Switch to chainguard docker image

Author: fileformat

Dockerfile

@@ -1,29 +1,14 @@
-# https://github.com/s6n-labs/distroless-php/blob/main/Dockerfile
-
-ARG TAG=8.4
-FROM php:${TAG} AS php
-
-RUN mkdir -p /tmp/lib && cd /lib && \
-    ldd /usr/local/bin/php | grep '=> /lib/' | cut -d' ' -f3 | sed 's#/lib/##g' | xargs -I % cp --parents "%" /tmp/lib/
-
-RUN mkdir -p /tmp/usr/lib && cd /usr/lib && \
-    ldd /usr/local/bin/php | grep '=> /usr/lib/' | cut -d' ' -f3 | sed 's#/usr/lib/##g' | xargs -I % cp --parents "%" /tmp/usr/lib/
-
-FROM gcr.io/distroless/cc-debian12 AS runner
+FROM cgr.dev/chainguard/php:latest
 
 ARG COMMIT=(local)
 ENV COMMIT=$COMMIT
 ARG LASTMOD=(local)
 ENV LASTMOD=$LASTMOD
 
-ENV PORT=5000
-
-COPY --from=php /bin/sh /bin/
-COPY --from=php /tmp/lib/ /lib/
-COPY --from=php /tmp/usr/lib/ /usr/lib/
-COPY --from=php /usr/local/lib/libphp.* /usr/local/lib/
-COPY --from=php /usr/local/bin/docker-php-* /usr/local/bin/php /usr/local/bin/
-COPY www /var/www
-
-#CMD [ "/usr/local/bin/php", "-S", "0.0.0.0:$PORT", "-t", "/var/www" ]
-CMD exec /usr/local/bin/php -S 0.0.0.0:$PORT -t /var/www
+USER php
+COPY www /app/www
+COPY bin/start.php /app/bin/start.php
+ENV PORT=6000
+ENV LISTEN=0.0.0.0:$PORT
+EXPOSE 6000
+ENTRYPOINT [ "php", "/app/bin/start.php"]

bin/start.php

@@ -0,0 +1,40 @@
+#!/usr/bin/env php
+<?php
+#
+# run php as a server.  Needed since we cannot specify the -S parameter with ENV inside the Dockerfile
+#
+	$host = '0.0.0.0';
+	$port = getenv('PORT') ?: '5000';
+	$docroot = __DIR__ . '/../www';
+	$command = ['php', '-S', "$host:$port", '-t', $docroot];
+
+	$mac_php = sprintf("/usr/local/Cellar/php/%s/bin/php", phpversion());
+
+	if (is_executable("/usr/bin/php"))
+	{
+		$command[0] = "/usr/bin/php";
+	}
+	else if (is_executable("/usr/local/bin/php"))
+	{
+		$command[0] = "/usr/local/bin/php";
+	}
+	else if (is_executable($mac_php))
+	{
+		$command[0] = $mac_php;
+	}
+
+	printf("PHP version %s\n", phpversion());
+
+	$descriptorspec = [
+			0=>STDIN,
+			1=>STDOUT,
+			2=>STDERR
+	];
+	$process = proc_open($command, $descriptorspec, $pipes);
+	printf("INFO: PHP server started on http://%s:%s (%s)\n", $host, $port, $process);
+
+	//this will wait for the subprocess to finish
+	proc_close($process);
+	printf("INFO: PHP server exiting\n");
+
+?>