mirror of
https://github.com/opensourcepos/opensourcepos.git
synced 2026-10-28 11:08:53 -04:00
jekkos
01ba467948
* fix(security): pin patched PHP 8.2.35+ for CVE-2026-109618/109619 - Dockerfile: pin base image to php:8.2.35-apache (was floating php:8.2-apache) - composer.json: raise minimum PHP to >=8.2.35 - CI (main, build-release, phpunit): add patch-level guard step - docs/INSTALL.md: document minimum patch levels Fixes #4765
34 lines
1.2 KiB
Docker
34 lines
1.2 KiB
Docker
FROM php:8.2.35-apache AS ospos
|
|
LABEL maintainer="jekkos"
|
|
|
|
RUN apt-get update && apt-get install -y --no-install-recommends \
|
|
libicu-dev \
|
|
libgd-dev \
|
|
&& docker-php-ext-install mysqli bcmath intl gd \
|
|
&& apt-get clean \
|
|
&& rm -rf /var/lib/apt/lists/* \
|
|
&& a2enmod rewrite
|
|
|
|
RUN echo "date.timezone = \"\${PHP_TIMEZONE}\"" > /usr/local/etc/php/conf.d/timezone.ini
|
|
|
|
WORKDIR /app
|
|
COPY --chown=www-data:www-data . /app
|
|
RUN chmod 750 /app/writable/logs /app/writable/uploads /app/writable/cache /app/public/uploads /app/public/uploads/item_pics \
|
|
&& chmod 640 /app/writable/uploads/importCustomers.csv \
|
|
&& ln -s /app/*[^public] /var/www \
|
|
&& rm -rf /var/www/html \
|
|
&& ln -nsf /app/public /var/www/html
|
|
|
|
FROM ospos AS ospos_dev
|
|
|
|
ARG USERID
|
|
ARG GROUPID
|
|
|
|
RUN echo "Adding user uid $USERID with gid $GROUPID"
|
|
RUN ( addgroup --gid $GROUPID ospos || true ) && ( adduser --uid $USERID --gid $GROUPID ospos )
|
|
|
|
RUN yes | pecl install xdebug \
|
|
&& echo "zend_extension=$(find /usr/local/lib/php/extensions/ -name xdebug.so)" > /usr/local/etc/php/conf.d/xdebug.ini \
|
|
&& echo "xdebug.mode=debug" >> /usr/local/etc/php/conf.d/xdebug.ini \
|
|
&& echo "xdebug.remote_autostart=off" >> /usr/local/etc/php/conf.d/xdebug.ini
|