First version of the uffd collection

TODO: The build role should probably be replaced by some intragration as a .build quadlet.

Signed-off-by: Nis Wechselberg <enbewe@enbewe.de>

roles/build/templates/Containerfile

@@ -0,0 +1,39 @@
+FROM docker.io/library/debian:{{ build_uffd_debian_version }}-slim
+# Disable interactivity for debconf
+ENV DEBIAN_FRONTEND=noninteractive
+# Configure uwsgi parameters for running uffd as an app in there
+ENV UWSGI_DEB_CONFNAMESPACE="app"
+ENV UWSGI_DEB_CONFNAME="uffd"
+# Prepare the package sources and install needed software
+RUN apt-get -qq update && \
+    apt-get -qq dist-upgrade && \
+    apt-get -qq install ca-certificates
+# Place the pacakge sources data in the image to download uffd
+COPY cccv-archive-key.asc /etc/apt/trusted.gpg.d/
+COPY cccv-archive.list /etc/apt/sources.list.d/
+COPY {{ build_uffd_package_name }} /tmp/
+
+# Install uffd from (new) package sources
+RUN apt-get -qq update && \
+    apt-get -qq install --no-install-recommends /tmp/{{ build_uffd_package_name }} && \
+# Create a "new" config from the inital config without the preset secret key
+    cat /etc/uffd/uffd.cfg | grep -v "SECRET_KEY=" > /etc/uffd/uffd.cfg.tmp && \
+    mv /etc/uffd/uffd.cfg.tmp /etc/uffd/uffd.cfg && \
+# Create the needed paths for the app
+    mkdir --parents /var/www/uffd && \
+    mkdir -p /run/uwsgi/app/uffd && \
+    chown root:uffd /var/www/uffd
+
+COPY entrypoint.sh /entrypoint.sh
+
+USER uffd
+USER root
+
+# Uffd application is exposed on port 3031
+EXPOSE 3031/tcp
+# Statistics are exposed on port 9191
+EXPOSE 9191/tcp
+
+CMD bash /entrypoint.sh
+
+LABEL project="https://git.cccv.de/uffd/uffd"