Skip to content

Commit ddf48eb

Browse files
thelamerthelamer
committed
add new container env vars and hardening setup el
1 parent 91e7869 commit ddf48eb

11 files changed

Lines changed: 367 additions & 105 deletions

File tree

‎Dockerfile‎

Lines changed: 24 additions & 16 deletions
Original file line numberDiff line numberDiff line change
@@ -3,7 +3,7 @@ FROM ghcr.io/linuxserver/baseimage-alpine:3.22 AS frontend
33

44
RUN \
55
echo "**** install build packages ****" && \
6-
apk add --no-cache \
6+
apk add \
77
cmake \
88
git \
99
nodejs \
@@ -15,24 +15,29 @@ RUN \
1515
https://github.com/selkies-project/selkies.git \
1616
/src && \
1717
cd /src && \
18-
git checkout -f 89e39cf7d58c8f7c87ac5922b56b84f745ddeeab
18+
git checkout -f 29466e687d2dbed57f657e47b69fab217a81ef1f
1919

2020
RUN \
21-
echo "**** build frontend ****" && \
22-
cd /src && \
23-
cd addons/gst-web-core && \
24-
npm install && \
25-
npm run build && \
26-
cp dist/selkies-core.js ../selkies-dashboard/src && \
27-
cd ../selkies-dashboard && \
21+
echo "**** build shared core library ****" && \
22+
cd /src/addons/gst-web-core && \
2823
npm install && \
2924
npm run build && \
30-
mkdir dist/src dist/nginx && \
31-
cp ../universal-touch-gamepad/universalTouchGamepad.js dist/src/ && \
32-
cp ../gst-web-core/nginx/* dist/nginx/ && \
33-
cp -r ../gst-web-core/dist/jsdb dist/ && \
25+
echo "**** build multiple dashboards ****" && \
26+
DASHBOARDS="selkies-dashboard selkies-dashboard-zinc selkies-dashboard-wish" && \
3427
mkdir /buildout && \
35-
cp -ar dist/* /buildout/
28+
for DASH in $DASHBOARDS; do \
29+
cd /src/addons/$DASH && \
30+
cp ../gst-web-core/dist/selkies-core.js src/ && \
31+
npm install && \
32+
npm run build && \
33+
mkdir -p dist/src dist/nginx && \
34+
cp ../gst-web-core/dist/selkies-core.js dist/src/ && \
35+
cp ../universal-touch-gamepad/universalTouchGamepad.js dist/src/ && \
36+
cp ../gst-web-core/nginx/* dist/nginx/ && \
37+
cp -r ../gst-web-core/dist/jsdb dist/ && \
38+
mkdir -p /buildout/$DASH && \
39+
cp -ar dist/* /buildout/$DASH/; \
40+
done
3641

3742
# Runtime stage
3843
FROM ghcr.io/linuxserver/baseimage-el:9
@@ -159,7 +164,7 @@ RUN \
159164
echo "**** install selkies ****" && \
160165
curl -o \
161166
/tmp/selkies.tar.gz -L \
162-
"https://github.com/selkies-project/selkies/archive/89e39cf7d58c8f7c87ac5922b56b84f745ddeeab.tar.gz" && \
167+
"https://github.com/selkies-project/selkies/archive/29466e687d2dbed57f657e47b69fab217a81ef1f.tar.gz" && \
163168
cd /tmp && \
164169
tar xf selkies.tar.gz && \
165170
cd selkies-* && \
@@ -200,6 +205,9 @@ RUN \
200205
-e 's|</keyboard>| <keybind key="C-S-d"><action name="ToggleDecorations"/></keybind>\n</keyboard>|' \
201206
-e 's|<number>4</number>|<number>1</number>|' \
202207
/etc/xdg/openbox/rc.xml && \
208+
sed -i \
209+
's/--startup/--replace --startup/g' \
210+
/usr/bin/openbox-session && \
203211
echo "**** user perms ****" && \
204212
echo "abc:abc" | chpasswd && \
205213
usermod -s /bin/bash abc && \
@@ -242,7 +250,7 @@ RUN \
242250

243251
# add local files
244252
COPY /root /
245-
COPY --from=frontend /buildout /usr/share/selkies/www
253+
COPY --from=frontend /buildout /usr/share/selkies
246254

247255
# ports and volumes
248256
EXPOSE 3000 3001

‎Dockerfile.aarch64‎

Lines changed: 24 additions & 16 deletions
Original file line numberDiff line numberDiff line change
@@ -3,7 +3,7 @@ FROM ghcr.io/linuxserver/baseimage-alpine:arm64v8-3.21 AS frontend
33

44
RUN \
55
echo "**** install build packages ****" && \
6-
apk add --no-cache \
6+
apk add \
77
cmake \
88
git \
99
nodejs \
@@ -15,24 +15,29 @@ RUN \
1515
https://github.com/selkies-project/selkies.git \
1616
/src && \
1717
cd /src && \
18-
git checkout -f 89e39cf7d58c8f7c87ac5922b56b84f745ddeeab
18+
git checkout -f 29466e687d2dbed57f657e47b69fab217a81ef1f
1919

2020
RUN \
21-
echo "**** build frontend ****" && \
22-
cd /src && \
23-
cd addons/gst-web-core && \
24-
npm install && \
25-
npm run build && \
26-
cp dist/selkies-core.js ../selkies-dashboard/src && \
27-
cd ../selkies-dashboard && \
21+
echo "**** build shared core library ****" && \
22+
cd /src/addons/gst-web-core && \
2823
npm install && \
2924
npm run build && \
30-
mkdir dist/src dist/nginx && \
31-
cp ../universal-touch-gamepad/universalTouchGamepad.js dist/src/ && \
32-
cp ../gst-web-core/nginx/* dist/nginx/ && \
33-
cp -r ../gst-web-core/dist/jsdb dist/ && \
25+
echo "**** build multiple dashboards ****" && \
26+
DASHBOARDS="selkies-dashboard selkies-dashboard-zinc selkies-dashboard-wish" && \
3427
mkdir /buildout && \
35-
cp -ar dist/* /buildout/
28+
for DASH in $DASHBOARDS; do \
29+
cd /src/addons/$DASH && \
30+
cp ../gst-web-core/dist/selkies-core.js src/ && \
31+
npm install && \
32+
npm run build && \
33+
mkdir -p dist/src dist/nginx && \
34+
cp ../gst-web-core/dist/selkies-core.js dist/src/ && \
35+
cp ../universal-touch-gamepad/universalTouchGamepad.js dist/src/ && \
36+
cp ../gst-web-core/nginx/* dist/nginx/ && \
37+
cp -r ../gst-web-core/dist/jsdb dist/ && \
38+
mkdir -p /buildout/$DASH && \
39+
cp -ar dist/* /buildout/$DASH/; \
40+
done
3641

3742
# Runtime stage
3843
FROM ghcr.io/linuxserver/baseimage-el:arm64v8-9
@@ -157,7 +162,7 @@ RUN \
157162
echo "**** install selkies ****" && \
158163
curl -o \
159164
/tmp/selkies.tar.gz -L \
160-
"https://github.com/selkies-project/selkies/archive/89e39cf7d58c8f7c87ac5922b56b84f745ddeeab.tar.gz" && \
165+
"https://github.com/selkies-project/selkies/archive/29466e687d2dbed57f657e47b69fab217a81ef1f.tar.gz" && \
161166
cd /tmp && \
162167
tar xf selkies.tar.gz && \
163168
cd selkies-* && \
@@ -198,6 +203,9 @@ RUN \
198203
-e 's|</keyboard>| <keybind key="C-S-d"><action name="ToggleDecorations"/></keybind>\n</keyboard>|' \
199204
-e 's|<number>4</number>|<number>1</number>|' \
200205
/etc/xdg/openbox/rc.xml && \
206+
sed -i \
207+
's/--startup/--replace --startup/g' \
208+
/usr/bin/openbox-session && \
201209
echo "**** user perms ****" && \
202210
echo "abc:abc" | chpasswd && \
203211
usermod -s /bin/bash abc && \
@@ -240,7 +248,7 @@ RUN \
240248

241249
# add local files
242250
COPY /root /
243-
COPY --from=frontend /buildout /usr/share/selkies/www
251+
COPY --from=frontend /buildout /usr/share/selkies
244252

245253
# ports and volumes
246254
EXPOSE 3000 3001

‎root/defaults/default.conf‎

Lines changed: 14 additions & 8 deletions
Original file line numberDiff line numberDiff line change
@@ -4,7 +4,7 @@ server {
44
listen 3000 default_server;
55
listen [::]:3000 default_server;
66
location SUBFOLDER {
7-
alias /usr/share/selkies/www/;
7+
alias /usr/share/selkies/web/;
88
index index.html index.htm;
99
try_files $uri $uri/ =404;
1010
}
@@ -42,11 +42,15 @@ server {
4242
fancyindex on;
4343
fancyindex_footer SUBFOLDERnginx/footer.html;
4444
fancyindex_header SUBFOLDERnginx/header.html;
45-
alias REPLACE_HOME/Desktop/;
45+
alias REPLACE_DOWNLOADS_PATH/;
46+
if (-f $request_filename) {
47+
add_header Content-Disposition "attachment";
48+
add_header X-Content-Type-Options "nosniff";
49+
}
4650
}
4751
error_page 500 502 503 504 /50x.html;
4852
location = SUBFOLDER50x.html {
49-
root /usr/share/selkies/www/;
53+
root /usr/share/selkies/web/;
5054
}
5155
}
5256

@@ -58,7 +62,7 @@ server {
5862
ssl_certificate /config/ssl/cert.pem;
5963
ssl_certificate_key /config/ssl/cert.key;
6064
location SUBFOLDER {
61-
alias /usr/share/selkies/www/;
65+
alias /usr/share/selkies/web/;
6266
index index.html index.htm;
6367
try_files $uri $uri/ =404;
6468
}
@@ -96,12 +100,14 @@ server {
96100
fancyindex on;
97101
fancyindex_footer SUBFOLDERnginx/footer.html;
98102
fancyindex_header SUBFOLDERnginx/header.html;
99-
alias REPLACE_HOME/Desktop/;
103+
alias REPLACE_DOWNLOADS_PATH/;
104+
if (-f $request_filename) {
105+
add_header Content-Disposition "attachment";
106+
add_header X-Content-Type-Options "nosniff";
107+
}
100108
}
101109
error_page 500 502 503 504 /50x.html;
102110
location = SUBFOLDER50x.html {
103-
root /usr/share/selkies/www/;
111+
root /usr/share/selkies/web/;
104112
}
105113
}
106-
107-

‎root/etc/s6-overlay/s6-rc.d/init-nginx/run‎

Lines changed: 38 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -9,6 +9,10 @@ CHPORT="${CUSTOM_HTTPS_PORT:-3001}"
99
CWS="${CUSTOM_WS_PORT:-8082}"
1010
CUSER="${CUSTOM_USER:-abc}"
1111
SFOLDER="${SUBFOLDER:-/}"
12+
FILE_MANAGER_PATH="${FILE_MANAGER_PATH:-$HOME/Desktop}"
13+
DASHBOARD="${DASHBOARD:-selkies-dashboard}"
14+
SELKIES_FILE_TRANSFERS="${SELKIES_FILE_TRANSFERS:-upload,download}"
15+
HARDEN_DESKTOP="${HARDEN_DESKTOP:-false}"
1216

1317
# create self signed cert
1418
if [ ! -f "/config/ssl/cert.pem" ]; then
@@ -28,8 +32,11 @@ sed -i "s/3000/$CPORT/g" ${NGINX_CONFIG}
2832
sed -i "s/3001/$CHPORT/g" ${NGINX_CONFIG}
2933
sed -i "s/CWS/$CWS/g" ${NGINX_CONFIG}
3034
sed -i "s|SUBFOLDER|$SFOLDER|g" ${NGINX_CONFIG}
31-
sed -i "s|REPLACE_HOME|$HOME|g" ${NGINX_CONFIG}
32-
s6-setuidgid abc mkdir -p $HOME/Desktop
35+
sed -i "s|REPLACE_DOWNLOADS_PATH|$FILE_MANAGER_PATH|g" ${NGINX_CONFIG}
36+
s6-setuidgid abc mkdir -p ${FILE_MANAGER_PATH}
37+
if [[ $SELKIES_FILE_TRANSFERS != *"download"* ]] || [[ ${HARDEN_DESKTOP,,} == "true" ]]; then
38+
sed -i '/files {/,/^ }/d' ${NGINX_CONFIG}
39+
fi
3340
if [ ! -z ${DISABLE_IPV6+x} ]; then
3441
sed -i '/listen \[::\]/d' ${NGINX_CONFIG}
3542
fi
@@ -44,7 +51,34 @@ if [ ! -z ${DEV_MODE+x} ]; then
4451
${NGINX_CONFIG}
4552
fi
4653

47-
# copy favicon
54+
# set dashboard and icon
55+
rm -Rf \
56+
/usr/share/selkies/web
57+
cp -a \
58+
/usr/share/selkies/$DASHBOARD \
59+
/usr/share/selkies/web
60+
sed -i "s|REPLACE_DOWNLOADS_PATH|$FILE_MANAGER_PATH|g" /usr/share/selkies/web/nginx/footer.html
61+
cp \
62+
/usr/share/selkies/www/icon.png \
63+
/usr/share/selkies/web/favicon.ico
4864
cp \
4965
/usr/share/selkies/www/icon.png \
50-
/usr/share/selkies/www/favicon.ico
66+
/usr/share/selkies/web/icon.png
67+
# manifest creation
68+
echo "{
69+
\"name\": \"${TITLE}\",
70+
\"short_name\": \"${TITLE}\",
71+
\"manifest_version\": 2,
72+
\"version\": \"1.0.0\",
73+
\"display\": \"fullscreen\",
74+
\"background_color\": \"#000000\",
75+
\"theme_color\": \"#000000\",
76+
\"icons\": [
77+
{
78+
\"src\": \"icon.png\",
79+
\"type\": \"image/png\",
80+
\"sizes\": \"180x180\"
81+
}
82+
],
83+
\"start_url\": \"/\"
84+
}" > /usr/share/selkies/web/manifest.json

0 commit comments

Comments
 (0)