Dockerfile

FROM spritsail/alpine:3.21

ARG NZBGET_VER=24.5
ARG UNRAR_VER=7.0.9
ARG CXXFLAGS="-Ofast -pipe -fstack-protector-strong"
ARG LDFLAGS="-Wl,-O1,--sort-common -Wl,-s"

WORKDIR /tmp

RUN apk add --no-cache -t build_deps \
        cmake \
        boost-dev \
        curl \
        g++ \
        git \
        libxml2-dev \
        make \
        openssl-dev \
        zlib-dev \
    \
 && apk add --no-cache \
        boost1.84-json \
        ca-certificates \
        libssl3 \
        libcrypto3 \
        libxml2 \
        p7zip \
        zlib \
    \
 && mkdir unrar \
 && curl -L "https://www.rarlab.com/rar/unrarsrc-${UNRAR_VER}.tar.gz" | \
        tar -C unrar -xz --strip-components=1 \
 && make -j$(nproc) -C unrar \
 && install -m755 unrar/unrar /usr/bin \
    \
 && git clone -b "v${NZBGET_VER}" https://github.com/nzbgetcom/nzbget.git nzbget \
 && cd nzbget \
 && cmake . -DCMAKE_INSTALL_PREFIX=/tmp/nzb -DDISABLE_CURSES=1 \
 && cmake --build . -j $(nproc 2>/dev/null || grep processor /proc/cpuinfo | wc -l || echo 1) \
 && sed -i 's|\(^AppDir=\).*|\1/nzbget|; \
            s|\(^WebDir=\).*|\1/${AppDir}/webui|; \
            s|\(^MainDir=\).*|\1/downloads|; \
            s|\(^LogFile=\).*|\1/config/nzbget.log|; \
            s|\(^ConfigTemplate=\).*|\1/${AppDir}/nzbget.conf|; \
            s|\(^OutputMode=\).*|\1loggable|' nzbget.conf \
 && sed -i "s|\\(^UnrarCmd=\\).*|\\1$(which unrar)|; \
            s|\\(^SevenZipCmd=\\).*|\\1$(which 7z)|; \
            s|\\(^CertStore=\\).*|\\1/etc/ssl/certs/ca-certificates.crt|; \
            s|\\(^CertCheck=\\).*|\\1yes|" nzbget.conf \
 && mkdir /nzbget /downloads \
 && mv nzbget nzbget.conf webui COPYING /nzbget \
 && chmod g+rw /nzbget \
 && ln -sfv ../../nzbget/nzbget /usr/bin \
    \
 && find /tmp -mindepth 1 -delete \
 && apk del --no-cache build_deps

# ~~~~~~~~~~~~~~~~

ENV SUID=904 SGID=900
ENV NZBGET_CONF_FILE="/config/nzbget.conf"

LABEL org.opencontainers.image.authors="Spritsail <nzbget@spritsail.io>" \
      org.opencontainers.image.title="NZBGet" \
      org.opencontainers.image.url="https://nzbget.com/" \
      org.opencontainers.image.description="NZBGet - the efficient Usenet downloader" \
      org.opencontainers.image.version=${NZBGET_VER} \
      io.spritsail.version.nzbget=${NZBGET_VER}

WORKDIR /nzbget

HEALTHCHECK --start-period=5s --timeout=3s \
    CMD wget -qO- -S http://$(sed -nE 's/^ControlUsername=(.*)$/\1/p' /config/nzbget.conf):$(sed -nE 's/^ControlPassword=(.*)$/\1/p' /config/nzbget.conf)@0.0.0.0:6789/jsonrpc/version

EXPOSE 6789
VOLUME ["/config", "/downloads"]
ENTRYPOINT ["/sbin/tini", "--"]
CMD set -e; \
    if [ ! -f "$NZBGET_CONF_FILE" ]; then \
        install -m 644 -o $SUID -g $SGID /nzbget/nzbget.conf $NZBGET_CONF_FILE; \
        echo "Created default config file at $NZBGET_CONF_FILE"; \
    fi; \
    \
    su-exec -e test -w /config || chown $SUID:$SGID /config; \
    su-exec -e test -w /downloads || chown $SUID:$SGID /downloads; \
    # Ensure nzbget directory is writeable by the running user
    chgrp -R $SGID /nzbget; \
    \
    exec su-exec -e nzbget -c $NZBGET_CONF_FILE -s -o OutputMode=log