mirror of
https://github.com/freedomofpress/dangerzone.git
synced 2025-05-17 18:51:50 +02:00
Compare commits
2 commits
92d8a4c556
...
02e63e5a49
Author | SHA1 | Date | |
---|---|---|---|
![]() |
02e63e5a49 | ||
![]() |
9daf30154b |
8 changed files with 14 additions and 20 deletions
2
.github/workflows/build.yml
vendored
2
.github/workflows/build.yml
vendored
|
@ -85,7 +85,7 @@ jobs:
|
||||||
id: cache-container-image
|
id: cache-container-image
|
||||||
uses: actions/cache@v4
|
uses: actions/cache@v4
|
||||||
with:
|
with:
|
||||||
key: v4-${{ steps.date.outputs.date }}-${{ hashFiles('Dockerfile', 'dangerzone/conversion/*.py', 'dangerzone/container/*', 'install/common/build-image.py') }}
|
key: v4-${{ steps.date.outputs.date }}-${{ hashFiles('Dockerfile', 'dangerzone/conversion/*.py', 'dangerzone/container_helpers/*', 'install/common/build-image.py') }}
|
||||||
path: |
|
path: |
|
||||||
share/container.tar.gz
|
share/container.tar.gz
|
||||||
share/image-id.txt
|
share/image-id.txt
|
||||||
|
|
8
.github/workflows/ci.yml
vendored
8
.github/workflows/ci.yml
vendored
|
@ -59,7 +59,7 @@ jobs:
|
||||||
id: cache-container-image
|
id: cache-container-image
|
||||||
uses: actions/cache@v4
|
uses: actions/cache@v4
|
||||||
with:
|
with:
|
||||||
key: v4-${{ steps.date.outputs.date }}-${{ hashFiles('Dockerfile', 'dangerzone/conversion/*.py', 'dangerzone/container/*', 'install/common/build-image.py') }}
|
key: v4-${{ steps.date.outputs.date }}-${{ hashFiles('Dockerfile', 'dangerzone/conversion/*.py', 'dangerzone/container_helpers/*', 'install/common/build-image.py') }}
|
||||||
path: |-
|
path: |-
|
||||||
share/container.tar.gz
|
share/container.tar.gz
|
||||||
share/image-id.txt
|
share/image-id.txt
|
||||||
|
@ -226,7 +226,7 @@ jobs:
|
||||||
- name: Restore container cache
|
- name: Restore container cache
|
||||||
uses: actions/cache/restore@v4
|
uses: actions/cache/restore@v4
|
||||||
with:
|
with:
|
||||||
key: v4-${{ steps.date.outputs.date }}-${{ hashFiles('Dockerfile', 'dangerzone/conversion/*.py', 'dangerzone/container/*', 'install/common/build-image.py') }}
|
key: v4-${{ steps.date.outputs.date }}-${{ hashFiles('Dockerfile', 'dangerzone/conversion/*.py', 'dangerzone/container_helpers/*', 'install/common/build-image.py') }}
|
||||||
path: |-
|
path: |-
|
||||||
share/container.tar.gz
|
share/container.tar.gz
|
||||||
share/image-id.txt
|
share/image-id.txt
|
||||||
|
@ -333,7 +333,7 @@ jobs:
|
||||||
- name: Restore container image
|
- name: Restore container image
|
||||||
uses: actions/cache/restore@v4
|
uses: actions/cache/restore@v4
|
||||||
with:
|
with:
|
||||||
key: v4-${{ steps.date.outputs.date }}-${{ hashFiles('Dockerfile', 'dangerzone/conversion/*.py', 'dangerzone/container/*', 'install/common/build-image.py') }}
|
key: v4-${{ steps.date.outputs.date }}-${{ hashFiles('Dockerfile', 'dangerzone/conversion/*.py', 'dangerzone/container_helpers/*', 'install/common/build-image.py') }}
|
||||||
path: |-
|
path: |-
|
||||||
share/container.tar.gz
|
share/container.tar.gz
|
||||||
share/image-id.txt
|
share/image-id.txt
|
||||||
|
@ -428,7 +428,7 @@ jobs:
|
||||||
- name: Restore container image
|
- name: Restore container image
|
||||||
uses: actions/cache/restore@v4
|
uses: actions/cache/restore@v4
|
||||||
with:
|
with:
|
||||||
key: v4-${{ steps.date.outputs.date }}-${{ hashFiles('Dockerfile', 'dangerzone/conversion/*.py', 'dangerzone/container/*', 'install/common/build-image.py') }}
|
key: v4-${{ steps.date.outputs.date }}-${{ hashFiles('Dockerfile', 'dangerzone/conversion/*.py', 'dangerzone/container_helpers/*', 'install/common/build-image.py') }}
|
||||||
path: |-
|
path: |-
|
||||||
share/container.tar.gz
|
share/container.tar.gz
|
||||||
share/image-id.txt
|
share/image-id.txt
|
||||||
|
|
11
Dockerfile
11
Dockerfile
|
@ -19,8 +19,8 @@ ENV DEBIAN_FRONTEND=noninteractive
|
||||||
RUN \
|
RUN \
|
||||||
--mount=type=cache,target=/var/cache/apt,sharing=locked \
|
--mount=type=cache,target=/var/cache/apt,sharing=locked \
|
||||||
--mount=type=cache,target=/var/lib/apt,sharing=locked \
|
--mount=type=cache,target=/var/lib/apt,sharing=locked \
|
||||||
--mount=type=bind,source=./container/repro-sources-list.sh,target=/usr/local/bin/repro-sources-list.sh \
|
--mount=type=bind,source=./container_helpers/repro-sources-list.sh,target=/usr/local/bin/repro-sources-list.sh \
|
||||||
--mount=type=bind,source=./container/gvisor.key,target=/tmp/gvisor.key \
|
--mount=type=bind,source=./container_helpers/gvisor.key,target=/tmp/gvisor.key \
|
||||||
: "Hacky way to set a date for the Debian snapshot repos" && \
|
: "Hacky way to set a date for the Debian snapshot repos" && \
|
||||||
touch -d ${DEBIAN_ARCHIVE_DATE} /etc/apt/sources.list.d/debian.sources && \
|
touch -d ${DEBIAN_ARCHIVE_DATE} /etc/apt/sources.list.d/debian.sources && \
|
||||||
touch -d ${DEBIAN_ARCHIVE_DATE} /etc/apt/sources.list && \
|
touch -d ${DEBIAN_ARCHIVE_DATE} /etc/apt/sources.list && \
|
||||||
|
@ -61,11 +61,8 @@ RUN adduser --uid 1000 --ingroup dangerzone --shell /bin/true \
|
||||||
RUN mkdir -p /opt/dangerzone/dangerzone
|
RUN mkdir -p /opt/dangerzone/dangerzone
|
||||||
RUN touch /opt/dangerzone/dangerzone/__init__.py
|
RUN touch /opt/dangerzone/dangerzone/__init__.py
|
||||||
|
|
||||||
COPY conversion/doc_to_pixels.py \
|
# Copy only the Python code, and not any produced .pyc files.
|
||||||
conversion/common.py \
|
COPY conversion/*.py /opt/dangerzone/dangerzone/conversion
|
||||||
conversion/errors.py \
|
|
||||||
conversion/__init__.py \
|
|
||||||
/opt/dangerzone/dangerzone/conversion
|
|
||||||
|
|
||||||
# Let the entrypoint script write the OCI config for the inner container under
|
# Let the entrypoint script write the OCI config for the inner container under
|
||||||
# /config.json.
|
# /config.json.
|
||||||
|
|
|
@ -19,8 +19,8 @@ ENV DEBIAN_FRONTEND=noninteractive
|
||||||
RUN \
|
RUN \
|
||||||
--mount=type=cache,target=/var/cache/apt,sharing=locked \
|
--mount=type=cache,target=/var/cache/apt,sharing=locked \
|
||||||
--mount=type=cache,target=/var/lib/apt,sharing=locked \
|
--mount=type=cache,target=/var/lib/apt,sharing=locked \
|
||||||
--mount=type=bind,source=./container/repro-sources-list.sh,target=/usr/local/bin/repro-sources-list.sh \
|
--mount=type=bind,source=./container_helpers/repro-sources-list.sh,target=/usr/local/bin/repro-sources-list.sh \
|
||||||
--mount=type=bind,source=./container/gvisor.key,target=/tmp/gvisor.key \
|
--mount=type=bind,source=./container_helpers/gvisor.key,target=/tmp/gvisor.key \
|
||||||
: "Hacky way to set a date for the Debian snapshot repos" && \
|
: "Hacky way to set a date for the Debian snapshot repos" && \
|
||||||
touch -d ${DEBIAN_ARCHIVE_DATE} /etc/apt/sources.list.d/debian.sources && \
|
touch -d ${DEBIAN_ARCHIVE_DATE} /etc/apt/sources.list.d/debian.sources && \
|
||||||
touch -d ${DEBIAN_ARCHIVE_DATE} /etc/apt/sources.list && \
|
touch -d ${DEBIAN_ARCHIVE_DATE} /etc/apt/sources.list && \
|
||||||
|
@ -61,11 +61,8 @@ RUN adduser --uid 1000 --ingroup dangerzone --shell /bin/true \
|
||||||
RUN mkdir -p /opt/dangerzone/dangerzone
|
RUN mkdir -p /opt/dangerzone/dangerzone
|
||||||
RUN touch /opt/dangerzone/dangerzone/__init__.py
|
RUN touch /opt/dangerzone/dangerzone/__init__.py
|
||||||
|
|
||||||
COPY conversion/doc_to_pixels.py \
|
# Copy only the Python code, and not any produced .pyc files.
|
||||||
conversion/common.py \
|
COPY conversion/*.py /opt/dangerzone/dangerzone/conversion
|
||||||
conversion/errors.py \
|
|
||||||
conversion/__init__.py \
|
|
||||||
/opt/dangerzone/dangerzone/conversion
|
|
||||||
|
|
||||||
# Let the entrypoint script write the OCI config for the inner container under
|
# Let the entrypoint script write the OCI config for the inner container under
|
||||||
# /config.json.
|
# /config.json.
|
||||||
|
|
2
dodo.py
2
dodo.py
|
@ -54,7 +54,7 @@ TESSDATA_TARGETS = list_language_data()
|
||||||
IMAGE_DEPS = [
|
IMAGE_DEPS = [
|
||||||
"Dockerfile",
|
"Dockerfile",
|
||||||
*list_files("dangerzone/conversion"),
|
*list_files("dangerzone/conversion"),
|
||||||
*list_files("dangerzone/container"),
|
*list_files("dangerzone/container_helpers"),
|
||||||
"install/common/build-image.py",
|
"install/common/build-image.py",
|
||||||
]
|
]
|
||||||
IMAGE_TARGETS = ["share/container.tar.gz", "share/image-id.txt"]
|
IMAGE_TARGETS = ["share/container.tar.gz", "share/image-id.txt"]
|
||||||
|
|
Loading…
Reference in a new issue