186 Commits (329a9e1ac1263059669695df00c9ad4291966308)

Author	SHA1	Message	Date
Michael Stanclift	b749de766f	Migrate Dockerfile to Bookworm (#26802)	1 year ago
Claire	f39847476c	Change the pre-release versioning scheme and associated environment variables (#26653)	1 year ago
Nick Schonning	99e2e9b81f	Fix minor typos in comments and spec names (#21831)	2 years ago
Tim Campbell	ac41a9712e	Fixed mastodon version injection into containers via github actions (#24858)	2 years ago
Renaud Chaput	830e6cefae	Add version suffixes to nightly & edge image builds (#24823)	2 years ago
Nick Schonning	862861069d	Update Node.js to 16.20.0 (#24316)	2 years ago
Nick Schonning	26682d4c22	Remove duplicate ca-certificates Docker install (#24231)	2 years ago
Sai	f318f1ef0e	Bump ruby to 3.2.2 due to ReDoS vulnerabilities (#24320)	2 years ago
Nick Schonning	e7e189fa44	Use Yarn production install for asset compile (#24232)	2 years ago
Aaron Patterson	fb8503e861	Upgrade to Ruby 3.2 (#22928) ... Co-authored-by: Matthew Ford <matt@bitzesty.com>	2 years ago
Nick Schonning	841263a548	Update Ruby to 3.0.5 (#23544)	2 years ago
Nick Schonning	c6b7e04120	Sync Node.js to 16.19 patch release (#23554)	2 years ago
Nick Schonning	a1c0573bc6	Yarn cache cleanup right after install in Docker (#23557)	2 years ago
Moritz Heiber	a0813806d6	Add hadolint as Dockerfile linter (#20993) ... * Added hadolint as Dockerfile linter in pipeline and resolved remaining hadolint issues in Dockerfile * Use more specific version of hadolint Action * Bumpt hadolint Action version to latest version to avoid deprecation notice * Being _really_ specific now	2 years ago
Nick Schonning	736b4283b0	Update Node 16.18.1 for latest security release (#22019) ... * Update Node 16.18.1 for latest security release * Increase Yarn network timeout for build error	2 years ago
BtbN	f343ed42ff	Add missing procps package to Dockerfile (#21028) ... The new Debian-Base does not come with this by default, making the ps based health-check in the compose file fail	2 years ago
Effy Elden	231e3ec552	Remove blank line from start of Dockerfile breaking syntax declaration (#20948)	2 years ago
Moritz Heiber	1b5ed32085	Split off Dockerfile components for faster build times (#20933)	2 years ago
Kohei Ota (inductor)	92734e3df1	Use buildx functions for faster build (#20692) ... * Use buildx functions for faster build * move link * cannot use --link with --chown	2 years ago
Yamagishi Kazutoshi	5cf056fdb0	Install python3 when building with Docker (#18072)	2 years ago
Daniel Jakots	0c99c6c3df	Update Node to 16.17.1 (#19224) ... See https://nodejs.org/en/blog/vulnerability/september-2022-security-releases/ for the details.	2 years ago
zunda	113dd90aa3	Bump Ruby version from 3.0.3 to 3.0.4 (#18028) ... https://www.ruby-lang.org/en/news/2022/04/12/ruby-3-0-4-released/	3 years ago
Daniel Jakots	9f61f22a3b	Update node to 16.16.0 (#18790) ... See https://nodejs.org/en/blog/vulnerability/july-2022-security-releases/	3 years ago
Shlee	602f291da9	Update Dockerfile (#18717)	3 years ago
Daniel Jakots	8ee4fde19b	Bump NODE_VER to 16.14.2 (#17825) ... See the announcement https://nodejs.org/en/blog/vulnerability/mar-2022-security-releases/	3 years ago
Yamagishi Kazutoshi	298491a816	Remove protobuf dependencies (#17539)	3 years ago
Daniel Jakots	aa45404578	Bump NODE_VER to 16.13.2, to solve security issues (#17399) ... Fixes CVE-2021-44532, CVE-2021-44533, and CVE-2022-21824. See: https://nodejs.org/en/blog/vulnerability/jan-2022-security-releases/	3 years ago
Jeong Arm	fad37dd1bc	Save bundle config as local (#17188) ... Some bundle options are saved as global user config and not project local. Specially, `deployment` must be saved as local config to be run on copied environment	3 years ago
zunda	46e62fc4b3	Upgrade Ruby to 3.0.3 (#17038) ... https://www.ruby-lang.org/en/news/2021/11/24/ruby-3-0-3-released/	3 years ago
Shlee	d647f6ad04	Update Dockerfile (#16939)	3 years ago
Shlee	c242c1d87a	Ruby 3.0.2 Upgrade (#16982) ... * Update .ruby-version * Update Gemfile * Update Gemfile.lock * Update Dockerfile * Update check-i18n.yml * Update config.yml * Update config.yml	3 years ago
Shlee	03338d1297	[Dockerfile] [Security] Update NodeJS to V16 (LTS) on docker. (#16856) ... * [Security] Update NodeJS on docker. https://nodejs.org/en/blog/vulnerability/oct-2021-security-releases/ * Update Dockerfile * Upgrade npm package * Update Dockerfile	3 years ago
David Sterry	f68772fd6a	add bundle flag to suppress root warning (#16557)	3 years ago
Shlee	12cb6ed461	Update Dockerfile (#16696)	3 years ago
Shlee	229f5d1681	NodeJS 14 support - circleci/docker/.nvmrc (#16163) ... * Update config.yml * Update Dockerfile * Update .nvmrc * Update Dockerfile * NodeJS 10 is EOL. * Update package.json * Update README.md * Update Vagrantfile * Update Dockerfile * Update Dockerfile	4 years ago
Daigo 3 Dango	3d5183e99c	Use ruby-2.7.4 (#16481) ... Stop using older version of resolv gem as the bug has been fixed. https://bugs.ruby-lang.org/issues/17781	4 years ago
Claire	d95128c99d	Revert default Ruby version to 2.7.2 (#16154) ... Ruby 2.7.3 introduced a new bug with Resolv::DNS, which we heavily use within Mastodon: https://bugs.ruby-lang.org/issues/17781 Ruby 2.7.3 also included security fixes for two CVEs, but those do not seem to apply to Mastodon: https://github.com/tootsuite/mastodon/pull/16004#issuecomment-815125025	4 years ago
Daigo 3 Dango	3f8d0de82e	Upgrade Ruby to 2.7.3 (#16004) ... * Upgrade Ruby to 2.7.3 https://www.ruby-lang.org/en/news/2021/04/05/ruby-2-7-3-released/ includes security fixes to - CVE-2021-28965: XML round-trip vulnerability in REXML - CVE-2021-28966: Path traversal in Tempfile on Windows * Update rexml to 3.2.5 https://www.ruby-lang.org/en/news/2021/04/05/xml-round-trip-vulnerability-in-rexml-cve-2021-28965/	4 years ago
Mashiro	e3f1107975	build: install shared-mime-info in Dockerfile (#15978)	4 years ago
Sandro	46d3d3169e	Docker: Use precompiled jemalloc, format, apply hadolint suggestions (#10823) ... * Format, apply hadolint suggestions, little nitpicks * Use pre compiled jemalloc * Use tini from package repository	4 years ago
Shlee	f56cf6e9d0	Update Dockerfile (#15869)	4 years ago
Daniel Jakots	b4281f5a51	Update to Node.js-12.20.1 (#15558) ... This is a security release. You can read the announce at https://nodejs.org/en/blog/vulnerability/january-2021-security-releases/	4 years ago
kaiyou	1817f96578	Fix the Dockerfile in case of Kaniko build (#15510) ... Kaniko does not support looking up binaries from $PATH, so we specify the full path to the bash binary. Co-authored-by: kaiyou <dev@kaiyou.fr>	4 years ago
Shlee	b429d33e46	Update Dockerfile (#15232)	4 years ago
Daigo 3 Dango	541b9f8c1c	Use Ruby 2.7.2 (#15150) ... thwait and e2mmap are no longer needed in Gemfile. Gems properly require those.	4 years ago
Kairui Song | 宋恺睿	03b5f09ffc	Minor fix & improvement for the Dockerfile (#14686) ... * Dockerfile: Fix building with multiarch Tested on amd64 and arm64 * Reduce docker image size by clean up some unneeded source file	5 years ago
Shlee	9ea91bbf59	Update Dockerfile (#13582)	5 years ago
Shlee	e4a1ebf721	[Security] Update Dockerfile for Ruby 2.6.6 (#13393)	5 years ago
Shlee	51a1fbaafc	[Security] Bump Node.js from 12.14.0 to 12.16.1 in Docker (#13235) ... * Update Dockerfile * Update Dockerfile	5 years ago
Sara Aimée Smiseth	250ca99cb5	Fix non-x64 architectures not being able to build Docker image because of hardcoded Node.js architecture (#13081) ... * Use ARCH variable instead of hardcoded x64 * fix formating	5 years ago
Shlee	71baacb49a	Update Dockerfile (#12997)	5 years ago
Shlee	e7d3495874	Upgrade Node v12 in Dockerfile (#12703)	5 years ago
Shlee	6c2c2eee46	Updated NodeJS in Dockerfile (#12492)	5 years ago
David Caldwell	3b609da9bd	Dockerfile: put back EXPOSE directive (#12279) ... [Rkt](https://coreos.com/rkt) doesn't allow ports to be exposed to containers unless they are declared in the container manifest. Re-adding EXPOSE back in (removed in 1dbf993bce) allows the container to be used on rkt based systems.	5 years ago
Shlee	f8a0c00920	Update nodejs in Dockerfile (#12052)	5 years ago
Shlee	ea8c781ec7	Update Ruby in Dockerfile (#12050)	5 years ago
Yamagishi Kazutoshi	d7ed697030	Use prebuilt node.js on Docker image (#11768)	5 years ago
Shlee	59b013df5f	Update NodeJS source for Docker Image (#11707) ... * Update Ruby/Node/jemalloc source for Docker Image * Update Dockerfile * Update Dockerfile	6 years ago
Shlee	33f4b6e1eb	Update Dockerfile (#11710)	6 years ago
Eugen Rochko	15c7478c55	Change Dockerfile to bind to 0.0.0.0 instead of docker-compose.yml (#11351)	6 years ago
Sandro Jäckel	1e6a1ea075	Docker: Remove dist-upgrade (#10822)	6 years ago
Sandro Jäckel	c90f3b9865	Docker: Keep /var/lib/apt/ to keep apt working (#10830)	6 years ago
Alfie John	0852e643b7	Expand abbreviation to minimise confusion (#10826)	6 years ago
Ben Lubar	d36fcb54c4	Re-organize Dockerfile to improve incremental builds. (#10212) ... - Always run apt update before any other apt command. (This fixes incremental builds failing if a remote package is updated.) - Only copy dependency lists before installing dependencies. (This means editing code doesn't force all dependencies to be re-downloaded.) - Delete cache in the same layer that it is created. (Otherwise, deleting cache *increases* the size of the image on non-squashed builds.) - Move the installation of some static dependencies to *before* Mastodon code is imported to Docker.	6 years ago
mohemohe	16fb39cffc	Fix fail health check due to missing wget (#10110)	6 years ago
Sir-Boops	1dbf993bce	Switch to Ubuntu for docker (#10100)	6 years ago
J0WI	26c1aba658	Do not use apk cache and upgrade (#9966)	6 years ago
J0WI	11d1502853	Replace LibreSSL by OpenSSL (#9975)	6 years ago
ashleyhull-versent	5c873a4ed7	Update Dockerfile (#9965)	6 years ago
ashleyhull-versent	8ec539fef1	Update Dockerfile (#9796)	6 years ago
Yamagishi Kazutoshi	ea03faa167	Installing libxml2 and libxslt on Docker (#9680)	6 years ago
Isatis	5f0d3e8bad	Dockerfile: Nodejs 8.12 -> 8.14 (#9532)	6 years ago
ashleyhull-versent	51677ff070	Update Dockerfile (#9026)	6 years ago
Isatis	49b182cd51	Dockerfile: update Node to 8.12.0 and put Ruby on Alpine 3.7 for build system memory help (#8842)	6 years ago
ashleyhull-versent	94f9cb0855	Revert "Updated ruby/node images" (#8712) ... * Revert "update vagrant configs (#8706)" This reverts commit 8971bb8cf2. * Revert "Updated ruby/node images (#8700)" This reverts commit 5aae71cf60.	6 years ago
ashleyhull-versent	5aae71cf60	Updated ruby/node images (#8700)	6 years ago
Kevin Liu	68cccb00ef	Dockerfile: run asset precompilation as a build step (#7780) ... * Dockerfile: run asset precompilation as a build step * Replace OTP_SECRET and SECRET_KEY_BASE with placeholders	7 years ago
Yamagishi Kazutoshi	0eacf2b419	Upgrade Node.js to v8.x on Docker image (#8019)	7 years ago
Yamagishi Kazutoshi	e9b322d0a6	Upgrade webpack to version v4.x (#6655)	7 years ago
Yamagishi Kazutoshi	523d8f20e3	Add symbolic link for yarnpkg (#7894)	7 years ago
Yamagishi Kazutoshi	097fd44978	Add /mastodon/bin to $PATH (#7889)	7 years ago
Yamagishi Kazutoshi	f464f98fd3	Update Ruby to version 2.4.4 (#6964) ... https://www.ruby-lang.org/en/news/2018/03/28/ruby-2-4-4-released/ > This release includes some bug fixes and some security fixes. > > - CVE-2017-17742: HTTP response splitting in WEBrick > - CVE-2018-6914: Unintentional file and directory creation with directory traversal in tempfile and tmpdir > - CVE-2018-8777: DoS by large request in WEBrick > - CVE-2018-8778: Buffer under-read in String#unpack > - CVE-2018-8779: Unintentional socket creation by poisoned NUL byte in UNIXServer and UNIXSocket > - CVE-2018-8780: Unintentional directory traversal by poisoned NUL byte in Dir > - Multiple vulnerabilities in RubyGems	7 years ago
Eugen Rochko	844616e950	Re-add git and nodejs-npm to Dockerfile (#6810) ... Fix #6809 I don't know why, either	7 years ago
Eugen Rochko	0074cad44f	Downgrade Dockerfile to Ruby 2.4.3 on Alpine 3.6 (#6806) ... Fix 6734	7 years ago
Akihiko Odaki	36579bac88	Use Alpine Linux yarn package in Docker (#6725) ... Yarn was manually installed to meet the Yarn version requirement of webpacker. Today, Alpine Linux 3.7 provides Yarn new enough.	7 years ago
Akihiko Odaki	58a4633707	Remove su-exec from Docker image (#6722) ... It is no longer necessary since commit be9bab171d.	7 years ago
Akihiko Odaki	494969d394	Remove git from Docker image (#6724)	7 years ago
Yamagishi Kazutoshi	ed902581d3	Update Yarn to version 1.5.1 (#6689)	7 years ago
Eugen Rochko	d7573fe584	Separate chown command in Dockerfile. Use tootsuite/mastodon image (#6662) ... Fix #6605	7 years ago
Akihiko Odaki	81cefc1913	Do not use npm (#6656) ... Both of yarn and npm are used in Mastodon, but the combined usage requires a redundant dependency and may lead to data inconsistency. Considering that yarn has autoclean feature which npm does not have, this change replaces all npm usage with yarn. This change requires documentation update. Most notably, the following command must be executed before assets precompilation if any system dependency of node-sass has changed: yarn install --force --pure-lockfile	7 years ago
haosbvnker	3d4e788ea9	Fix permissions for volumes (#6637) ... When volumes are declared, but the corresponding directories don't exist, permissions for those directories will be root:root instead of mastodon:mastodon.. This changes makes sure the permissions of the volume directories are as expected.	7 years ago
Moritz Heiber	a4fd4ad1d5	Fix build error for missing variable interpolation in chown instruction (#6519)	7 years ago
Eugen Rochko	be9bab171d	Set Docker permissions during the build process (#6514) ... * Set Docker permissions during the build process * Remove docker_entrypoint.sh and use COPY with chown	7 years ago
Yamagishi Kazutoshi	7233ac07d2	Add support Ruby v2.5.0 (#6097)	7 years ago
Pierre Ozoux	7be53a10b0	Fix "tzinfo-data is not present" docker error (#6300) ... when starting the container.	7 years ago
Yamagishi Kazutoshi	34e2a06de0	Update Yarn to version 1.3.2 (#5900)	7 years ago
Alex Coto	ae6dd08121	Change libinconv download URL to HTTPS (#5738)	7 years ago
Hinaloe	1e1d788757	Reduce container size with clean yarn (#3506) ... * Reduce container size with clean yarn * Merge trouble	7 years ago
Yamagishi Kazutoshi	b9f59ebcc6	Update Yarn to version 1.1.0 (#5125) ... * Update Yarn to version 1.1.0 * remove hard-coding	7 years ago
Daigo 3 Dango	66be6475b6	Bump ruby version to 2.4.2 (#4958) ... * Bump ruby version to 2.4.2 https://www.ruby-lang.org/en/news/2017/09/14/ruby-2-4-2-released/ Gemfile.lock is also updated. TODO - [ ] Update Dockerfile with Alpine release of ruby-2.4.2 * Revert jwt version It seems that jwt 2.0.0 fails in some environment. ref. https://github.com/zaru/webpush/issues/42 * Bump Ruby version on docker image	7 years ago