Dockerfile

# Build stage
FROM python:3.13-slim-bookworm AS builder

ENV NUT_VERSION=2.8.3

# Install build dependencies
RUN apt-get update && apt-get install -y --no-install-recommends \
    libusb-1.0-0-dev \
    libltdl-dev \
    build-essential \
    libfreeipmi-dev \
    freeipmi \
    libipmimonitoring-dev \
    wget \
    libssl-dev \
    libneon27-dev \
    libsnmp-dev \
    libtool \
    autoconf \
    automake \
    libgd-dev \
    pkg-config && \
    cd /tmp && \
    wget https://github.com/networkupstools/nut/releases/download/v$NUT_VERSION/nut-$NUT_VERSION.tar.gz && \
    tar xfz nut-$NUT_VERSION.tar.gz && \
    cd nut-$NUT_VERSION && \
    # Ensure libtool files are up-to-date
    autoreconf -i && \
    # Regenerate configure script and Makefiles for the current environment
    ./autogen.sh && \
    # Configure the build
    ./configure \
    --prefix=/usr \
    --sysconfdir=/etc/nut \
    --disable-dependency-tracking \
    --enable-strip \
    --disable-static \
    --with-all=no \
    --with-usb=yes \
    --with-openssl \
    --with-dev \
    --with-serial \
    --with-snmp \
    --with-neon \
    --with-freeipmi \
    --with-ipv6 \
    --with-nutclient \
    --with-python3 \
    --with-nut-scanner \
        #    --with-drivers=dummy-ups,usbhid-ups,nutdrv_qx,blazer_usb,blazer_ser,snmp-ups,richcomm_usb,tripplite_usb,riello_usb,apcsmart,mge-shut,genericups,liebert,victronups,powercom,clone,upscode2,bestups,belkin,netxml-ups \
    --with-all=auto \
    --datadir=/usr/share/nut \
    --with-drvpath=/usr/lib/nut \
    --with-statepath=/var/run/nut \
    --with-user=nut \
    --with-group=nut && \
    make && \
    make install DESTDIR=/tmp/install && \
    # Create directories for optional files
       mkdir -p /tmp/install/usr/bin /tmp/install/usr/lib/nut /tmp/install/usr/include /tmp/install/usr/lib/pkgconfig && \
       # Create empty files for optional components to ensure COPY doesn't fail
       touch /tmp/install/usr/lib/libnutclient.so && \
       touch /tmp/install/usr/include/nutclient.h && \
       touch /tmp/install/usr/include/nut-scan.h && \
       touch /tmp/install/usr/include/nut_version.h && \
       touch /tmp/install/usr/include/parseconf.h && \
       touch /tmp/install/usr/include/upsclient.h && \
       touch /tmp/install/usr/lib/pkgconfig/libnutclient.pc && \
       touch /tmp/install/usr/lib/pkgconfig/libnutscan.pc && \
       touch /tmp/install/usr/lib/pkgconfig/libupsclient.pc && \
       # Clean up unnecessary files
       find /tmp/install -name "*.a" -delete && \
       find /tmp/install -name "*.la" -delete && \
       # Clean up build dependencies to reduce layer size
       apt-get clean && \
       rm -rf /var/lib/apt/lists/* && \
       rm -rf /tmp/nut-$NUT_VERSION && \
       rm -f /tmp/nut-$NUT_VERSION.tar.gz

   # Python dependencies stage
   FROM python:3.13-slim-bookworm AS python-deps
   WORKDIR /app
   COPY nutify/requirements.txt .
   # Install packages to /usr/local to be copied to final image
   RUN pip install --no-cache-dir -r requirements.txt

   # Final stage
   FROM python:3.13-slim-bookworm

   # Get target architecture from build arg
   ARG TARGET_ARCH
   ENV TARGET_ARCH=$TARGET_ARCH

   # Combine all setup commands in a single layer
   RUN apt-get update && apt-get install -y --no-install-recommends \
       dpkg-dev \
       libusb-1.0-0 \
       libltdl7 \
       msmtp \
       openssl \
       ca-certificates \
       libsnmp40 \
       libneon27 \
       libgd3 \
       procps \
       net-tools \
       iputils-ping \
       socat \
       libudev1 \
       usbutils \
       lsof \
       iproute2 && \
       # Get multiarch path
       MULTIARCH=$(dpkg-architecture -q DEB_HOST_MULTIARCH) && \
       # Create symbolic links for generic library names using multiarch path
       ln -sf /usr/lib/$MULTIARCH/libusb-1.0.so.0 /usr/lib/$MULTIARCH/libusb-1.0.so && \
       ln -sf /usr/lib/$MULTIARCH/libnetsnmp.so.40 /usr/lib/$MULTIARCH/libnetsnmp.so && \
       ln -sf /usr/lib/$MULTIARCH/libneon.so.27 /usr/lib/$MULTIARCH/libneon.so && \
       ldconfig && \
       # Create nut user and group
       groupadd -g 1000 nut && \
       useradd -r -u 1000 -g nut -d /var/run/nut -s /sbin/nologin nut && \
       # Ensure nut user has access to USB devices
       usermod -a -G plugdev,dialout,input,usb nut || true && \
       # Create necessary directories with explicit permissions
       mkdir -p /etc/nut /etc/mail /var/run/nut /run /var/log/nut /usr/share/nut/templates /tmp /app /usr/lib/nut /usr/include /usr/lib/pkgconfig /app/ssl && \
       touch /var/log/msmtp.log /var/log/battery-monitor.log /var/log/nut-debug.log && \
       # Set proper ownership and permissions (explicit for each directory)
       chown -R nut:nut /etc/nut /etc/mail /var/run/nut /run /var/log/nut /var/log /usr/share/nut/templates /tmp /usr/lib/nut /app/ssl && \
       chmod -R 750 /etc/nut /etc/mail /var/run/nut /run && \
       chmod -R 755 /var/log/nut && \
       chmod 777 /tmp && \
       chmod 666 /var/log/msmtp.log /var/log/battery-monitor.log /var/log/nut-debug.log && \
       # Create symbolic link for PID directories to ensure consistent paths
       ln -sf /var/run/nut /run/nut && \
       # Clean apt cache
       apt-get clean && \
       rm -rf /var/lib/apt/lists/*

   # Copy NUT binaries and libraries from builder
   COPY --from=builder /tmp/install/usr/bin/upsc /usr/bin/
   COPY --from=builder /tmp/install/usr/bin/upscmd /usr/bin/
   COPY --from=builder /tmp/install/usr/bin/upsrw /usr/bin/
   COPY --from=builder /tmp/install/usr/bin/nut-scanner /usr/bin/
   COPY --from=builder /tmp/install/usr/sbin/upsd /usr/sbin/
   COPY --from=builder /tmp/install/usr/sbin/upsmon /usr/sbin/
   COPY --from=builder /tmp/install/usr/sbin/upsdrvctl /usr/sbin/
   COPY --from=builder /tmp/install/usr/share/nut/ /usr/share/nut/
   COPY --from=builder /tmp/install/usr/lib/libupsclient* /usr/lib/
   COPY --from=builder /tmp/install/usr/lib/libnutscan* /usr/lib/
   COPY --from=builder /tmp/install/usr/lib/libnutclient* /usr/lib/
   COPY --from=builder /tmp/install/usr/lib/nut/ /usr/lib/nut/
   COPY --from=builder /tmp/install/usr/include/nutclient.h /usr/include/
   COPY --from=builder /tmp/install/usr/include/nut-scan.h /usr/include/
   COPY --from=builder /tmp/install/usr/include/nut_version.h /usr/include/
   COPY --from=builder /tmp/install/usr/include/parseconf.h /usr/include/
   COPY --from=builder /tmp/install/usr/include/upsclient.h /usr/include/
   COPY --from=builder /tmp/install/usr/lib/pkgconfig/libnutclient.pc /usr/lib/pkgconfig/
   COPY --from=builder /tmp/install/usr/lib/pkgconfig/libnutscan.pc /usr/lib/pkgconfig/
   COPY --from=builder /tmp/install/usr/lib/pkgconfig/libupsclient.pc /usr/lib/pkgconfig/

   # Pre-create PID files with proper ownership
   RUN touch /var/run/nut/upsd.pid /var/run/nut/driver.pid /run/upsmon.pid && \
       chown nut:nut /var/run/nut/upsd.pid /var/run/nut/driver.pid /run/upsmon.pid && \
       chmod 644 /var/run/nut/upsd.pid /var/run/nut/driver.pid /run/upsmon.pid

   # Copy Python dependencies
   ENV PATH=/usr/local/bin:$PATH
   COPY nutify/requirements.txt /tmp/
   RUN pip install --no-cache-dir -r /tmp/requirements.txt && \
       rm /tmp/requirements.txt

   # Copy scripts individually to ensure all are present
   COPY src/common.sh /usr/local/bin/
   COPY src/log.sh /usr/local/bin/
   COPY src/filesystem.sh /usr/local/bin/
   COPY src/settings.sh /usr/local/bin/
   COPY src/motd.sh /usr/local/bin/
   COPY src/web.sh /usr/local/bin/
   COPY src/db.sh /usr/local/bin/
   COPY src/ssl.sh /usr/local/bin/
   COPY src/process.sh /usr/local/bin/
   COPY src/network.sh /usr/local/bin/
   COPY src/docker-entrypoint /usr/local/bin/
   COPY src/start-services.sh /usr/local/bin/
   COPY src/generate-settings.sh /usr/local/bin/
   COPY nutify/ /app/nutify/

   # Set script permissions and create necessary directories
   RUN chmod +x /usr/local/bin/* && \
       mkdir -p /app/ssl && \
       chown -R nut:nut /app/ssl && \
       chmod 750 /app/ssl && \
       chown -R nut:nut /app && \
       mkdir -p /app/nutify/logs && \
       chown -R nut:nut /app/nutify/logs && \
       chmod -R 755 /app/nutify/logs && \
       chmod 755 /usr/local/bin/python* && \
       ([ -d "/usr/bin" ] && [ "$(ls -A /usr/bin/python* 2>/dev/null)" ] && chmod 755 /usr/bin/python* || true)

   # Ensure NUT binaries are in PATH
   ENV PATH="/usr/bin:/usr/sbin:/root/.local/bin:${PATH}"

   # Add LD_LIBRARY_PATH to ensure libraries are found
   ENV LD_LIBRARY_PATH=/usr/lib/$MULTIARCH:/usr/lib:/lib/$MULTIARCH:/lib

   # Install Prometheus
   ENV PROMETHEUS_VERSION=3.1.0
   RUN apt-get update && apt-get install -y --no-install-recommends wget && \
       cd /tmp && \
       wget https://github.com/prometheus/prometheus/releases/download/v${PROMETHEUS_VERSION}/prometheus-${PROMETHEUS_VERSION}.linux-amd64.tar.gz && \
       tar -xzf prometheus-${PROMETHEUS_VERSION}.linux-amd64.tar.gz

   RUN cp /tmp/prometheus-${PROMETHEUS_VERSION}.linux-amd64/prometheus /usr/local/bin/ && \
       cp /tmp/prometheus-${PROMETHEUS_VERSION}.linux-amd64/promtool /usr/local/bin/ && \
       mkdir -p /etc/prometheus /prometheus && \
       (cp -r /tmp/prometheus-${PROMETHEUS_VERSION}.linux-amd64/consoles /etc/prometheus/ 2>/dev/null || mkdir -p /etc/prometheus/consoles) && \
       (cp -r /tmp/prometheus-${PROMETHEUS_VERSION}.linux-amd64/console_libraries /etc/prometheus/ 2>/dev/null || mkdir -p /etc/prometheus/console_libraries) && \
       chown -R nut:nut /etc/prometheus /prometheus && \
       rm -rf /tmp/prometheus-${PROMETHEUS_VERSION}.linux-amd64* && \
       apt-get remove -y wget && \
       apt-get autoremove -y && \
       apt-get clean && \
       rm -rf /var/lib/apt/lists/*

   # Define environment variables for service startup control
   ENV ENABLE_LOG_STARTUP=N \
       SSL_ENABLED=false

   # Set working directory to where NUT runs
   WORKDIR /var/run/nut

   # Expose ports for web application only
   # Prometheus (9090) and Exporter (9199) are internal only
   EXPOSE 5050/tcp 443/tcp

   # Clear startup chain
   ENTRYPOINT ["/usr/local/bin/generate-settings.sh", "/usr/local/bin/docker-entrypoint", "/usr/local/bin/start-services.sh"]

   # Ensure log files are created with correct permissions
   RUN mkdir -p /var/log/nut && \
       touch /var/log/nut/driver.log /var/log/nut/server.log /var/log/nut/upsmon.log /var/log/nut/notifier.log /var/log/nut/prometheus.log && \
       chown -R nut:nut /var/log/nut && \
       chmod -R 666 /var/log/nut/*.log

   LABEL maintainer="DartSteven <DartSteven@icloud.com>"