Merge pull request #537 from phcollignon/UpdateDockerImageAndDockerEn…

…vironment#536

Update docker image and docker environment#536

.gitignore

@@ -49,4 +49,7 @@ src/main/webapp/WEB-INF/views/version.txt
 ### Eclipse ###
 .settings/
 .classpath
-.project
+.project
+
+docker/server/dist/
+src/main/webapp/WEB-INF/views/versionfooter.txt

docker/README.md

@@ -0,0 +1,96 @@
+# EUSurvey Docker Project
+
+This project provides a Docker-based setup for running the EUSurvey application, along with optional containers for EULogin and OpenLDAP. 
+
+## Prerequisites
+
+- Docker and Docker Compose installed on your machine.
+- Access to the GitHub CIRCABC repository (required for EULogin setup).
+
+## First-Time Setup
+
+### 1. Build the Server Archive
+
+Before running the Docker containers, you need to build the server archive:
+
+1. Navigate to the EUSurvey root folder.
+
+2. Run the Maven build command:
+   ```bash
+   mvn clean install -Denvironment=ossdocker
+   ```
+
+3. Copy the generated WAR file to the Docker folder:
+   ```bash
+   cp target/eusurvey.war ../docker/server/dist/eusurvey.war
+   ```
+
+### 2. Build and Run the Docker Images
+
+1. Build the Docker images:
+   From the `docker` folder, run:
+   ```bash
+   docker-compose build
+   ```
+
+2. Run the Docker containers:
+   ```bash
+   docker-compose up -d
+   ```
+   That will start Tomcat server container running EUSurvey, a MySQL database for persistence and a Dev Email server.
+
+### 3. Access the Application
+You can connect to your local EUSurvey instance at [http://localhost:8080/eusurvey](http://localhost:8080/eusurvey/)
+- The default admin system account credentials are (you have to click the link "*Log in with a system account*" in the login page):
+  - Username: `admin`
+  - Password: `adminpw`
+
+
+## Optional: Run EULogin and OpenLDAP Containers
+
+You can optionally run the EULogin and OpenLDAP containers to support authentication with pre-defined users.
+
+### 1. Run the EULogin Container
+
+1. Log in to Docker with access to the Circabc GitHub repository:
+   ```bash
+   docker login ghcr.io
+   ```
+2. Pull the EULogin mockup image:
+     ```bash
+    docker pull ghcr.io/circabc/circabc_rest/eulogin/mockserver:9.10.6
+   ```
+
+
+3. Run the eulogin container:
+   ```bash
+   cd eulogin
+   docker-compose up -d
+   ```
+
+4. Access eulogin at [https://eulogin:7002](https://eulogin:7002):
+   - First, map `eulogin` to your local IP in your host file (`/etc/hosts` on Linux/Mac or `C:\Windows\System32\drivers\etc\hosts` on Windows).
+   - Login with admin credentials:
+     - Username: `bournja`
+     - Password: `Admin123`
+
+5. Connect to EUSurvey with users defined in your EULogin configuration:
+   - Example users:
+     - bournja/Admin123
+     - chucknorris/Qwerty098
+
+### 2. Run the OpenLDAP Container
+
+1.  Run the OpenLDAP container:
+   ```bash
+   cd openldap
+   docker-compose up -d
+   ```
+
+2. Check OpenLDAP with [Apache Directory Studio](https://directory.apache.org/studio/):
+   - Connection details:
+     - Bind DN or user: `cn=admin,dc=cec,dc=eu,dc=int`
+     - Password: `EC1234`
+
+
+Happy Surveying!

docker/docker-compose.yaml

@@ -10,16 +10,31 @@ services:
     volumes:
         - ./mysql:/docker-entrypoint-initdb.d/:ro
     command: --lower_case_table_names=1 --transaction-isolation=READ-COMMITTED
+    networks:
+      - eusurvey_network
   server:
     build: server
+    container_name: eusurvey_server
     image: tomcat-eusurvey-server
     volumes:
       - type: bind
         source: ~/eusurveytemp
         target: /eusurveytemp/
     ports:
-      - "8888:8080"
+      - "8080:8080"
       - "8886:8886"
-    container_name: tomcat_eusurvey_server
     depends_on:
-      - db
+      - db
+    networks:
+      - eusurvey_network
+  maildev:
+    container_name: maildev
+    image: maildev/maildev
+    ports:
+      - "1080:1080"
+      - "1025:1025"
+    networks:
+      - eusurvey_network
+networks:
+  eusurvey_network:
+    driver: bridge 

docker/eulogin/README.md

@@ -0,0 +1,93 @@
+# EU Login Mock Server Setup
+
+## Overview
+
+This configuration sets up the EU Login 9.10.6 Mock Server using Docker. This mock server can be useful for testing authentication systems against a simulated EU Login environment.
+
+## Prerequisites
+
+- Docker and Docker Compose installed on your machine.
+- Access to the GitHub Docker repository, requiring a personal access token for authentication.
+
+## Configuration Steps
+
+### 1. Authenticate to GitHub Docker Repository
+
+Before pulling the Docker image, authenticate to the GitHub Docker repository using your personal access token that has "Package Write" access rights. Run the following command in your terminal:
+
+    docker login ghcr.io -u USERNAME
+
+Replace `USERNAME` with your GitHub username and provide your Personal Access Token as password.
+
+### 2. Configure Hosts File
+
+To ensure the Docker container is accessible via the hostname `eulogin`, add the following entry to your hosts file:
+
+    127.0.0.1 eulogin
+
+### 3. Configure Mock Server Users
+
+If you need to add users to the mock server, update the configuration files located in:
+
+    docker/eulogin/eulogin-mockup-config
+
+### 4. Running the Server
+
+Navigate to the directory containing your `docker-compose.yml` file, 
+update the location of the eulogin config (`<path_to_eulogin_config>`)
+
+```yaml
+version: '3.8'
+
+services:
+  eulogin-mockserver:
+    image: eulogin/mockserver:9.10.6
+    container_name: eulogin-mockserver
+    hostname: eulogin
+    extra_hosts:
+      - "eulogin:127.0.0.1"
+      - "host.docker.internal:host-gateway"
+    ports:
+      - "7001:7001"
+      - "7002:7002"
+      - "7003:7003"
+    volumes:
+      - /<path_to_eulogin_config>/eulogin-mockup-config:/data/ecas-mock-server-shared
+    stdin_open: true
+    tty: true
+
+```
+
+and start the service:
+
+    docker-compose up
+
+
+
+### 5. Accessing the EU Login Mock Server
+
+After the server starts, you can access the EU Login Mock Server at:
+
+    https://eulogin:7002
+
+Admin user is :
+```
+username : bournja 
+password : Admin123
+```
+
+Some regular users are :
+```
+| Username   | Password            |
+|------------|----------------------|
+| chucknorris| Qwerty098            |
+| lsalander  | dragon_tattoo        |
+| jb007      | shaken_not_stirred   |
+| jackbauer  | !CTU4Ev3r$#@         |
+
+```
+## Ports Used
+
+- `7001`: Port 7001
+- `7002`: Port 7002 (main access port)
+- `7003`: Port 7003

docker/eulogin/docker-compose.yaml

@@ -0,0 +1,23 @@
+version: '3.8'
+
+services:
+  eulogin:
+    image: ghcr.io/circabc/circabc_rest/eulogin/mockserver:9.10.6
+    container_name: eulogin
+    hostname: eulogin
+    extra_hosts:
+      - "eulogin:127.0.0.1"
+      - "host.docker.internal:host-gateway"
+    ports:
+      - "7001:7001"
+      - "7002:7002"
+      - "7003:7003"
+    volumes:
+      - ./eulogin-mockup-config:/data/ecas-mock-server-shared
+    stdin_open: true
+    tty: true
+    networks:
+      - docker_eusurvey_network
+networks:
+  docker_eusurvey_network:
+    external: true

docker/eulogin/eulogin-mockup-config/eidasConfiguration.xml

@@ -0,0 +1,58 @@
+<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
+<!--
+  ~ ECAS Software
+  ~ Copyright (c) 2017 European Commission
+  ~ Licensed under the EUPL
+  ~ You may not use this work except in compliance with the Licence.
+  ~ You may obtain a copy of the Licence at:
+  ~ http://ec.europa.eu/idabc/eupl
+  ~
+  ~ This product includes the CAS software developed by Yale University,
+  ~ Copyright (c) 2000-2004 Yale University. All rights reserved.
+  ~ THE CAS SOFTWARE IS PROVIDED "AS IS," AND ANY EXPRESS OR IMPLIED
+  ~ WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF
+  ~ MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE, ARE EXPRESSLY
+  ~ DISCLAIMED. IN NO EVENT SHALL YALE UNIVERSITY OR ITS EMPLOYEES BE
+  ~ LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
+  ~ CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED, THE COSTS OF
+  ~ PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA OR
+  ~ PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF
+  ~ LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING
+  ~ NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS
+  ~ SOFTWARE, EVEN IF ADVISED IN ADVANCE OF THE POSSIBILITY OF SUCH
+  ~ DAMAGE.
+  -->
+
+<!--
+################################################################################
+#                                                                              #
+#   ECAS Server eIDAS Configuration properties file - eidasConfiguration.xml   #
+#                                                                              #
+#                                                                              #
+#   This file holds mutable eIDAS configuration information.                   #
+#                                                                              #
+# Any change in this file is reflected in the ECAS eIDAS component at runtime. #
+#                                                                              #
+################################################################################
+ -->
+
+<eidasConfiguration xmlns="https://ecas.ec.europa.eu/cas/schemas/eidas/eidasConfiguration.xsd"
+                    xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
+                    xsi:schemaLocation="https://ecas.ec.europa.eu/cas/schemas/eidas/eidasConfiguration.xsd https://ecas.ec.europa.eu/cas/schemas/eidas/eidasConfiguration.xsd">
+    <proxyServiceMetadatas>
+        <proxyServiceMetadata id="a1">
+            <countryCode>CD</countryCode>
+            <signatureCertificates>
+                <signatureCertificate>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</signatureCertificate>
+            </signatureCertificates>
+            <tlsCertificates>
+                <tlsCertificate>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</tlsCertificate>
+                <tlsCertificate>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</tlsCertificate>
+                <tlsCertificate>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</tlsCertificate>
+            </tlsCertificates>
+            <url><![CDATA[https://<SERVERNAME>:<PORT.HTTPS>/EidasNode/ServiceMetadata]]></url>
+            <useNetworkProxy>false</useNetworkProxy>
+            <skewTimeInMillis>10</skewTimeInMillis>
+        </proxyServiceMetadata>
+    </proxyServiceMetadatas>
+</eidasConfiguration>