mailcow/data/Dockerfiles/postfix/Dockerfile

FROM debian:buster-slim
LABEL maintainer "Andre Peters <andre.peters@servercow.de>"

ARG DEBIAN_FRONTEND=noninteractive
ENV LC_ALL C

RUN dpkg-divert --local --rename --add /sbin/initctl \
	&& ln -sf /bin/true /sbin/initctl \
	&& dpkg-divert --local --rename --add /usr/bin/ischroot \
	&& ln -sf /bin/true /usr/bin/ischroot

# Add groups and users before installing Postfix to not break compatibility
RUN groupadd -g 102 postfix \
  && groupadd -g 103 postdrop \
  && useradd -g postfix -u 101 -d /var/spool/postfix -s /usr/sbin/nologin postfix \
  && apt-get update && apt-get install -y --no-install-recommends \
	ca-certificates \
	curl \
	dirmngr \
	gnupg \
	libsasl2-modules \
  mariadb-client \
	perl \
	postfix \
	postfix-mysql \
	postfix-pcre \
	sasl2-bin \
	sudo \
	supervisor \
	syslog-ng \
	syslog-ng-core \
	syslog-ng-mod-redis \
  tzdata \
	&& rm -rf /var/lib/apt/lists/* \
	&& touch /etc/default/locale \
  && printf '#!/bin/bash\n/usr/sbin/postconf -c /opt/postfix/conf "$@"' > /usr/local/sbin/postconf \
  && chmod +x /usr/local/sbin/postconf

COPY supervisord.conf /etc/supervisor/supervisord.conf
COPY syslog-ng.conf /etc/syslog-ng/syslog-ng.conf
COPY stop-supervisor.sh /usr/local/sbin/stop-supervisor.sh
COPY postfix.sh /opt/postfix.sh
COPY rspamd-pipe-ham /usr/local/bin/rspamd-pipe-ham
COPY rspamd-pipe-spam /usr/local/bin/rspamd-pipe-spam
COPY whitelist_forwardinghosts.sh /usr/local/bin/whitelist_forwardinghosts.sh
COPY stop-supervisor.sh /usr/local/sbin/stop-supervisor.sh

RUN chmod +x /opt/postfix.sh \
  /usr/local/bin/rspamd-pipe-ham \
  /usr/local/bin/rspamd-pipe-spam \
  /usr/local/bin/whitelist_forwardinghosts.sh \
  /usr/local/sbin/stop-supervisor.sh

EXPOSE 588

CMD exec /usr/bin/supervisord -c /etc/supervisor/supervisord.conf

RUN rm -rf /tmp/* /var/tmp/*
[Postfix] Remove Zeyple, base on Buster 2019-08-09 14:08:58 +02:00			`FROM debian:buster-slim`
[Dockerfiles] Replaced deprecated MAINTAINER with LABEL Used format proposed in https://docs.docker.com/engine/reference/builder/#maintainer-deprecated 2017-05-13 15:33:32 +02:00			`LABEL maintainer "Andre Peters <andre.peters@servercow.de>"`
Docs 2017-03-02 11:23:23 +01:00
[Dockerfiles] Do not persist DEBIAN_FRONTEND=noninteractive in images According to https://github.com/moby/moby/issues/4032#issuecomment-163689851 (and some other comments in the issue) it's not recommended to set `DEBIAN_FRONTEND` via `ENV` in a Dockerfile. `ARG` has the same effect at build time but does not change `DEBIAN_FRONTEND` in the final image, so I switched to it. It should also work to remove it completely. 2017-05-13 16:29:18 +02:00			`ARG DEBIAN_FRONTEND=noninteractive`
Docs 2017-03-02 11:23:23 +01:00			`ENV LC_ALL C`

			`RUN dpkg-divert --local --rename --add /sbin/initctl \`
			`&& ln -sf /bin/true /sbin/initctl \`
			`&& dpkg-divert --local --rename --add /usr/bin/ischroot \`
			`&& ln -sf /bin/true /usr/bin/ischroot`

[Postfix] Remove Zeyple, base on Buster 2019-08-09 14:08:58 +02:00			`# Add groups and users before installing Postfix to not break compatibility`
			`RUN groupadd -g 102 postfix \`
			`&& groupadd -g 103 postdrop \`
			`&& useradd -g postfix -u 101 -d /var/spool/postfix -s /usr/sbin/nologin postfix \`
			`&& apt-get update && apt-get install -y --no-install-recommends \`
[Dockerfiles] Sorted list of packages 2017-05-13 16:07:06 +02:00			`ca-certificates \`
			`curl \`
			`dirmngr \`
			`gnupg \`
Docs 2017-03-02 11:23:23 +01:00			`libsasl2-modules \`
[Postfix] Remove Zeyple, base on Buster 2019-08-09 14:08:58 +02:00			`mariadb-client \`
[SOGo] Increase workers count to 20 [Postfix] Add extended TLS header [Web] Increase timeout to 10 for docker API connections [Postfix] Add perl package 2018-04-26 14:06:10 +02:00			`perl \`
Docs 2017-03-02 11:23:23 +01:00			`postfix \`
			`postfix-mysql \`
			`postfix-pcre \`
[Dockerfiles] Sorted list of packages 2017-05-13 16:07:06 +02:00			`sasl2-bin \`
			`sudo \`
			`supervisor \`
Docs 2017-03-02 11:23:23 +01:00			`syslog-ng \`
			`syslog-ng-core \`
Used tabs for indentation in Dockerfiles 2017-05-12 20:54:23 +02:00			`syslog-ng-mod-redis \`
[Postfix] Add tzdata to Postfix 2018-07-17 00:29:07 +02:00			`tzdata \`
[Postfix] Do not keep persistent logs in a container 2017-07-11 17:09:20 +02:00			`&& rm -rf /var/lib/apt/lists/* \`
[Postfix] postconf wrapper for correct config location, fixes #949 2018-01-24 09:10:43 +01:00			`&& touch /etc/default/locale \`
			`&& printf '#!/bin/bash\n/usr/sbin/postconf -c /opt/postfix/conf "$@"' > /usr/local/sbin/postconf \`
			`&& chmod +x /usr/local/sbin/postconf`
Base on Stretch, add Zeyple 2017-04-05 22:19:41 +02:00
Docs 2017-03-02 11:23:23 +01:00			`COPY supervisord.conf /etc/supervisor/supervisord.conf`
Add Json logger 2017-05-06 23:42:18 +02:00			`COPY syslog-ng.conf /etc/syslog-ng/syslog-ng.conf`
[Postfix] Allow to create an extra.cf file besides main.cf to merge overrides [Postfix] Better logging while bootstrapping [Postfix] Stop container, when a service fails (easier to monitor) 2019-09-02 18:37:05 +02:00			`COPY stop-supervisor.sh /usr/local/sbin/stop-supervisor.sh`
Docs 2017-03-02 11:23:23 +01:00			`COPY postfix.sh /opt/postfix.sh`
[Postfix] Add scripts to learn from spam/ham traps [Dovecot] Learn fuzzy when moving mails from/to junk 2018-07-29 00:35:54 +02:00			`COPY rspamd-pipe-ham /usr/local/bin/rspamd-pipe-ham`
			`COPY rspamd-pipe-spam /usr/local/bin/rspamd-pipe-spam`
Move forwarding host script to Docker image 2017-04-23 19:38:47 +02:00			`COPY whitelist_forwardinghosts.sh /usr/local/bin/whitelist_forwardinghosts.sh`
[Dovecot] Use events to kill supervisord when main proc dies [Postfix] Use events to kill supervisord when main proc dies [SOGo] Use events to kill supervisord when main proc dies 2018-10-25 22:35:07 +02:00			`COPY stop-supervisor.sh /usr/local/sbin/stop-supervisor.sh`

			`RUN chmod +x /opt/postfix.sh \`
			`/usr/local/bin/rspamd-pipe-ham \`
			`/usr/local/bin/rspamd-pipe-spam \`
			`/usr/local/bin/whitelist_forwardinghosts.sh \`
			`/usr/local/sbin/stop-supervisor.sh`
Docs 2017-03-02 11:23:23 +01:00
			`EXPOSE 588`

			`CMD exec /usr/bin/supervisord -c /etc/supervisor/supervisord.conf`

[Dockerfiles] Used best practices for apt-get See https://docs.docker.com/engine/userguide/eng-image/dockerfile_best-practices/#apt-get - Replaced `-y install` with `install -y` (unification) - Put every package on its own line - Moved `rm -rf /var/lib/apt/lists/*` in the same `RUN` statement as `apt-get` - Removed unnecessary `apt-get clean` See https://github.com/moby/moby/blob/03e2923e42446dbb830c654d0eec323a0b4ef02a/contrib/mkimage/debootstrap#L82-L105 2017-05-13 15:52:16 +02:00			`RUN rm -rf /tmp/* /var/tmp/*`