feat: webtrees docker build setup with patched PHP 8.4.26 (CVE-2026-109618 / CVE-2026-109619)

2026-10-21 20:55:55 +02:00
parent 83e64a0d5d
commit 1080424e4c
10 changed files with 937 additions and 5 deletions
@@ -0,0 +1,78 @@
+ARG PHP_VERSION=8.4
+
+FROM docker.io/library/php:$PHP_VERSION-apache
+
+# https://hub.docker.com/_/php
+# https://github.com/NathanVaughn/webtrees-docker/issues/160
+RUN mv "$PHP_INI_DIR/php.ini-production" "$PHP_INI_DIR/php.ini"
+
+ENV WEBTREES_HOME="/var/www/webtrees"
+WORKDIR $WEBTREES_HOME
+
+# install pre-reqs
+# postgresql-client provides pg_isready
+# mariadb-client provides mysqladmin
+RUN apt-get update \
+ && apt-get install -y \
+    curl \
+    libmagickwand-dev \
+    libpq-dev \
+    libzip-dev \
+    postgresql-client \
+    mariadb-client \
+    patch \
+    python3 \
+    unzip \
+    --no-install-recommends \
+ && rm -rf /var/lib/apt/lists/*
+
+# install php extensions
+RUN pecl install imagick \
+ && docker-php-ext-enable imagick \
+ && docker-php-ext-configure gd --with-freetype --with-jpeg \
+ && docker-php-ext-install -j"$(nproc)" pdo pdo_mysql pdo_pgsql zip intl gd exif opcache
+
+# remove old apt stuff
+RUN apt-get purge gcc g++ make -y \
+ && apt-get autoremove -y \
+ && apt-get clean \
+ && rm -rf /var/tmp/* /etc/apache2/sites-enabled/000-*.conf
+
+ARG WEBTREES_VERSION
+RUN curl -s -L https://github.com/fisharebest/webtrees/releases/download/${WEBTREES_VERSION}/webtrees-${WEBTREES_VERSION}.zip -o webtrees.zip \
+ && unzip -q webtrees.zip -d /var/www/ && rm webtrees.zip \
+ && rm $WEBTREES_HOME/*.md
+
+# Disable version update prompt. Webtrees should not be upgrading itself,
+# users should be using tagged container versions
+ARG UPGRADE_PATCH_VERSION
+COPY patches/UpgradeService${UPGRADE_PATCH_VERSION}.patch /UpgradeService.patch
+RUN patch app/Services/UpgradeService.php /UpgradeService.patch \
+ && rm /UpgradeService.patch \
+# Delete file that caused email issues
+# https://www.webtrees.net/index.php/fr/forum/help-for-2-0/36616-email-error-after-update-to-2-0-21#89985
+# https://github.com/NathanVaughn/webtrees-docker/issues/88
+ && rm vendor/egulias/email-validator/src/Validation/MessageIDValidation.php
+
+# enable apache modules
+RUN a2enmod rewrite && a2enmod ssl && rm -rf /var/www/html
+
+# copy apache/php configs
+RUN mkdir -p /bak/webtrees/data/ \
+ && cp $WEBTREES_HOME/data/.htaccess /bak/webtrees/data/.htaccess
+COPY .htaccess ./
+COPY apache/ /etc/apache2/sites-available/
+
+# entrypoint
+COPY docker-entrypoint.py /
+
+# healthcheck
+COPY docker-healthcheck.sh /
+RUN chmod +x /docker-healthcheck.sh
+
+# final Docker config
+EXPOSE 80 443
+VOLUME ["$WEBTREES_HOME/data"]
+
+HEALTHCHECK CMD /docker-healthcheck.sh
+ENTRYPOINT ["python3", "/docker-entrypoint.py"]