# Build configuration
ARG PHP_IMAGE_URL
ARG COMPOSER_IMAGE_URL
ARG COMPOSER_IMAGE_PLATFORM=linux/amd64

# ###########################################################################
# Based on https://github.com/wikimedia/mediawiki-docker/blob/1161796f04d6a6bcbec9fb4c67a8ce7248392403/1.41/apache/Dockerfile
# hadolint ignore=DL3006
FROM ${PHP_IMAGE_URL} AS mediawiki

SHELL ["/bin/bash", "-exu", "-c"]

# System dependencies
RUN apt-get update; \
    apt-get install -y --no-install-recommends \
        git \
        gettext-base \
        librsvg2-bin \
        imagemagick \
        # Required by SyntaxHighlighting MediaWiki Extension
        python3 \
        # Required by Scribunto MediaWiki Extension
        lua5.1 \
        # Required by PdfHandler MediaWiki Extension
        ghostscript poppler-utils \
        # Required by PagedTiffHandler MediaWiki Extension
    	exiv2 libtiff-tools \
        # Required by TimedMediaHandler MediaWiki Extension
        ffmpeg \
        # Required by VipsScaler MediaWiki Extension
    	libvips-tools \
        ; \
    rm -rf /var/lib/apt/lists/*

# Install the PHP extensions we need
# hadolint ignore=DL4006
RUN savedAptMark="$(apt-mark showmanual)"; \
    \
    apt-get update; \
    apt-get install -y --no-install-recommends \
        libicu-dev \
        libonig-dev \
        libbz2-dev=1.* \
        ; \
    \
    docker-php-ext-install -j "$(nproc)" \
        bz2 \
        calendar \
        intl \
        mbstring \
        mysqli \
        opcache \
        ; \
    \
    pecl install APCu-5.1.21; \
        docker-php-ext-enable \
        apcu \
        ; \
    rm -r /tmp/pear; \
    \
    # reset apt-mark's "manual" list so that "purge --auto-remove" will remove all build dependencies
    apt-mark auto '.*' > /dev/null; \
    apt-mark manual $savedAptMark; \
    ldd "$(php -r 'echo ini_get("extension_dir");')"/*.so \
        | awk '/=>/ { print $3 }' \
        | sort -u \
        | xargs -r dpkg-query -S \
        | cut -d: -f1 \
        | sort -u \
        | xargs -rt apt-mark manual; \
    \
    apt-get purge -y --auto-remove -o APT::AutoRemove::RecommendsImportant=false; \
    rm -rf /var/lib/apt/lists/*

# MediaWiki setup
WORKDIR /var/www/html
ARG MEDIAWIKI_REPO
ARG MEDIAWIKI_COMMIT
# Pin the MediaWiki source commit. GitHub archives omit
# MediaWiki's bundled extensions, skins, and vendor submodules.
RUN set -eux; \
    git config --global --add safe.directory /var/www/html; \
    git config --global url."https://github.com/wikimedia/mediawiki-extensions-".insteadOf "https://gerrit.wikimedia.org/r/mediawiki/extensions/"; \
    git config --global url."https://github.com/wikimedia/mediawiki-skins-".insteadOf "https://gerrit.wikimedia.org/r/mediawiki/skins/"; \
    git config --global url."https://github.com/wikimedia/mediawiki-vendor".insteadOf "https://gerrit.wikimedia.org/r/mediawiki/vendor"; \
    git config --global url."https://github.com/wikimedia/VisualEditor.git".insteadOf "https://gerrit.wikimedia.org/r/VisualEditor/VisualEditor.git"; \
    git init .; \
    git remote add origin "${MEDIAWIKI_REPO}"; \
    git fetch origin --depth 1 "${MEDIAWIKI_COMMIT}"; \
    git checkout FETCH_HEAD; \
    git submodule update --init --recursive --depth 1 --jobs 2; \
    find . -name .git -prune -exec rm -rf {} +; \
    install -d /var/log/mediawiki -o www-data

# ###########################################################################
# The Composer builder is only published for AMD64 and produces portable PHP dependencies.
# hadolint ignore=DL3006,DL3029
FROM --platform=${COMPOSER_IMAGE_PLATFORM} ${COMPOSER_IMAGE_URL} AS composer

COPY --from=mediawiki --chown=nobody:nogroup /var/www/html /var/www/html
WORKDIR /var/www/html

# Ensure relaxed permissions so that the file is readable by the container user
COPY --chown=nobody:nogroup --chmod=755 build/composer.local.json composer.local.json

USER root
RUN set -eux; \
    sed -i 's|http://mirrors.wikimedia.org/debian/|http://deb.debian.org/debian/|g' /etc/apt/sources.list; \
    apt-get update; \
    apt-get install -y --no-install-recommends \
        patch \
        ; \
    rm -rf /var/lib/apt/lists/*
# Wikibase's submodule list differs between release lines; rewrite only URLs
# encountered by Git rather than patching a particular .gitmodules layout.
RUN set -eux; \
    git config --system url."https://github.com/wikimedia/data-values-value-view.git".insteadOf "https://gerrit.wikimedia.org/r/data-values/value-view"; \
    git config --system url."https://github.com/wmde/WikibaseSerializationJavaScript.git".insteadOf "https://phabricator.wikimedia.org/source/wikibase-serialization.git"; \
    git config --system url."https://github.com/wmde/DataValuesJavaScript.git".insteadOf "https://phabricator.wikimedia.org/source/datavalues-javascript.git"; \
    git config --system url."https://github.com/wmde/WikibaseDataModelJavaScript.git".insteadOf "https://phabricator.wikimedia.org/source/wikibase-data-model.git"; \
    git config --system url."https://github.com/wikimedia/wikibase-termbox.git".insteadOf "https://gerrit.wikimedia.org/r/wikibase/termbox"; \
    git config --system url."https://github.com/wikimedia/wikibase-javascript-api.git".insteadOf "https://gerrit.wikimedia.org/r/wikibase/javascript-api"
USER nobody

COPY --chown=nobody:nogroup --chmod=755 build/extensions.json /tmp/extensions.json
COPY --chown=nobody:nogroup --chmod=755 build/InstallExtensions.php /tmp/InstallExtensions.php
COPY --chown=nobody:nogroup --chmod=755 build/patches /tmp/patches

SHELL ["/bin/bash", "-euo", "pipefail", "-c"]
RUN php /tmp/InstallExtensions.php /tmp/extensions.json && \
    rm -rf composer.lock && \
    composer update --no-dev -vv -n

# ###########################################################################
# hadolint ignore=DL3006
FROM mediawiki AS wikibase

LABEL org.opencontainers.image.source="https://github.com/wmde/wikibase-suite"

ARG WIKIBASE_IMAGE_VERSION

ENV WIKIBASE_IMAGE_VERSION=${WIKIBASE_IMAGE_VERSION}

# Set error_reporting PHP.ini settings
# This is needed with PHP8+ and MediaWiki 1.39, as Wikibase contains deprecated code
# TODO: remove this and see how far we get
RUN { \
    echo 'error_reporting = E_ALL ^ E_DEPRECATED'; \
} > /usr/local/etc/php/conf.d/error_reporting.ini

COPY --from=composer --chown=nobody:nogroup /var/www/html /var/www/html

# Remove world writable flag, in combination with sticky bit it breaks the w link
# https://github.com/wmde/wikibase-suite/commit/545c7aeec8d0245dc597d500afc934b40e656b3c
# Make upload path writable for the webserver user
RUN chmod o-w /var/www/html && \
    ln -s /var/www/html/ /var/www/html/w && \
    chown www-data /var/www/html/images -R

# Copy image-owned runtime files into their final container paths.
COPY runtime/ /

# Enable the static Apache configuration for short URLs and VisualEditor.
RUN a2enmod rewrite && a2enconf mediawiki

RUN chmod 755 \
    /entrypoint.sh \
    /healthcheck.sh \
    /var/www/html/extensions/WikibaseSuite/setup/setup.sh \
    /var/www/html/extensions/WikibaseSuite/setup/migration/migrate.sh \
    /var/www/html/extensions/WikibaseSuite/setup/scripts/*.sh

# Docker reuses this layer when the image inputs are unchanged. When a build
# changes those inputs, this versioned last-update value lets WBS run its
# updater once.
RUN printf '%s-%s\n' "$WIKIBASE_IMAGE_VERSION" "$(date -u +%s%N)" \
    > /var/www/html/extensions/WikibaseSuite/setup/last-update

ENV DB_NAME=my_wiki \
    MW_CONFIG_FILE=/var/www/html/extensions/WikibaseSuite/config/Settings.php \
    MW_WG_SITENAME=wikibase \
    MW_WG_LANGUAGE_CODE=en

ENTRYPOINT ["/entrypoint.sh"]
CMD ["web"]