Switch docker image to ubuntu, add ability to install additional packages

Author: zefhemel

Dockerfile

@@ -1,6 +1,4 @@
-# Note: we don't actually need a Deno image, since we use a single-binary distribution of SilverBullet
-# However, since those binaries still depend on a bunch of GLIBC stuff included in the deno image —— we'll just go with that anyway
-FROM denoland/deno:alpine
+FROM ubuntu:noble
 
 # The volume that will keep the space data
 VOLUME /space
@@ -19,11 +17,13 @@ ARG TARGETARCH
 ENV TINI_VERSION=v0.19.0
 ADD https://github.com/krallin/tini/releases/download/${TINI_VERSION}/tini-${TARGETARCH} /tini
 
-# Make sure the deno user has access to the space volume
 RUN mkdir -p -m 777 /space \
     && chmod +x /tini \
-    # We will just include bash and git 
-    && apk add bash git
+    && apt update \
+    && apt install -y git \
+    && apt-get -y autoremove \
+    && apt-get clean  \
+    && rm -rf /tmp/* /var/tmp/* /var/log/* /usr/share/man /var/lib/apt/lists/*
 
 # Expose port 3000
 # Port map this when running, e.g. with -p 3002:3000 (where 3002 is the host port)

docker-entrypoint.sh

@@ -1,5 +1,15 @@
 #!/bin/bash -e
 
+# Run last-minute package installs
+if [ -n "$SB_APT_PACKAGES" ]; then
+    if [ "$UID" == "0" ]; then
+        apt update -y
+        apt install -y $SB_APT_PACKAGES
+    else
+        echo "Cannot install packages selected via SB_APT_PACKAGES unless run as root"
+    fi
+fi
+
 # Check if UID and GID are passed as environment variables, if not, extract from the space folder owner
 if [ -z "$PUID" ] && [ "$UID" == "0" ] ; then
     # Get the UID of the folder owner

website/Install/Configuration.md

@@ -39,7 +39,9 @@ SilverBullet enables plugs to run shell commands. This is potentially unsafe. If
 Configuration only relevant to docker deployments:
 
 * `PUID`: Runs the server process with the specified UID (default: whatever user owns the `/space` mapped folder)
-* `GUID`: Runs the server process with the specified GID (default: whatever group owns the `/space` mapped folder)
+* `GUID`: Runs the server process with the specified GID (default: whatever group owns the `/space` mapped folder)\
+* `SB_APT_PACKAGES`: will install additional (ubuntu) packages inside the container upon boot. Example: `SB_APT_PACKAGES="ripgrep pandoc"`
+  **Warning:** this will (probably) significantly increase the boot time of your container.
 
 # Web app manifest
 Configure aspects of web app appearance:

website/Install/Docker.md

@@ -12,6 +12,7 @@ A few key things to know about the SilverBullet container image:
 * The container binds to port `3000`, so be sure to port-map that, e.g. via `-p 3000:3000` (note: the first `3000` is the external port)
 * The container uses whatever is volume-mapped to `/space` as the space root folder. You can connect a docker volume, or a host folder to this, e.g. `-v /home/myuser/space:/space`
 * SilverBullet will detect the UNIX owner (UID and GID) of the folder mapped into `/space` and run the server process with the same UID and GID so that permissions will just magically work. If you’d like to override this UID, set the `PUID` and `PGID` environment variables (see [[Install/Configuration]] for details).
+* The Docker image is based on Ubuntu. If you would like to install additional packages into it at runtime, you can do so via the `SB_APT_PACKAGES` environment variable, see [[Install/Configuration]].
 
 > **note** Note
 > The same docker images are currently both available from [GHCR](https://github.com/silverbulletmd/silverbullet/pkgs/container/silverbullet) and [Docker Hub](https://hub.docker.com/r/zefhemel/silverbullet), use whichever you prefer.