109 Commits

Author SHA1 Message Date
René Pfeuffer
0eab2e1ec4 Merge commit 'main' into develop 2025-02-25 13:19:59 +01:00
Anna Vetcininova
7eff877e01 Set architecture to amd64 platform 2025-02-25 12:15:41 +01:00
René Pfeuffer
7b0a21fcce Bump debian version 2025-02-25 10:54:58 +01:00
René Pfeuffer
0ca53a5d35 Revert "Debug: Run docker commands on their own"
This reverts commit df020b0aab.
2025-02-25 10:54:10 +01:00
René Pfeuffer
df020b0aab Debug: Run docker commands on their own 2025-02-25 10:21:42 +01:00
snyk-bot
024528c0cd fix: scm-packaging/docker/Dockerfile.alpine to reduce vulnerabilities
The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-ALPINE321-MUSL-8720634
- https://snyk.io/vuln/SNYK-ALPINE321-MUSL-8720634
- https://snyk.io/vuln/SNYK-ALPINE321-OPENSSL-8690014
- https://snyk.io/vuln/SNYK-ALPINE321-OPENSSL-8690014
- https://snyk.io/vuln/SNYK-ALPINE321-OPENSSL-8710358
2025-02-21 07:07:44 +00:00
snyk-bot
ce671730b9 fix: scm-packaging/docker/Dockerfile.debian to reduce vulnerabilities
The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-DEBIAN11-GLIBC-5927133
- https://snyk.io/vuln/SNYK-DEBIAN11-GLIBC-5927133
- https://snyk.io/vuln/SNYK-DEBIAN11-KRB5-7411316
- https://snyk.io/vuln/SNYK-DEBIAN11-KRB5-7411316
- https://snyk.io/vuln/SNYK-DEBIAN11-KRB5-7411316
2025-02-19 10:54:49 +01:00
Rene Pfeuffer
e9f4022294 fix: scm-packaging/docker/Dockerfile.alpine to reduce vulnerabilities
The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-ALPINE319-OPENSSL-7895536
- https://snyk.io/vuln/SNYK-ALPINE319-OPENSSL-7895536
- https://snyk.io/vuln/SNYK-ALPINE319-OPENSSL-8235202
- https://snyk.io/vuln/SNYK-ALPINE319-OPENSSL-8235202

Co-authored-by: snyk-bot<snyk-bot@snyk.io>
2025-01-10 09:40:21 +01:00
Rene Pfeuffer
e6433d01d1 Change to GNU Affero General Public License v3.0 2024-09-24 09:42:07 +02:00
Rene Pfeuffer
0708d1f2c5 fix: scm-packaging/docker/Dockerfile.alpine to reduce vulnerabilities
The following vulnerabilities are fixed with an upgrade:&#10;- https://snyk.io/vuln/SNYK-ALPINE318-OPENSSL-6032386&#10;- https://snyk.io/vuln/SNYK-ALPINE318-OPENSSL-6032386&#10;- https://snyk.io/vuln/SNYK-ALPINE318-BUSYBOX-6913411&#10;- https://snyk.io/vuln/SNYK-ALPINE318-BUSYBOX-7249236&#10;- https://snyk.io/vuln/SNYK-ALPINE318-BUSYBOX-7249265

Pushed-by: k8s-git-ops<admin@cloudogu.com>
Co-authored-by: snyk-bot<snyk-bot@snyk.io>
2024-07-31 15:07:15 +02:00
Laura Gorzitze
978aebf664 Fix distribution call when calling without setting hotfix variable 2024-06-18 10:52:14 +02:00
Florian Scholdei
8e44bd1c08 Prevent latest docker tag for hotfix releases
Pushed-by: Florian Scholdei<florian.scholdei@cloudogu.com>
Co-authored-by: Florian Scholdei<florian.scholdei@cloudogu.com>
Committed-by: Florian Scholdei<florian.scholdei@cloudogu.com>
2024-03-20 10:59:28 +01:00
René Pfeuffer
eec8c703a0 Fix default for idle timeout 2024-02-08 09:36:38 +01:00
Rene Pfeuffer
f894d7fe3b Add configuration for jetty idle timeout
Pushed-by: Rene Pfeuffer<rene.pfeuffer@cloudogu.com>
Co-authored-by: René Pfeuffer<rene.pfeuffer@cloudogu.com>
Committed-by: René Pfeuffer<rene.pfeuffer@cloudogu.com>
2024-02-07 11:13:17 +01:00
Eduard Heimbuch
c734684134 Adjust changelog for release 3.0.0 2024-01-29 16:09:36 +01:00
Eduard Heimbuch
d0c43dd9f4 Improve server config documentation and cleanup 2023-12-18 15:30:57 +01:00
Eduard Heimbuch
cf4d9cf20f 3.x
Committed-by: Eduard Heimbuch<eduard.heimbuch@cloudogu.com>
Pushed-by: Rene Pfeuffer<rene.pfeuffer@cloudogu.com>
Co-authored-by: René Pfeuffer<rene.pfeuffer@cloudogu.com>
Pushed-by: Eduard Heimbuch<eduard.heimbuch@cloudogu.com>
Committed-by: René Pfeuffer<rene.pfeuffer@cloudogu.com>
2023-11-30 17:02:44 +01:00
Renovate Bot
1d27a7e03d Update alpine Docker tag to v3.18.3 (develop)
This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
| alpine | final | patch | `3.18.2` -> `3.18.3` |
| alpine | stage | patch | `3.18.2` -> `3.18.3` |

---

This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIwLjAuMC1zZW1hbnRpYy1yZWxlYXNlIiwidXBkYXRlZEluVmVyIjoiMC4wLjAtc2VtYW50aWMtcmVsZWFzZSIsInRhcmdldEJyYW5jaCI6ImRldmVsb3AifQ==-->


Committed-by: Rene Pfeuffer <rene.pfeuffer@cloudogu.com>
2023-09-01 12:58:31 +02:00
René Pfeuffer
618275ecbf Remove ARMv7 build due to errors 2023-07-18 15:06:49 +02:00
René Pfeuffer
f413ee1343 Revert "Use Java 11 for ARM v7 images"
This reverts commit 916cfcd3aa.
2023-07-18 07:07:21 +02:00
René Pfeuffer
916cfcd3aa Use Java 11 for ARM v7 images 2023-07-14 14:24:03 +02:00
Rene Pfeuffer
b9013e52ba Use Java 17 for Docker containers
Committed-by: Eduard Heimbuch <eduard.heimbuch@cloudogu.com>
Co-authored-by: René Pfeuffer <rene.pfeuffer@cloudogu.com>
2023-07-10 14:23:13 +02:00
Rene Pfeuffer
bf8be002e9 Update debian version for docker base image
Squash commits of branch feature/update_debian_base_image:

- Update debian version for docker base image



Committed-by: Eduard Heimbuch <eduard.heimbuch@cloudogu.com>
Co-authored-by: René Pfeuffer <rene.pfeuffer@cloudogu.com>
2023-06-22 08:40:32 +02:00
Rene Pfeuffer
32a0a6868f Fix security findings
- Add security headers:
  - X-Frame-Options
  - X-Content-Type-Options
  - Content-Security-Policy
  - Permissions-Policy
- Do not send server information header

Committed-by: Eduard Heimbuch <eduard.heimbuch@cloudogu.com>
Co-authored-by: Eduard Heimbuch <eduard.heimbuch@cloudogu.com>
Co-authored-by: René Pfeuffer <rene.pfeuffer@cloudogu.com>
2023-06-14 15:57:01 +02:00
Eduard Heimbuch
eb4440c589 Remove --load to fix build 2022-09-15 11:36:32 +02:00
Eduard Heimbuch
4d479497aa Fix docker buildx bake command 2022-09-15 10:42:54 +02:00
Eduard Heimbuch
f672e175b5 Improve docker healthcheck (#2110)
The new docker health check respects the jetty configuration and uses the configured port and context path.
It supports ssl listeners and follows redirects.

Co-authored-by: Sebastian Sdorra <sebastian.sdorra@cloudogu.com>
2022-08-30 11:02:21 +02:00
René Pfeuffer
af30859077 Fix zip CRC error on startup in Alpine image (#2071)
Update docker base image to Alpine 3.16.0.
This fixes https://github.com/scm-manager/scm-manager/issues/2053.
In Alpine 3.16.0 zlib is updated to 1.2.12-r1 with this fix:
https://git.alpinelinux.org/aports/commit/main/zlib?id=6754a9005594de4243aad9b2744546971078c6c7
This is related to the following bug report in Alpine:
https://bugs.archlinux.org/task/74371
2022-06-21 16:06:58 +02:00
René Pfeuffer
19218c7237 Add wget to fix docker health check (#2066)
Installs the command wget in the debian docker container, so that the health check can run.
2022-06-09 22:38:38 +02:00
Sebastian Sdorra
af2cdfb739 Docker multi-arch builds (#2021)
Replaces the current docker build with a multi arch build powered by buildx.
The new build creates two scm-manager docker image variants.
One based on alpine which uses the openjdk distribution and the other based on debian and eclipse temurin:

scmmanager/scm-manager:<version>-alpine
- linux/amd64
- linux/arm64
scmmanager/scm-manager:<version>-debian
- linux/amd64
- linux/arm64
- linux/arm/v7
scmmanager/scm-manager:<version>
- linux/amd64 alpine based
- linux/arm64 alpine based
- linux/arm/v7 debian based
scmmanager/scm-manager:latest
- linux/amd64 alpine based
- linux/arm64 alpine based
- linux/arm/v7 debian based

The development build produces only a single amd64 image at cloudogu/scm-manager with a snapshot version.

Co-authored-by: Eduard Heimbuch <eduard.heimbuch@cloudogu.com>
2022-05-04 14:38:31 +02:00
René Pfeuffer
211749a5e3 Update docker base image (#1948)
Updates to latest version of adoptopenjdk:
adoptopenjdk/openjdk11:jdk-11.0.14_9-alpine-slim
2022-02-08 09:23:53 +01:00
Matthias Thieroff
8136aa1cbd Set the line ending used for license files to LF (#1904)
Set line ending explicitly to LF because on Windows using the system line ending does not get along well with our git settings.

Co-authored-by: Sebastian Sdorra <sebastian.sdorra@cloudogu.com>
2021-12-23 09:43:32 +01:00
pmarkiewka
e70e860e07 Adds compatibility for OCP and ICP (#1870)
Adds compatibility for OCP (openshift container platform) and ICP (IBM cloud private)

- Sets folder permissions to group 0, because the arbitrary assigned user ids in openshift are all part of group 0
- Removes usage of root user 0, because it is prohibited in some environments
- Use numerical user id, because some environments do not accept non-numerical user ids
- Removes initContainer for setting volume permissions, because it is not needed anymore
- Removes chown in plugin script, because it is not needed anymore
- Adds extraArgs option in Helm chart to add arguments on server startup, i.e. initial admin username and password

Signed-off-by: pmarkiewka <philipp.markiewka@cloudogu.com>
2021-12-16 13:59:56 +01:00
Sebastian Sdorra
9dee08f68d Update Gradle to 7.3 (#1873)
Update Gradle to 7.3. in order to profit from the performance improvement and to prepare for dependency lockfiles. Due to the upgrade to 7.x we had to use a license plugin which supports Gradle 7.
2021-11-29 09:05:24 +01:00
René Pfeuffer
271576fcf2 Update javahg to v1.0.0 (#1865)
Updates javahg (https://foss.heptapod.net/mercurial/javahg) to release 1.0.0. Therefore, all packages have to be changed from com.aragost.javahg to org.javahg.
2021-11-23 13:10:16 +01:00
Sebastian Sdorra
87aea1936b Remove www from scm-manager.org url (#1837) 2021-10-28 11:00:24 +02:00
Sebastian Sdorra
893cf4af4c Add graphviz to docker image (#1623)
This fixes the usage of the plantuml plugin inside of a docker
container.
2021-04-20 14:05:01 +02:00
René Pfeuffer
4bd162ebcf Write current docker tag to file 2021-01-15 17:09:56 +01:00
Sebastian Sdorra
f1cc5a4bbd Add font ttf-dejavu to oci image
Some plugins may require a font to render graphics, such as the markdown-plantuml plugin.
2021-01-15 12:43:08 +01:00
Sebastian Sdorra
7fd6b62b73 Revert "Add tasks to modify version", because it breaks run command
This reverts commit b07f00ea2f74b60663d7d2c4377fe338416d189e.
2021-01-14 12:01:34 +01:00
Sebastian Sdorra
ecc216276d Add tasks to modify version 2021-01-14 12:01:34 +01:00
Sebastian Sdorra
a2fd8ff2f1 Implement docker publishing 2021-01-14 12:01:34 +01:00
Sebastian Sdorra
55507b3f35 Add license check 2021-01-14 12:01:33 +01:00
Sebastian Sdorra
8c27af2661 Remove maven build related files 2021-01-14 12:01:30 +01:00
Sebastian Sdorra
c9ea026c52 Create release.yml 2021-01-14 11:56:05 +01:00
Sebastian Sdorra
87da653575 Create package.yml for each distributed package 2021-01-14 11:56:05 +01:00
Sebastian Sdorra
36118c2e2a Migrate helm module to gradle 2021-01-14 11:55:28 +01:00
Sebastian Sdorra
ca42961131 Migrate docker module 2021-01-14 11:55:28 +01:00
CES Marvin
374d085fdd prepare for next development iteration 2020-12-17 15:24:34 +00:00
CES Marvin
38a7ff6acb release version 2.12.0 2020-12-17 14:55:08 +00:00