with-http_gzip_static_module --with-http_image_filter_module=dynamic --with-http_mp4_module --with-http_random_index_module --with-http_realip_module --with-http_secure_link_module --with-http_slice_module --with-http_ssl_module --with-http_stub_status_module --with-http_sub_module --with-http_v2_module --with-http_v3_module --with-http_xslt_module=dynamic --with-ipv6 --with-mail --with-mail_ssl_module --with-md5-asm --with-sha1-asm --with-stream --with-stream_ssl_module --with-stream_ssl_preread_module --with-threads RESTY_CONFIG_OPTIONS_MORE= RESTY_LUAJIT_OPTIONS=--with-luajit-xcflags='-DLUAJIT_NUMMODE=2 -DLUAJIT_ENABLE_LUA52COMPAT' RESTY_PCRE_OPTIONS=--with-pcre-jit RESTY_ADD_PACKAGE_BUILDDEPS= RESTY_ADD_PACKAGE_RUNDEPS= RESTY_EVAL_PRE_CONFIGURE= RESTY_EVAL_POST_DOWNLOAD_PRE_CONFIGURE= RESTY_EVAL_PRE_MAKE= RESTY_EVAL_POST_MAKE= _RESTY_CONFIG_DEPS=--with-pcre --with-cc-opt='-DNGX_LUA_ABORT_AT_PANIC -I/usr/local/openresty/pcre2/include -I/usr/local/openresty/openssl3/include' --with-ld-opt='-L/usr/local/openresty/pcre2/lib -L/usr/local/openresty/openssl3/lib -Wl,-rpath,/usr/local/openresty/pcre2/lib:/usr/local/openresty/openssl3/lib' /bin/sh -c DEBIAN_FRONTEND=noninteractive apt-get update && DEBIAN_FRONTEND=noninteractive apt-get install -y --no-install-recommends build-essential ca-certificates curl gettext-base libgd-dev libgeoip-dev libncurses5-dev libperl-dev libreadline-dev libxslt1-dev make perl unzip wget zlib1g-dev ${RESTY_ADD_PACKAGE_BUILDDEPS} ${RESTY_ADD_PACKAGE_RUNDEPS} && cd /tmp && if [ -n "${RESTY_EVAL_PRE_CONFIGURE}" ]; then eval $(echo ${RESTY_EVAL_PRE_CONFIGURE}); fi && curl -fSL "${RESTY_OPENSSL_URL_BASE}/openssl-${RESTY_OPENSSL_VERSION}.tar.gz" -o openssl-${RESTY_OPENSSL_VERSION}.tar.gz && tar xzf openssl-${RESTY_OPENSSL_VERSION}.tar.gz && cd openssl-${RESTY_OPENSSL_VERSION} && if [ $(echo ${RESTY_OPENSSL_VERSION} | cut -c 1-2) = "3." ] ; then echo 'patching OpenSSL 3.x for OpenResty' && curl -s https://raw.githubusercontent.com/openresty/openresty/master/patches/openssl-${RESTY_OPENSSL_PATCH_VERSION}-sess_set_get_cb_yield.patch | patch -p1 ; fi && if [ $(echo ${RESTY_OPENSSL_VERSION} | cut -c 1-5) = "1.1.1" ] ; then echo 'patching OpenSSL 1.1.1 for OpenResty' && curl -s https://raw.githubusercontent.com/openresty/openresty/master/patches/openssl-${RESTY_OPENSSL_PATCH_VERSION}-sess_set_get_cb_yield.patch | patch -p1 ; fi && if [ $(echo ${RESTY_OPENSSL_VERSION} | cut -c 1-5) = "1.1.0" ] ; then echo 'patching OpenSSL 1.1.0 for OpenResty' && curl -s https://raw.githubusercontent.com/openresty/openresty/master/patches/openssl-1.1.0j-parallel_build_fix.patch | patch -p1 && curl -s https://raw.githubusercontent.com/openresty/openresty/master/patches/openssl-${RESTY_OPENSSL_PATCH_VERSION}-sess_set_get_cb_yield.patch | patch -p1 ; fi && ./config shared zlib -g --prefix=/usr/local/openresty/openssl3 --libdir=lib -Wl,-rpath,/usr/local/openresty/openssl3/lib ${RESTY_OPENSSL_BUILD_OPTIONS} && make -j${RESTY_J} && make -j${RESTY_J} install_sw && cd /tmp && curl -fSL "https://github.com/PCRE2Project/pcre2/releases/download/pcre2-${RESTY_PCRE_VERSION}/pcre2-${RESTY_PCRE_VERSION}.tar.gz" -o pcre2-${RESTY_PCRE_VERSION}.tar.gz && echo "${RESTY_PCRE_SHA256} pcre2-${RESTY_PCRE_VERSION}.tar.gz" | shasum -a 256 --check && tar xzf pcre2-${RESTY_PCRE_VERSION}.tar.gz && cd /tmp/pcre2-${RESTY_PCRE_VERSION} && CFLAGS="-g -O3" ./configure --prefix=/usr/local/openresty/pcre2 --libdir=/usr/local/openresty/pcre2/lib ${RESTY_PCRE_BUILD_OPTIONS} && CFLAGS="-g -O3" make -j${RESTY_J} && CFLAGS="-g -O3" make -j${RESTY_J} install && cd /tmp && curl -fSL https://openresty.org/download/openresty-${RESTY_VERSION}.tar.gz -o openresty-${RESTY_VERSION}.tar.gz && tar xzf openresty-${RESTY_VERSION}.tar.gz && cd /tmp/openresty-${RESTY_VERSION} && if [ -n "${RESTY_EVAL_POST_DOWNLOAD_PRE_CONFIGURE}" ]; then eval $(echo ${RESTY_EVAL_POST_DOWNLOAD_PRE_CONFIGURE}); fi && eval ./configure -j${RESTY_J} ${_RESTY_CONFIG_DEPS} ${RESTY_CONFIG_OPTIONS} ${RESTY_CONFIG_OPTIONS_MORE} ${RESTY_LUAJIT_OPTIONS} ${RESTY_PCRE_OPTIONS} && if [ -n "${RESTY_EVAL_PRE_MAKE}" ]; then eval $(echo ${RESTY_EVAL_PRE_MAKE}); fi && make -j${RESTY_J} && make -j${RESTY_J} install && cd /tmp && rm -rf openssl-${RESTY_OPENSSL_VERSION}.tar.gz openssl-${RESTY_OPENSSL_VERSION} pcre2-${RESTY_PCRE_VERSION}.tar.gz pcre2-${RESTY_PCRE_VERSION} openresty-${RESTY_VERSION}.tar.gz openresty-${RESTY_VERSION} && curl -fSL https://luarocks.github.io/luarocks/releases/luarocks-${RESTY_LUAROCKS_VERSION}.tar.gz -o luarocks-${RESTY_LUAROCKS_VERSION}.tar.gz && tar xzf luarocks-${RESTY_LUAROCKS_VERSION}.tar.gz && cd luarocks-${RESTY_LUAROCKS_VERSION} && ./configure --prefix=/usr/local/openresty/luajit --with-lua=/usr/local/openresty/luajit --with-lua-include=/usr/local/openresty/luajit/include/luajit-2.1 && make build && make install && cd /tmp && if [ -n "${RESTY_EVAL_POST_MAKE}" ]; then eval $(echo ${RESTY_EVAL_POST_MAKE}); fi && rm -rf luarocks-${RESTY_LUAROCKS_VERSION} luarocks-${RESTY_LUAROCKS_VERSION}.tar.gz && if [ -n "${RESTY_ADD_PACKAGE_BUILDDEPS}" ]; then DEBIAN_FRONTEND=noninteractive apt-get remove -y --purge ${RESTY_ADD_PACKAGE_BUILDDEPS} ; fi && DEBIAN_FRONTEND=noninteractive apt-get autoremove -y && mkdir -p /var/run/openresty && ln -sf /dev/stdout /usr/local/openresty/nginx/logs/access.log && ln -sf /dev/stderr /usr/local/openresty/nginx/logs/error.log # buildkit

ENV PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/usr/local/openresty/luajit/bin:/usr/local/openresty/nginx/sbin:/usr/local/openresty/bin

ENV LUA_PATH=/usr/local/openresty/site/lualib/?.ljbc;/usr/local/openresty/site/lualib/?/init.ljbc;/usr/local/openresty/lualib/?.ljbc;/usr/local/openresty/lualib/?/init.ljbc;/usr/local/openresty/site/lualib/?.lua;/usr/local/openresty/site/lualib/?/init.lua;/usr/local/openresty/lualib/?.lua;/usr/local/openresty/lualib/?/init.lua;./?.lua;/usr/local/openresty/luajit/share/luajit-2.1/?.lua;/usr/local/share/lua/5.1/?.lua;/usr/local/share/lua/5.1/?/init.lua;/usr/local/openresty/luajit/share/lua/5.1/?.lua;/usr/local/openresty/luajit/share/lua/5.1/?/init.lua

ENV LUA_CPATH=/usr/local/openresty/site/lualib/?.so;/usr/local/openresty/lualib/?.so;./?.so;/usr/local/lib/lua/5.1/?.so;/usr/local/openresty/luajit/lib/lua/5.1/?.so;/usr/local/lib/lua/5.1/loadall.so;/usr/local/openresty/luajit/lib/lua/5.1/?.so

COPY nginx.conf /usr/local/openresty/nginx/conf/nginx.conf # buildkit

COPY nginx.vh.default.conf /etc/nginx/conf.d/default.conf # buildkit

CMD ["/usr/local/openresty/bin/openresty" "-g" "daemon off;"]

STOPSIGNAL SIGQUIT

ENV WAF_PATH=/usr/local/openresty/1pwaf

RUN /bin/sh -c set -ex && apt-get update && apt-get install -y --no-install-recommends libsqlite3-dev git cmake && apt-get clean && rm -rf /var/lib/apt/lists/* && mkdir -p ${WAF_PATH}/libraries && mkdir -p /usr/local/openresty/modules && git clone --recursive https://github.com/google/ngx_brotli.git /usr/local/openresty/modules/ngx_brotli && mkdir -p /usr/local/openresty/modules/ngx_brotli/deps/brotli/out && cd /usr/local/openresty/modules/ngx_brotli/deps/brotli/out && cmake .. && make -j$(nproc) # buildkit

COPY /usr/local/lib/libmaxminddb.so.0.0.7 /usr/local/openresty/1pwaf/libraries/libmaxminddb.so # buildkit

COPY /tmp/libinjection.so /usr/local/openresty/1pwaf/libraries/libinjection.so # buildkit

COPY /tmp/lsqlite3/lsqlite3.so /usr/local/openresty/luajit/lib/lua/5.1/lsqlite3.so # buildkit

COPY /tmp/luafilesystem-1_8_0/src/lfs.so /usr/local/openresty/luajit/lib/lua/5.1/lfs.so # buildkit

COPY 1pwaf/data/default/index.html /usr/local/openresty/nginx/html/index.html # buildkit

COPY compile.sh /tmp/compile.sh # buildkit

COPY ./1pwaf /usr/local/openresty/1pwaf # buildkit

RUN /bin/sh -c chmod +x /tmp/compile.sh && /tmp/compile.sh ${WAF_PATH} && rm -rf /tmp/* # buildkit

CMD ["/usr/local/openresty/bin/openresty" "-g" "daemon off;"]

STOPSIGNAL SIGQUIT