annotate docker/backend-dev/session.conf @ 4212:5f2d496c633f

core: get rid of `pickle`: Use of `pickle` to serialise data was a technical legacy that was causing trouble to store in database, to update (if a class was serialised, a change could break update), and to security (pickle can lead to code execution). This patch remove all use of Pickle in favour in JSON, notably: - for caching data, a Pydantic model is now used instead - for SQLAlchemy model, the LegacyPickle is replaced by JSON serialisation - in XEP-0373 a class `PublicKeyMetadata` was serialised. New method `from_dict` and `to_dict` method have been implemented to do serialisation. - new methods to (de)serialise data can now be specified with Identity data types. It is notably used to (de)serialise `path` of avatars. A migration script has been created to convert data (for upgrade or downgrade), with special care for XEP-0373 case. Depending of size of database, this migration script can be long to run. rel 443
author Goffi <goffi@goffi.org>
date Fri, 23 Feb 2024 13:31:04 +0100
parents fd3fe346a14a
children
Ignore whitespace changes - Everywhere: Within whitespace: At end of lines:
rev   line source
3641
0ffaa231138c docker: Libervia revision can now be specified:
Goffi <goffi@goffi.org>
parents:
diff changeset
1 <!DOCTYPE busconfig PUBLIC "-//freedesktop//DTD D-Bus Bus Configuration 1.0//EN"
0ffaa231138c docker: Libervia revision can now be specified:
Goffi <goffi@goffi.org>
parents:
diff changeset
2 "http://www.freedesktop.org/standards/dbus/1.0/busconfig.dtd">
0ffaa231138c docker: Libervia revision can now be specified:
Goffi <goffi@goffi.org>
parents:
diff changeset
3 <busconfig>
0ffaa231138c docker: Libervia revision can now be specified:
Goffi <goffi@goffi.org>
parents:
diff changeset
4 <type>session</type>
0ffaa231138c docker: Libervia revision can now be specified:
Goffi <goffi@goffi.org>
parents:
diff changeset
5 <keep_umask/>
3767
fd3fe346a14a docker (backend-dev): move dbus unix socket:
Goffi <goffi@goffi.org>
parents: 3641
diff changeset
6 <listen>unix:path=/home/libervia/.local/share/dbus_socket</listen>
3641
0ffaa231138c docker: Libervia revision can now be specified:
Goffi <goffi@goffi.org>
parents:
diff changeset
7 <listen>tcp:host=localhost,bind=*,port=55555,family=ipv4</listen>
0ffaa231138c docker: Libervia revision can now be specified:
Goffi <goffi@goffi.org>
parents:
diff changeset
8 <auth>ANONYMOUS</auth>
0ffaa231138c docker: Libervia revision can now be specified:
Goffi <goffi@goffi.org>
parents:
diff changeset
9 <allow_anonymous/>
0ffaa231138c docker: Libervia revision can now be specified:
Goffi <goffi@goffi.org>
parents:
diff changeset
10 <standard_session_servicedirs />
0ffaa231138c docker: Libervia revision can now be specified:
Goffi <goffi@goffi.org>
parents:
diff changeset
11 <policy context="default">
0ffaa231138c docker: Libervia revision can now be specified:
Goffi <goffi@goffi.org>
parents:
diff changeset
12 <allow send_destination="*" eavesdrop="true"/>
0ffaa231138c docker: Libervia revision can now be specified:
Goffi <goffi@goffi.org>
parents:
diff changeset
13 <allow eavesdrop="true"/>
0ffaa231138c docker: Libervia revision can now be specified:
Goffi <goffi@goffi.org>
parents:
diff changeset
14 <allow own="*"/>
0ffaa231138c docker: Libervia revision can now be specified:
Goffi <goffi@goffi.org>
parents:
diff changeset
15 </policy>
0ffaa231138c docker: Libervia revision can now be specified:
Goffi <goffi@goffi.org>
parents:
diff changeset
16 <include if_selinux_enabled="yes" selinux_root_relative="yes">contexts/dbus_contexts</include>
0ffaa231138c docker: Libervia revision can now be specified:
Goffi <goffi@goffi.org>
parents:
diff changeset
17 <limit name="max_incoming_bytes">1000000000</limit>
0ffaa231138c docker: Libervia revision can now be specified:
Goffi <goffi@goffi.org>
parents:
diff changeset
18 <limit name="max_incoming_unix_fds">250000000</limit>
0ffaa231138c docker: Libervia revision can now be specified:
Goffi <goffi@goffi.org>
parents:
diff changeset
19 <limit name="max_outgoing_bytes">1000000000</limit>
0ffaa231138c docker: Libervia revision can now be specified:
Goffi <goffi@goffi.org>
parents:
diff changeset
20 <limit name="max_outgoing_unix_fds">250000000</limit>
0ffaa231138c docker: Libervia revision can now be specified:
Goffi <goffi@goffi.org>
parents:
diff changeset
21 <limit name="max_message_size">1000000000</limit>
0ffaa231138c docker: Libervia revision can now be specified:
Goffi <goffi@goffi.org>
parents:
diff changeset
22 <limit name="service_start_timeout">120000</limit>
0ffaa231138c docker: Libervia revision can now be specified:
Goffi <goffi@goffi.org>
parents:
diff changeset
23 <limit name="auth_timeout">240000</limit>
0ffaa231138c docker: Libervia revision can now be specified:
Goffi <goffi@goffi.org>
parents:
diff changeset
24 <limit name="pending_fd_timeout">150000</limit>
0ffaa231138c docker: Libervia revision can now be specified:
Goffi <goffi@goffi.org>
parents:
diff changeset
25 <limit name="max_completed_connections">100000</limit>
0ffaa231138c docker: Libervia revision can now be specified:
Goffi <goffi@goffi.org>
parents:
diff changeset
26 <limit name="max_incomplete_connections">10000</limit>
0ffaa231138c docker: Libervia revision can now be specified:
Goffi <goffi@goffi.org>
parents:
diff changeset
27 <limit name="max_connections_per_user">100000</limit>
0ffaa231138c docker: Libervia revision can now be specified:
Goffi <goffi@goffi.org>
parents:
diff changeset
28 <limit name="max_pending_service_starts">10000</limit>
0ffaa231138c docker: Libervia revision can now be specified:
Goffi <goffi@goffi.org>
parents:
diff changeset
29 <limit name="max_names_per_connection">50000</limit>
0ffaa231138c docker: Libervia revision can now be specified:
Goffi <goffi@goffi.org>
parents:
diff changeset
30 <limit name="max_match_rules_per_connection">50000</limit>
0ffaa231138c docker: Libervia revision can now be specified:
Goffi <goffi@goffi.org>
parents:
diff changeset
31 <limit name="max_replies_per_connection">50000</limit>
0ffaa231138c docker: Libervia revision can now be specified:
Goffi <goffi@goffi.org>
parents:
diff changeset
32 </busconfig>