Commit Graph

200 Commits (main)

Author SHA1 Message Date
Matt Jankowski 5efb00ddb8
Use ruby version 3.2.3 (#28817) 2 years ago
Michael Stanclift c652b0e46b
Add wget to base Dockerfile (#28548) 2 years ago
Michael Stanclift 8710bdb183
Fix mastodon user not being owner of tmp folder in Dockerfile (#28137) 2 years ago
Michael Stanclift c40cfc5d09
Fix apt cache not being properly utilized in Dockerfile (#28115) 2 years ago
Michael Stanclift 7a3b41eb54
Fix incorrect apt-get install block in Dockerfile (#28112) 2 years ago
Michael Stanclift a80530d1df
Dockerfile rewrite based on Ruby image with performance optimizations and size reduction, dedicated Streaming image (#26850)
Co-authored-by: “Michael <“mx@vmstan.com>
Co-authored-by: Emelia Smith <ThisIsMissEm@users.noreply.github.com>
2 years ago
Tim Campbell 60f143e41f
Fixed yarn not installing node packages for streaming (#27967) 2 years ago
Renaud Chaput 757d7c73c0
Upgrade to Yarn 4, remove support for Node 16 (#27073) 2 years ago
renovate[bot] 9c34bb4d54
Update Node.js to v20.9 (#27714)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2 years ago
Michael Stanclift b1885387b6
Fix missing libyaml-dev dependency in Dockerfile (#27533) 2 years ago
renovate[bot] 829be02abe
Update Node.js to v20.8 (#27240)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2 years ago
renovate[bot] a4c29a4e51
Update Node.js to v20.7 (#27112)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2 years ago
Renaud Chaput ef8ca2fd72
Change Dockerfile to upgrade packages when building (#26922) 2 years ago
Renaud Chaput e9b528eaee
Use NodeJS v20 by default (#26830) 2 years ago
Michael Stanclift b749de766f
Migrate Dockerfile to Bookworm (#26802) 2 years ago
Claire f39847476c
Change the pre-release versioning scheme and associated environment variables (#26653) 2 years ago
Nick Schonning 99e2e9b81f
Fix minor typos in comments and spec names (#21831) 2 years ago
Tim Campbell ac41a9712e
Fixed mastodon version injection into containers via github actions (#24858) 2 years ago
Renaud Chaput 830e6cefae
Add version suffixes to nightly & edge image builds (#24823) 2 years ago
Nick Schonning 862861069d
Update Node.js to 16.20.0 (#24316) 2 years ago
Nick Schonning 26682d4c22
Remove duplicate ca-certificates Docker install (#24231) 2 years ago
Sai f318f1ef0e
Bump ruby to 3.2.2 due to ReDoS vulnerabilities (#24320) 3 years ago
Nick Schonning e7e189fa44
Use Yarn production install for asset compile (#24232) 3 years ago
Aaron Patterson fb8503e861
Upgrade to Ruby 3.2 (#22928)
Co-authored-by: Matthew Ford <matt@bitzesty.com>
3 years ago
Nick Schonning 841263a548
Update Ruby to 3.0.5 (#23544) 3 years ago
Nick Schonning c6b7e04120
Sync Node.js to 16.19 patch release (#23554) 3 years ago
Nick Schonning a1c0573bc6
Yarn cache cleanup right after install in Docker (#23557) 3 years ago
Moritz Heiber a0813806d6
Add hadolint as Dockerfile linter (#20993)
* Added hadolint as Dockerfile linter in pipeline and resolved remaining hadolint issues in Dockerfile

* Use more specific version of hadolint Action

* Bumpt hadolint Action version to latest version to avoid deprecation notice

* Being _really_ specific now
3 years ago
Nick Schonning 736b4283b0
Update Node 16.18.1 for latest security release (#22019)
* Update Node 16.18.1 for latest security release

* Increase Yarn network timeout for build error
3 years ago
BtbN f343ed42ff
Add missing procps package to Dockerfile (#21028)
The new Debian-Base does not come with this by default, making the ps based health-check in the compose file fail
3 years ago
Effy Elden 231e3ec552
Remove blank line from start of Dockerfile breaking syntax declaration (#20948) 3 years ago
Moritz Heiber 1b5ed32085
Split off Dockerfile components for faster build times (#20933) 3 years ago
Kohei Ota (inductor) 92734e3df1
Use buildx functions for faster build (#20692)
* Use buildx functions for faster build

* move link

* cannot use --link with --chown
3 years ago
Yamagishi Kazutoshi 5cf056fdb0
Install python3 when building with Docker (#18072) 3 years ago
Daniel Jakots 0c99c6c3df
Update Node to 16.17.1 (#19224)
See
https://nodejs.org/en/blog/vulnerability/september-2022-security-releases/
for the details.
3 years ago
zunda 113dd90aa3
Bump Ruby version from 3.0.3 to 3.0.4 (#18028)
https://www.ruby-lang.org/en/news/2022/04/12/ruby-3-0-4-released/
3 years ago
Daniel Jakots 9f61f22a3b
Update node to 16.16.0 (#18790)
See https://nodejs.org/en/blog/vulnerability/july-2022-security-releases/
3 years ago
Shlee 602f291da9
Update Dockerfile (#18717) 3 years ago
Daniel Jakots 8ee4fde19b Bump NODE_VER to 16.14.2 (#17825)
See the announcement
https://nodejs.org/en/blog/vulnerability/mar-2022-security-releases/
4 years ago
Yamagishi Kazutoshi 298491a816
Remove protobuf dependencies (#17539) 4 years ago
Daniel Jakots aa45404578
Bump NODE_VER to 16.13.2, to solve security issues (#17399)
Fixes CVE-2021-44532, CVE-2021-44533, and CVE-2022-21824.
See: https://nodejs.org/en/blog/vulnerability/jan-2022-security-releases/
4 years ago
Jeong Arm fad37dd1bc
Save bundle config as local (#17188)
Some bundle options are saved as global user config and not project local.
Specially, `deployment` must be saved as local config to be run on copied environment
4 years ago
zunda 46e62fc4b3
Upgrade Ruby to 3.0.3 (#17038)
https://www.ruby-lang.org/en/news/2021/11/24/ruby-3-0-3-released/
4 years ago
Shlee d647f6ad04
Update Dockerfile (#16939) 4 years ago
Shlee c242c1d87a
Ruby 3.0.2 Upgrade (#16982)
* Update .ruby-version

* Update Gemfile

* Update Gemfile.lock

* Update Dockerfile

* Update check-i18n.yml

* Update config.yml

* Update config.yml
4 years ago
Shlee 03338d1297
[Dockerfile] [Security] Update NodeJS to V16 (LTS) on docker. (#16856)
* [Security] Update NodeJS on docker.

https://nodejs.org/en/blog/vulnerability/oct-2021-security-releases/

* Update Dockerfile

* Upgrade npm package

* Update Dockerfile
4 years ago
David Sterry f68772fd6a
add bundle flag to suppress root warning (#16557) 4 years ago
Shlee 12cb6ed461
Update Dockerfile (#16696) 4 years ago
Shlee 229f5d1681
NodeJS 14 support - circleci/docker/.nvmrc (#16163)
* Update config.yml

* Update Dockerfile

* Update .nvmrc

* Update Dockerfile

* NodeJS 10 is EOL.

* Update package.json

* Update README.md

* Update Vagrantfile

* Update Dockerfile

* Update Dockerfile
4 years ago
Daigo 3 Dango 3d5183e99c
Use ruby-2.7.4 (#16481)
Stop using older version of resolv gem as the bug has been fixed.
https://bugs.ruby-lang.org/issues/17781
4 years ago
Claire d95128c99d
Revert default Ruby version to 2.7.2 (#16154)
Ruby 2.7.3 introduced a new bug with Resolv::DNS, which we heavily use within
Mastodon: https://bugs.ruby-lang.org/issues/17781

Ruby 2.7.3 also included security fixes for two CVEs, but those do not seem
to apply to Mastodon:
https://github.com/tootsuite/mastodon/pull/16004#issuecomment-815125025
4 years ago
Daigo 3 Dango 3f8d0de82e
Upgrade Ruby to 2.7.3 (#16004)
* Upgrade Ruby to 2.7.3

https://www.ruby-lang.org/en/news/2021/04/05/ruby-2-7-3-released/
includes security fixes to
- CVE-2021-28965: XML round-trip vulnerability in REXML
- CVE-2021-28966: Path traversal in Tempfile on Windows

* Update rexml to 3.2.5

https://www.ruby-lang.org/en/news/2021/04/05/xml-round-trip-vulnerability-in-rexml-cve-2021-28965/
5 years ago
Mashiro e3f1107975
build: install shared-mime-info in Dockerfile (#15978) 5 years ago
Sandro 46d3d3169e
Docker: Use precompiled jemalloc, format, apply hadolint suggestions (#10823)
* Format, apply hadolint suggestions, little nitpicks

* Use pre compiled jemalloc

* Use tini from package repository
5 years ago
Shlee f56cf6e9d0
Update Dockerfile (#15869) 5 years ago
Daniel Jakots b4281f5a51
Update to Node.js-12.20.1 (#15558)
This is a security release. You can read the announce at
https://nodejs.org/en/blog/vulnerability/january-2021-security-releases/
5 years ago
kaiyou 1817f96578
Fix the Dockerfile in case of Kaniko build (#15510)
Kaniko does not support looking up binaries from $PATH, so we
specify the full path to the bash binary.

Co-authored-by: kaiyou <dev@kaiyou.fr>
5 years ago
Shlee b429d33e46
Update Dockerfile (#15232) 5 years ago
Daigo 3 Dango 541b9f8c1c
Use Ruby 2.7.2 (#15150)
thwait and e2mmap are no longer needed in Gemfile.
Gems properly require those.
5 years ago
Kairui Song | 宋恺睿 03b5f09ffc
Minor fix & improvement for the Dockerfile (#14686)
* Dockerfile: Fix building with multiarch

Tested on amd64 and arm64

* Reduce docker image size by clean up some unneeded source file
5 years ago
Shlee 9ea91bbf59
Update Dockerfile (#13582) 5 years ago
Shlee e4a1ebf721
[Security] Update Dockerfile for Ruby 2.6.6 (#13393) 6 years ago
Shlee 51a1fbaafc
[Security] Bump Node.js from 12.14.0 to 12.16.1 in Docker (#13235)
* Update Dockerfile

* Update Dockerfile
6 years ago
Sara Aimée Smiseth 250ca99cb5
Fix non-x64 architectures not being able to build Docker image because of hardcoded Node.js architecture (#13081)
* Use ARCH variable instead of hardcoded x64

* fix formating
6 years ago
Shlee 71baacb49a Update Dockerfile (#12997) 6 years ago
Shlee e7d3495874 Upgrade Node v12 in Dockerfile (#12703) 6 years ago
Shlee 6c2c2eee46 Updated NodeJS in Dockerfile (#12492) 6 years ago
David Caldwell 3b609da9bd Dockerfile: put back EXPOSE directive (#12279)
[Rkt](https://coreos.com/rkt) doesn't allow ports to be exposed to containers unless they are declared in the container manifest. Re-adding EXPOSE back in (removed in 1dbf993bce) allows the container to be used on rkt based systems.
6 years ago
Shlee f8a0c00920 Update nodejs in Dockerfile (#12052) 6 years ago
Shlee ea8c781ec7 Update Ruby in Dockerfile (#12050) 6 years ago
Yamagishi Kazutoshi d7ed697030 Use prebuilt node.js on Docker image (#11768) 6 years ago
Shlee 59b013df5f Update NodeJS source for Docker Image (#11707)
* Update Ruby/Node/jemalloc source for Docker Image

* Update Dockerfile

* Update Dockerfile
6 years ago
Shlee 33f4b6e1eb Update Dockerfile (#11710) 6 years ago
Eugen Rochko 15c7478c55
Change Dockerfile to bind to 0.0.0.0 instead of docker-compose.yml (#11351) 6 years ago
Sandro Jäckel 1e6a1ea075 Docker: Remove dist-upgrade (#10822) 6 years ago
Sandro Jäckel c90f3b9865 Docker: Keep /var/lib/apt/ to keep apt working (#10830) 6 years ago
Alfie John 0852e643b7 Expand abbreviation to minimise confusion (#10826) 6 years ago
Ben Lubar d36fcb54c4 Re-organize Dockerfile to improve incremental builds. (#10212)
- Always run apt update before any other apt command. (This fixes
  incremental builds failing if a remote package is updated.)
- Only copy dependency lists before installing dependencies. (This means
  editing code doesn't force all dependencies to be re-downloaded.)
- Delete cache in the same layer that it is created. (Otherwise,
  deleting cache *increases* the size of the image on non-squashed
  builds.)
- Move the installation of some static dependencies to *before* Mastodon
  code is imported to Docker.
7 years ago
mohemohe 16fb39cffc Fix fail health check due to missing wget (#10110) 7 years ago
Sir-Boops 1dbf993bce Switch to Ubuntu for docker (#10100) 7 years ago
J0WI 26c1aba658 Do not use apk cache and upgrade (#9966) 7 years ago
J0WI 11d1502853 Replace LibreSSL by OpenSSL (#9975) 7 years ago
ashleyhull-versent 5c873a4ed7 Update Dockerfile (#9965) 7 years ago
ashleyhull-versent 8ec539fef1 Update Dockerfile (#9796) 7 years ago
Yamagishi Kazutoshi ea03faa167 Installing libxml2 and libxslt on Docker (#9680) 7 years ago
Isatis 5f0d3e8bad Dockerfile: Nodejs 8.12 -> 8.14 (#9532) 7 years ago
ashleyhull-versent 51677ff070 Update Dockerfile (#9026) 7 years ago
Isatis 49b182cd51 Dockerfile: update Node to 8.12.0 and put Ruby on Alpine 3.7 for build system memory help (#8842) 7 years ago
ashleyhull-versent 94f9cb0855 Revert "Updated ruby/node images" (#8712)
* Revert "update vagrant configs (#8706)"

This reverts commit 8971bb8cf2.

* Revert "Updated ruby/node images (#8700)"

This reverts commit 5aae71cf60.
7 years ago
ashleyhull-versent 5aae71cf60 Updated ruby/node images (#8700) 7 years ago
Kevin Liu 68cccb00ef Dockerfile: run asset precompilation as a build step (#7780)
* Dockerfile: run asset precompilation as a build step

* Replace OTP_SECRET and SECRET_KEY_BASE with placeholders
7 years ago
Yamagishi Kazutoshi 0eacf2b419 Upgrade Node.js to v8.x on Docker image (#8019) 7 years ago
Yamagishi Kazutoshi e9b322d0a6 Upgrade webpack to version v4.x (#6655) 7 years ago
Yamagishi Kazutoshi 523d8f20e3 Add symbolic link for yarnpkg (#7894) 7 years ago
Yamagishi Kazutoshi 097fd44978 Add /mastodon/bin to $PATH (#7889) 7 years ago
Yamagishi Kazutoshi f464f98fd3 Update Ruby to version 2.4.4 (#6964)
https://www.ruby-lang.org/en/news/2018/03/28/ruby-2-4-4-released/

> This release includes some bug fixes and some security fixes.
>
> - CVE-2017-17742: HTTP response splitting in WEBrick
> - CVE-2018-6914: Unintentional file and directory creation with directory traversal in tempfile and tmpdir
> - CVE-2018-8777: DoS by large request in WEBrick
> - CVE-2018-8778: Buffer under-read in String#unpack
> - CVE-2018-8779: Unintentional socket creation by poisoned NUL byte in UNIXServer and UNIXSocket
> - CVE-2018-8780: Unintentional directory traversal by poisoned NUL byte in Dir
> - Multiple vulnerabilities in RubyGems
8 years ago
Eugen Rochko 844616e950
Re-add git and nodejs-npm to Dockerfile (#6810)
Fix #6809

I don't know why, either
8 years ago
Eugen Rochko 0074cad44f
Downgrade Dockerfile to Ruby 2.4.3 on Alpine 3.6 (#6806)
Fix 6734
8 years ago
Akihiko Odaki 36579bac88 Use Alpine Linux yarn package in Docker (#6725)
Yarn was manually installed to meet the Yarn version requirement of
webpacker. Today, Alpine Linux 3.7 provides Yarn new enough.
8 years ago
Akihiko Odaki 58a4633707 Remove su-exec from Docker image (#6722)
It is no longer necessary since commit
be9bab171d.
8 years ago