backup/Dockerfile at main · HEM-Inc/backup · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
# mongodump/mongorestore ship no Alpine/musl build (dynamically linked
# against glibc + Kerberos) -- sourced from the official mongo image, whose
# Ubuntu base is verified compatible with this image's own Ubuntu base
# below, rather than fetched from MongoDB's own tools tarball as a second,
# independently-checksummed download path for the same upstream artifact.
FROM mongo:8.0 AS mongotools

FROM ubuntu:26.04

ARG SUPERCRONIC_VERSION=v0.2.49
ARG GOSU_VERSION=1.19
ARG TARGETARCH=amd64

RUN apt-get update && apt-get install -y --no-install-recommends \
        ca-certificates curl jq postgresql-client mariadb-client netcat-openbsd libgssapi-krb5-2 \
    && rm -rf /var/lib/apt/lists/* && \
    case "$TARGETARCH" in \
        amd64) SUPERCRONIC_SHA1=e63c11a9726b775a6a11801e81af4f3fb926aa68 ;; \
        arm64) SUPERCRONIC_SHA1=0b6c5bb743e0b0dafed1132198c81807927ac413 ;; \
        *)     printf 'ERROR: unsupported arch: %s\n' "$TARGETARCH" >&2; exit 1 ;; \
    esac && \
    curl -fsSLO "https://github.com/aptible/supercronic/releases/download/${SUPERCRONIC_VERSION}/supercronic-linux-${TARGETARCH}" && \
    echo "${SUPERCRONIC_SHA1}  supercronic-linux-${TARGETARCH}" | sha1sum -c - && \
    chmod +x "supercronic-linux-${TARGETARCH}" && \
    mv "supercronic-linux-${TARGETARCH}" /usr/local/bin/supercronic && \
    case "$TARGETARCH" in \
        amd64) GOSU_SHA256=52c8749d0142edd234e9d6bd5237dff2d81e71f43537e2f4f66f75dd4b243dd0 ;; \
        arm64) GOSU_SHA256=3a8ef022d82c0bc4a98bcb144e77da714c25fcfa64dccc57f6aba7ae47ff1a44 ;; \
        *)     printf 'ERROR: unsupported arch: %s\n' "$TARGETARCH" >&2; exit 1 ;; \
    esac && \
    curl -fsSLO "https://github.com/tianon/gosu/releases/download/${GOSU_VERSION}/gosu-${TARGETARCH}" && \
    echo "${GOSU_SHA256}  gosu-${TARGETARCH}" | sha256sum -c - && \
    chmod +x "gosu-${TARGETARCH}" && \
    mv "gosu-${TARGETARCH}" /usr/local/bin/gosu
# Ubuntu already ships a dedicated, unprivileged "backup" system account
# (uid/gid 34, /usr/sbin/nologin) -- reused as-is, no useradd needed.

# mongodump/mongorestore only -- not the rest of the mongo image's tools
# (mongosh alone is ~190MB, not needed for a headless dump/restore).
COPY --from=mongotools /usr/bin/mongodump /usr/bin/mongorestore /usr/local/bin/

COPY entrypoint.sh /usr/local/bin/entrypoint.sh
COPY backup.sh /usr/local/bin/backup.sh
COPY retention.sh /usr/local/bin/retention.sh
COPY drill.sh /usr/local/bin/drill.sh
COPY qd-snapshot.sh /usr/local/bin/qd-snapshot.sh
COPY tar-backup.sh /usr/local/bin/tar-backup.sh
COPY pg-backup.sh /usr/local/bin/pg-backup.sh
COPY mariadb-backup.sh /usr/local/bin/mariadb-backup.sh
COPY surreal-backup.sh /usr/local/bin/surreal-backup.sh
COPY mongo-backup.sh /usr/local/bin/mongo-backup.sh
RUN chmod +x /usr/local/bin/entrypoint.sh \
              /usr/local/bin/backup.sh \
              /usr/local/bin/retention.sh \
              /usr/local/bin/drill.sh \
              /usr/local/bin/qd-snapshot.sh \
              /usr/local/bin/tar-backup.sh \
              /usr/local/bin/pg-backup.sh \
              /usr/local/bin/mariadb-backup.sh \
              /usr/local/bin/surreal-backup.sh \
              /usr/local/bin/mongo-backup.sh

ENTRYPOINT ["/usr/local/bin/entrypoint.sh"]