[bitnami/wordpress-nginx] Release 6.8.2-debian-12-r2 (#84998)
Signed-off-by: Bitnami Bot <bitnami.bot@broadcom.com>
This commit is contained in:
parent
80bcb998f1
commit
e176562f9a
|
|
@ -8,7 +8,7 @@ ARG TARGETARCH
|
|||
|
||||
LABEL com.vmware.cp.artifact.flavor="sha256:c50c90cfd9d12b445b011e6ad529f1ad3daea45c26d20b00732fae3cd71f6a83" \
|
||||
org.opencontainers.image.base.name="docker.io/bitnami/minideb:bookworm" \
|
||||
org.opencontainers.image.created="2025-07-17T07:12:08Z" \
|
||||
org.opencontainers.image.created="2025-08-07T21:33:00Z" \
|
||||
org.opencontainers.image.description="Application packaged by Broadcom, Inc." \
|
||||
org.opencontainers.image.documentation="https://github.com/bitnami/containers/tree/main/bitnami/wordpress-nginx/README.md" \
|
||||
org.opencontainers.image.source="https://github.com/bitnami/containers/tree/main/bitnami/wordpress-nginx" \
|
||||
|
|
@ -29,8 +29,8 @@ RUN --mount=type=secret,id=downloads_url,env=SECRET_DOWNLOADS_URL \
|
|||
DOWNLOADS_URL=${SECRET_DOWNLOADS_URL:-${DOWNLOADS_URL}} ; \
|
||||
mkdir -p /tmp/bitnami/pkg/cache/ ; cd /tmp/bitnami/pkg/cache/ || exit 1 ; \
|
||||
COMPONENTS=( \
|
||||
"render-template-1.0.8-1-linux-${OS_ARCH}-debian-12" \
|
||||
"php-8.2.29-2-linux-${OS_ARCH}-debian-12" \
|
||||
"render-template-1.0.8-2-linux-${OS_ARCH}-debian-12" \
|
||||
"php-8.2.29-4-linux-${OS_ARCH}-debian-12" \
|
||||
"nginx-1.29.0-0-linux-${OS_ARCH}-debian-12" \
|
||||
"mysql-client-11.8.2-0-linux-${OS_ARCH}-debian-12" \
|
||||
"wordpress-nginx-6.8.2-0-linux-${OS_ARCH}-debian-12" \
|
||||
|
|
|
|||
|
|
@ -15,13 +15,13 @@
|
|||
"arch": "amd64",
|
||||
"distro": "debian-12",
|
||||
"type": "NAMI",
|
||||
"version": "8.2.29-2"
|
||||
"version": "8.2.29-4"
|
||||
},
|
||||
"render-template": {
|
||||
"arch": "amd64",
|
||||
"distro": "debian-12",
|
||||
"type": "NAMI",
|
||||
"version": "1.0.8-1"
|
||||
"version": "1.0.8-2"
|
||||
},
|
||||
"wordpress-nginx": {
|
||||
"arch": "amd64",
|
||||
|
|
|
|||
|
|
@ -5,8 +5,11 @@ worker_processes auto;
|
|||
error_log "/opt/bitnami/nginx/logs/error.log";
|
||||
pid "/opt/bitnami/nginx/tmp/nginx.pid";
|
||||
|
||||
include "/opt/bitnami/nginx/conf/context.d/main/*.conf";
|
||||
|
||||
events {
|
||||
worker_connections 1024;
|
||||
include "/opt/bitnami/nginx/conf/context.d/events/*.conf";
|
||||
}
|
||||
|
||||
http {
|
||||
|
|
@ -42,6 +45,7 @@ http {
|
|||
port_in_redirect off;
|
||||
|
||||
include "/opt/bitnami/nginx/conf/server_blocks/*.conf";
|
||||
include "/opt/bitnami/nginx/conf/context.d/http/*.conf";
|
||||
|
||||
# HTTP Server
|
||||
server {
|
||||
|
|
|
|||
|
|
@ -37,6 +37,13 @@ nginx_patch_httpoxy_vulnerability() {
|
|||
# Remove unnecessary directories that come with the tarball
|
||||
rm -rf "${BITNAMI_ROOT_DIR}/certs" "${BITNAMI_ROOT_DIR}/server_blocks"
|
||||
|
||||
# Context include directories
|
||||
NGINX_CONTEXT_INCLUDES=(
|
||||
"main"
|
||||
"events"
|
||||
"http"
|
||||
)
|
||||
|
||||
# Ensure non-root user has write permissions on a set of directories
|
||||
chmod g+w "$NGINX_BASE_DIR"
|
||||
for dir in "$NGINX_VOLUME_DIR" "$NGINX_CONF_DIR" "$NGINX_INITSCRIPTS_DIR" "$NGINX_SERVER_BLOCKS_DIR" "$NGINX_STREAM_SERVER_BLOCKS_DIR" "${NGINX_CONF_DIR}/bitnami" "${NGINX_CONF_DIR}/bitnami/certs" "$NGINX_LOGS_DIR" "$NGINX_TMP_DIR" "$NGINX_DEFAULT_CONF_DIR"; do
|
||||
|
|
@ -44,6 +51,14 @@ for dir in "$NGINX_VOLUME_DIR" "$NGINX_CONF_DIR" "$NGINX_INITSCRIPTS_DIR" "$NGIN
|
|||
chmod -R g+rwX "$dir"
|
||||
done
|
||||
|
||||
# Create context.d directory and context include directories
|
||||
ensure_dir_exists "${NGINX_CONF_DIR}/context.d"
|
||||
chmod -R g+rwX "${NGINX_CONF_DIR}/context.d"
|
||||
for context in "${NGINX_CONTEXT_INCLUDES[@]}"; do
|
||||
ensure_dir_exists "${NGINX_CONF_DIR}/context.d/${context}"
|
||||
chmod -R g+rwX "${NGINX_CONF_DIR}/context.d/${context}"
|
||||
done
|
||||
|
||||
# Unset HTTP_PROXY header to protect vs HTTPPOXY vulnerability
|
||||
nginx_patch_httpoxy_vulnerability
|
||||
|
||||
|
|
|
|||
Loading…
Reference in New Issue