mirror of
https://github.com/Darkrock-Studios/hammer-editor.git
synced 2026-08-26 18:01:44 +00:00
7e9bd46c26
Argon2 hashing went through JNA, which extracts libjnidispatch.so at runtime. On Linux JNA ignores java.io.tmpdir and uses $XDG_CACHE_HOME, falling back to <user.home>/.cache, and the Docker image sets user.home=/data. That puts the shared object on the data volume, so hosts mounting it noexec cannot load it, and signup and login returned a 500 (#884). Argon2PasswordHasher derives with BouncyCastle instead, reading the variant, version, and cost parameters back out of the stored PHC string. Its output is byte-identical to libargon2 for the same inputs, so existing hashes keep verifying; the tests pin that against hashes generated by the C implementation. JNA is still on the runtime classpath via the CLI's terminal library, so the image also points XDG_CACHE_HOME at its own layer.
57 lines
2.2 KiB
Docker
57 lines
2.2 KiB
Docker
# syntax=docker/dockerfile:1
|
|
#
|
|
# Runtime image for the Hammer sync server. Packages the pre-built application
|
|
# distribution rather than building from source: :server depends on :base, which
|
|
# needs the Android SDK. Build it first, then the image, from the repo root:
|
|
#
|
|
# ./gradlew :server:installDist
|
|
# docker build -f docker/Dockerfile -t hammer-server .
|
|
|
|
# The embedded PostgreSQL binaries are glibc-only; they will not run on musl.
|
|
FROM eclipse-temurin:21-jre-jammy
|
|
|
|
# fontconfig/libfreetype6 back the optional richLinkPreviews rendering; curl backs the HEALTHCHECK.
|
|
RUN apt-get update \
|
|
&& apt-get install -y --no-install-recommends \
|
|
fontconfig \
|
|
libfreetype6 \
|
|
curl \
|
|
&& rm -rf /var/lib/apt/lists/*
|
|
|
|
# Embedded PostgreSQL refuses to run as root. Fixed uid/gid keeps bind-mount
|
|
# permissions predictable.
|
|
RUN groupadd --gid 1000 hammer \
|
|
&& useradd --uid 1000 --gid 1000 --home-dir /home/hammer --create-home hammer
|
|
|
|
# Puts the data directory (<user.home>/hammer_data) on the volume. Deliberately
|
|
# SERVER_OPTS, not JAVA_OPTS: the start script appends both, and an operator
|
|
# setting JAVA_OPTS for heap would otherwise silently relocate all durable state.
|
|
ENV SERVER_OPTS="-Duser.home=/data"
|
|
|
|
# JNA, which the CLI's terminal library pulls in, extracts a shared object and executes
|
|
# it. On Linux it ignores java.io.tmpdir and uses $XDG_CACHE_HOME (defaulting to
|
|
# <user.home>/.cache), so without this it lands on the /data volume, which many hosts
|
|
# mount noexec. Keep it on the image layer instead.
|
|
ENV XDG_CACHE_HOME=/home/hammer/.cache
|
|
|
|
ARG DIST_DIR=server/build/install/server
|
|
COPY --chown=1000:1000 ${DIST_DIR}/ /opt/hammer/
|
|
|
|
# hammer_data itself must exist and be owned here: bind-mounting a config file
|
|
# into it would otherwise have Docker create the parent as root, leaving the
|
|
# unprivileged server unable to write pgdata.
|
|
RUN mkdir -p /data/hammer_data \
|
|
&& chown -R hammer:hammer /data
|
|
|
|
USER hammer
|
|
WORKDIR /opt/hammer
|
|
|
|
VOLUME ["/data"]
|
|
|
|
# Plain HTTP. Terminate TLS at a reverse proxy, or set sslCert and publish 443.
|
|
EXPOSE 8080
|
|
|
|
HEALTHCHECK --interval=30s --timeout=5s --start-period=120s --retries=5 \
|
|
CMD curl -fsS http://localhost:8080/ >/dev/null || exit 1
|
|
|
|
ENTRYPOINT ["/opt/hammer/bin/server"]
|