Dockerfile

ARG RHEL_VER=8
ARG IMAGE_FROM=rockylinux/rockylinux:${RHEL_VER}
FROM ${IMAGE_FROM}

MAINTAINER Ugo Viti <ugo.viti@initzero.it>

### default app args used during build step
#ARG APP_VER_MAJOR=
#ARG APP_VER_MINOR=
#ARG APP_VER_PATCH=

## full app version
#ARG APP_VER=${APP_VER_MAJOR}.${APP_VER_MINOR}.${APP_VER_PATCH}
ARG APP_VER=dev
ENV APP_VER=${APP_VER}
ARG RHEL_VER=8
# PHP versions: FreePBX15 <= 7.2, FreePBX16 >= 7.4
ARG PHP_VER=7.4

### components app versions
## https://downloads.asterisk.org/pub/telephony/asterisk/releases
ARG ASTERISK_VER=20.8.1

## https://github.com/FreePBX/core/tags (only major version)
ARG FREEPBX_VER=16

## https://www.fop2.com/download.php
ARG FOP2_VER=2.31.41

## http://sources.buildroot.net/spandsp
ARG SPANDSP_VER=3.0.0-6ec23e5a7e

## https://github.com/holme-r/iksemel/releases
ARG IKSEMEL_VER=1.5.1.3

## https://sourceforge.net/projects/xmlstar/files/xmlstarlet/
ARG XMLSTARLET_VER=1.6.1

## https://github.com/BelledonneCommunications/bcg729/tags
ARG BCG729_VER=1.1.1

## https://github.com/arkadijs/asterisk-g72x
ARG ASTERISK_G72X_VER=master

## https://github.com/shalzz/asterisk-chan-dongle
ARG ASTERISK_CHAN_DONGLE_VER=master

## https://github.com/ugoviti/izsynth
ARG IZSYNTH_VER=5.0

## https://www.zabbix.com/download_agents
ENV ZABBIX_VER=6.4

## https://github.com/ugoviti/zabbix-templates
ARG ZABBIX_TEMPLATE_VER=main

## https://github.com/irontec/sngrep/releases
ARG SNGREP_VER=1.8.1
ARG SNGREP_XTRA_BUILDCONFIG=""

### define variables for later container usage
ENV ASTERISK_VER=${ASTERISK_VER}
ENV FREEPBX_VER=${FREEPBX_VER}
ENV FOP2_VER=${FOP2_VER}

## app name
ENV APP_NAME              "izpbx-asterisk"
ENV APP_DESCRIPTION       "izPBX Cloud Native Telephony System"

## set default timezone
ENV TZ                    "UTC"

## app users
ENV APP_UID               1000
ENV APP_GID               1000
ENV APP_USR               "asterisk"
ENV APP_GRP               "asterisk"

## development debug mode (don't delete development and build dependencies on filesystem)
ARG APP_DEBUG=0

## install ad hoc additional packages as defined via --build-arg next to regular dependencies
ARG APP_INSTALL_EXTRA=""

### STEP 1: INSTALL BASE PACKAGES
RUN set -xe && \
  ## import system information vars
  . /etc/os-release && \
  \
  ## install packages
  APP_INSTALL_DEPS='\
    rsync \
    net-tools \
    procps-ng \
    iptables \
    libnetfilter_conntrack \
    libnfnetlink \
    conntrack-tools \
    libnetfilter_cthelper \
    libnetfilter_cttimeout \
    libnetfilter_queue \
    iftop \
    lsof \
    strace \
    tcpdump \
    supervisor \
    curl \
    opus \
    logrotate \
    fail2ban-server \
    fail2ban-mail \
    fail2ban-sendmail \
    libedit \
    unixODBC \
    sox \
    libxml2 \
    openssl \
    newt \
    sqlite \
    libuuid \
    jansson \
    binutils \
    libedit \
    libtool \
    ncurses \
    libtiff \
    libjpeg-turbo \
    audiofile \
    uuid \
    libtool-ltdl \
    libsndfile \
    wget \
    bzip2 \
    file \
    ilbc \
    mariadb-connector-odbc \
    mpg123 \
    nodejs \
    libtiff-tools \
    cronie \
    httpd \
    mod_ssl \
    php \
    php-mysqlnd \
    php-process \
    php-pear \
    php-mbstring \
    php-xml \
    php-json \
    php-gd \
    php-curl \
    php-ldap \
    mariadb \
    diffutils \
    unzip \
    zip \
    uriparser \
    jq \
    speex \
    speexdsp \
    portaudio \
    libsrtp \
    unbound-libs \
    freetds \
    freetds-libs \
    libevent \
    net-snmp-libs \
    codec2 \
    neon \
    libproxy \
    net-snmp-agent-libs \
    lm_sensors-libs \
    libical \
    libical-devel \
    icu \
    gcc-c++ \
    make \
    libnsl \
    which \
    fftw-libs \
    sudo \
    figlet \
    nc \
    dnsmasq \
    glibc-langpack-en \
    perl-DBI \
    perl-DBD-mysql \
    cyrus-sasl-plain \
    cyrus-sasl-md5 \
    libresample \
    chrony \
    postfix \
    phpMyAdmin \
    zabbix-agent2 \
    zabbix-sender \
    ffmpeg \
    libuv \
    patch \
    iproute \
    bc \
    chkconfig \
    libpcap \
    gmime \
    msmtp \
    mtr \
    vim-enhanced \
  ' && \
  #  lame \
  # NOTE: postfix > 3.4.x is required for docker logging to stdout
  if [[ ${RHEL_VER} -le 8 ]]; then \
  # <= el8 (deprecated in el9)
  APP_INSTALL_DEPS_EXTRA='\
    libmodman \
    pakchois \
    incron \
    python2 \
  ' \
  ;fi && \
  \
  ## manage dnf rhel minimal image variant
  if command -v microdnf 1>/dev/null; then export RHEL_MINIMAL="true" ;else export RHEL_MINIMAL="false" ;fi && \
  if [[ "$RHEL_MINIMAL" = "true" && ! -e "/usr/bin/dnf" ]]; then ln -s /usr/bin/microdnf /usr/bin/dnf ;fi && \
  \
  ## dnf extra options
  export DNF_OPTS+=" -y --nodocs" && \
  ## enable epel repository
  dnf install ${DNF_OPTS} epel-release && \
  \
  ## repo for phpMyAdmin
  rpm -Uvh https://rpms.remirepo.net/enterprise/remi-release-${RHEL_VER}.rpm && \
  ## repo for zabbix agent
  rpm -Uvh https://repo.zabbix.com/zabbix/${ZABBIX_VER}/rhel/${RHEL_VER}/x86_64/zabbix-release-${ZABBIX_VER}-1.el${RHEL_VER}.noarch.rpm && \
  ## repo for ffmpeg command
  rpm -Uhv https://download1.rpmfusion.org/free/el/rpmfusion-free-release-${RHEL_VER}.noarch.rpm && \
  rpm -Uhv https://download1.rpmfusion.org/nonfree/el/rpmfusion-nonfree-release-${RHEL_VER}.noarch.rpm && \
  \
  ## enable extra repository via dnf command line
  export DNF_OPTS+=" --enablerepo=epel" && \
  export DNF_OPTS+=" --enablerepo=remi" && \
  export DNF_OPTS+=" --enablerepo=rpmfusion-free-updates" && \
  export DNF_OPTS+=" --enablerepo=rpmfusion-nonfree-updates" && \
  if [[ ${RHEL_VER} -le 8 ]]; then export DNF_OPTS+=" --enablerepo=powertools" ;fi && \
  if [[ ${RHEL_VER} -ge 9 ]]; then export DNF_OPTS+=" --enablerepo=crb" ;fi && \
  #if [[ ${RHEL_VER} -le 8 ]]; then export DNF_OPTS+=" --enablerepo=okay" ;fi && \
  \
  # install other repositories
  if [[ ${RHEL_VER} -le 8 ]]; then \
    # <= el8
    ## repo for lame command
    #rpm -Uhv http://repo.okay.com.mx/centos/"${RHEL_VER}"/x86_64/release/okay-release-1-9.el"${RHEL_VER}".noarch.rpm && \
    rpm -Uhv http://repos.dslab.tuwien.ac.at/public/el${RHEL_VER}/x86_64/okay/lame-3.100-6.el${RHEL_VER}.x86_64.rpm http://repos.dslab.tuwien.ac.at/public/el${RHEL_VER}/x86_64/okay/lame-libs-3.100-6.el${RHEL_VER}.x86_64.rpm \
    ## fix wrong option
    #sed '/^failovermethod/d' -i /etc/yum.repos.d/okay.repo \
  ;fi && \
  \
  ## enable specific module php needed for FreePBX
  : "---------- Enable PHP ${PHP_VER} ----------" && \
  dnf module reset php -y && \
  dnf module enable php:${PHP_VER} -y && \
  \
  ## upgrade the system
  dnf upgrade ${DNF_OPTS} && \
  ## install mandatory packages
  dnf install ${DNF_OPTS} ${APP_INSTALL_DEPS} ${APP_INSTALL_DEPS_EXTRA} ${APP_INSTALL_EXTRA} \
  && \
  if [[ "$RHEL_MINIMAL" = "false" ]]; then \
    dnf mark install ${APP_INSTALL_DEPS} ${APP_INSTALL_DEPS_EXTRA} \
  ;fi && \
  \
  if [[ ${APP_DEBUG} -eq 0 ]]; then \
    : "---------- Clean temporary files ----------" && \
    dnf clean all && rm -rf /var/cache/{dnf,yum} \
  ;fi && \
  : "---------- ALL install finished ----------"

### STEP 2: PREPARE SYSTEM USERS
## prep users
RUN set -xe && \
  groupadd -g ${APP_GID} ${APP_GRP} && \
  useradd -u ${APP_UID} -c "${APP_DESCRIPTION} User" -g ${APP_GRP} -s /sbin/nologin ${APP_USR} && \
  ## add asterisk user to wheel and apache group
  usermod -aG wheel,apache ${APP_USR} && \
  ## fix phpMyAdmin apache group permissions
  chmod g+w /var/lib/phpMyAdmin/temp

### STEP 3: BUILD STAGE
## build asterisk
RUN set -xe && \
  . /etc/os-release && \
  \
  ## manage dnf rhel minimal image variant
  if command -v microdnf 1>/dev/null; then export RHEL_MINIMAL="true" ;else export RHEL_MINIMAL="false" ;fi && \
  if [[ "$RHEL_MINIMAL" = "true" && ! -e "/usr/bin/dnf" ]]; then ln -s /usr/bin/microdnf /usr/bin/dnf ;fi && \
  ## dnf extra options
  export DNF_OPTS+=" -y --nodocs" && \
  ## enable extra repository via dnf command line
  export DNF_OPTS+=" --enablerepo=epel" && \
  \
  #export DNF_OPTS+=" --enablerepo=remi" && \
  ##20221130 temporary disable nogpgcheck because remi is failing
  export DNF_OPTS+=" --enablerepo=remi --nogpgcheck" && \
  \
  export DNF_OPTS+=" --enablerepo=rpmfusion-free-updates" && \
  export DNF_OPTS+=" --enablerepo=rpmfusion-nonfree-updates" && \
  if [[ ${RHEL_VER} -le 8 ]]; then export DNF_OPTS+=" --enablerepo=powertools" ;fi && \
  #if [[ ${RHEL_VER} -le 8 ]]; then export DNF_OPTS+=" --enablerepo=okay" ;fi && \
  if [[ ${RHEL_VER} -ge 9 ]]; then export DNF_OPTS+=" --enablerepo=crb" ;fi && \
  \
  : "---------- START installing build packages ----------" && \
  ASTERISK_BUILD_DEPS=' \
    dmidecode \
    autoconf \
    automake \
    ncurses-devel \
    libxml2-devel \
    openssl-devel \
    newt-devel \
    kernel-devel \
    sqlite-devel \
    libuuid-devel \
    jansson-devel \
    binutils-devel \
    libedit-devel \
    svn \
    opus-devel \
    opusfile-devel \
    unixODBC-devel \
    ncurses-devel \
    libtiff-devel \
    libjpeg-turbo-devel \
    audiofile-devel \
    uuid-devel \
    libtool-ltdl-devel \
    libsamplerate-devel \
    libsndfile-devel \
    doxygen \
    bison \
    fftw-devel \
    flex \
    graphviz \
    libpq-devel \
    libxslt-devel \
    net-snmp-devel \
    libcurl-devel \
    openldap-devel \
    popt-devel \
    bluez-libs-devel \
    gsm-devel \
    libsrtp-devel \
    libvorbis-devel \
    lua-devel \
    neon-devel \
    speex-devel \
    speexdsp-devel \
    codec2-devel \
    freetds-devel \
    portaudio-devel \
    radcli-devel \
    uriparser-devel \
    uw-imap-devel \
    sox-devel \
    ilbc-devel \
    python3-devel \
    libtool \
    cmake \
    libresample-devel \
    mariadb-devel \
    libuv-devel \
    xmlto \
    docbook5-schemas \
    gmime-devel \
    jack-audio-connection-kit-devel \
    libcap-devel \
    libpcap-devel \
    rpm-devel \
    mariadb-connector-c-devel \
    libogg-devel \
    cmake-data \
  ' && \
  #xmlstarlet \
  \
  # deprecated in el9
  if [[ ${RHEL_VER} -le 8 ]]; then \
  ASTERISK_BUILD_DEPS_EXTRA='\
    python2-devel \
    libtermcap-devel \
    unbound-devel \
  ' \
  ;fi && \
  \
  dnf install ${DNF_OPTS} ${ASTERISK_BUILD_DEPS} ${ASTERISK_BUILD_DEPS_EXTRA} && \
  \
  : "---------- END installing build packages ----------" && \
  \
  : "---------- START build spandsp ----------" && \
  cd /usr/src && \
  mkdir spandsp && \
  curl -fSL --connect-timeout 30 http://sources.buildroot.net/spandsp/spandsp-${SPANDSP_VER}.tar.gz | tar xz --strip 1 -C spandsp && \
  cd spandsp && \
  ./configure --prefix=/usr && \
  make && \
  make install && \
  ldconfig && \
  : "---------- END build ----------" && \
  \
  # not working with RHEL 9
  if [[ ${RHEL_VER} -le 8 ]]; then \
  : "---------- START build iksemel ----------" && \
  cd /usr/src && \
  mkdir iksemel && \
  curl -fSL --connect-timeout 30 https://github.com/holme-r/iksemel/archive/${IKSEMEL_VER}.tar.gz | tar xz --strip 1 -C iksemel && \
  cd iksemel && \
  ./configure --prefix=/usr && \
  make && \
  make install && \
  ldconfig && \
  : "---------- END build ----------" \
  ;fi && \
  \
  : "---------- START build xmlstarlet ----------" && \
  cd /usr/src && \
  mkdir xmlstarlet && \
  curl -fSL --connect-timeout 30 https://sourceforge.net/projects/xmlstar/files/xmlstarlet/${XMLSTARLET_VER}/xmlstarlet-${XMLSTARLET_VER}.tar.gz | tar xz --strip 1 -C xmlstarlet && \
  cd xmlstarlet && \
  ./configure --prefix=/usr --with-libxml-prefix=/usr && \
  make && \
  make install && \
  ldconfig && \
  : "---------- END build ----------" && \
  \
  : "---------- START build ASTERISK ----------" && \
  ## @20210408 unreachable asterisk url
  ## http://downloads.asterisk.org/pub/telephony/asterisk/releases/asterisk-${ASTERISK_VER}.tar.gz
  ## @20210408 unreachable asterisk url - disable get_mp3_source.sh because need internet connection
  #./contrib/scripts/get_mp3_source.sh
  ## @20210414 reneabled get_mp3_source.sh
  #tar zxvf /usr/src/asterisk-mp3.tar.gz -C addons
  cd /usr/src && \
  mkdir asterisk && \
  curl -fSL --connect-timeout 30 https://github.com/asterisk/asterisk/archive/refs/tags/${ASTERISK_VER}.tar.gz | tar xz --strip 1 -C asterisk && \
  cd asterisk && \
  # step debug to avoid reinstall every time the development packages during debug sessions (COMMENT BEFORE FINAL BUILD TO AVOID ANOTHER CONTAINER LAYER)
  #RUN set -xe && \
  cd /usr/src/asterisk && \
  ./contrib/scripts/get_mp3_source.sh && \
  ./configure --prefix=/usr --libdir=/usr/lib64 --with-pjproject-bundled --with-jansson-bundled --with-resample --with-ssl=ssl --with-srtp && \
  \
  # finalize configuration
  make menuselect/menuselect menuselect-tree menuselect.makeopts && \
  # configure default options by category
  menuselect/menuselect \
    --enable-category MENUSELECT_ADDONS \
    --enable-category MENUSELECT_CHANNELS \
    --enable-category MENUSELECT_APPS \
    --enable-category MENUSELECT_CDR \
    --enable-category MENUSELECT_FORMATS \
    --enable-category MENUSELECT_FUNCS \
    --enable-category MENUSELECT_PBX \
    --enable-category MENUSELECT_RES \
    --enable-category MENUSELECT_CEL \
  && \
  # enable/disable default options by single resource
  if [[ ${ASTERISK_VER%%.*} -le 18 ]]; then \
  # asterisk <= 18
  menuselect/menuselect \
    --enable BETTER_BACKTRACES \
    --enable DONT_OPTIMIZE \
    --enable app_confbridge \
    --enable app_macro \
    --enable app_mysql \
    --enable app_page \
    --enable binaural_rendering_in_bridge_softmix \
    --enable chan_motif \
    --enable codec_silk \
    --enable codec_opus \
    --enable format_mp3 \
    --enable res_ari \
    --enable res_chan_stats \
    --enable res_calendar \
    --enable res_calendar_caldav \
    --enable res_calendar_icalendar \
    --enable res_endpoint_stats \
    --enable res_fax \
    --enable res_fax_spandsp \
    --enable res_pktccops \
    --enable res_snmp \
    --enable res_srtp \
    --enable res_xmpp \
    --disable-category MENUSELECT_CORE_SOUNDS \
    --disable-category MENUSELECT_EXTRA_SOUNDS \
    --disable-category MENUSELECT_MOH \
    --disable BUILD_NATIVE \
    --disable app_meetme \
    --disable app_ivrdemo \
    --disable app_saycounted \
    --disable app_skel \
    --disable app_voicemail_imap \
    --disable cdr_pgsql \
    --disable cel_pgsql \
    --disable cdr_sqlite3_custom \
    --disable cel_sqlite3_custom \
    --disable cdr_mysql \
    --disable cdr_tds \
    --disable cel_tds \
    --disable cdr_radius \
    --disable cel_radius \
    --disable cdr_syslog \
    --disable chan_alsa \
    --disable chan_console \
    --disable chan_oss \
    --disable chan_mgcp \
    --disable chan_skinny \
    --disable chan_ooh323 \
    --disable chan_mobile \
    --disable chan_unistim \
    --disable res_ari_mailboxes \
    --disable res_digium_phone \
    --disable res_calendar_ews \
    --disable res_calendar_exchange \
    --disable res_stasis_mailbox \
    --disable res_mwi_external \
    --disable res_mwi_external_ami \
    --disable res_config_pgsql \
    --disable res_config_mysql \
    --disable res_config_ldap \
    --disable res_config_sqlite3 \
    --disable res_geolocation \
    --disable res_phoneprov \
    --disable res_pjsip_phoneprov_provider \
    ; else \
  # asterisk >= 20
  menuselect/menuselect \
    --enable BETTER_BACKTRACES \
    --enable DONT_OPTIMIZE \
    --enable app_confbridge \
    --enable app_macro \
    --enable app_page \
    --enable app_statsd \
    --enable app_saycounted \
    --enable binaural_rendering_in_bridge_softmix \
    --enable chan_motif \
    --enable chan_sip \
    --enable chan_pjsip \
    --enable codec_silk \
    --enable codec_opus \
    --enable format_mp3 \
    --enable res_ari \
    --enable res_chan_stats \
    --enable res_calendar \
    --enable res_calendar_caldav \
    --enable res_calendar_icalendar \
    --enable res_endpoint_stats \
    --enable res_fax \
    --enable res_fax_spandsp \
    --enable res_pktccops \
    --enable res_snmp \
    --enable res_srtp \
    --enable res_xmpp \
    --enable res_config_sqlite3 \
    --enable res_phoneprov \
    --enable res_pjsip_phoneprov_provider \
    --disable-category MENUSELECT_CORE_SOUNDS \
    --disable-category MENUSELECT_EXTRA_SOUNDS \
    --disable-category MENUSELECT_MOH \
    --disable BUILD_NATIVE \
    --disable app_meetme \
    --disable app_ivrdemo \
    --disable app_jack \
    --disable app_saycounted \
    --disable app_skel \
    --disable app_voicemail_imap \
    --disable cdr_pgsql \
    --disable cel_pgsql \
    --disable cdr_sqlite3_custom \
    --disable cel_sqlite3_custom \
    --disable cdr_tds \
    --disable cel_tds \
    --disable cdr_radius \
    --disable cel_radius \
    --disable chan_alsa \
    --disable chan_console \
    --disable chan_mgcp \
    --disable chan_skinny \
    --disable chan_ooh323 \
    --disable chan_mobile \
    --disable chan_unistim \
    --disable res_digium_phone \
    --disable res_calendar_ews \
    --disable res_calendar_exchange \
    --disable res_mwi_external \
    --disable res_mwi_external_ami \
    --disable res_config_pgsql \
    --disable res_config_mysql \
    --disable res_config_ldap \
    --disable res_adsi \
    --disable res_monitor \
    --disable res_pktccops \
    --disable res_geolocation \
    ;fi && \
# not supported anymore in asterisk 20
#    --enable app_mysql \
#    --disable cdr_syslog \
#    --disable cdr_mysql \
#    --disable chan_oss \
  \
  # build and install Asterisk PBX
  make && \
  make install && \
  make install-headers && \
  make config && \
  make samples && \
  ldconfig && \
  : "---------- END build ----------" && \
  \
  : "---------- START build bcg729 ----------" && \
  cd /usr/src && \
  mkdir bcg729 && \
  curl -fSL --connect-timeout 30 https://github.com/BelledonneCommunications/bcg729/archive/${BCG729_VER}.tar.gz | tar xz --strip 1 -C bcg729 && \
  cd bcg729 && \
  cmake . -DCMAKE_INSTALL_PREFIX=/usr -DCMAKE_PREFIX_PATH=/usr && \
  make && \
  make install && \
  ldconfig && \
  : "---------- END build ----------" && \
  \
  # not working with RHEL 9
  if [[ ${RHEL_VER} -le 8 ]]; then \
  : "---------- START build asterisk-g72x ----------" && \
  cd /usr/src && \
  mkdir asterisk-g72x && \
  curl -fSL --connect-timeout 30 https://github.com/arkadijs/asterisk-g72x/archive/refs/heads/${ASTERISK_G72X_VER}.tar.gz | tar xz --strip 1 -C asterisk-g72x && \
  cd asterisk-g72x && \
  ./autogen.sh && \
  ./configure --prefix=/usr --with-bcg729 --enable-penryn && \
  make && \
  make install && \
  ldconfig \
  ;fi && \
  : "---------- END build ----------" && \
  \
  : "---------- START build asterisk-chan-dongle ----------" && \
  cd /usr/src && \
  mkdir asterisk-chan-dongle && \
  curl -fSL --connect-timeout 30 https://github.com/shalzz/asterisk-chan-dongle/archive/${ASTERISK_CHAN_DONGLE_VER}.tar.gz | tar xz --strip 1 -C asterisk-chan-dongle && \
  cd asterisk-chan-dongle && \
  ./bootstrap && \
  ./configure --with-astversion=${ASTERISK_VER} && \
  make && \
  make install && \
  ldconfig && \
  : "---------- END build ----------" && \
  \
  : "---------- START build sngrep ----------" && \
  cd /usr/src && \
  mkdir sngrep && \
  curl -fSL --connect-timeout 30 https://github.com/irontec/sngrep/archive/v${SNGREP_VER}.tar.gz | tar xz --strip 1 -C sngrep && \
  cd sngrep && \
  ./bootstrap.sh && \
  ./configure --prefix=/usr ${SNGREP_XTRA_BUILDCONFIG} && \
  make && \
  make install && \
  ldconfig && \
  : "---------- END build ----------" && \
  \
  if [[ ${APP_DEBUG} -eq 0 ]]; then \
  : "---------- Clean temporary files ----------" && \
  dnf remove ${DNF_OPTS} ${ASTERISK_BUILD_DEPS} ${ASTERISK_BUILD_DEPS_EXTRA} && \
  dnf clean all && \
  rm -rf /var/cache/yum /tmp /usr/src && \
  mkdir -p /usr/src /tmp && chmod 1777 /tmp \
  ;fi && \
  : "---------- ALL builds finished ----------" 

### NOTE: asterisk build
## to get the options passed above: menuselect/menuselect --list-options

## download freepbx and modules for offline install:
## php -r 'echo json_encode(simplexml_load_file("http://mirror1.freepbx.org/modules-15.0.xml"));' | jq
## curl -fSL --connect-timeout 30 http://mirror.freepbx.org/modules/packages/freepbx/freepbx-${FREEPBX_VER}.0-latest.tgz | tar xz --strip 1 -C freepbx
## curl -fSL https://github.com/FreePBX/framework/archive/release/${FREEPBX_VER_FRAMEWORK}.tar.gz| tar xfz - --strip 1 -C freepbx

## copy external sources files again
ADD build/ /usr/src/

## deploy freepbx
RUN set -xe && \
  \
  cd /usr/src && \
  mkdir freepbx && \
  # deprecated download (because this is not the latest version)
  #curl -fSL --connect-timeout 30 http://mirror.freepbx.org/modules/packages/freepbx/freepbx-${FREEPBX_VER}.0-latest.tgz | tar xz --strip 1 -C freepbx && \
  cd freepbx && \
  ## download modules-*.xml file if not exist in local build dir
  if [[ -e "/usr/src/modules-${FREEPBX_VER}.0.xml" ]]; then cp "/usr/src/modules-${FREEPBX_VER}.0.xml" "/usr/src/freepbx/modules-${FREEPBX_VER}.0.xml"; else \
    curl -fSL --connect-timeout 30 http://mirror1.freepbx.org/modules-${FREEPBX_VER}.0.xml -o modules-${FREEPBX_VER}.0.xml \
  ;fi && \
  \
  # download latest framework release
  MODULE="framework" && \
  MODULE_VER=$(php -r "echo json_encode(simplexml_load_file('modules-${FREEPBX_VER}.0.xml'));" | jq -r ".module[] | select(.rawname == \"${MODULE}\") | {version}".version) && \
  echo "---------- Predownloading freepbx framework latest release: ${MODULE_VER} ----------" && \
  curl -sfSL --connect-timeout 30 http://mirror.freepbx.org/modules/packages/$MODULE/$MODULE-${MODULE_VER}.tgz | tar xz --strip 1 -C ./ && \
  \
  # make the modules cache
  mkdir -p amp_conf/htdocs/admin/modules/_cache && \
  # predownload the following modules for faster install (need to skip 'framework' module)
  for MODULE in \
      core \
      featurecodeadmin \
      customappsreg \
      recordings \
      callrecording \
      conferences \
      dashboard \
      logfiles \
      cdr \
      sipsettings \
      voicemail \
      announcement \
      arimanager \
      asteriskinfo \
      backup \
      calendar \
      callforward \
      callwaiting \
      cel \
      certman \
      cidlookup \
      contactmanager \
      daynight \
      donotdisturb \
      fax \
      filestore \
      findmefollow \
      iaxsettings \
      ivr \
      manager \
      miscapps \
      miscdests \
      parking \
      phonebook \
      presencestate \
      printextensions \
      queues \
      soundlang \
      timeconditions \
      userman \
      ucp \
      bulkhandler \
      music \
      infoservices \
      weakpasswords \
      pm2 \
      ; do \
  # download loop
  MODULE_VER=$(php -r "echo json_encode(simplexml_load_file('modules-${FREEPBX_VER}.0.xml'));" | jq -r ".module[] | select(.rawname == \"${MODULE}\") | {version}".version) && \
  mkdir -p amp_conf/htdocs/admin/modules/$MODULE && \
  echo "---------- Predownloading module for offline install: $MODULE ${MODULE_VER} ----------" && \
  curl -sfSL --connect-timeout 30 http://mirror.freepbx.org/modules/packages/$MODULE/$MODULE-${MODULE_VER}.tgz | tar xz --strip 1 -C amp_conf/htdocs/admin/modules/$MODULE/ && \
  curl -sfSL --connect-timeout 30 http://mirror.freepbx.org/modules/packages/$MODULE/$MODULE-${MODULE_VER}.tgz.gpg -o amp_conf/htdocs/admin/modules/_cache/$MODULE-${MODULE_VER}.tgz.gpg \
  ; done
  
## install other components
RUN set -xe && \
  : "---------- START install izsynth by InitZero ----------" && \
  cd /usr/src && \
  mkdir -p izsynth && \
  curl -fSL --connect-timeout 30 https://github.com/ugoviti/izsynth/archive/${IZSYNTH_VER}.tar.gz | tar xz --strip 1 -C izsynth && \
  cp -a izsynth/izsynth /usr/local/bin/izsynth && \
  chmod 755 /usr/local/bin/izsynth && \
  : "---------- END install ----------" && \
  \
  : "---------- START install Asterisk Zabbix Agents by InitZero ----------" && \
  cd /etc/zabbix/zabbix_agent2.d && \
  curl -fSL --connect-timeout 30 https://github.com/ugoviti/zabbix-templates/archive/${ZABBIX_TEMPLATE_VER}.tar.gz | tar xz --strip 3 zabbix-templates-${ZABBIX_TEMPLATE_VER}/asterisk/zabbix_agent2.d && \
  : "---------- END install ----------" && \
  \
  : "---------- START install PHP ionCube Loader ----------" && \
  curl -fSL --connect-timeout 30 https://downloads.ioncube.com/loader_downloads/ioncube_loaders_lin_x86-64.tar.gz | tar xz --strip 1 -C /usr/lib64/php/modules/ ioncube/ioncube_loader_lin_"${PHP_VER}".so && \
  echo "zend_extension=ioncube_loader_lin_${PHP_VER}.so" >> /etc/php.ini && \
  : "---------- END install ----------"

### STEP 4: FINISH SYSTEM SETUP  
## set pemissions and sudo
RUN set -xe && \
  chown -R ${APP_USR}:${APP_GRP} \
    /etc/asterisk \
    /var/lib/asterisk \
    /var/spool/asterisk

### fixes and workarounds
## gpg management
RUN set -xe && \
  # fix gpg keys
  su - asterisk -s /bin/bash -c 'for key in /usr/src/freepbx/amp_conf/htdocs/admin/libraries/BMO/*.key ; do gpg --import "$key" ; done' && \
  su - asterisk -s /bin/bash -c 'gpg --refresh-keys --keyserver keys.openpgp.org'

## copy external sources files
ADD patch/ /usr/src/

## FIXME: fix for FreePBX 16 upgrade error (20211121: MUST be removed in a future release for better security)
## other problem when upgrading to FreePBX 16: https://issues.freepbx.org/browse/FREEPBX-22842
## references: https://wiki.freepbx.org/display/FOP/Non+Distro+-+Upgrade+to+FreePBX+16
RUN sed 's/@SECLEVEL=2/@SECLEVEL=1/' -i /etc/crypto-policies/back-ends/opensslcnf.config

### app ports
ENV APP_PORT_HTTP         80
ENV APP_PORT_HTTPS        443
ENV APP_PORT_IAX          4569
ENV APP_PORT_PJSIP        5060
ENV APP_PORT_SIP          5160
ENV APP_PORT_WEBRTC       8089
ENV APP_PORT_UCP_HTTP     8001
ENV APP_PORT_UCP_HTTPS    8003
ENV APP_PORT_AMI          8088
ENV APP_PORT_RTP_START    10000
ENV APP_PORT_RTP_END      10200
ENV APP_PORT_DHCP         67
ENV APP_PORT_TFTP         69
ENV APP_PORT_NTP          123
ENV APP_PORT_FOP2         4445
ENV APP_PORT_ZABBIX       10050

### exposed ports
EXPOSE \
  ${APP_PORT_HTTP}/tcp \
  ${APP_PORT_HTTPS}/tcp \
  ${APP_PORT_IAX}/tcp \
  ${APP_PORT_IAX}/udp \
  ${APP_PORT_PJSIP}/tcp \
  ${APP_PORT_PJSIP}/udp \
  ${APP_PORT_SIP}/tcp \
  ${APP_PORT_SIP}/udp \
  ${APP_PORT_WEBRTC}/tcp \
  ${APP_PORT_UCP_HTTP}/tcp \
  ${APP_PORT_UCP_HTTPS}/tcp \
  ${APP_PORT_AMI}/tcp \
  ${APP_PORT_RTP_START}-${APP_PORT_RTP_END}/tcp \
  ${APP_PORT_RTP_START}-${APP_PORT_RTP_END}/udp \
  ${APP_PORT_DHCP}/udp \
  ${APP_PORT_TFTP}/tcp \
  ${APP_PORT_TFTP}/udp \
  ${APP_PORT_NTP}/udp \
  ${APP_PORT_FOP2}/tcp \
  ${APP_PORT_ZABBIX}/tcp

### define volumes
#VOLUME [ "/var/spool/cron", "/var/www", "/etc/asterisk", "/var/lib/asterisk/sounds/custom" ]

## CI args
ARG APP_VER_BUILD
ARG APP_BUILD_COMMIT
ARG APP_BUILD_DATE

## CI envs for later usage
ENV APP_FQDN=""
ENV APP_VER_BUILD="${APP_VER_BUILD}"
ENV APP_BUILD_COMMIT="${APP_BUILD_COMMIT}"
ENV APP_BUILD_DATE="${APP_BUILD_DATE}"

## add files to container
ADD rootfs Dockerfile README.md /

## start the container process
ENTRYPOINT ["/entrypoint.sh"]
CMD ["supervisord", "-c", "/etc/supervisord.conf"]