Bitnami/containers
2
0
Fork 0
mirror of https://github.com/bitnami/containers.git synced 2026-02-10 21:27:26 +08:00
Code Issues Packages Projects Releases Wiki Activity

[bitnami/harbor-portal] Release 2.13.2-debian-12-r0 (#83852)

Browse Source 
Signed-off-by: Bitnami Bot <bitnami.bot@broadcom.com>
This commit is contained in:
Bitnami Bot
2025-07-31 12:59:50 +02:00
committed by GitHub
parent abd2074a66
commit eb2e34b2e5
4 changed files with 24 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files

8
bitnami/harbor-portal/2/debian-12/Dockerfile
View File

@@ -8,13 +8,13 @@ ARG TARGETARCH
LABEL com.vmware.cp.artifact.flavor="sha256:c50c90cfd9d12b445b011e6ad529f1ad3daea45c26d20b00732fae3cd71f6a83" \
org.opencontainers.image.base.name="docker.io/bitnami/minideb:bookworm" \
org.opencontainers.image.created="2025-07-30T13:40:15Z" \
org.opencontainers.image.created="2025-07-31T10:49:59Z" \
org.opencontainers.image.description="Application packaged by Broadcom, Inc." \
org.opencontainers.image.documentation="https://github.com/bitnami/containers/tree/main/bitnami/harbor-portal/README.md" \
org.opencontainers.image.source="https://github.com/bitnami/containers/tree/main/bitnami/harbor-portal" \
org.opencontainers.image.title="harbor-portal" \
org.opencontainers.image.vendor="Broadcom, Inc." \
org.opencontainers.image.version="2.13.1"
org.opencontainers.image.version="2.13.2"
ENV HOME="/" \
OS_ARCH="${TARGETARCH:-amd64}" \
@@ -31,7 +31,7 @@ RUN --mount=type=secret,id=downloads_url,env=SECRET_DOWNLOADS_URL \
COMPONENTS=( \
"render-template-1.0.8-1-linux-${OS_ARCH}-debian-12" \
"nginx-1.29.0-0-linux-${OS_ARCH}-debian-12" \
"harbor-2.13.1-1-linux-${OS_ARCH}-debian-12" \
"harbor-2.13.2-0-linux-${OS_ARCH}-debian-12" \
) ; \
for COMPONENT in "${COMPONENTS[@]}"; do \
if [ ! -f "${COMPONENT}.tar.gz" ]; then \
@@ -53,7 +53,7 @@ RUN uninstall_packages curl
COPY rootfs /
RUN /opt/bitnami/scripts/nginx/postunpack.sh
RUN /opt/bitnami/scripts/harbor-portal/postunpack.sh
ENV APP_VERSION="2.13.1" \
ENV APP_VERSION="2.13.2" \
BITNAMI_APP_NAME="harbor-portal" \
NGINX_HTTPS_PORT_NUMBER="" \
NGINX_HTTP_PORT_NUMBER="" \

2
bitnami/harbor-portal/2/debian-12/prebuildfs/opt/bitnami/.bitnami_components.json
View File

@@ -3,7 +3,7 @@
"arch": "amd64",
"distro": "debian-12",
"type": "NAMI",
"version": "2.13.1-1"
"version": "2.13.2-0"
},
"nginx": {
"arch": "amd64",

4
bitnami/harbor-portal/2/debian-12/rootfs/opt/bitnami/nginx/conf/nginx.conf
View File

@@ -5,8 +5,11 @@ worker_processes auto;
error_log "/opt/bitnami/nginx/logs/error.log";
pid "/opt/bitnami/nginx/tmp/nginx.pid";
include "/opt/bitnami/nginx/conf/context.d/main/*.conf";
events {
worker_connections 1024;
include "/opt/bitnami/nginx/conf/context.d/events/*.conf";
}
http {
@@ -42,6 +45,7 @@ http {
port_in_redirect off;
include "/opt/bitnami/nginx/conf/server_blocks/*.conf";
include "/opt/bitnami/nginx/conf/context.d/http/*.conf";
# HTTP Server
server {

15
bitnami/harbor-portal/2/debian-12/rootfs/opt/bitnami/scripts/nginx/postunpack.sh
View File

@@ -37,6 +37,13 @@ nginx_patch_httpoxy_vulnerability() {
# Remove unnecessary directories that come with the tarball
rm -rf "${BITNAMI_ROOT_DIR}/certs" "${BITNAMI_ROOT_DIR}/server_blocks"
# Context include directories
NGINX_CONTEXT_INCLUDES=(
"main"
"events"
"http"
)
# Ensure non-root user has write permissions on a set of directories
chmod g+w "$NGINX_BASE_DIR"
for dir in "$NGINX_VOLUME_DIR" "$NGINX_CONF_DIR" "$NGINX_INITSCRIPTS_DIR" "$NGINX_SERVER_BLOCKS_DIR" "$NGINX_STREAM_SERVER_BLOCKS_DIR" "${NGINX_CONF_DIR}/bitnami" "${NGINX_CONF_DIR}/bitnami/certs" "$NGINX_LOGS_DIR" "$NGINX_TMP_DIR" "$NGINX_DEFAULT_CONF_DIR"; do
@@ -44,6 +51,14 @@ for dir in "$NGINX_VOLUME_DIR" "$NGINX_CONF_DIR" "$NGINX_INITSCRIPTS_DIR" "$NGIN
chmod -R g+rwX "$dir"
done
# Create context.d directory and context include directories
ensure_dir_exists "${NGINX_CONF_DIR}/context.d"
chmod -R g+rwX "${NGINX_CONF_DIR}/context.d"
for context in "${NGINX_CONTEXT_INCLUDES[@]}"; do
ensure_dir_exists "${NGINX_CONF_DIR}/context.d/${context}"
chmod -R g+rwX "${NGINX_CONF_DIR}/context.d/${context}"
done
# Unset HTTP_PROXY header to protect vs HTTPPOXY vulnerability
nginx_patch_httpoxy_vulnerability