mirror of
https://github.com/tommytran732/Matrix.to-Docker
synced 2024-11-09 04:31:33 -05:00
Use Polarix Hardened Malloc
This commit is contained in:
parent
d54e386a39
commit
05298dcb6c
27
Dockerfile
27
Dockerfile
@ -1,25 +1,3 @@
|
|||||||
ARG HARDENED_MALLOC_VERSION=2024060400
|
|
||||||
|
|
||||||
### Build Hardened Malloc
|
|
||||||
FROM alpine:latest as hmalloc-builder
|
|
||||||
|
|
||||||
ARG HARDENED_MALLOC_VERSION
|
|
||||||
ARG CONFIG_NATIVE=false
|
|
||||||
ARG VARIANT=default
|
|
||||||
|
|
||||||
RUN apk -U upgrade \
|
|
||||||
&& apk --no-cache add build-base git gnupg openssh-keygen
|
|
||||||
|
|
||||||
RUN cd /tmp \
|
|
||||||
&& git clone --depth 1 --branch ${HARDENED_MALLOC_VERSION} https://github.com/GrapheneOS/hardened_malloc \
|
|
||||||
&& cd hardened_malloc \
|
|
||||||
&& wget -q https://grapheneos.org/allowed_signers -O grapheneos_allowed_signers \
|
|
||||||
&& git config gpg.ssh.allowedSignersFile grapheneos_allowed_signers \
|
|
||||||
&& git verify-tag $(git describe --tags) \
|
|
||||||
&& make CONFIG_NATIVE=${CONFIG_NATIVE} VARIANT=${VARIANT}
|
|
||||||
|
|
||||||
### Build Production
|
|
||||||
|
|
||||||
FROM node:alpine
|
FROM node:alpine
|
||||||
|
|
||||||
LABEL maintainer="Thien Tran contact@tommytran.io"
|
LABEL maintainer="Thien Tran contact@tommytran.io"
|
||||||
@ -27,6 +5,9 @@ LABEL maintainer="Thien Tran contact@tommytran.io"
|
|||||||
ARG UID=992
|
ARG UID=992
|
||||||
ARG GID=992
|
ARG GID=992
|
||||||
|
|
||||||
|
COPY --from=ghcr.io/polarix-containers/hardened_malloc:latest /install /usr/local/lib/
|
||||||
|
ENV LD_PRELOAD="/usr/local/lib/libhardened_malloc.so"
|
||||||
|
|
||||||
RUN apk -U upgrade \
|
RUN apk -U upgrade \
|
||||||
&& apk --no-cache add git \
|
&& apk --no-cache add git \
|
||||||
&& adduser -g ${GID} -u ${UID} --disabled-password --gecos "" matrix-to
|
&& adduser -g ${GID} -u ${UID} --disabled-password --gecos "" matrix-to
|
||||||
@ -48,8 +29,6 @@ RUN git apply /home/matrix-to/matrix.to/element.patch \
|
|||||||
&& yarn cache clean \
|
&& yarn cache clean \
|
||||||
&& yarn build
|
&& yarn build
|
||||||
|
|
||||||
COPY --from=hmalloc-builder /tmp/hardened_malloc/out/libhardened_malloc.so /usr/local/lib/
|
|
||||||
|
|
||||||
ENV LD_PRELOAD="/usr/local/lib/libhardened_malloc.so"
|
ENV LD_PRELOAD="/usr/local/lib/libhardened_malloc.so"
|
||||||
|
|
||||||
EXPOSE 5000
|
EXPOSE 5000
|
||||||
|
Loading…
Reference in New Issue
Block a user