Dockerfile

FROM alpine:3.19.1

ARG BUILD_DATE
ARG BUILD_REF
ARG BUILD_VERSION
ARG APK_VERSION="10.11.6-r0"

# https://github.com/opencontainers/image-spec/blob/master/annotations.md
LABEL \
  org.opencontainers.image.authors="Johan Bergström <bugs@bergstroem.nu>" \
  org.opencontainers.image.created="$BUILD_DATE" \
  org.opencontainers.image.description="A tiny MariaDB container" \
  org.opencontainers.image.licenses="MIT" \
  org.opencontainers.image.revision="$BUILD_REF" \
  org.opencontainers.image.source="https://github.com/jbergstroem/mariadb-alpine" \
  org.opencontainers.image.title="jbergstroem/mariadb-alpine" \
  org.opencontainers.image.url="https://github.com/jbergstroem/mariadb-alpine" \
  org.opencontainers.image.vendor="Johan Bergström" \
  org.opencontainers.image.version="$BUILD_VERSION"

SHELL ["/bin/ash", "-euo", "pipefail", "-c"]

RUN \
  apk add --no-cache "tzdata>=2023c-r1" mariadb=${APK_VERSION} mariadb-client=${APK_VERSION} && \
  TO_KEEP=$(echo " \
    etc/ssl/certs/ca-certificates.crt$ \
    usr/bin/mariadb$ \
    usr/bin/mariadbd$ \
    usr/bin/getconf$ \
    usr/bin/getent$ \
    usr/bin/mariadb-install-db$ \
    usr/share/mariadb/charsets \
    usr/share/mariadb/english \
    usr/share/mariadb/mysql_system_tables.sql$ \
    usr/share/mariadb/mysql_performance_tables.sql$ \
    usr/share/mariadb/mysql_system_tables_data.sql$ \
    usr/share/mariadb/maria_add_gis_sp_bootstrap.sql$ \
    usr/share/mariadb/mysql_sys_schema.sql$ \
    usr/share/mariadb/fill_help_tables.sql$" | \
    tr -d " \t\n\r" | sed -e 's/usr/|usr/g' -e 's/^.//') && \
  # As of Mariadb 10.11.x, the mariadb-client package now depends on perl. Lets just list all files and remove them.
  INSTALLED=$(apk info -q -L mariadb-common mariadb mariadb-client linux-pam ca-certificates perl | grep "\S") && \
  for path in $(echo "${INSTALLED}" | grep -v -E "${TO_KEEP}"); do \
    eval rm -rf "${path}"; \
  done && \
  touch /usr/share/mariadb/mysql_test_db.sql && \
  # this file is removed since we remove most things from mariadb-common
  echo "!includedir /etc/my.cnf.d" > /etc/my.cnf && \
  # allow anyone to connect by default
  sed -ie 's/127.0.0.1/%/' /usr/share/mariadb/mysql_system_tables_data.sql && \
  mkdir /run/mysqld && \
  chown mysql:mysql /etc/my.cnf.d/ /run/mysqld /usr/share/mariadb/mysql_system_tables_data.sql

# The ones installed by MariaDB was removed in the clean step above due to its large footprint
# my_print_defaults should cover 95% of cases since it doesn't properly do recursion
COPY sh/resolveip.sh /usr/bin/resolveip
COPY sh/my_print_defaults.sh /usr/bin/my_print_defaults
COPY sh/run.sh /run.sh
# Used in run.sh as a default config
COPY my.cnf /tmp/my.cnf

# This is not super helpful; mysqld might be running but not accepting connections.
# Since we have no clients, we can't really connect to it and check.
#
# Below is in my opinion better than no health check.
HEALTHCHECK --start-period=5s CMD pgrep mariadbd

VOLUME ["/var/lib/mysql"]
ENTRYPOINT ["/run.sh"]
EXPOSE 3306