mirror of
https://github.com/jokob-sk/NetAlertX.git
synced 2026-10-28 12:01:13 -04:00
RobinMJD
90b1c081c8
Move the Alpine builder and runner to the supported community repository, require PHP 8.3.36 or newer for the installed runtime components, and keep the Python 3.14 import paths aligned in the generated devcontainer. Add a runtime regression check for CLI, FPM and CGI covering CVE-2026-109618 and CVE-2026-109619.
60 lines
2.7 KiB
Plaintext
Executable File
60 lines
2.7 KiB
Plaintext
Executable File
# Devcontainer build stage (do not build directly)
|
|
# This file is combined with the root /Dockerfile by
|
|
# .devcontainer/scripts/generate-configs.sh
|
|
# The generator appends this stage to produce .devcontainer/Dockerfile.
|
|
# Prefer to place dev-only setup here; use setup.sh only for runtime fixes.
|
|
# Permissions in devcontainer should be of a brutalist nature. They will be
|
|
# Open and wide to avoid permission issues during development allowing max
|
|
# flexibility.
|
|
|
|
# hadolint ignore=DL3006
|
|
FROM runner AS netalertx-devcontainer
|
|
ENV INSTALL_DIR=/app
|
|
|
|
ENV PYTHONPATH=${PYTHONPATH}:/workspaces/NetAlertX/test:/workspaces/NetAlertX/server:/usr/lib/python3.14/site-packages
|
|
ENV PATH=/services:${PATH}
|
|
ENV PHP_INI_SCAN_DIR=/services/config/php/conf.d:/etc/php83/conf.d
|
|
ENV LISTEN_ADDR=0.0.0.0
|
|
ENV PORT=20211
|
|
ENV NETALERTX_DEBUG=1
|
|
ENV PYDEVD_DISABLE_FILE_VALIDATION=1
|
|
COPY .devcontainer/resources/devcontainer-overlay/ /
|
|
USER root
|
|
# Install common tools, create user, and set up sudo
|
|
|
|
# Ensure entrypoint scripts stay executable in the devcontainer (avoids 126 errors)
|
|
RUN chmod +x /entrypoint.sh /root-entrypoint.sh /entrypoint.d/*.sh && \
|
|
chmod +x /entrypoint.d/35-apply-conf-override.sh
|
|
|
|
RUN apk add --no-cache git nano vim jq php83-pecl-xdebug py3-pip nodejs sudo gpgconf pytest \
|
|
pytest-cov zsh alpine-zsh-config shfmt github-cli py3-yaml py3-docker-py docker-cli docker-cli-buildx \
|
|
docker-cli-compose shellcheck py3-psutil chromium chromium-chromedriver
|
|
|
|
# Install hadolint (Dockerfile linter)
|
|
RUN curl -L https://github.com/hadolint/hadolint/releases/latest/download/hadolint-Linux-x86_64 -o /usr/local/bin/hadolint && \
|
|
chmod +x /usr/local/bin/hadolint
|
|
|
|
RUN install -d -o netalertx -g netalertx -m 755 /services/php/modules && \
|
|
cp -a /usr/lib/php83/modules/. /services/php/modules/ && \
|
|
echo "${NETALERTX_USER} ALL=(ALL) NOPASSWD: ALL" >> /etc/sudoers
|
|
ENV SHELL=/bin/zsh
|
|
|
|
RUN mkdir -p /workspaces && \
|
|
install -d -m 777 /data /data/config /data/db && \
|
|
install -d -m 777 /tmp/log /tmp/log/plugins /tmp/api /tmp/run /tmp/nginx && \
|
|
install -d -m 777 /tmp/nginx/active-config /tmp/nginx/client_body /tmp/nginx/config && \
|
|
install -d -m 777 /tmp/nginx/fastcgi /tmp/nginx/proxy /tmp/nginx/scgi /tmp/nginx/uwsgi && \
|
|
install -d -m 777 /tmp/run/tmp /tmp/run/logs && \
|
|
chmod 777 /workspaces && \
|
|
chown -R netalertx:netalertx /data && \
|
|
chmod 666 /data/config/app.conf /data/db/app.db && \
|
|
chmod 1777 /tmp && \
|
|
install -d -o root -g root -m 1777 /tmp/.X11-unix && \
|
|
mkdir -p /home/netalertx && \
|
|
chown netalertx:netalertx /home/netalertx && \
|
|
sed -i -e 's#/app:#/workspaces:#' /etc/passwd && \
|
|
find /opt/venv -type d -exec chmod o+rwx {} \;
|
|
|
|
USER netalertx
|
|
ENTRYPOINT ["/bin/sh","-c","sleep infinity"]
|