mirror of
https://github.com/basecamp/once-campfire.git
synced 2026-10-30 01:04:05 +09:00
Compare commits
| Author | SHA1 | Date | |
|---|---|---|---|
|
|
3857b36b2a | ||
|
|
ca9b963961 | ||
|
|
59d2164b11 | ||
|
|
d7589951cf |
No files matched your search
+12
@@ -13,6 +13,18 @@ RUN apt-get update -qq && \
|
|||||||
ln -s /usr/lib/$(uname -m)-linux-gnu/libjemalloc.so.2 /usr/local/lib/libjemalloc.so && \
|
ln -s /usr/lib/$(uname -m)-linux-gnu/libjemalloc.so.2 /usr/local/lib/libjemalloc.so && \
|
||||||
rm -rf /var/lib/apt/lists /var/cache/apt/archive
|
rm -rf /var/lib/apt/lists /var/cache/apt/archive
|
||||||
|
|
||||||
|
# Fail the build if either of these withdrawn roots is still where Ruby's OpenSSL looks for
|
||||||
|
# trusted certificates
|
||||||
|
RUN ruby -ropenssl -e ' \
|
||||||
|
file = ENV[OpenSSL::X509::DEFAULT_CERT_FILE_ENV] || OpenSSL::X509::DEFAULT_CERT_FILE; \
|
||||||
|
dir = ENV[OpenSSL::X509::DEFAULT_CERT_DIR_ENV] || OpenSSL::X509::DEFAULT_CERT_DIR; \
|
||||||
|
pems = [file, *Dir.glob(File.join(dir, "*"))].select { |path| File.file?(path) } \
|
||||||
|
.flat_map { |path| File.read(path).scan(/-----BEGIN CERTIFICATE-----.+?-----END CERTIFICATE-----/m) }; \
|
||||||
|
subjects = pems.map { |pem| OpenSSL::X509::Certificate.new(pem).subject.to_s }.uniq; \
|
||||||
|
abort "Only #{subjects.size} roots in #{file} and #{dir}" if subjects.size < 100; \
|
||||||
|
withdrawn = subjects.grep(%r{/CN=(emSign ECC Root CA - G3|AAA Certificate Services)\z}); \
|
||||||
|
abort "Withdrawn roots still trusted: #{withdrawn}" if withdrawn.any?'
|
||||||
|
|
||||||
# Set production environment
|
# Set production environment
|
||||||
ENV RAILS_ENV="production" \
|
ENV RAILS_ENV="production" \
|
||||||
BUNDLE_DEPLOYMENT="1" \
|
BUNDLE_DEPLOYMENT="1" \
|
||||||
|
|||||||
+7
-7
@@ -167,9 +167,9 @@ GEM
|
|||||||
crack (1.0.0)
|
crack (1.0.0)
|
||||||
bigdecimal
|
bigdecimal
|
||||||
rexml
|
rexml
|
||||||
crass (1.0.7)
|
crass (1.0.8)
|
||||||
date (3.5.1)
|
date (3.5.1)
|
||||||
debug (1.11.0)
|
debug (1.11.1)
|
||||||
irb (~> 1.10)
|
irb (~> 1.10)
|
||||||
reline (>= 0.3.8)
|
reline (>= 0.3.8)
|
||||||
drb (2.2.3)
|
drb (2.2.3)
|
||||||
@@ -270,7 +270,7 @@ GEM
|
|||||||
useragent (~> 0.16.3)
|
useragent (~> 0.16.3)
|
||||||
pp (0.6.4)
|
pp (0.6.4)
|
||||||
prettyprint
|
prettyprint
|
||||||
prettyprint (0.2.0)
|
prettyprint (0.2.1)
|
||||||
prism (1.9.0)
|
prism (1.9.0)
|
||||||
psych (5.5.0)
|
psych (5.5.0)
|
||||||
date
|
date
|
||||||
@@ -390,10 +390,10 @@ GEM
|
|||||||
rack-protection (= 4.2.1)
|
rack-protection (= 4.2.1)
|
||||||
rack-session (>= 2.0.0, < 3)
|
rack-session (>= 2.0.0, < 3)
|
||||||
tilt (~> 2.0)
|
tilt (~> 2.0)
|
||||||
sqlite3 (2.9.6-aarch64-linux-gnu)
|
sqlite3 (2.10.2-aarch64-linux-gnu)
|
||||||
sqlite3 (2.9.6-arm64-darwin)
|
sqlite3 (2.10.2-arm64-darwin)
|
||||||
sqlite3 (2.9.6-x86_64-darwin)
|
sqlite3 (2.10.2-x86_64-darwin)
|
||||||
sqlite3 (2.9.6-x86_64-linux-gnu)
|
sqlite3 (2.10.2-x86_64-linux-gnu)
|
||||||
stimulus-rails (1.3.4)
|
stimulus-rails (1.3.4)
|
||||||
railties (>= 6.0.0)
|
railties (>= 6.0.0)
|
||||||
stringio (3.2.0)
|
stringio (3.2.0)
|
||||||
|
|||||||
Reference in new issue
Block a user