mirror of
https://github.com/iv-org/invidious.git
synced 2025-08-06 04:38:31 +00:00
Verify download, fix invidious file permission
This commit is contained in:
parent
97eb01a28d
commit
fb7f945beb
@ -1,19 +1,19 @@
|
|||||||
FROM alpine:edge AS builder
|
FROM alpine:edge AS builder
|
||||||
RUN apk add --no-cache crystal shards libc-dev \
|
|
||||||
yaml-dev libxml2-dev sqlite-dev zlib-dev openssl-dev \
|
|
||||||
sqlite-static zlib-static openssl-libs-static
|
|
||||||
WORKDIR /invidious
|
WORKDIR /invidious
|
||||||
COPY ./shard.yml ./shard.yml
|
COPY ./shard.yml ./shard.yml
|
||||||
RUN shards update && shards install
|
RUN apk add crystal shards libc-dev \
|
||||||
RUN apk add --no-cache curl && \
|
yaml-dev libxml2-dev sqlite-dev zlib-dev openssl-dev \
|
||||||
|
yaml-static sqlite-static zlib-static openssl-libs-static && \
|
||||||
|
shards update && shards install && \
|
||||||
|
apk add curl && \
|
||||||
curl -Lo /etc/apk/keys/omarroth.rsa.pub https://github.com/omarroth/boringssl-alpine/releases/download/1.1.0-r0/omarroth.rsa.pub && \
|
curl -Lo /etc/apk/keys/omarroth.rsa.pub https://github.com/omarroth/boringssl-alpine/releases/download/1.1.0-r0/omarroth.rsa.pub && \
|
||||||
curl -Lo boringssl-dev.apk https://github.com/omarroth/boringssl-alpine/releases/download/1.1.0-r0/boringssl-dev-1.1.0-r0.apk && \
|
curl -Lo boringssl-dev.apk https://github.com/omarroth/boringssl-alpine/releases/download/1.1.0-r0/boringssl-dev-1.1.0-r0.apk && \
|
||||||
curl -Lo lsquic.apk https://github.com/omarroth/lsquic-alpine/releases/download/2.6.3-r0/lsquic-2.6.3-r0.apk && \
|
curl -Lo lsquic.apk https://github.com/omarroth/lsquic-alpine/releases/download/2.6.3-r0/lsquic-2.6.3-r0.apk && \
|
||||||
tar -xf boringssl-dev.apk && \
|
apk verify boringssl-dev.apk lsquic.apk && \
|
||||||
tar -xf lsquic.apk
|
tar -xf boringssl-dev.apk usr/lib/libcrypto.a usr/lib/libssl.a && \
|
||||||
RUN mv ./usr/lib/libcrypto.a ./lib/lsquic/src/lsquic/ext/libcrypto.a && \
|
tar -xf lsquic.apk usr/lib/liblsquic.a && \
|
||||||
mv ./usr/lib/libssl.a ./lib/lsquic/src/lsquic/ext/libssl.a && \
|
mv usr/lib/* lib/lsquic/src/lsquic/ext && \
|
||||||
mv ./usr/lib/liblsquic.a ./lib/lsquic/src/lsquic/ext/liblsquic.a
|
rm -r usr boringssl-dev.apk lsquic.apk /var/cache/apk/*
|
||||||
COPY ./src/ ./src/
|
COPY ./src/ ./src/
|
||||||
# TODO: .git folder is required for building – this is destructive.
|
# TODO: .git folder is required for building – this is destructive.
|
||||||
# See definition of CURRENT_BRANCH, CURRENT_COMMIT and CURRENT_VERSION.
|
# See definition of CURRENT_BRANCH, CURRENT_COMMIT and CURRENT_VERSION.
|
||||||
@ -30,10 +30,11 @@ WORKDIR /invidious
|
|||||||
RUN addgroup -g 1000 -S invidious && \
|
RUN addgroup -g 1000 -S invidious && \
|
||||||
adduser -u 1000 -S invidious -G invidious
|
adduser -u 1000 -S invidious -G invidious
|
||||||
COPY ./assets/ ./assets/
|
COPY ./assets/ ./assets/
|
||||||
COPY ./config/config.yml ./config/config.yml
|
COPY --chown=invidious ./config/config.yml ./config/config.yml
|
||||||
|
RUN sed -i 's/host: \(127.0.0.1\|localhost\)/host: postgres/' config/config.yml
|
||||||
COPY ./config/sql/ ./config/sql/
|
COPY ./config/sql/ ./config/sql/
|
||||||
COPY ./locales/ ./locales/
|
COPY ./locales/ ./locales/
|
||||||
RUN sed -i 's/host: \(127.0.0.1\|localhost\)/host: postgres/' config/config.yml
|
|
||||||
COPY --from=builder /invidious/invidious .
|
COPY --from=builder /invidious/invidious .
|
||||||
|
|
||||||
USER invidious
|
USER invidious
|
||||||
CMD [ "/invidious/invidious" ]
|
CMD [ "/invidious/invidious" ]
|
||||||
|
Loading…
Reference in New Issue
Block a user