Changeset 17283 for main/waeup.kofa

Timestamp:

16 Jan 2023, 10:55:34 (22 months ago)

Author:

uli

Message:

Set random cookie secrets when building kofa docker.

File:

• main/waeup.kofa/trunk/Dockerfile (modified) (2 diffs)

main/waeup.kofa/trunk/Dockerfile

@@ -13 +13 @@
 # libs needed/useful for Pillow image manipulations
 RUN apt-get install -y libjpeg-dev libfreetype6-dev libtiff-dev libopenjp2-7-dev
-RUN apt-get install -y sudo git wget
+# helpers not strictly necessary for running kofa but for setup and development
+RUN apt-get install -y sudo git wget pwgen xmlstarlet
 
 # add user `kofa`
@@ -44 +45 @@
 WORKDIR /home/kofa/waeup.kofa
 
+# set random secrets for cookies
+RUN xmlstarlet edit -L -P -S -N x="http://namespaces.zope.org/browser" --update "//x:beakerSession/@secret" --value `pwgen -s -1 20` etc/site.zcml.in
+RUN xmlstarlet edit -L -P -S -N x="http://namespaces.zope.org/browser" --update "//x:beakerSession/@validate_key" --value "val_"`pwgen -s -1 16` etc/site.zcml.in
+
 # pin down `pip` and `setuptools` - just to ensure we have a fixed set of versions
 RUN /home/kofa/py27/bin/pip install --upgrade pip==20.3.4