manage ImageMagick policies on docker context

This commit is contained in:
Moctar
2021-01-07 19:27:22 +01:00
parent 19cf517017
commit d06949ffe5
3 changed files with 26 additions and 1 deletions

10
.env
View File

@@ -140,3 +140,13 @@ SSH_AUTH_SOCK=/dev/null
# Plugin support # Plugin support
PHRASEANET_PLUGINS= PHRASEANET_PLUGINS=
PHRASEANET_SSH_PRIVATE_KEY= PHRASEANET_SSH_PRIVATE_KEY=
# ImageMagick policies change
IMAGEMAGICK_POLICY_VERSION=6
IMAGEMAGICK_POLICY_WIDTH=16KP
IMAGEMAGICK_POLICY_HEIGHT=16KP
IMAGEMAGICK_POLICY_MAP=512MiB
IMAGEMAGICK_POLICY_MEMORY=256MiB
IMAGEMAGICK_POLICY_AREA=128MB
IMAGEMAGICK_POLICY_DISK=1GiB
IMAGEMAGICK_POLICY_TEMPORARY_PATH=/tmp

View File

@@ -135,7 +135,14 @@ services:
- LC_CTYPE=C.UTF-8 - LC_CTYPE=C.UTF-8
- LC_TIME=C.UTF-8 - LC_TIME=C.UTF-8
- LC_NAME=C.UTF-8 - LC_NAME=C.UTF-8
- IMAGEMAGICK_POLICY_VERSION
- IMAGEMAGICK_POLICY_WIDTH
- IMAGEMAGICK_POLICY_HEIGHT
- IMAGEMAGICK_POLICY_MAP
- IMAGEMAGICK_POLICY_MEMORY
- IMAGEMAGICK_POLICY_AREA
- IMAGEMAGICK_POLICY_DISK
- IMAGEMAGICK_POLICY_TEMPORARY_PATH
volumes: volumes:
- ${PHRASEANET_CONFIG_DIR}:/var/alchemy/Phraseanet/config:rw - ${PHRASEANET_CONFIG_DIR}:/var/alchemy/Phraseanet/config:rw
- ${PHRASEANET_LOGS_DIR}:/var/alchemy/Phraseanet/logs:rw - ${PHRASEANET_LOGS_DIR}:/var/alchemy/Phraseanet/logs:rw

View File

@@ -15,4 +15,12 @@ if [ ${XDEBUG_ENABLED} == "1" ]; then
docker-php-ext-enable xdebug docker-php-ext-enable xdebug
fi fi
sed -i "s/domain=\"resource\" name=\"memory\" value=\".*\"/domain=\"resource\" name=\"memory\" value=\"$IMAGEMAGICK_POLICY_MEMORY\"/g" /etc/ImageMagick-6/policy.xml
sed -i "s/domain=\"resource\" name=\"map\" value=\".*\"/domain=\"resource\" name=\"map\" value=\"$IMAGEMAGICK_POLICY_MAP\"/g" /etc/ImageMagick-6/policy.xml
sed -i "s/domain=\"resource\" name=\"width\" value=\".*\"/domain=\"resource\" name=\"width\" value=\"$IMAGEMAGICK_POLICY_WIDTH\"/g" /etc/ImageMagick-6/policy.xml
sed -i "s/domain=\"resource\" name=\"height\" value=\".*\"/domain=\"resource\" name=\"height\" value=\"$IMAGEMAGICK_POLICY_HEIGHT\"/g" /etc/ImageMagick-6/policy.xml
sed -i "s/domain=\"resource\" name=\"disk\" value=\".*\"/domain=\"resource\" name=\"disk\" value=\"$IMAGEMAGICK_POLICY_DISK\"/g" /etc/ImageMagick-6/policy.xml
sed -i "s/domain=\"resource\" name=\"area\" value=\".*\"/domain=\"resource\" name=\"area\" value=\"$IMAGEMAGICK_POLICY_AREA\"/g" /etc/ImageMagick-6/policy.xml
sed -i "s/domain=\"resource\" name=\"temporary-path\" value=\".*\"/domain=\"resource\" name=\"temporary-path\" value=\"\$IMAGEMAGICK_POLICY_TEMPORARY_PATH\"/g" /etc/ImageMagick-6/policy.xml
runuser -u app -- $@ runuser -u app -- $@