Use bookstack-system-cli instead of composer

[rhuddleston]

https://www.bookstackapp.com/blog/php-dependency-improvements/

see above blog on using bookstack-system-cli command instead of composer to install dependencies. Especially useful for people building the container in an envionment with egress filtering.

[ssddanbrown]

I was actually thinking earlier today about suggesting this to the BookStack docker images.
I would really like to get more testing coverage, just to ensure the process remains fairly reliable without issue, and the docker images would be a great place for that to widen testing before suggesting it for manual usage (since any errors are going to be build-time rather than update-time).

I've been testing this in my usage, in the demo instance, and also via any new install scripts I write.
I've also recently added it as an option in our update notes.

For context, the bookstack-system-cli is distributed in the root of the release code, so just needs to be ran instead of composer.

Just don't start any changes tonight as I'm about to take the site down for a little while longer than usual while I update proxmox/debian 😅

[rhuddleston]

So the main reason I wanted this is becuase I'm behind a proxy so can't just download from anywhere on the internet. Problem is the php doesn't respect https_proxy environment so this solution also didn't work. I ended up just doing the following:

@@ -53,9 +53,11 @@ COPY --from=bookstack --chown=33:33 /bookstack/ /var/www/bookstack/
 ARG COMPOSER_VERSION=2.7.6
 RUN set -x; \
     cd /var/www/bookstack \
-    && curl -sS https://getcomposer.org/installer | php -- --version=$COMPOSER_VERSION \
-    && /var/www/bookstack/composer.phar install -v -d /var/www/bookstack/ \
-    && rm -rf /var/www/bookstack/composer.phar /root/.composer \
+    && curl -fL -o vendor.zip "https://files.bookstackapp.com/vendor/${VERSION}.zip" \
+    && echo "$(cat dev/checksums/vendor)  vendor.zip" | sha256sum --check --status \
+    && rm -rf vendor \
+    && unzip -q vendor.zip \
+    && rm vendor.zip \
     && chown -R www-data:www-data /var/www/bookstack

curl respects https_proxy env

[rhuddleston]

An alternative would be to use curl plus bookstack-system-cli with an option that just points to the zip file instead of downloading it.