121 lines
3.7 KiB
Docker
121 lines
3.7 KiB
Docker
FROM "${JRE_IMAGE:-localhost/minecraft-jre}":"${JRE_TAG:-latest}"
|
|
|
|
# Minecraft version to download
|
|
ARG VERSION=latest
|
|
|
|
# Plugins prefix
|
|
ARG PREFIX="PLUGIN_"
|
|
|
|
# PaperMC base URL
|
|
ARG BASE_URL="https://api.papermc.io/v2/projects/paper/versions/${VERSION}"
|
|
|
|
# Consider turning bStats (https://bStats.org) on but I'm turning it off by
|
|
# default because it collects information
|
|
ARG BSTATS_ENABLED=false
|
|
|
|
# Download files
|
|
USER root
|
|
WORKDIR /app
|
|
|
|
# Download and verify sha256sum for PaperMC server.jar
|
|
RUN set -eux && \
|
|
# Grab latest version if not specified
|
|
if [ "$VERSION" = "latest" ]; then \
|
|
VERSION="$( \
|
|
curl -s https://api.papermc.io/v2/projects/paper | \
|
|
jq -r '.versions[-1]' \
|
|
)"; \
|
|
fi && \
|
|
# Get latest build for the specified version
|
|
BUILD="$( \
|
|
curl -s "$BASE_URL" \
|
|
| jq -r '.builds[-1]' \
|
|
)" && \
|
|
URL="${BASE_URL}/builds/${BUILD}/downloads/paper-${VERSION}-${BUILD}.jar" && \
|
|
curl -s -o /tmp/server.jar "$URL" && \
|
|
# Get SHA256 hash of server.jar and compare
|
|
SHA256="$(sha256sum /tmp/server.jar | awk '{print $1}')" && \
|
|
EXPECTED="$( \
|
|
curl -s "$BASE_URL/builds/$BUILD" \
|
|
| jq -r '.downloads.application.sha256' \
|
|
)" && \
|
|
if [ ! "$SHA256" = "$EXPECTED" ]; then \
|
|
echo "[ERROR]: SHA256=\"$SHA256\" expected \"$EXPECTED\""; \
|
|
exit 1; \
|
|
fi && \
|
|
mv /tmp/server.jar /app/server.jar
|
|
|
|
# Move into a directory just for storing plugins
|
|
WORKDIR /app/plugins
|
|
|
|
# Copy in plugins
|
|
COPY ../plugins.json /app/plugins
|
|
|
|
# Download defined plugins
|
|
RUN set -eux && \
|
|
# Download defined plugins and check against hash
|
|
tmp_downloads="$(mktemp -d)" && \
|
|
# Iterate over all plugins in plugins.json
|
|
jq -c '.plugins[]' plugins.json | while read -r PLUGIN; do \
|
|
# Set variables from plugins.json
|
|
name=$(echo "$PLUGIN" | jq -r '.name') && \
|
|
version=$(echo "$PLUGIN" | jq -r '.version') && \
|
|
# Interpolate instances of '${version}' in the URL
|
|
url=$(echo "$PLUGIN" | jq -r '.url' | sed "s/\${version}/$version/g") && \
|
|
hash=$(echo "$PLUGIN" | jq -r '.hash') && \
|
|
info=$(echo "$PLUGIN" | jq -r '.info_url') && \
|
|
# Extract hash type and value, e.g., `md5:6f5902ac237024bdd0c176cb93063dc4`
|
|
hash_type=$(echo "$hash" | cut -d':' -f1) && \
|
|
hash_value=$(echo "$hash" | cut -d':' -f2-) && \
|
|
# Download and compare the hash
|
|
tmp_file="${tmp_downloads}/${name}-${version}.jar" && \
|
|
curl -s -L "$url" -o "${tmp_file}" && \
|
|
case "$hash_type" in \
|
|
sha256) \
|
|
echo "${hash_value} $tmp_file" | sha256sum -c - || { \
|
|
echo "SHA256 hash mismatch for ${name}-${version}.jar"; \
|
|
rm -rf "$tmp_downloads"; \
|
|
exit 1; \
|
|
} \
|
|
;; \
|
|
md5) \
|
|
echo "${hash_value} $tmp_file" | md5sum -c - || { \
|
|
echo "MD5 hash mismatch for ${name}-${version}.jar"; \
|
|
rm -rf "$tmp_downloads"; \
|
|
exit 1; \
|
|
} \
|
|
;; \
|
|
*) \
|
|
echo "Unsupported hash type: ${hash_type}"; \
|
|
rm -rf "$tmp_downloads"; \
|
|
exit 1; \
|
|
;; \
|
|
esac && \
|
|
mv "$tmp_file" "${name}-${version}.jar"; \
|
|
done && \
|
|
rm -rf "$tmp_downloads" && \
|
|
chown minecraft:minecraft /app/plugins/
|
|
|
|
# Generate initial settings
|
|
USER minecraft
|
|
WORKDIR /app
|
|
RUN java -jar server.jar --initSettings --nogui && \
|
|
# Disable bStats by default
|
|
if [ "$BSTATS_ENABLED" = "false" ]; then \
|
|
mkdir -p /app/plugins/bStats/ && \
|
|
echo "enabled: false" > /app/plugins/bStats/config.yml; \
|
|
fi
|
|
|
|
# Back to root to copy the entrypoint in
|
|
USER root
|
|
COPY ../entrypoint.sh /usr/local/bin/entrypoint.sh
|
|
RUN chmod +x /usr/local/bin/entrypoint.sh
|
|
|
|
# Run app as minecraft user
|
|
USER minecraft
|
|
WORKDIR /app
|
|
|
|
# Expose port and run entrypoint script
|
|
EXPOSE 25565
|
|
ENTRYPOINT ["entrypoint.sh"]
|