# --------------------------------------------------

# Overleaf Base Image (sharelatex/sharelatex-base)

# --------------------------------------------------

FROM phusion/baseimage:noble-1.0.2

ARG BUILD_COMMIT=unknown

LABEL org.opencontainers.image.revision=${BUILD_COMMIT}

# Makes sure LuaTex cache is writable

# -----------------------------------

ENV TEXMFVAR=/var/lib/overleaf/tmp/texmf-var

# Update to ensure dependencies are updated

# ------------------------------------------

ENV REBUILT_AFTER="2025-10-30"

# Install dependencies

# --------------------

RUN --mount=type=cache,target=/var/cache/apt,sharing=locked \

# Technically, we are using potentially stale package-lists with the below line.

# Practically, apt refreshes the lists as needed and release builds run in fresh CI VMs without the cache.

--mount=type=cache,target=/var/lib/apt/lists,sharing=locked true \

# Enable caching: https://docs.docker.com/reference/dockerfile/#example-cache-apt-packages

&& rm -f /etc/apt/apt.conf.d/docker-clean && echo 'Binary::apt::APT::Keep-Downloaded-Packages "true";' > /etc/apt/apt.conf.d/keep-cache \

&& apt-get update \

&& apt-get install -y \

unattended-upgrades \

build-essential wget net-tools unzip time imagemagick optipng strace nginx git python3 python-is-python3 zlib1g-dev libpcre3-dev gettext-base libwww-perl ca-certificates curl gnupg \

docker.io \

qpdf \

# upgrade base-image, batch all the upgrades together, rather than installing them on-by-one (which is slow!)

&& unattended-upgrade --verbose --no-minimal-upgrade-steps \

# install Node.js https://github.com/nodesource/distributions#nodejs

&& mkdir -p /etc/apt/keyrings \

&& curl -fsSL https://deb.nodesource.com/gpgkey/nodesource-repo.gpg.key | gpg --dearmor -o /etc/apt/keyrings/nodesource.gpg \

&& echo "deb [signed-by=/etc/apt/keyrings/nodesource.gpg] https://deb.nodesource.com/node_22.x nodistro main" | tee /etc/apt/sources.list.d/nodesource.list \

&& apt-get update \

&& apt-get install -y nodejs \

\

&& rm -rf \

# We are adding a custom nginx config in the main Dockerfile.

/etc/nginx/nginx.conf \

/etc/nginx/sites-enabled/default

## TexLive is no longer included in the base image.

## The CLSI runs TexLive compiles in sibling containers (Docker runner),

## so keeping TexLive in the base image causes unexpected fallback behaviors.

## To ensure we use the Docker TexLive images defined via ALL_TEX_LIVE_DOCKER_IMAGES,

## we remove the system TexLive installation from this base image.

# Set up overleaf user and home directory

# -----------------------------------------

RUN adduser --system --group --home /overleaf --no-create-home overleaf && \

mkdir -p /var/lib/overleaf && \

chown www-data:www-data /var/lib/overleaf && \

mkdir -p /var/log/overleaf && \

chown www-data:www-data /var/log/overleaf && \

mkdir -p /var/lib/overleaf/data/template_files && \

chown www-data:www-data /var/lib/overleaf/data/template_files