# centos:8 -- final archived CentOS 8 base image (8.4.2105, build-date 20210915).
# Multi-arch manifest list digest, resolved 2026-08-03.
FROM centos:8@sha256:a27fd8080b517143cbbbab9dfb7c8571c40d67d534bbdee55bd6c473f432b177

ARG COUNTLY_PLUGINS=mobile,web,desktop,plugins,density,locale,browser,sources,views,logger,systemlogs,populator,reports,crashes,push,star-rating,slipping-away-users,compare,server-stats,dbviewer,times-of-day,compliance-hub,alerts,onboarding,consolidate,remote-config,hooks,dashboards,sdk,data-manager,guides
# Countly Enterprise:
#ARG COUNTLY_PLUGINS=mobile,web,desktop,plugins,density,locale,browser,sources,views,license,drill,funnels,retention_segments,flows,cohorts,surveys,remote-config,ab-testing,formulas,activity-map,concurrent_users,revenue,logger,systemlogs,populator,reports,crashes,push,geo,block,users,star-rating,slipping-away-users,compare,server-stats,dbviewer,crash_symbolication,crashes-jira,groups,white-labeling,alerts,times-of-day,compliance-hub,onboarding,active_users,performance-monitoring,config-transfer,consolidate,data-manager,hooks,dashboards,heatmaps,sdk,guides,journey_engine,content

EXPOSE 6001
HEALTHCHECK --start-period=400s CMD bash -c '\
  if [ "$COUNTLY_CONFIG_FRONTEND_WEB_SSL_ENABLED" = "true" ] || [ "$COUNTLY_CONFIG_FRONTEND_WEB_SSL_ENABLED" = "\"true\"" ]; then \
    curl -k --fail https://localhost:6001/ping || exit 1; \
  else \
    curl --fail http://localhost:6001/ping || exit 1; \
  fi'

USER root

# Core dependencies
## Tini
ENV COUNTLY_CONTAINER="frontend" \
	COUNTLY_DEFAULT_PLUGINS="${COUNTLY_PLUGINS}" \
	COUNTLY_CONFIG_FRONTEND_WEB_HOST="0.0.0.0" \
	NODE_OPTIONS="--max-old-space-size=2048 --no-node-snapshot" \
	TINI_VERSION="0.18.0" \
	CMDSTAN="/opt/cmdstan/cmdstan-2.36.0" \
	PATH="/opt/rh/rh-nodejs10/root/usr/bin:${PATH}"

WORKDIR /opt/countly
COPY . .

# fix 'appstream' repo for CentOS 8
RUN cd /etc/yum.repos.d/
RUN sed -i 's/mirrorlist/#mirrorlist/g' /etc/yum.repos.d/CentOS-*
RUN sed -i 's|#baseurl=http://mirror.centos.org|baseurl=http://vault.centos.org|g' /etc/yum.repos.d/CentOS-*
RUN dnf update -y libmodulemd

RUN yum update -y

RUN curl -s -L -o /tmp/tini.rpm "https://github.com/krallin/tini/releases/download/v${TINI_VERSION}/tini_${TINI_VERSION}.rpm" && \
        rpm -i /tmp/tini.rpm && \
        \
        curl -sL https://rpm.nodesource.com/setup_22.x | bash - && \
        yum install -y nodejs python3.8 python2 python38-libs python38-devel python38-pip nss libdrm libgbm cyrus-sasl* && \
        ln -s /usr/bin/node /usr/bin/nodejs && \
        unlink /usr/bin/python3 && \
        ln -s /usr/bin/python3.8 /usr/bin/python3 && \
        ln -s /usr/bin/python2.7 /usr/bin/python && \
        \
        yum install -y python3-policycoreutils && \
        yum group install -y "Development Tools" && \
	yum install -y gcc-toolset-11 && \
        yum install -y epel-release && \
        yum install -y pango.x86_64 libXcomposite.x86_64 libXcursor.x86_64 libXdamage.x86_64 libXext.x86_64 libXi.x86_64 libXtst.x86_64 cups-libs.x86_64 libXScrnSaver.x86_64 libXrandr.x86_64 GConf2.x86_64 alsa-lib.x86_64 atk.x86_64 gtk3.x86_64 xorg-x11-fonts-100dpi xorg-x11-fonts-75dpi xorg-x11-utils xorg-x11-fonts-cyrillic xorg-x11-fonts-Type1 xorg-x11-fonts-misc && \
        curl -L -O -J "https://box.tools.count.ly/public.php/dav/files/Wj8opzNdyE5DyDX/?accept=zip" && \
        yum install -y raven-release.el8.noarch.rpm && \
        yum install -y ipa-gothic-fonts && \
        yum install -y wget openssl-devel make git libsqlite* unzip bzip2 && \
        # modify standard distribution
        # isolated-vm needs -std=c++20 and node-gyp needs python>=3.8; stock CentOS 8 has neither
        . /opt/rh/gcc-toolset-11/enable && \
        export npm_config_python=/usr/bin/python3.8 && \
        # frontend never runs models; the marker makes ab-testing's setup.sh a no-op
        { [ ! -d plugins/ab-testing/api/bayesian ] || touch plugins/ab-testing/api/bayesian/.ab_disabled; } && \
        ./bin/docker/modify.sh && \
        \
	# preinstall
	cp -n ./frontend/express/public/javascripts/countly/countly.config.sample.js ./frontend/express/public/javascripts/countly/countly.config.js && \
	cp -n ./frontend/express/config.sample.js ./frontend/express/config.js && \
	cp -n ./api/config.sample.js ./api/config.js && \
	HOME=/tmp npm install -g npm@10 && \
	HOME=/tmp npm install --unsafe-perm=true --allow-root && \
	HOME=/tmp npm install argon2 --build-from-source --unsafe-perm=true --allow-root && \
	./bin/docker/preinstall.sh && \
	bash /opt/countly/bin/scripts/detect.init.sh && \
	countly update sdk-web && \
	\
	# cleanup & chown
	npm remove -y --no-save mocha should supertest puppeteer && \
	rm -rf /opt/app-root/src/.npm && \
	yum remove -y git wget unzip make && \
	yum --setopt=groupremove_leaf_only=1 groupremove -y 'Development Tools' && \
	yum clean all && \
	rm -rf test /tmp/* /tmp/.??* /var/tmp/* /var/tmp/.??* /var/log/* && \
	chown -R 1001:0 /opt/countly && \
	chmod -R g=u /opt/countly && \
	\
	bash ./bin/scripts/detect.init.sh && \
	./bin/commands/countly.sh update sdk-web


USER 1001:0

ENTRYPOINT ["/usr/bin/tini", "-v", "--"]

CMD ["/opt/countly/bin/docker/cmd.sh"]