Mercurial > sat_docs
view docker/sat_pubsub/Dockerfile @ 43:4c5bd7ddaaca
xep: updated XEP-0356 (privileged entity):
Several updates according to feedbacks + review:
- added links to PEP and namespace delegation XEPs
- removed MUST for default values in configuration
- <forwarded/> element is now a child of a <privilege/> element
- <perm/> "namespace" attribute has been renamed to "access"
- "headline" type restriction for "message" privilege has been removed
- "message" permission violation now result in a "forbidden" message error
- for "presence" permission, only <presence/> stanza with no type or with a "unavailable" type are sent to privileged entity
- added specifitation for "presence" if a managed entity is unavailable and if a privileged entity is available after first <presence/> stanzas have been received
- added Business Rules section
- Updated namespace to reflect incompatible changes
author | Goffi <goffi@goffi.org> |
---|---|
date | Mon, 23 Mar 2015 18:41:01 +0100 |
parents | 0e78c8a4626e |
children | 686a8c982c3f |
line wrap: on
line source
############################################################### # # # Salut à Toi/sat_pubsub # # This Dockerfile build a SàT Pubsub service for SàT # # Salut à Toi is a multi-frontends multi-purposes XMPP client # # # ############################################################### FROM salutatoi/base:latest MAINTAINER Goffi <goffi@goffi.org> ######## # BASE # ######## RUN apt-get install -y --no-install-recommends postgresql RUN apt-get install -y --no-install-recommends python-psycopg2 RUN apt-get clean # This script launch SàT PubSub with domain and secret gotten from prosody container # it make the configuration more easy RUN echo '#!/usr/bin/env python2\n\ import os, xmlrpclib\n\ os.chdir("/usr/share/sat_pubsub")\n\ proxy = xmlrpclib.ServerProxy("http://prosody:9999/")\n\ domain = proxy.getenv("DOMAIN")\n\ secret = proxy.getenv("SAT_PUBSUB_SECRET")\n\ os.execlp("twistd", "twistd", "-n", "sat_pubsub", "--rhost", "prosody",\ "--jid", "sat-pubsub.%s" % domain, "--secret", secret)\n\ ' > /usr/local/bin/sat_pubsub && chmod 0555 /usr/local/bin/sat_pubsub WORKDIR /usr/share RUN hg clone http://repos.goffi.org/sat_pubsub && chown -R sat:sat sat_pubsub ############ # DATABASE # ############ WORKDIR sat_pubsub/db # To simplify installation, we integrate our own PostgreSQL # future alternate version may use an external PostgreSQL container USER root RUN service postgresql start; su -c "createuser -d -w sat" postgres; su -c "createdb pubsub" postgres; su -c "psql pubsub < pubsub.sql" sat; service postgresql stop ########## # LAUNCH # ########## # we need to launch PostgreSQL, so we launch as root then switch to sat user ENTRYPOINT ["/bin/sh","-c", "service postgresql start && su -c sat_pubsub sat"]