Compile ngx with static voms module only once

Dockerfile

@@ -15,12 +15,11 @@ RUN yum update -y && \
    sh /tmp/library-scripts/provide-user.sh ${USERNAME} ${USER_UID} ${USER_GID} && \
    yum clean all && rm -rf /var/cache/yum
 
-# install nginx with patch for HTTPG
-COPY sources/nginx-httpg_no_delegation.patch /tmp/sources/
-COPY sources/nginx.spec /tmp/sources/
-RUN sh /tmp/library-scripts/provide-nginx-with-httpg.sh
-
-# copy and install nginx_http_voms module 
+# install nginx with patch for HTTPG and voms module
 COPY ngx-http-voms-module /ngx-http-voms-module
+COPY sources/* /tmp/sources/
+RUN sh /tmp/library-scripts/provide-ngx-httpg-voms.sh
+
+# import test 
 COPY t /home/nginx/t
-RUN sh /tmp/library-scripts/provide-ngx-http-voms-module.sh
+COPY test-ngx-voms.sh /home/nginx/

library-scripts/provide-ngx-http-voms-module.sh

-#!/usr/bin/env bash
-
-# Copyright 2018-2022 Istituto Nazionale di Fisica Nucleare
-# SPDX-License-Identifier: EUPL-1.2
-
-set -ex
-
-ngxVersion=1.22.1
-
-wget -O /nginx-$ngxVersion.tar.gz https://nginx.org/download/nginx-$ngxVersion.tar.gz
-wget -O /ngx-http-echo-module.tar.gz https://github.com/openresty/echo-nginx-module/archive/refs/tags/v0.63.tar.gz
-cd /
-tar -xzf /nginx-$ngxVersion.tar.gz
-tar xzf /ngx-http-echo-module.tar.gz
-
-cd /nginx-$ngxVersion
-./configure --prefix=/etc/nginx --with-compat --with-http_ssl_module --add-dynamic-module=/ngx-http-voms-module --add-dynamic-module=/echo-nginx-module-0.63
-make modules
-make install -j 8
\ No newline at end of file

library-scripts/provide-nginx-with-httpg.sh → library-scripts/provide-ngx-httpg-voms.sh

@@ -18,7 +18,12 @@ cd ~/rpmbuild/SOURCES/
 wget http://nginx.org/packages/centos/7/SRPMS/nginx-$ngxVersion-1.el7.ngx.src.rpm
 rpm2cpio nginx-$ngxVersion-1.el7.ngx.src.rpm | cpio -idm
 
-# use nginx spec file with the httpg patch
+# set modules
+wget -O ./ngx-http-echo-module.tar.gz https://github.com/openresty/echo-nginx-module/archive/refs/tags/v0.63.tar.gz
+tar xzf ngx-http-echo-module.tar.gz
+mv /ngx-http-voms-module .
+
+# use nginx spec file with the httpg patch and static modules
 cp /tmp/sources/nginx-httpg_no_delegation.patch ${HOME}/rpmbuild/SOURCES/
 cp /tmp/sources/nginx.spec ~/rpmbuild/SPECS
 

sources/nginx.spec

@@ -72,7 +72,7 @@ Requires(pre): shadow-utils
 %define WITH_CC_OPT $(echo %{optflags} $(pcre2-config --cflags)) -fPIC
 %define WITH_LD_OPT -Wl,-z,relro -Wl,-z,now -pie
 
-%define BASE_CONFIGURE_ARGS $(echo "--prefix=%{_sysconfdir}/nginx --sbin-path=%{_sbindir}/nginx --modules-path=%{_libdir}/nginx/modules --conf-path=%{_sysconfdir}/nginx/nginx.conf --error-log-path=%{_localstatedir}/log/nginx/error.log --http-log-path=%{_localstatedir}/log/nginx/access.log --pid-path=%{_localstatedir}/run/nginx.pid --lock-path=%{_localstatedir}/run/nginx.lock --http-client-body-temp-path=%{_localstatedir}/cache/nginx/client_temp --http-proxy-temp-path=%{_localstatedir}/cache/nginx/proxy_temp --http-fastcgi-temp-path=%{_localstatedir}/cache/nginx/fastcgi_temp --http-uwsgi-temp-path=%{_localstatedir}/cache/nginx/uwsgi_temp --http-scgi-temp-path=%{_localstatedir}/cache/nginx/scgi_temp --user=%{nginx_user} --group=%{nginx_group} --with-compat --with-file-aio --with-threads --with-http_addition_module --with-http_auth_request_module --with-http_dav_module --with-http_flv_module --with-http_gunzip_module --with-http_gzip_static_module --with-http_mp4_module --with-http_random_index_module --with-http_realip_module --with-http_secure_link_module --with-http_slice_module --with-http_ssl_module --with-http_stub_status_module --with-http_sub_module --with-http_v2_module --with-mail --with-mail_ssl_module --with-stream --with-stream_realip_module --with-stream_ssl_module --with-stream_ssl_preread_module")
+%define BASE_CONFIGURE_ARGS $(echo "--prefix=%{_sysconfdir}/nginx --sbin-path=%{_sbindir}/nginx --modules-path=%{_libdir}/nginx/modules --conf-path=%{_sysconfdir}/nginx/nginx.conf --error-log-path=%{_localstatedir}/log/nginx/error.log --http-log-path=%{_localstatedir}/log/nginx/access.log --pid-path=%{_localstatedir}/run/nginx.pid --lock-path=%{_localstatedir}/run/nginx.lock --http-client-body-temp-path=%{_localstatedir}/cache/nginx/client_temp --http-proxy-temp-path=%{_localstatedir}/cache/nginx/proxy_temp --http-fastcgi-temp-path=%{_localstatedir}/cache/nginx/fastcgi_temp --http-uwsgi-temp-path=%{_localstatedir}/cache/nginx/uwsgi_temp --http-scgi-temp-path=%{_localstatedir}/cache/nginx/scgi_temp --user=%{nginx_user} --group=%{nginx_group} --with-compat --with-file-aio --with-threads --with-http_addition_module --with-http_auth_request_module --with-http_dav_module --with-http_flv_module --with-http_gunzip_module --with-http_gzip_static_module --with-http_mp4_module --with-http_random_index_module --with-http_realip_module --with-http_secure_link_module --with-http_slice_module --with-http_ssl_module --with-http_stub_status_module --with-http_sub_module --with-http_v2_module --with-mail --with-mail_ssl_module --with-stream --with-stream_realip_module --with-stream_ssl_module --with-stream_ssl_preread_module --add-module=%SOURCE10 --add-module=%SOURCE11")
 
 Summary: High performance web server
 Name: nginx
@@ -92,6 +92,8 @@ Source6: nginx.suse.logrotate
 Source7: nginx-debug.service
 Source8: nginx.copyright
 Source9: nginx.check-reload.sh
+Source10: echo-nginx-module-0.63
+Source11: ngx-http-voms-module
 Patch0: nginx-httpg_no_delegation.patch