From 654bd1c80bd8db9754c161cb0ef9a7117105f579 Mon Sep 17 00:00:00 2001 From: Bitnami Bot Date: Fri, 29 May 2026 18:22:15 +0200 Subject: [PATCH] [bitnami/redmine] Release 6.1.2-debian-12-r15 (#94064) Signed-off-by: Bitnami Bot --- bitnami/redmine/6.1/debian-12/Dockerfile | 6 ++--- .../redmine/6.1/debian-12/docker-compose.yml | 1 + ....4.9-2-linux-amd64-debian-12.tar.gz.sha256 | 1 - ....4.9-2-linux-arm64-debian-12.tar.gz.sha256 | 1 - ....4.9-3-linux-amd64-debian-12.tar.gz.sha256 | 1 + ....4.9-3-linux-arm64-debian-12.tar.gz.sha256 | 1 + .../prebuildfs/opt/bitnami/scripts/libfs.sh | 24 ++++++++++++++----- .../opt/bitnami/scripts/libmysqlclient.sh | 12 +++++++--- .../rootfs/opt/bitnami/scripts/libredmine.sh | 11 ++++----- .../rootfs/opt/bitnami/scripts/redmine-env.sh | 2 +- bitnami/redmine/README.md | 2 +- bitnami/redmine/docker-compose-postgresql.yml | 1 + bitnami/redmine/docker-compose.yml | 1 + 13 files changed, 42 insertions(+), 22 deletions(-) delete mode 100644 bitnami/redmine/6.1/debian-12/prebuildfs/opt/bitnami/checksums/ruby-3.4.9-2-linux-amd64-debian-12.tar.gz.sha256 delete mode 100644 bitnami/redmine/6.1/debian-12/prebuildfs/opt/bitnami/checksums/ruby-3.4.9-2-linux-arm64-debian-12.tar.gz.sha256 create mode 100644 bitnami/redmine/6.1/debian-12/prebuildfs/opt/bitnami/checksums/ruby-3.4.9-3-linux-amd64-debian-12.tar.gz.sha256 create mode 100644 bitnami/redmine/6.1/debian-12/prebuildfs/opt/bitnami/checksums/ruby-3.4.9-3-linux-arm64-debian-12.tar.gz.sha256 diff --git a/bitnami/redmine/6.1/debian-12/Dockerfile b/bitnami/redmine/6.1/debian-12/Dockerfile index c5001d5c1818..d15c2940176f 100644 --- a/bitnami/redmine/6.1/debian-12/Dockerfile +++ b/bitnami/redmine/6.1/debian-12/Dockerfile @@ -7,7 +7,7 @@ ARG DOWNLOADS_URL="downloads.bitnami.com/files/stacksmith" ARG TARGETARCH LABEL org.opencontainers.image.base.name="docker.io/bitnami/minideb:bookworm" \ - org.opencontainers.image.created="2026-05-27T09:12:52Z" \ + org.opencontainers.image.created="2026-05-29T16:04:28Z" \ org.opencontainers.image.description="Application packaged by Broadcom, Inc." \ org.opencontainers.image.documentation="https://github.com/bitnami/containers/tree/main/bitnami/redmine/README.md" \ org.opencontainers.image.source="https://github.com/bitnami/containers/tree/main/bitnami/redmine" \ @@ -27,7 +27,7 @@ RUN --mount=type=secret,id=downloads_url,env=SECRET_DOWNLOADS_URL \ DOWNLOADS_URL=${SECRET_DOWNLOADS_URL:-${DOWNLOADS_URL}} ; \ mkdir -p /tmp/bitnami/pkg/cache/ ; cd /tmp/bitnami/pkg/cache/ || exit 1 ; \ COMPONENTS=( \ - "ruby-3.4.9-2-linux-${OS_ARCH}-debian-12" \ + "ruby-3.4.9-3-linux-${OS_ARCH}-debian-12" \ "yq-4.53.2-1-linux-${OS_ARCH}-debian-12" \ "postgresql-client-18.4.0-0-linux-${OS_ARCH}-debian-12" \ "mysql-client-12.2.2-0-linux-${OS_ARCH}-debian-12" \ @@ -53,7 +53,7 @@ RUN /opt/bitnami/scripts/mysql-client/postunpack.sh RUN /opt/bitnami/scripts/redmine/postunpack.sh ENV APP_VERSION="6.1.2" \ BITNAMI_APP_NAME="redmine" \ - IMAGE_REVISION="14" \ + IMAGE_REVISION="15" \ LD_LIBRARY_PATH="/opt/bitnami/mariadb/lib:/opt/bitnami/postgresql/lib:$LD_LIBRARY_PATH" \ PATH="/opt/bitnami/ruby/bin:/opt/bitnami/common/bin:/opt/bitnami/postgresql/bin:/opt/bitnami/mysql/bin:$PATH" diff --git a/bitnami/redmine/6.1/debian-12/docker-compose.yml b/bitnami/redmine/6.1/debian-12/docker-compose.yml index ccb68a062761..1a2589a1b676 100644 --- a/bitnami/redmine/6.1/debian-12/docker-compose.yml +++ b/bitnami/redmine/6.1/debian-12/docker-compose.yml @@ -21,6 +21,7 @@ services: - mariadb environment: # ALLOW_EMPTY_PASSWORD is recommended only for development. + - REDMINE_PASSWORD=bitnami1 - ALLOW_EMPTY_PASSWORD=yes - REDMINE_DATABASE_HOST=mariadb - REDMINE_DATABASE_PORT_NUMBER=3306 diff --git a/bitnami/redmine/6.1/debian-12/prebuildfs/opt/bitnami/checksums/ruby-3.4.9-2-linux-amd64-debian-12.tar.gz.sha256 b/bitnami/redmine/6.1/debian-12/prebuildfs/opt/bitnami/checksums/ruby-3.4.9-2-linux-amd64-debian-12.tar.gz.sha256 deleted file mode 100644 index 14bf3ca013b5..000000000000 --- a/bitnami/redmine/6.1/debian-12/prebuildfs/opt/bitnami/checksums/ruby-3.4.9-2-linux-amd64-debian-12.tar.gz.sha256 +++ /dev/null @@ -1 +0,0 @@ -8cee55181fe9e89068ca2a8984f407d64bd5b0d13cde927dc934c8f0416ea3d5 ruby-3.4.9-2-linux-amd64-debian-12.tar.gz diff --git a/bitnami/redmine/6.1/debian-12/prebuildfs/opt/bitnami/checksums/ruby-3.4.9-2-linux-arm64-debian-12.tar.gz.sha256 b/bitnami/redmine/6.1/debian-12/prebuildfs/opt/bitnami/checksums/ruby-3.4.9-2-linux-arm64-debian-12.tar.gz.sha256 deleted file mode 100644 index a52b260a6215..000000000000 --- a/bitnami/redmine/6.1/debian-12/prebuildfs/opt/bitnami/checksums/ruby-3.4.9-2-linux-arm64-debian-12.tar.gz.sha256 +++ /dev/null @@ -1 +0,0 @@ -51b3a633dd7e8da6ea7329595d16f67af43bb552d06096d6563469ba0ecfdfd6 ruby-3.4.9-2-linux-arm64-debian-12.tar.gz diff --git a/bitnami/redmine/6.1/debian-12/prebuildfs/opt/bitnami/checksums/ruby-3.4.9-3-linux-amd64-debian-12.tar.gz.sha256 b/bitnami/redmine/6.1/debian-12/prebuildfs/opt/bitnami/checksums/ruby-3.4.9-3-linux-amd64-debian-12.tar.gz.sha256 new file mode 100644 index 000000000000..e0c94ee36e90 --- /dev/null +++ b/bitnami/redmine/6.1/debian-12/prebuildfs/opt/bitnami/checksums/ruby-3.4.9-3-linux-amd64-debian-12.tar.gz.sha256 @@ -0,0 +1 @@ +c918e07e4ea39e841b52eca79f27c262c412860e0164566477c3ce24841c4116 ruby-3.4.9-3-linux-amd64-debian-12.tar.gz diff --git a/bitnami/redmine/6.1/debian-12/prebuildfs/opt/bitnami/checksums/ruby-3.4.9-3-linux-arm64-debian-12.tar.gz.sha256 b/bitnami/redmine/6.1/debian-12/prebuildfs/opt/bitnami/checksums/ruby-3.4.9-3-linux-arm64-debian-12.tar.gz.sha256 new file mode 100644 index 000000000000..2157eafc3185 --- /dev/null +++ b/bitnami/redmine/6.1/debian-12/prebuildfs/opt/bitnami/checksums/ruby-3.4.9-3-linux-arm64-debian-12.tar.gz.sha256 @@ -0,0 +1 @@ +41ccd319fa60a236693c9325dd5591ce734ac689e08603780fa2de891f146047 ruby-3.4.9-3-linux-arm64-debian-12.tar.gz diff --git a/bitnami/redmine/6.1/debian-12/prebuildfs/opt/bitnami/scripts/libfs.sh b/bitnami/redmine/6.1/debian-12/prebuildfs/opt/bitnami/scripts/libfs.sh index 1337f6c2dd59..b16efabd3230 100644 --- a/bitnami/redmine/6.1/debian-12/prebuildfs/opt/bitnami/scripts/libfs.sh +++ b/bitnami/redmine/6.1/debian-12/prebuildfs/opt/bitnami/scripts/libfs.sh @@ -131,6 +131,7 @@ relativize() { # -d|--dir-mode - mode for files. # -u|--user - user # -g|--group - group +# -n|--no-dereference - do not follow symlinks (use for runtime root chown of daemon-writable dirs) # Returns: # None ######################### @@ -140,6 +141,7 @@ configure_permissions_ownership() { local file_mode="" local user="" local group="" + local follow_symlinks="yes" # Validate arguments shift 1 @@ -161,6 +163,9 @@ configure_permissions_ownership() { shift group="${1:?missing group}" ;; + -n | --no-dereference) + follow_symlinks="no" + ;; *) echo "Invalid command line flag $1" >&2 return 1 @@ -169,22 +174,29 @@ configure_permissions_ownership() { shift done + # -L: follow symlinks and emits the target path + # This is dangerous at runtime, given a co-located lower-privileged process with write access + # to the target path can redirect the chown/chmod to arbitrary paths. Example: + # Lower-privileged process run: ln -s /etc /tmp/etc + # Then, setup.sh runs: configure_permissions_ownership --dir-mode 775 /tmp + local find_L_flag=(); [[ "$follow_symlinks" == "yes" ]] && find_L_flag=("-L") + # -h: changes symlink inode ownership without touching the target. + local chown_flags=(); [[ "$follow_symlinks" == "no" ]] && chown_flags=("-h") read -r -a filepaths <<<"$paths" for p in "${filepaths[@]}"; do if [[ -e "$p" ]]; then - find -L "$p" -printf "" if [[ -n $dir_mode ]]; then - find -L "$p" -type d ! -perm "$dir_mode" -print0 | xargs -r -0 chmod "$dir_mode" + find "${find_L_flag[@]}" "$p" -not -type l -type d ! -perm "$dir_mode" -print0 | xargs -r -0 chmod "$dir_mode" fi if [[ -n $file_mode ]]; then - find -L "$p" -type f ! -perm "$file_mode" -print0 | xargs -r -0 chmod "$file_mode" + find "${find_L_flag[@]}" "$p" -not -type l -type f ! -perm "$file_mode" -print0 | xargs -r -0 chmod "$file_mode" fi if [[ -n $user ]] && [[ -n $group ]]; then - find -L "$p" -print0 | xargs -r -0 chown "${user}:${group}" + find "${find_L_flag[@]}" "$p" -print0 | xargs -r -0 chown "${chown_flags[@]}" "${user}:${group}" elif [[ -n $user ]] && [[ -z $group ]]; then - find -L "$p" -print0 | xargs -r -0 chown "${user}" + find "${find_L_flag[@]}" "$p" -print0 | xargs -r -0 chown "${chown_flags[@]}" "${user}" elif [[ -z $user ]] && [[ -n $group ]]; then - find -L "$p" -print0 | xargs -r -0 chgrp "${group}" + find "${find_L_flag[@]}" "$p" -print0 | xargs -r -0 chgrp "${chown_flags[@]}" "${group}" fi else stderr_print "$p does not exist" diff --git a/bitnami/redmine/6.1/debian-12/rootfs/opt/bitnami/scripts/libmysqlclient.sh b/bitnami/redmine/6.1/debian-12/rootfs/opt/bitnami/scripts/libmysqlclient.sh index 054084de6928..1a3ae0d0dc67 100644 --- a/bitnami/redmine/6.1/debian-12/rootfs/opt/bitnami/scripts/libmysqlclient.sh +++ b/bitnami/redmine/6.1/debian-12/rootfs/opt/bitnami/scripts/libmysqlclient.sh @@ -1041,15 +1041,21 @@ mysql_client_extra_opts() { local -a opts=() local key value if is_boolean_yes "${DB_ENABLE_SSL:-no}"; then + ca_file="$(mysql_client_env_value "SSL_CA_FILE")" if [[ "$(mysql_client_flavor)" = "mysql" ]]; then - opts+=("--ssl-mode=REQUIRED") + if [[ -f "$ca_file " ]]; then + opts+=("--ssl-mode=VERIFY_CA") + else + opts+=("--ssl-mode=REQUIRED") + fi else opts+=("--ssl=TRUE") + [[ -f "$ca_file" ]] && opts+=("--ssl-verify-server-cert") fi - # Add "--ssl-ca", "--ssl-key" and "--ssl-cert" options if the env vars are defined + # Add "--ssl-ca", "--ssl-key" and "--ssl-cert" options if the env vars are defined and the files exist for key in ca key cert; do value="$(mysql_client_env_value "SSL_${key^^}_FILE")" - [[ -n "${value}" ]] && opts+=("--ssl-${key}=${value}") + [[ -f "${value}" ]] && opts+=("--ssl-${key}=${value}") done else # Skip SSL validation diff --git a/bitnami/redmine/6.1/debian-12/rootfs/opt/bitnami/scripts/libredmine.sh b/bitnami/redmine/6.1/debian-12/rootfs/opt/bitnami/scripts/libredmine.sh index 2ba492dd4057..77876a08c764 100644 --- a/bitnami/redmine/6.1/debian-12/rootfs/opt/bitnami/scripts/libredmine.sh +++ b/bitnami/redmine/6.1/debian-12/rootfs/opt/bitnami/scripts/libredmine.sh @@ -91,12 +91,11 @@ redmine_validate() { ! is_empty_value "$REDMINE_DATABASE_PORT_NUMBER" && check_valid_port "REDMINE_DATABASE_PORT_NUMBER" # Validate credentials + check_empty_value "REDMINE_PASSWORD" if is_boolean_yes "${ALLOW_EMPTY_PASSWORD:-}"; then warn "You set the environment variable ALLOW_EMPTY_PASSWORD=${ALLOW_EMPTY_PASSWORD:-}. For safety reasons, do not use this flag in a production environment." else - for empty_env_var in "REDMINE_DATABASE_PASSWORD" "REDMINE_PASSWORD"; do - is_empty_value "${!empty_env_var}" && print_validation_error "The ${empty_env_var} environment variable is empty or not set. Set the environment variable ALLOW_EMPTY_PASSWORD=yes to allow a blank password. This is only recommended for development environments." - done + is_empty_value "$REDMINE_DATABASE_PASSWORD" && print_validation_error "The REDMINE_DATABASE_PASSWORD environment variable is empty or not set. Set the environment variable ALLOW_EMPTY_PASSWORD=yes to allow a blank password. This is only recommended for development environments." fi # Validate SMTP credentials @@ -104,8 +103,8 @@ redmine_validate() { for empty_env_var in "REDMINE_SMTP_USER" "REDMINE_SMTP_PASSWORD"; do is_empty_value "${!empty_env_var}" && warn "The ${empty_env_var} environment variable is empty or not set." done - is_empty_value "$REDMINE_SMTP_PORT_NUMBER" && print_validation_error "The REDMINE_SMTP_PORT_NUMBER environment variable is empty or not set." - ! is_empty_value "$REDMINE_SMTP_PORT_NUMBER" && check_valid_port "REDMINE_SMTP_PORT_NUMBER" + check_empty_value "REDMINE_SMTP_PASSWORD" + check_valid_port "REDMINE_SMTP_PORT_NUMBER" check_multi_value "REDMINE_SMTP_AUTH" "plain login cram_md5" if ! is_empty_value "${SMTP_AUTH:-}"; then warn "The environment variable SMTP_TLS is set. This configuration will be deprecated soon. Please set REDMINE_PROTOCOL=tls to avoid errors in the future." @@ -137,7 +136,7 @@ redmine_initialize() { info "Ensuring Redmine directories exist" ensure_dir_exists "$REDMINE_VOLUME_DIR" # Use daemon:root ownership for compatibility when running as a non-root user - am_i_root && configure_permissions_ownership "$REDMINE_VOLUME_DIR" -d "775" -f "664" -u "$REDMINE_DAEMON_USER" -g "root" + am_i_root && configure_permissions_ownership "$REDMINE_VOLUME_DIR" -d "775" -f "664" -u "$REDMINE_DAEMON_USER" -g "root" -n info "Trying to connect to the database server" local db_type="mysql" diff --git a/bitnami/redmine/6.1/debian-12/rootfs/opt/bitnami/scripts/redmine-env.sh b/bitnami/redmine/6.1/debian-12/rootfs/opt/bitnami/scripts/redmine-env.sh index 8a7b1c1ce428..90286af5b0d9 100644 --- a/bitnami/redmine/6.1/debian-12/rootfs/opt/bitnami/scripts/redmine-env.sh +++ b/bitnami/redmine/6.1/debian-12/rootfs/opt/bitnami/scripts/redmine-env.sh @@ -110,7 +110,7 @@ export REDMINE_QUEUE_ADAPTER="${REDMINE_QUEUE_ADAPTER:-inline}" # Redmine credentials export REDMINE_USERNAME="${REDMINE_USERNAME:-user}" # only used during the first initialization -export REDMINE_PASSWORD="${REDMINE_PASSWORD:-bitnami1}" # only used during the first initialization +export REDMINE_PASSWORD="${REDMINE_PASSWORD:-}" # only used during the first initialization export REDMINE_EMAIL="${REDMINE_EMAIL:-user@example.com}" # only used during the first initialization export REDMINE_FIRST_NAME="${REDMINE_FIRST_NAME:-UserName}" # only used during the first initialization export REDMINE_LAST_NAME="${REDMINE_LAST_NAME:-LastName}" # only used during the first initialization diff --git a/bitnami/redmine/README.md b/bitnami/redmine/README.md index 66a210b6af5e..e23d5f58ec71 100644 --- a/bitnami/redmine/README.md +++ b/bitnami/redmine/README.md @@ -81,7 +81,7 @@ The following tables list the main variables you can set. | `REDMINE_SKIP_BOOTSTRAP` | Whether to perform initial bootstrapping for the application. | `nil` | | `REDMINE_QUEUE_ADAPTER` | Active job queue adapter. You may need to install additional dependencies if you select a value other than "async" or "inline". | `inline` | | `REDMINE_USERNAME` | Redmine user name. | `user` | -| `REDMINE_PASSWORD` | Redmine user password. | `bitnami1` | +| `REDMINE_PASSWORD` | Redmine user password. | `nil` | | `REDMINE_EMAIL` | Redmine user e-mail address. | `user@example.com` | | `REDMINE_FIRST_NAME` | Redmine user first name. | `UserName` | | `REDMINE_LAST_NAME` | Redmine user last name. | `LastName` | diff --git a/bitnami/redmine/docker-compose-postgresql.yml b/bitnami/redmine/docker-compose-postgresql.yml index adb97651fcef..c586ac099ff9 100644 --- a/bitnami/redmine/docker-compose-postgresql.yml +++ b/bitnami/redmine/docker-compose-postgresql.yml @@ -20,6 +20,7 @@ services: - postgresql environment: - ALLOW_EMPTY_PASSWORD=yes + - REDMINE_PASSWORD=bitnami1 - REDMINE_DATABASE_TYPE=postgresql - REDMINE_DATABASE_HOST=postgresql - REDMINE_DATABASE_PORT_NUMBER=5432 diff --git a/bitnami/redmine/docker-compose.yml b/bitnami/redmine/docker-compose.yml index ccb68a062761..1a2589a1b676 100644 --- a/bitnami/redmine/docker-compose.yml +++ b/bitnami/redmine/docker-compose.yml @@ -21,6 +21,7 @@ services: - mariadb environment: # ALLOW_EMPTY_PASSWORD is recommended only for development. + - REDMINE_PASSWORD=bitnami1 - ALLOW_EMPTY_PASSWORD=yes - REDMINE_DATABASE_HOST=mariadb - REDMINE_DATABASE_PORT_NUMBER=3306