supervisord and docker changes for OpenShift compatibility

Author: sseide

deploy/docker/Dockerfile

@@ -169,7 +169,10 @@ EXPOSE 3443
 FROM lowcoder-ce-frontend
 LABEL maintainer="lowcoder"
 
-RUN apt update && DEBIAN_FRONTEND=noninteractive apt-get install --no-install-recommends -y curl ca-certificates gnupg
+RUN apt-get update && apt-get upgrade -y \
+  && DEBIAN_FRONTEND=noninteractive apt-get install --no-install-recommends -y curl ca-certificates gnupg \
+  && rm -rf /var/cache/apt/lists /var/lib/apt/lists/* /var/log/dpkg.log \
+  && apt-get clean
 
 # Add nodejs repo and keys
 RUN mkdir -p /etc/apt/keyrings \
@@ -197,7 +200,7 @@ RUN apt-get update && DEBIAN_FRONTEND=noninteractive apt-get install --no-instal
       nodejs \
       openjdk-17-jdk-headless \
   && npm install -g yarn \
-  && rm -rf /var/cache/apt/lists \
+  && rm -rf /var/cache/apt/lists /var/lib/apt/lists/* /var/log/dpkg.log \
   && mkdir -p /lowcoder/assets \
   && apt-get clean \
   && rm -rf /tmp/*
@@ -214,6 +217,17 @@ COPY --chown=lowcoder:lowcoder deploy/docker/all-in-one/etc /lowcoder/etc
 # Add startup script
 COPY --chown=lowcoder:lowcoder deploy/docker/all-in-one/entrypoint.sh /lowcoder/entrypoint.sh
 
+# Fixes for OpenShift compatibility (after all files are copied)
+RUN echo  \
+  && adduser lowcoder root \
+  && mkdir -p /lowcoder-stacks \
+  && for i in /lowcoder-stacks /lowcoder/assets /lowcoder/api-service/logs /lowcoder/etc/supervisord; do \
+       chmod -R g+rw "$i"; \
+       chown -R lowcoder:root "$i"; \
+     done \
+  && chown -R lowcoder:root /var/log \
+  && chmod -R g+rw /run /etc/nginx /var/cache/nginx /var/log
+
 EXPOSE 27017
 EXPOSE 3000
 EXPOSE 3443

deploy/docker/all-in-one/etc/supervisord.conf

@@ -1,18 +1,19 @@
 ; supervisor config file
 
 [unix_http_server]
-file=/var/run/supervisor.sock   ; (the path to the socket file)
-chmod=0700                       ; sockef file mode (default 0700)
+file = /var/run/supervisor.sock   ; (the path to the socket file)
+chmod = 0700                       ; socket file mode (default 0700)
 
 [inet_http_server]         ; inet (TCP) server disabled by default
 port=*:9001        ; (ip_address:port specifier, *:port for all iface)
 ;username=user              ; (default is no username (open server))
 ;password=123               ; (default is no password (open server))
 
 [supervisord]
-logfile=/var/log/supervisor/supervisord.log ; (main log file;default $CWD/supervisord.log)
-pidfile=/var/run/supervisord.pid ; (supervisord pidfile;default supervisord.pid)
-childlogdir=/var/log/supervisor            ; ('AUTO' child log dir, default $TEMP)
+logfile = /dev/null ; (no logfile, stdout only; default $CWD/supervisord.log)
+pidfile = /var/run/supervisord.pid ; (supervisord pidfile;default supervisord.pid)
+childlogdir = /var/log/supervisor            ; ('AUTO' child log dir, default $TEMP)
+logfile_maxbytes = 0
 stdout_logfile_maxbytes = 0
 stderr_logfile_maxbytes = 0
 
@@ -23,7 +24,7 @@ stderr_logfile_maxbytes = 0
 supervisor.rpcinterface_factory = supervisor.rpcinterface:make_main_rpcinterface
 
 [supervisorctl]
-serverurl=unix:///var/run/supervisor.sock ; use a unix:// URL  for a unix socket
+serverurl = unix:///var/run/supervisor.sock ; use a unix:// URL  for a unix socket
 
 ; The [include] section can just contain the "files" setting.  This
 ; setting can list multiple files (separated by whitespace or
@@ -37,8 +38,8 @@ files = /lowcoder/etc/supervisord/conf-enabled/*.conf
 # ; This event listener is used to capture processes log
 # ; and forward to container log using supervisor_stdout
 # ; Ref: https://github.com/coderanger/supervisor-stdout
-# [eventlistener:stdout] 
-# command = supervisor_stdout 
-# buffer_size = 100 
-# events = PROCESS_LOG 
+# [eventlistener:stdout]
+# command = supervisor_stdout
+# buffer_size = 100
+# events = PROCESS_LOG
 # result_handler = supervisor_stdout:event_handler