nextcloud (sha256:bcaeeb8b6124b272d6f9ed3b6e3f60f6292580e1b434bcdffcc4a596bf4e89bf)

Published 2026-03-13 17:15:43 +01:00 by arndttouby

Pull the image from the command line:

docker pull git.touby.eu/arndttouby/nextcloud@sha256:bcaeeb8b6124b272d6f9ed3b6e3f60f6292580e1b434bcdffcc4a596bf4e89bf

Digest

sha256:bcaeeb8b6124b272d6f9ed3b6e3f60f6292580e1b434bcdffcc4a596bf4e89bf

For more information on the Container registry, see the documentation.

ADD alpine-minirootfs-3.23.3-aarch64.tar.gz / # buildkit

CMD ["/bin/sh"]

ENV PHPIZE_DEPS=autoconf dpkg-dev dpkg file g++ gcc libc-dev make pkgconf re2c

RUN /bin/sh -c apk add --no-cache ca-certificates curl openssl tar xz # buildkit

RUN /bin/sh -c set -eux; adduser -u 82 -D -S -G www-data www-data # buildkit

ENV PHP_INI_DIR=/usr/local/etc/php

RUN /bin/sh -c set -eux; mkdir -p "$PHP_INI_DIR/conf.d"; [ ! -d /var/www/html ]; mkdir -p /var/www/html; chown www-data:www-data /var/www/html; chmod 1777 /var/www/html # buildkit

ENV PHP_CFLAGS=-fstack-protector-strong -fpic -fpie -O2 -D_LARGEFILE_SOURCE -D_FILE_OFFSET_BITS=64

ENV PHP_CPPFLAGS=-fstack-protector-strong -fpic -fpie -O2 -D_LARGEFILE_SOURCE -D_FILE_OFFSET_BITS=64

ENV PHP_LDFLAGS=-Wl,-O1 -pie

ENV GPG_KEYS=1198C0117593497A5EC5C199286AF1F9897469DC 49D9AF6BC72A80D6691719C8AA23F5BE9C7097D4 D95C03BC702BE9515344AE3374E44BC9067701A5

ENV PHP_VERSION=8.5.3

ENV PHP_URL=https://www.php.net/distributions/php-8.5.3.tar.xz PHP_ASC_URL=https://www.php.net/distributions/php-8.5.3.tar.xz.asc

ENV PHP_SHA256=ce65725b8af07356b69a6046d21487040b11f2acfde786de38b2bfb712c36eb9

RUN /bin/sh -c set -eux; apk add --no-cache --virtual .fetch-deps gnupg; mkdir -p /usr/src; cd /usr/src; curl -fsSL -o php.tar.xz "$PHP_URL"; if [ -n "$PHP_SHA256" ]; then echo "$PHP_SHA256 *php.tar.xz" | sha256sum -c -; fi; curl -fsSL -o php.tar.xz.asc "$PHP_ASC_URL"; export GNUPGHOME="$(mktemp -d)"; for key in $GPG_KEYS; do gpg --batch --keyserver keyserver.ubuntu.com --recv-keys "$key"; done; gpg --batch --verify php.tar.xz.asc php.tar.xz; gpgconf --kill all; rm -rf "$GNUPGHOME"; apk del --no-network .fetch-deps # buildkit

COPY docker-php-source /usr/local/bin/ # buildkit

RUN /bin/sh -c set -eux; apk add --no-cache --virtual .build-deps $PHPIZE_DEPS argon2-dev coreutils curl-dev gnu-libiconv-dev libsodium-dev libxml2-dev linux-headers oniguruma-dev openssl-dev readline-dev sqlite-dev ; rm -vf /usr/include/iconv.h; export CFLAGS="$PHP_CFLAGS" CPPFLAGS="$PHP_CPPFLAGS" LDFLAGS="$PHP_LDFLAGS" PHP_BUILD_PROVIDER='https://github.com/docker-library/php' PHP_UNAME='Linux - Docker' ; docker-php-source extract; cd /usr/src/php; gnuArch="$(dpkg-architecture --query DEB_BUILD_GNU_TYPE)"; test "$PHP_INI_DIR" != "${PHP_INI_DIR%/php}"; ./configure --build="$gnuArch" --sysconfdir="${PHP_INI_DIR%/php}" --with-config-file-path="$PHP_INI_DIR" --with-config-file-scan-dir="$PHP_INI_DIR/conf.d" --enable-option-checking=fatal --with-mhash --with-pic --enable-mbstring --enable-mysqlnd --with-password-argon2 --with-sodium=shared --with-pdo-sqlite=/usr --with-sqlite3=/usr --with-curl --with-iconv=/usr --with-openssl --with-readline --with-zlib --disable-phpdbg --with-pear --disable-cgi --enable-fpm --with-fpm-user=www-data --with-fpm-group=www-data ; make -j "$(nproc)"; find -type f -name '*.a' -delete; make install; find /usr/local -type f -perm '/0111' -exec sh -euxc ' strip --strip-all "$@" || : ' -- '{}' + ; make clean; cp -v php.ini-* "$PHP_INI_DIR/"; cd /; docker-php-source delete; runDeps="$( scanelf --needed --nobanner --format '%n#p' --recursive /usr/local | tr ',' '\n' | sort -u | awk 'system("[ -e /usr/local/lib/" $1 " ]") == 0 { next } { print "so:" $1 }' )"; apk add --no-cache $runDeps; apk del --no-network .build-deps; pecl update-channels; rm -rf /tmp/pear ~/.pearrc; php --version # buildkit

COPY docker-php-ext-* docker-php-entrypoint /usr/local/bin/ # buildkit

RUN /bin/sh -c docker-php-ext-enable sodium # buildkit

ENTRYPOINT ["docker-php-entrypoint"]

WORKDIR /var/www/html

RUN /bin/sh -c set -eux; cd "${PHP_INI_DIR%/php}"; cp -v php-fpm.conf.default php-fpm.conf; cp -v php-fpm.d/www.conf.default php-fpm.d/www.conf; grep -E '^listen = 127.0.0.1:9000' php-fpm.d/www.conf; sed -ri 's/^(listen = 127.0.0.1:9000)/;\1/' php-fpm.d/www.conf; grep -E '^;listen = 127.0.0.1:9000' php-fpm.d/www.conf; { echo '[global]'; echo 'error_log = /proc/self/fd/2'; echo; echo '; https://github.com/docker-library/php/pull/725#issuecomment-443540114'; echo 'log_limit = 8192'; echo; echo '[www]'; echo '; php-fpm closes STDOUT on startup, so sending logs to /proc/self/fd/1 does not work.'; echo '; https://bugs.php.net/bug.php?id=73886'; echo 'access.log = /proc/self/fd/2'; echo; echo 'clear_env = no'; echo; echo '; Ensure worker stdout and stderr are sent to the main error log.'; echo 'catch_workers_output = yes'; echo 'decorate_workers_output = no'; echo; echo '; default listen address for easy override in later php-fpm.d/*.conf files'; echo 'listen = 9000'; } | tee php-fpm.d/docker.conf; { echo '[global]'; echo 'daemonize = no'; echo; echo '; the [www] ini section below is for backwards compatibility and will be removed in 8.6+'; echo '[www]'; } | tee php-fpm.d/zz-docker.conf; mkdir -p "$PHP_INI_DIR/conf.d"; { echo '; https://github.com/docker-library/php/issues/878#issuecomment-938595965'; echo 'fastcgi.logging = Off'; } > "$PHP_INI_DIR/conf.d/docker-fpm.ini" # buildkit

STOPSIGNAL SIGQUIT

EXPOSE map[9000/tcp:{}]

CMD ["php-fpm"]

EXPOSE [80/tcp]

EXPOSE [8080/tcp]

EXPOSE [8443/tcp]

ENV HOME=/var/www

COPY /usr/bin/caddy /usr/bin/caddy # buildkit

COPY /usr/local/bin/docker /usr/local/bin/docker # buildkit

COPY community-containers /var/www/docker-aio/community-containers # buildkit

COPY php /var/www/docker-aio/php # buildkit

COPY --chmod=775 Containers/mastercontainer/*.sh / # buildkit

COPY --chmod=664 Containers/mastercontainer/Caddyfile /Caddyfile # buildkit

COPY --chmod=664 Containers/mastercontainer/supervisord.conf /supervisord.conf # buildkit

COPY Containers/mastercontainer/mastercontainer.conf /etc/apache2/sites-available/mastercontainer.conf # buildkit

WORKDIR /var/www/docker-aio

RUN /bin/sh -c set -ex; apk upgrade --no-cache -a; apk add --no-cache shadow; groupmod -g 33 www-data; usermod -u 33 -g 33 www-data; apk add --no-cache util-linux-misc ca-certificates wget bash apache2 apache2-proxy apache2-ssl supervisor openssl sudo netcat-openbsd curl grep; apk add --no-cache --virtual .build-deps autoconf build-base; pecl install APCu-5.1.28; docker-php-ext-enable apcu; rm -r /tmp/pear; runDeps="$( scanelf --needed --nobanner --format '%n#p' --recursive /usr/local/lib/php/extensions | tr ',' '\n' | sort -u | awk 'system("[ -e /usr/local/lib/" $1 " ]") == 0 { next } { print "so:" $1 }' )"; apk add --no-cache --virtual .nextcloud-aio-rundeps $runDeps; apk del .build-deps; grep -q '^pm = dynamic' /usr/local/etc/php-fpm.d/www.conf; sed -i 's/^pm = dynamic/pm = ondemand/' /usr/local/etc/php-fpm.d/www.conf; sed -i 's/^pm.max_children =.*/pm.max_children = 80/' /usr/local/etc/php-fpm.d/www.conf; sed -i 's|access.log = /proc/self/fd/2|access.log = /proc/self/fd/1|' /usr/local/etc/php-fpm.d/docker.conf; grep -q ';listen.allowed_clients' /usr/local/etc/php-fpm.d/www.conf; sed -i 's|;listen.allowed_clients.*|listen.allowed_clients = 127.0.0.1,::1|' /usr/local/etc/php-fpm.d/www.conf; apk add --no-cache git; wget https://getcomposer.org/installer -O - | php -- --install-dir=/usr/local/bin --filename=composer; chmod +x /usr/local/bin/composer; cd /var/www/docker-aio; rm -r ./php/tests; chown www-data:www-data -R /var/www/docker-aio; cd php; sudo -E -u www-data composer install --no-dev; sudo -E -u www-data composer clear-cache; cd ..; rm -f /usr/local/bin/composer; chmod -R 770 /var/www/docker-aio; chown -R www-data:www-data /var/www; rm -r php/data; rm -r php/session; mkdir -p /etc/apache2/certs; cd /etc/apache2/certs; openssl req -new -newkey rsa:4096 -days 3650 -nodes -x509 -subj "/C=DE/ST=BE/L=Local/O=Dev/CN=nextcloud.local" -keyout /etc/apache2/certs/ssl.key -out /etc/apache2/certs/ssl.crt; sed -i -e '/^Listen /d' -e 's/^LogLevel .*/LogLevel error/' -e 's|^ErrorLog .*|ErrorLog /proc/self/fd/2|' -e 's/User apache/User www-data/g' -e 's/Group apache/Group www-data/g' -e 's/^#$LoadModule .*mod_rewrite.so$/\1/' -e 's/^#$LoadModule .*mod_headers.so$/\1/' -e 's/^#$LoadModule .*mod_env.so$/\1/' -e 's/^#$LoadModule .*mod_mime.so$/\1/' -e 's/^#$LoadModule .*mod_dir.so$/\1/' -e 's/^#$LoadModule .*mod_authz_core.so$/\1/' -e 's/^#$LoadModule .*mod_mpm_event.so$/\1/' -e 's/$LoadModule .*mod_mpm_worker.so$/#\1/' -e 's/$LoadModule .*mod_mpm_prefork.so$/#\1/' -e 's/$ScriptAlias $/#\1/' /etc/apache2/httpd.conf; mkdir -p /etc/apache2/logs; rm /etc/apache2/conf.d/ssl.conf; echo "ServerName localhost" | tee -a /etc/apache2/httpd.conf; grep -q '^LoadModule lbmethod_heartbeat_module' /etc/apache2/conf.d/proxy.conf; sed -i 's|^LoadModule lbmethod_heartbeat_module.*|#LoadModule lbmethod_heartbeat_module|' /etc/apache2/conf.d/proxy.conf; echo "SSLSessionCache nonenotnull" | tee -a /etc/apache2/httpd.conf; echo "LoadModule ssl_module modules/mod_ssl.so" | tee -a /etc/apache2/httpd.conf; echo "LoadModule socache_shmcb_module modules/mod_socache_shmcb.so" | tee -a /etc/apache2/httpd.conf; echo "Include /etc/apache2/sites-available/mastercontainer.conf" | tee -a /etc/apache2/httpd.conf; rm -f /etc/apache2/conf.d/default.conf /etc/apache2/conf.d/userdir.conf /etc/apache2/conf.d/info.conf; rm -rf /var/www/localhost/cgi-bin/; mkdir /var/log/supervisord; mkdir /var/run/supervisord; # buildkit

LABEL org.label-schema.vendor=Nextcloud wud.watch=false com.docker.compose.project=nextcloud-aio

USER root

ENTRYPOINT ["/start.sh"]

HEALTHCHECK &{["CMD-SHELL" "/healthcheck.sh"] "0s" "0s" "0s" "0s" '\x00'}