Repository files navigation

Provides a pre-wired, configurable PHP + Nginx setup across multiple runtime versions.

Integrated with Behance’sdocker-nginx

Available onDocker Hub.

• docker run behance/docker-php:7.4-alpine "php" "-v"
• docker run behance/docker-php:7.4" "php" "-v"
• docker run behance/docker-php:8.0" "php" "-v"

Adding code to runtime, seehere.PHP tuning and configuration, seehere.Nginx tuning and configuration, seehere.Adding startup logic,basic oradvanced.

• PHP_MAJOR.PHP_MINOR, required. Engine versions of PHP. ex.docker-php:8.0
• (Major.Minor.Patch), optional. Semantically versioned container provisioning code. ex.docker-php:7.4-13.4.0.
• (-variant), optional. Alpine variants are slim versions of the container. ex.docker-php:7.4-alpine.

• Nginx HTTP server
• PHP / PHP-FPM: primary runtime
• S6: PID 1 zombie reaping, startup coordination, shutdown signal transferal. Nginx and PHP are preconfigured to shutdown as gracefully as possible.
• Goss: for serverspec-like testing. Rungoss -g /tests/php-fpm/{PHP_MAJOR.PHP_MINOR}(-variant).goss.yaml to validate any configuration updates
• Ubuntu (default) or Alpine OSbase
• Common PHP extensions:

For extension customization, including enabling and disabling defaults, seehere

^ - not available on-alpine variant~ - disabled by default

• apcu
• bcmath
• bz2
• calendar
• ctype
• curl
• date
• dom
• exif
• cgi-fcgi
• gd
• iconv
• igbinary
• intl
• json
• mbstring
• memcache ^
• memcached
• msgpack
• mysqli
• mysqlnd
• newrelic ~ (activates with env variables)
• opcache
• openssl
• pcntl
• pdo
• pdo_mysql
• pdo_pgsql ~
• pgsql ~
• phar
• posix
• redis ~
• shmop
• SimpleXML
• sockets
• sysvmsg
• sysvsem
• sysvshm
• tokenizer
• xdebug ~
• xml
• xmlreader
• xmlwriter
• yaml ~
• zip
• zlib

SampleDockerfile

FROM behance/docker-php:8.0# (optional, recommended) Verify everything is in order from the parentRUN goss -g /tests/php-fpm/8.0.goss.yaml validate && /aufs_hack.sh# Layer local code into runtimeCOPY ./ /app/# Done!

• Local code should be copied into/app, for example:COPY ./ /app/

• Nginx is pre-configured to use a front controller PHP file (entrypoint)a front controller calledindex.php within apublic folder./app/public/index.php

• Dev Mode (no ENV variables): PHP's opcache is enabled, and is set to check files for updates. Code can be developed locally in Docker by mounting into the/app folder.For example, thedocker-compose.yml syntax:

volumes:   - ./:/app

• Production Mode [recommended]: using ENV variable,CFG_APP_DEBUG=0. Container becomes immutable, PHP's opcache is configured to not check files for updates.
• NOTE: Nginx is exposed and bound to an unprivileged port,8080.

• NewRelic APM: automatically enabled by adding providing environment variablesREPLACE_NEWRELIC_APP andREPLACE_NEWRELIC_LICENSE
• NewRelic Distributed Tracing: Before enabling distributed tracing be sure to read thetransition guide. To enable this setNEWRELIC_TRACING_ENABLED totrue.
• NewRelic Loglevel: you can override the NewRelicnewrelic.loglevel andnewrelic.daemon.loglevel config defaults (currentlywarning) to something more verbose for debugging purposes by setting environment variableNEWRELIC_LOGLEVEL to an available option (options includeinfo,debug,verbosedebug)
• NewRelic Special: NewRelic has anewrelic.special config for special debug (sometimes requested by the NewRelic support team), you can turn that option on as directed by NewRelic support by setting enviroment variableNEWRELIC_SPECIAL to whatever value requested.
• PHP-FPM Status: availableonly inside container at/__status. Application healthcheck can pull PHP-FPM statistics fromhttp://127.0.0.1/__status?json. To open to more clients than local, add moreallow statements in__status location block in$CONF_NGINX_SITE(/etc/nginx/sites-available/default)
• Nginx Status: availableonly inside container at/__nginx_status. Application healthcheck can pull nginx statistics fromhttp://127.0.0.1/__nginx_status. To open to more clients than local, add moreallow statements in__nginx_status location block in $CONF_NGINX_SITE (/etc/nginx/sites-available/default)

A variety of common extensions are included, and can be enabled or disabled as needed.

On Ubuntu (default):

# phpenmod XXX

On Alpine variant:

# sed -i "s/^;ext/ext/" $CONF_PHPMODS/XXX.ini

On Ubuntu (default):

# phpdismod XXX

On Alpine variant:

# sed -i "s/ext/;ext/" $CONF_PHPMODS/XXX.ini

Environment variables can be used to tune various PHP-FPM and Nginx parameters without baking them in.

See parent(s) for additional configuration options:

• docker-nginx
• docker-base

• Requiresbash,docker, anddgoss (link)

To test locally, runPHP_VARIANT=8.0 ./test.sh {docker engine IP}.

This will:

• Build a single containerPHP_VARIANT (ex. 7.4-alpine, 7.4, 8.0)
• LeveragesGoss to confirm package, config, and extension installation
• Validates a large file upload
• Boots container with specific NewRelic configuration overrides

Github actions provide the machinery for testing (ci.yaml) and producing tags distributed through Docker Hub (publish.yaml). Testing will confirm thatnginx is able to serve content in various configurations, but also that it can terminate TLS with self-signed certificates. Once a tested and approved PR is merged, simply cutting a new semantically-versioned tag will generate the a matrix of tagged builds. See Container tag scheme above.

Platform support is available for multiple architectures:

• linux/amd64: Ubuntu and Alpine variants
• linux/arm64: Ubuntu variants-only

To add new variant based on a new Dockerfile, add an entry tomatrix.props within./github/workflows YAML files.

docker-nginx uses Github Actions for CI/CD. Simulated workflows can be achieved locally withact. All commands must be executes from repository root.

Pre-reqs: tested on Mac

1. Docker Desktop
2. act

Pull request simulation: executes successfully, but only on ARM devices (ex. Apple M1). ARM emulation through QEMU on X64 machines does not implement the full kernel functionality required by nginx at this time.

• act pull_request

Publish simulation: executes, but fails (intentionally) without credentials

• act