luna/mastodon
0
0
Fork 0
mirror of https://github.com/lunaisnotaboy/mastodon.git synced 2024-11-05 06:26:21 +00:00
Code Issues Projects Releases Wiki Activity
mastodon/Dockerfile

88 lines
2.6 KiB
Docker
Raw Normal View History

Update Ruby to version 2.4.4 (#6964) https://www.ruby-lang.org/en/news/2018/03/28/ruby-2-4-4-released/ > This release includes some bug fixes and some security fixes. > > - CVE-2017-17742: HTTP response splitting in WEBrick > - CVE-2018-6914: Unintentional file and directory creation with directory traversal in tempfile and tmpdir > - CVE-2018-8777: DoS by large request in WEBrick > - CVE-2018-8778: Buffer under-read in String#unpack > - CVE-2018-8779: Unintentional socket creation by poisoned NUL byte in UNIXServer and UNIXSocket > - CVE-2018-8780: Unintentional directory traversal by poisoned NUL byte in Dir > - Multiple vulnerabilities in RubyGems
2018-04-01 21:43:08 +00:00
FROM ruby:2.4.4-alpine3.6
Adding a docker-compose template for running Mastodon easily
2016-03-14 20:39:39 +00:00
add metadata to Dockerfile
2017-04-06 18:57:16 +00:00
LABEL maintainer="https://github.com/tootsuite/mastodon" \
Separate chown command in Dockerfile. Use tootsuite/mastodon image (#6662) Fix #6605
2018-03-07 00:57:31 +00:00
description="Your self-hosted, globally interconnected microblogging community"
add metadata to Dockerfile
2017-04-06 18:57:16 +00:00
Set Docker permissions during the build process (#6514) * Set Docker permissions during the build process * Remove docker_entrypoint.sh and use COPY with chown
2018-02-20 16:25:01 +00:00
ARG UID=991
ARG GID=991
Add /mastodon/bin to $PATH (#7889)
2018-06-25 11:30:25 +00:00
ENV PATH=/mastodon/bin:$PATH \
RAILS_SERVE_STATIC_FILES=true \
RAILS_ENV=production \
NODE_ENV=production
Adding a docker-compose template for running Mastodon easily
2016-03-14 20:39:39 +00:00
Downgrade Dockerfile to Ruby 2.4.3 on Alpine 3.6 (#6806) Fix 6734
2018-03-17 13:06:25 +00:00
ARG YARN_VERSION=1.3.2
ARG YARN_DOWNLOAD_SHA256=6cfe82e530ef0837212f13e45c1565ba53f5199eec2527b85ecbcd88bf26821d
Use GNU libiconv in Nokogiri (#4494) System default libiconv of Alpine Linux only supports some charset (e.g. UTF-8). Therefore, the preview card of the page which is not UTF-8 will be broken in the Docker environment. Using GNU libiconv!
2017-08-03 16:04:36 +00:00
ARG LIBICONV_VERSION=1.15
ARG LIBICONV_DOWNLOAD_SHA256=ccf536620a45458d26ba83887a983b96827001e92a13847b45e4925cc8913178
add metadata to Dockerfile
2017-04-06 18:57:16 +00:00
EXPOSE 3000 4000
Adding a docker-compose template for running Mastodon easily
2016-03-14 20:39:39 +00:00
WORKDIR /mastodon
Update to Alpine 3.6 (#4747)
2017-08-30 21:52:19 +00:00
RUN apk -U upgrade \
Some Dockerfile improvements (#3182) - improve docker_entrypoint.sh - serve static files with puma by default - sort packages list - use virtual package for build deps - show how to assign UID/GID
2017-05-20 18:01:05 +00:00
&& apk add -t build-dependencies \
build-base \
Move icu-dev to build-dependencies (#4240)
2017-07-18 13:19:49 +00:00
icu-dev \
Install libidn with Docker (#4219)
2017-07-16 02:40:56 +00:00
libidn-dev \
Update Yarn to version 1.1.0 (#5125) * Update Yarn to version 1.1.0 * remove hard-coding
2017-09-28 02:51:36 +00:00
libressl \
Use GNU libiconv in Nokogiri (#4494) System default libiconv of Alpine Linux only supports some charset (e.g. UTF-8). Therefore, the preview card of the page which is not UTF-8 will be broken in the Docker environment. Using GNU libiconv!
2017-08-03 16:04:36 +00:00
libtool \
Some Dockerfile improvements (#3182) - improve docker_entrypoint.sh - serve static files with puma by default - sort packages list - use virtual package for build deps - show how to assign UID/GID
2017-05-20 18:01:05 +00:00
postgresql-dev \
protobuf-dev \
Make Docker image buildable on ARM (#2065) * after yarn upgrade * after manually removing node-gyp as top level dependency
2017-04-20 11:29:38 +00:00
python \
Some Dockerfile improvements (#3182) - improve docker_entrypoint.sh - serve static files with puma by default - sort packages list - use virtual package for build deps - show how to assign UID/GID
2017-05-20 18:01:05 +00:00
&& apk add \
ca-certificates \
ffmpeg \
file \
Re-add git and nodejs-npm to Dockerfile (#6810) Fix #6809 I don't know why, either
2018-03-17 14:28:09 +00:00
git \
Move icu-dev to build-dependencies (#4240)
2017-07-18 13:19:49 +00:00
icu-libs \
Update to Alpine 3.6 (#4747)
2017-08-30 21:52:19 +00:00
imagemagick \
Install libidn with Docker (#4219)
2017-07-16 02:40:56 +00:00
libidn \
update Dockerfile
2017-04-02 22:46:44 +00:00
libpq \
Update to Alpine 3.6 (#4747)
2017-08-30 21:52:19 +00:00
nodejs \
Re-add git and nodejs-npm to Dockerfile (#6810) Fix #6809 I don't know why, either
2018-03-17 14:28:09 +00:00
nodejs-npm \
Use CLD3 (#2949) Compact Language Detector v3 (CLD3) is the successor of CLD2, which was used in the previous implementation. CLD3 includes improvements since CLD2, and supports newer compilers. On the other hand, it has additional requirements and cld3-ruby, the FFI of CLD3 for Ruby, is still new and may be still inmature. Though CLD3 is named after CLD2, it is implemented with a neural network model, different from the old implementation, which is based on a Naïve Bayesian classifier. CLD3 supports newer compilers, such as GCC 6. CLD2 is not compatible with GCC 6 because it assigns negative values to varibales typed unsigned. (see internal/cld_generated_cjk_uni_prop_80.cc) The support for GCC 6 and newer compilers are essential today, when some server operating system such as Ubuntu Server 16.10 has GCC 6 by default. On the one hand, CLD3 requires C++11 support. Environments with old compilers such as Ubuntu Server 14.04 needs to update the system or install a newer compiler. CLD3 needs protocol buffers as a new dependency. However,it is not considered problematic because major server operating systems, CentOS and Ubuntu Server provide them. The FFI cld3-ruby was written by me (Akihiko Odaki) for use in Mastodon. It is still new and may be inmature, but confirmed to pass existing tests.
2017-05-09 17:58:03 +00:00
protobuf \
Some Dockerfile improvements (#3182) - improve docker_entrypoint.sh - serve static files with puma by default - sort packages list - use virtual package for build deps - show how to assign UID/GID
2017-05-20 18:01:05 +00:00
tini \
Fix "tzinfo-data is not present" docker error (#6300) when starting the container.
2018-01-19 18:11:19 +00:00
tzdata \
Update CA certificates in Dockerfile (#2339)
2017-04-23 02:59:56 +00:00
&& update-ca-certificates \
Downgrade Dockerfile to Ruby 2.4.3 on Alpine 3.6 (#6806) Fix 6734
2018-03-17 13:06:25 +00:00
&& mkdir -p /tmp/src /opt \
&& wget -O yarn.tar.gz "https://github.com/yarnpkg/yarn/releases/download/v$YARN_VERSION/yarn-v$YARN_VERSION.tar.gz" \
&& echo "$YARN_DOWNLOAD_SHA256 *yarn.tar.gz" | sha256sum -c - \
&& tar -xzf yarn.tar.gz -C /tmp/src \
&& rm yarn.tar.gz \
&& mv /tmp/src/yarn-v$YARN_VERSION /opt/yarn \
&& ln -s /opt/yarn/bin/yarn /usr/local/bin/yarn \
Add symbolic link for yarnpkg (#7894)
2018-06-26 18:34:01 +00:00
&& ln -s /opt/yarn/bin/yarnpkg /usr/local/bin/yarnpkg \
Change libinconv download URL to HTTPS (#5738)
2017-11-17 17:21:05 +00:00
&& wget -O libiconv.tar.gz "https://ftp.gnu.org/pub/gnu/libiconv/libiconv-$LIBICONV_VERSION.tar.gz" \
Use GNU libiconv in Nokogiri (#4494) System default libiconv of Alpine Linux only supports some charset (e.g. UTF-8). Therefore, the preview card of the page which is not UTF-8 will be broken in the Docker environment. Using GNU libiconv!
2017-08-03 16:04:36 +00:00
&& echo "$LIBICONV_DOWNLOAD_SHA256 *libiconv.tar.gz" | sha256sum -c - \
&& tar -xzf libiconv.tar.gz -C /tmp/src \
&& rm libiconv.tar.gz \
&& cd /tmp/src/libiconv-$LIBICONV_VERSION \
&& ./configure --prefix=/usr/local \
[Docker] Add multicore support to "make" and "bundler" (#4544) * Let make and bundler use multiple cores * Adds -j option to bundle install instead of bundle config
2017-08-07 16:55:07 +00:00
&& make -j$(getconf _NPROCESSORS_ONLN)\
Use GNU libiconv in Nokogiri (#4494) System default libiconv of Alpine Linux only supports some charset (e.g. UTF-8). Therefore, the preview card of the page which is not UTF-8 will be broken in the Docker environment. Using GNU libiconv!
2017-08-03 16:04:36 +00:00
&& make install \
&& libtool --finish /usr/local/lib \
&& cd /mastodon \
update Dockerfile
2017-04-02 22:46:44 +00:00
&& rm -rf /tmp/* /var/cache/apk/*
Validations for local profiles
2016-03-16 10:18:09 +00:00
Reduce container size with clean yarn (#3506) * Reduce container size with clean yarn * Merge trouble
2017-09-30 20:05:24 +00:00
COPY Gemfile Gemfile.lock package.json yarn.lock .yarnclean /mastodon/
Replace sprockets/browserify with Webpack (#2617) * Replace browserify with webpack * Add react-intl-translations-manager * Do not minify in development, add offline-plugin for ServiceWorker background cache updates * Adjust tests and dependencies * Fix production deployments * Fix tests * More optimizations * Improve travis cache for npm stuff * Re-run travis * Add back support for custom.scss as before * Remove offline-plugin and babili * Fix issue with Immutable.List().unshift(...values) not working as expected * Make travis load schema instead of running all migrations in sequence * Fix missing React import in WarningContainer. Optimize rendering performance by using ImmutablePureComponent instead of React.PureComponent. ImmutablePureComponent uses Immutable.is() to compare props. Replace dynamic callback bindings in <UI /> * Add react definitions to places that use JSX * Add Procfile.dev for running rails, webpack and streaming API at the same time
2017-05-03 00:04:16 +00:00
Use GNU libiconv in Nokogiri (#4494) System default libiconv of Alpine Linux only supports some charset (e.g. UTF-8). Therefore, the preview card of the page which is not UTF-8 will be broken in the Docker environment. Using GNU libiconv!
2017-08-03 16:04:36 +00:00
RUN bundle config build.nokogiri --with-iconv-lib=/usr/local/lib --with-iconv-include=/usr/local/include \
[Docker] Add multicore support to "make" and "bundler" (#4544) * Let make and bundler use multiple cores * Adds -j option to bundle install instead of bundle config
2017-08-07 16:55:07 +00:00
&& bundle install -j$(getconf _NPROCESSORS_ONLN) --deployment --without test development \
Upgrade webpack to version v4.x (#6655)
2018-07-14 01:56:41 +00:00
&& yarn install --pure-lockfile --ignore-engines \
Reduce container size with clean yarn (#3506) * Reduce container size with clean yarn * Merge trouble
2017-09-30 20:05:24 +00:00
&& yarn cache clean
Replace sprockets/browserify with Webpack (#2617) * Replace browserify with webpack * Add react-intl-translations-manager * Do not minify in development, add offline-plugin for ServiceWorker background cache updates * Adjust tests and dependencies * Fix production deployments * Fix tests * More optimizations * Improve travis cache for npm stuff * Re-run travis * Add back support for custom.scss as before * Remove offline-plugin and babili * Fix issue with Immutable.List().unshift(...values) not working as expected * Make travis load schema instead of running all migrations in sequence * Fix missing React import in WarningContainer. Optimize rendering performance by using ImmutablePureComponent instead of React.PureComponent. ImmutablePureComponent uses Immutable.is() to compare props. Replace dynamic callback bindings in <UI /> * Add react definitions to places that use JSX * Add Procfile.dev for running rails, webpack and streaming API at the same time
2017-05-03 00:04:16 +00:00
Fix permissions for volumes (#6637) When volumes are declared, but the corresponding directories don't exist, permissions for those directories will be root:root instead of mastodon:mastodon.. This changes makes sure the permissions of the volume directories are as expected.
2018-03-05 15:45:09 +00:00
RUN addgroup -g ${GID} mastodon && adduser -h /mastodon -s /bin/sh -D -G mastodon -u ${UID} mastodon \
&& mkdir -p /mastodon/public/system /mastodon/public/assets /mastodon/public/packs \
&& chown -R mastodon:mastodon /mastodon/public
Fix #2680 - Run processes in Docker as non-root user (#3159)
2017-05-20 13:12:29 +00:00
Separate chown command in Dockerfile. Use tootsuite/mastodon image (#6662) Fix #6605
2018-03-07 00:57:31 +00:00
COPY . /mastodon
RUN chown -R mastodon:mastodon /mastodon
Fix #2680 - Run processes in Docker as non-root user (#3159)
2017-05-20 13:12:29 +00:00
Replace sprockets/browserify with Webpack (#2617) * Replace browserify with webpack * Add react-intl-translations-manager * Do not minify in development, add offline-plugin for ServiceWorker background cache updates * Adjust tests and dependencies * Fix production deployments * Fix tests * More optimizations * Improve travis cache for npm stuff * Re-run travis * Add back support for custom.scss as before * Remove offline-plugin and babili * Fix issue with Immutable.List().unshift(...values) not working as expected * Make travis load schema instead of running all migrations in sequence * Fix missing React import in WarningContainer. Optimize rendering performance by using ImmutablePureComponent instead of React.PureComponent. ImmutablePureComponent uses Immutable.is() to compare props. Replace dynamic callback bindings in <UI /> * Add react definitions to places that use JSX * Add Procfile.dev for running rails, webpack and streaming API at the same time
2017-05-03 00:04:16 +00:00
VOLUME /mastodon/public/system /mastodon/public/assets /mastodon/public/packs
Fix #2680 - Run processes in Docker as non-root user (#3159)
2017-05-20 13:12:29 +00:00
Set Docker permissions during the build process (#6514) * Set Docker permissions during the build process * Remove docker_entrypoint.sh and use COPY with chown
2018-02-20 16:25:01 +00:00
USER mastodon
ENTRYPOINT ["/sbin/tini", "--"]
Reference in a new issue Copy permalink