Mercurial > libervia-backend
view docker/backend-dev-e2e/Dockerfile @ 4212:5f2d496c633f
core: get rid of `pickle`:
Use of `pickle` to serialise data was a technical legacy that was causing trouble to store
in database, to update (if a class was serialised, a change could break update), and to
security (pickle can lead to code execution).
This patch remove all use of Pickle in favour in JSON, notably:
- for caching data, a Pydantic model is now used instead
- for SQLAlchemy model, the LegacyPickle is replaced by JSON serialisation
- in XEP-0373 a class `PublicKeyMetadata` was serialised. New method `from_dict` and
`to_dict` method have been implemented to do serialisation.
- new methods to (de)serialise data can now be specified with Identity data types. It is
notably used to (de)serialise `path` of avatars.
A migration script has been created to convert data (for upgrade or downgrade), with
special care for XEP-0373 case. Depending of size of database, this migration script can
be long to run.
rel 443
author | Goffi <goffi@goffi.org> |
---|---|
date | Fri, 23 Feb 2024 13:31:04 +0100 |
parents | 09f5ac48ffe3 |
children | 31c84a32c897 |
line wrap: on
line source
ARG REVISION FROM libervia/backend:${REVISION:-dev} LABEL maintainer="Goffi <tmp_dockerfiles@goffi.org>" USER root ARG DEBIAN_FRONTEND=noninteractive RUN mkdir -m 777 /reports && \ apt-get install -y --no-install-recommends \ # firefox is needed to test Libervia via selenium firefox-esr \ # VNC/X11 server for visual mode + window manager # using openbox as it allows to resize easily when doing manual debugging/tests # and it adapts correctly when doing driver.set_window_size tigervnc-standalone-server openbox \ # useful for remote debugging telnet net-tools \ # needed to make Firefox trust system certificates # cf. https://askubuntu.com/a/1036637 p11-kit && \ ln -fs /usr/lib/x86_64-linux-gnu/pkcs11/p11-kit-trust.so /usr/lib/firefox-esr/libnssckbi.so # we install pre-generated certificates so we can do tests with valid TLS COPY --chown=root:root certificates/minica.pem /usr/local/share/ca-certificates/minica.crt COPY --chown=root:tls-cert certificates/server1.test/cert.pem /usr/share/libervia/certificates/server1.test.pem COPY --chown=root:tls-cert certificates/server1.test/key.pem /usr/share/libervia/certificates/server1.test-key.pem RUN update-ca-certificates COPY --chown=root:root libervia.conf /etc/libervia.conf COPY --chown=libervia:libervia scripts/entrypoint.sh /home/libervia/entrypoint_e2e.sh RUN \ # we install webdriver (needed to control Firefox from Selenium) # note: this is not absolutely necessary as long as we use helium because it includes # is own webdriver python -c 'from urllib.request import urlretrieve;\ urlretrieve(\ "https://github.com/mozilla/geckodriver/releases/download/v0.28.0"\ "/geckodriver-v0.28.0-linux64.tar.gz", "/usr/local/bin/geckodriver.tar.gz")' && \ cd /usr/local/bin && tar zxf geckodriver.tar.gz && rm -f geckodriver.tar.gz WORKDIR /home/libervia USER libervia RUN \ # pytest and its plugins pip install pytest pytest-timeout pytest-dependency pytest-twisted \ # needed to test libervia-cli sh \ # needed to test libervia helium \ # needed to check sent emails aiosmtpd \ # useful for debugging pudb RUN ./entrypoint.sh \ # we create the file sharing component which will autoconnect when backend is started li profile create file-sharing -j files.server1.test -p "" --xmpp-password test_e2e -C file-sharing -A && \ libervia-backend stop ENV LIBERVIA_TEST_REPORT_DIR=/reports ENV DISPLAY=:0 USER root RUN apt-get install -y openbox USER libervia EXPOSE 5900 ENTRYPOINT ["/home/libervia/entrypoint_e2e.sh"]