docker all-in-one image updates for Debian Bookworm base image #826
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Proposed changes
The currently used base image for the All-In-One image is based on Debian 12 Bookworm.
Some parts of the additional software installation are not adapted to the current distro and use packages build for other versions.
Another update is for security reasons: disable the
supervisord
network server that was enabled WITHOUT any authentication. The port was not officially exported within the Dockerfile and not mentioned at all in the documentation. Therefor not used.As it is not needed to run (
supervisorctl
uses unix socket) it should be disabled for security reasons.People to want to used the network access to supervisord had to explicit export port by themself with current image too and do know what they do - they will probably provide a custom supervisord config with auth by themself than also.
Types of changes
What types of changes does your code introduce to Lowcoder?
Put an
x
in the boxes that apply.Checklist
You can also fill these out after creating the PR. If you're unsure about any of them, don't hesitate to ask. We're here to help!
This is simply a reminder of what we are going to look for before merging your code.
Put an
x
in the boxes that apply.Further comments
Remark: current state of "dev" branch do not build. This is not due to this PR, current "dev" is broken because
yarn build
fails with a not working test case (FAIL src/__test__/allComp.test.tsx
).This PR is completly unrelated to the failing test.