Mercurial > libervia-backend
annotate docker/libervia-web-dev/Dockerfile @ 4212:5f2d496c633f
core: get rid of `pickle`:
Use of `pickle` to serialise data was a technical legacy that was causing trouble to store
in database, to update (if a class was serialised, a change could break update), and to
security (pickle can lead to code execution).
This patch remove all use of Pickle in favour in JSON, notably:
- for caching data, a Pydantic model is now used instead
- for SQLAlchemy model, the LegacyPickle is replaced by JSON serialisation
- in XEP-0373 a class `PublicKeyMetadata` was serialised. New method `from_dict` and
`to_dict` method have been implemented to do serialisation.
- new methods to (de)serialise data can now be specified with Identity data types. It is
notably used to (de)serialise `path` of avatars.
A migration script has been created to convert data (for upgrade or downgrade), with
special care for XEP-0373 case. Depending of size of database, this migration script can
be long to run.
rel 443
author | Goffi <goffi@goffi.org> |
---|---|
date | Fri, 23 Feb 2024 13:31:04 +0100 |
parents | 43cc8c27adc7 |
children |
rev | line source |
---|---|
3641
0ffaa231138c
docker: Libervia revision can now be specified:
Goffi <goffi@goffi.org>
parents:
3613
diff
changeset
|
1 ARG REVISION |
0ffaa231138c
docker: Libervia revision can now be specified:
Goffi <goffi@goffi.org>
parents:
3613
diff
changeset
|
2 FROM libervia/backend:${REVISION:-dev} |
3381 | 3 |
4 LABEL maintainer="Goffi <tmp_dockerfiles@goffi.org>" | |
5 | |
3641
0ffaa231138c
docker: Libervia revision can now be specified:
Goffi <goffi@goffi.org>
parents:
3613
diff
changeset
|
6 ARG REVISION |
3381 | 7 ARG DEBIAN_FRONTEND=noninteractive |
8 | |
9 USER root | |
10 | |
11 RUN apt-get install -y --no-install-recommends yarnpkg | |
3497
73e04040d577
docker: update following name changes:
Goffi <goffi@goffi.org>
parents:
3424
diff
changeset
|
12 WORKDIR /home/libervia |
73e04040d577
docker: update following name changes:
Goffi <goffi@goffi.org>
parents:
3424
diff
changeset
|
13 USER libervia |
3690
1680eec4cbfd
docker: use `@` instead of `tip` for dev images:
Goffi <goffi@goffi.org>
parents:
3641
diff
changeset
|
14 RUN cd /src && hg clone https://repos.goffi.org/libervia-web -u "${REVISION:-@}" && \ |
3730
43cc8c27adc7
docker: don't move `.egg_info` files anymore:
Goffi <goffi@goffi.org>
parents:
3690
diff
changeset
|
15 ~/libervia_env/bin/pip install -e libervia-web |
3381 | 16 |
3424
2da32cdf4e53
docker(libervia): build site in the image:
Goffi <goffi@goffi.org>
parents:
3419
diff
changeset
|
17 RUN ./entrypoint.sh \ |
2da32cdf4e53
docker(libervia): build site in the image:
Goffi <goffi@goffi.org>
parents:
3419
diff
changeset
|
18 # we build here to avoid re-downloading node modules or other browser |
2da32cdf4e53
docker(libervia): build site in the image:
Goffi <goffi@goffi.org>
parents:
3419
diff
changeset
|
19 # dependencies on each run |
3497
73e04040d577
docker: update following name changes:
Goffi <goffi@goffi.org>
parents:
3424
diff
changeset
|
20 libervia-web fg -- --build-only && \ |
73e04040d577
docker: update following name changes:
Goffi <goffi@goffi.org>
parents:
3424
diff
changeset
|
21 libervia-backend stop |
3424
2da32cdf4e53
docker(libervia): build site in the image:
Goffi <goffi@goffi.org>
parents:
3419
diff
changeset
|
22 |
3419
ccb2a7e66f7d
docker (libervia): expose HTTP and HTTPS ports
Goffi <goffi@goffi.org>
parents:
3381
diff
changeset
|
23 EXPOSE 8080 8443 |
ccb2a7e66f7d
docker (libervia): expose HTTP and HTTPS ports
Goffi <goffi@goffi.org>
parents:
3381
diff
changeset
|
24 |
3497
73e04040d577
docker: update following name changes:
Goffi <goffi@goffi.org>
parents:
3424
diff
changeset
|
25 ENTRYPOINT ["libervia-web"] |
3381 | 26 CMD ["fg"] |