Dockerfile - mk/docker-jenkins - Gitiles

 FROM ubuntu:20.04

 LABEL maintainer="dev@mirantis.com"
 LABEL build_date="2022-04-12"

 ENV DEBIAN_FRONTEND=noninteractive \
     DEBCONF_NONINTERACTIVE_SEEN=true \
     LANG=C.UTF-8 \
     LANGUAGE=$LANG
 SHELL ["/bin/bash", "-xec"]

 #  Base apt config
 RUN cd /etc/apt/ \
   && echo 'Acquire::Languages "none";' > apt.conf.d/docker-no-languages \
   && echo 'Acquire::GzipIndexes "true"; Acquire::CompressionTypes::Order:: "gz";' > apt.conf.d/docker-gzip-indexes \
   && echo 'APT::Get::Install-Recommends "false"; APT::Get::Install-Suggests "false";' > apt.conf.d/docker-recommends

 RUN apt-get update && apt-get -yy upgrade && apt-get install -y git curl gettext-base python3-virtualenv openjdk-8-jdk unzip wget

 ENV JENKINS_HOME /var/jenkins_home
 ENV JENKINS_SLAVE_AGENT_PORT 50000

 ARG user=jenkins
 ARG group=jenkins
 ARG uid=1000
 ARG gid=1000

 # Jenkins is run with user `jenkins`, uid = 1000
 # If you bind mount a volume from the host or a data container,
 # ensure you use the same uid
 RUN groupadd -g ${gid} ${group} \
     && useradd -d "$JENKINS_HOME" -u ${uid} -g ${gid} -m -s /bin/bash ${user}

 # Jenkins home directory is a volume, so configuration and build history
 # can be persisted and survive image upgrades
 VOLUME /var/jenkins_home

 # `/usr/share/jenkins/ref/` contains all reference configuration we want
 # to set on a fresh new installation. Use it to bundle additional plugins
 # or config file with your custom jenkins Docker image.
 RUN mkdir -p /usr/share/jenkins/ref/init.groovy.d; chown ${uid}:${gid} /usr/share/jenkins/ref/init.groovy.d

 ENV TINI_VERSION 0.13.2
 ENV TINI_SHA afbf8de8a63ce8e4f18cb3f34dfdbbd354af68a1

 # Use tini as subreaper in Docker container to adopt zombie processes
 RUN curl -fsSL https://github.com/krallin/tini/releases/download/v${TINI_VERSION}/tini-static-amd64 -o /bin/tini && chmod +x /bin/tini \
   && echo "$TINI_SHA  /bin/tini" | sha1sum -c -

 COPY init.groovy /usr/share/jenkins/ref/init.groovy.d/tcp-slave-agent-port.groovy

 # jenkins version being bundled in this docker image
 ARG JENKINS_VERSION
 ENV JENKINS_VERSION ${JENKINS_VERSION:-2.263.4}

 # jenkins.war checksum, download will be validated using it
 ARG JENKINS_SHA=1d4a7409784236a84478b76f3f2139939c0d7a3b4b2e53b1fcef400c14903ab6

 # Can be used to customize where jenkins.war get downloaded from
 ARG JENKINS_URL=https://repo.jenkins-ci.org/public/org/jenkins-ci/main/jenkins-war/${JENKINS_VERSION}/jenkins-war-${JENKINS_VERSION}.war

 # could use ADD but this one does not check Last-Modified header neither does it allow to control checksum
 # see https://github.com/docker/docker/issues/8331
 RUN curl -fsSL ${JENKINS_URL} -o /usr/share/jenkins/jenkins.war \
   && echo "${JENKINS_SHA}  /usr/share/jenkins/jenkins.war" | sha256sum -c -

 ENV JENKINS_UC https://updates.jenkins.io
 RUN chown -R ${user} "$JENKINS_HOME" /usr/share/jenkins/ref

 # for main web interface:
 EXPOSE 8080

 # will be used by attached slave agents:
 EXPOSE 50000

 ENV COPY_REFERENCE_FILE_LOG $JENKINS_HOME/copy_reference_file.log

 COPY SimpleThemeDecorator.xml /opt/org.codefirst.SimpleThemeDecorator.xml
 RUN chown ${user} /opt/org.codefirst.SimpleThemeDecorator.xml

 USER ${user}

 COPY jenkins-support /usr/local/bin/jenkins-support
 COPY jenkins.sh /usr/local/bin/jenkins.sh
 COPY pre_startup_copy_plugins.sh /usr/local/bin/pre_startup_copy_plugins.sh
 ENTRYPOINT ["/bin/tini", "--", "/usr/local/bin/jenkins.sh"]

 # from a derived Dockerfile, can use `RUN plugins.sh active.txt` to setup /usr/share/jenkins/ref/plugins from a support bundle
 COPY plugins.sh /usr/local/bin/plugins.sh
 COPY install-plugins.sh /usr/local/bin/install-plugins.sh
 COPY jenkins-plugins-deps /usr/share/jenkins/ref/jenkins-plugins-deps
 COPY theme /usr/share/jenkins/ref/userContent/theme
 COPY plugins_for_offline.txt /opt/

 # list of plugins which should be installed. Doesn't include deps list, which specified in jenkins-plugins-deps file.
 RUN JENKINS_UC_DOWNLOAD=http://archives.jenkins-ci.org /usr/local/bin/install-plugins.sh \
         antisamy-markup-formatter:1.5 \
         artifactory:3.15.4 \
         audit-trail:3.8 \
         blueocean:1.24.8 \
         build-blocker-plugin:1.7.3 \
         build-monitor-plugin:1.12+build.201809061734 \
         build-timeout:1.19 \
         build-user-vars-plugin:1.5 \
         categorized-view:1.10 \
         command-launcher:1.2 \
         copyartifact:1.46.2 \
         description-setter:1.10 \
         discard-old-build:1.05 \
         docker-workflow:1.17 \
         email-ext:2.84 \
         envinject:2.3.0 \
         extended-choice-parameter:0.76 \
         extensible-choice-parameter:1.6.0 \
         gerrit-trigger:2.35.2 \
         git:4.8.3 \
         github:1.34.2 \
         heavy-job:1.1 \
         jdk-tool:1.1 \
         jira:3.3 \
         jobConfigHistory:2.18.2 \
         ldap:1.20 \
         lockable-resources:2.14 \
         matrix-auth:2.6.6 \
         monitoring:1.87.0 \
         multiple-scms:0.6 \
         performance:3.12 \
         permissive-script-security:0.3 \
         pipeline-utility-steps:2.1.0 \
         plot:2.1.0 \
         prometheus:2.0.0 \
         rebuild:1.33 \
         simple-theme-plugin:0.5.1 \
         slack:2.49 \
         ssh-agent:1.17 \
         ssh-slaves:1.29.4 \
         test-stability:2.3 \
         throttle-concurrents:2.0.1 \
         workflow-cps:2659.v52d3de6044d0 \
         workflow-remote-loader:1.5 \
         workflow-scm-step:2.13

 USER root
 RUN mkdir -p /opt/plugins_files_offline \
     && wget -P /opt/plugins_files_offline -i /opt/plugins_for_offline.txt  \
     && pushd /opt/plugins_files_offline && for f in *.hpi; do mv -- "$f" "${f%.hpi}.jpi" ; done && popd \
     && chown -R ${user} /opt/plugins_files_offline

 # Cleanup.
 RUN apt-get -y purge wget; apt-get -y autoremove; apt-get -y clean;
 RUN rm -rf /root/.cache /var/lib/apt/lists/* rm -rf /tmp/* rm -rf /var/tmp/*
 # And switch it back
 USER ${user}
	FROM ubuntu:20.04

	LABEL maintainer="dev@mirantis.com"
	LABEL build_date="2022-04-12"

	ENV DEBIAN_FRONTEND=noninteractive \
	DEBCONF_NONINTERACTIVE_SEEN=true \
	LANG=C.UTF-8 \
	LANGUAGE=$LANG
	SHELL ["/bin/bash", "-xec"]

	# Base apt config
	RUN cd /etc/apt/ \
	&& echo 'Acquire::Languages "none";' > apt.conf.d/docker-no-languages \
	&& echo 'Acquire::GzipIndexes "true"; Acquire::CompressionTypes::Order:: "gz";' > apt.conf.d/docker-gzip-indexes \
	&& echo 'APT::Get::Install-Recommends "false"; APT::Get::Install-Suggests "false";' > apt.conf.d/docker-recommends

	RUN apt-get update && apt-get -yy upgrade && apt-get install -y git curl gettext-base python3-virtualenv openjdk-8-jdk unzip wget

	ENV JENKINS_HOME /var/jenkins_home
	ENV JENKINS_SLAVE_AGENT_PORT 50000

	ARG user=jenkins
	ARG group=jenkins
	ARG uid=1000
	ARG gid=1000

	# Jenkins is run with user `jenkins`, uid = 1000
	# If you bind mount a volume from the host or a data container,
	# ensure you use the same uid
	RUN groupadd -g ${gid} ${group} \
	&& useradd -d "$JENKINS_HOME" -u ${uid} -g ${gid} -m -s /bin/bash ${user}

	# Jenkins home directory is a volume, so configuration and build history
	# can be persisted and survive image upgrades
	VOLUME /var/jenkins_home

	# `/usr/share/jenkins/ref/` contains all reference configuration we want
	# to set on a fresh new installation. Use it to bundle additional plugins
	# or config file with your custom jenkins Docker image.
	RUN mkdir -p /usr/share/jenkins/ref/init.groovy.d; chown ${uid}:${gid} /usr/share/jenkins/ref/init.groovy.d

	ENV TINI_VERSION 0.13.2
	ENV TINI_SHA afbf8de8a63ce8e4f18cb3f34dfdbbd354af68a1

	# Use tini as subreaper in Docker container to adopt zombie processes
	RUN curl -fsSL https://github.com/krallin/tini/releases/download/v${TINI_VERSION}/tini-static-amd64 -o /bin/tini && chmod +x /bin/tini \
	&& echo "$TINI_SHA /bin/tini" \| sha1sum -c -

	COPY init.groovy /usr/share/jenkins/ref/init.groovy.d/tcp-slave-agent-port.groovy

	# jenkins version being bundled in this docker image
	ARG JENKINS_VERSION
	ENV JENKINS_VERSION ${JENKINS_VERSION:-2.263.4}

	# jenkins.war checksum, download will be validated using it
	ARG JENKINS_SHA=1d4a7409784236a84478b76f3f2139939c0d7a3b4b2e53b1fcef400c14903ab6

	# Can be used to customize where jenkins.war get downloaded from
	ARG JENKINS_URL=https://repo.jenkins-ci.org/public/org/jenkins-ci/main/jenkins-war/${JENKINS_VERSION}/jenkins-war-${JENKINS_VERSION}.war

	# could use ADD but this one does not check Last-Modified header neither does it allow to control checksum
	# see https://github.com/docker/docker/issues/8331
	RUN curl -fsSL ${JENKINS_URL} -o /usr/share/jenkins/jenkins.war \
	&& echo "${JENKINS_SHA} /usr/share/jenkins/jenkins.war" \| sha256sum -c -

	ENV JENKINS_UC https://updates.jenkins.io
	RUN chown -R ${user} "$JENKINS_HOME" /usr/share/jenkins/ref

	# for main web interface:
	EXPOSE 8080

	# will be used by attached slave agents:
	EXPOSE 50000

	ENV COPY_REFERENCE_FILE_LOG $JENKINS_HOME/copy_reference_file.log

	COPY SimpleThemeDecorator.xml /opt/org.codefirst.SimpleThemeDecorator.xml
	RUN chown ${user} /opt/org.codefirst.SimpleThemeDecorator.xml

	USER ${user}

	COPY jenkins-support /usr/local/bin/jenkins-support
	COPY jenkins.sh /usr/local/bin/jenkins.sh
	COPY pre_startup_copy_plugins.sh /usr/local/bin/pre_startup_copy_plugins.sh
	ENTRYPOINT ["/bin/tini", "--", "/usr/local/bin/jenkins.sh"]

	# from a derived Dockerfile, can use `RUN plugins.sh active.txt` to setup /usr/share/jenkins/ref/plugins from a support bundle
	COPY plugins.sh /usr/local/bin/plugins.sh
	COPY install-plugins.sh /usr/local/bin/install-plugins.sh
	COPY jenkins-plugins-deps /usr/share/jenkins/ref/jenkins-plugins-deps
	COPY theme /usr/share/jenkins/ref/userContent/theme
	COPY plugins_for_offline.txt /opt/

	# list of plugins which should be installed. Doesn't include deps list, which specified in jenkins-plugins-deps file.
	RUN JENKINS_UC_DOWNLOAD=http://archives.jenkins-ci.org /usr/local/bin/install-plugins.sh \
	antisamy-markup-formatter:1.5 \
	artifactory:3.15.4 \
	audit-trail:3.8 \
	blueocean:1.24.8 \
	build-blocker-plugin:1.7.3 \
	build-monitor-plugin:1.12+build.201809061734 \
	build-timeout:1.19 \
	build-user-vars-plugin:1.5 \
	categorized-view:1.10 \
	command-launcher:1.2 \
	copyartifact:1.46.2 \
	description-setter:1.10 \
	discard-old-build:1.05 \
	docker-workflow:1.17 \
	email-ext:2.84 \
	envinject:2.3.0 \
	extended-choice-parameter:0.76 \
	extensible-choice-parameter:1.6.0 \
	gerrit-trigger:2.35.2 \
	git:4.8.3 \
	github:1.34.2 \
	heavy-job:1.1 \
	jdk-tool:1.1 \
	jira:3.3 \
	jobConfigHistory:2.18.2 \
	ldap:1.20 \
	lockable-resources:2.14 \
	matrix-auth:2.6.6 \
	monitoring:1.87.0 \
	multiple-scms:0.6 \
	performance:3.12 \
	permissive-script-security:0.3 \
	pipeline-utility-steps:2.1.0 \
	plot:2.1.0 \
	prometheus:2.0.0 \
	rebuild:1.33 \
	simple-theme-plugin:0.5.1 \
	slack:2.49 \
	ssh-agent:1.17 \
	ssh-slaves:1.29.4 \
	test-stability:2.3 \
	throttle-concurrents:2.0.1 \
	workflow-cps:2659.v52d3de6044d0 \
	workflow-remote-loader:1.5 \
	workflow-scm-step:2.13

	USER root
	RUN mkdir -p /opt/plugins_files_offline \
	&& wget -P /opt/plugins_files_offline -i /opt/plugins_for_offline.txt \
	&& pushd /opt/plugins_files_offline && for f in *.hpi; do mv -- "$f" "${f%.hpi}.jpi" ; done && popd \
	&& chown -R ${user} /opt/plugins_files_offline

	# Cleanup.
	RUN apt-get -y purge wget; apt-get -y autoremove; apt-get -y clean;
	RUN rm -rf /root/.cache /var/lib/apt/lists/* rm -rf /tmp/* rm -rf /var/tmp/*
	# And switch it back
	USER ${user}