7de1affda8
My instance has been having problems with push federation since
updating to v2.10.2, using the docker image. Posts are not reaching
their destination instance until some other interaction initiates a
fetch from source.
The logs contain lots of errors such as:
```
pleroma | 09:34:40.885 [notice] TLS :client: In state :wait_cert_cr at ssl_handshake.erl:2158 generated CLIENT ALERT: Fatal - Unsupported Certificate
pleroma | - {:key_usage_mismatch,
pleroma | {{:Extension, {2, 5, 29, 15}, true, [:keyCertSign, :cRLSign]},
pleroma | {:Extension, {2, 5, 29, 37}, false, [{1, 3, 6, 1, 5, 5, 7, 3, 1}]}}}
```
This erlang/OTP issue seems to be the same problem:
https://github.com/erlang/otp/issues/9208
The erlang version committed here was selected after discussion in the
merge request.
I have not noticed any federation problems with an image built from
this dockerfile.
62 lines
1.8 KiB
Docker
62 lines
1.8 KiB
Docker
# https://hub.docker.com/r/hexpm/elixir/tags
|
|
ARG ELIXIR_IMG=hexpm/elixir
|
|
ARG ELIXIR_VER=1.17.3
|
|
ARG ERLANG_VER=27.3.4.14
|
|
ARG ALPINE_VER=3.23.5
|
|
ARG ELIXIR_TAG=${ELIXIR_VER}-erlang-${ERLANG_VER}-alpine-${ALPINE_VER}
|
|
ARG ALPINE_IMG=alpine
|
|
|
|
FROM ${ELIXIR_IMG}:${ELIXIR_TAG} AS build
|
|
|
|
COPY . .
|
|
|
|
ENV MIX_ENV=prod
|
|
ENV VIX_COMPILATION_MODE=PLATFORM_PROVIDED_LIBVIPS
|
|
|
|
RUN apk add git gcc g++ musl-dev make cmake file-dev vips-dev &&\
|
|
echo "import Config" > config/prod.secret.exs &&\
|
|
mix local.hex --force &&\
|
|
mix local.rebar --force &&\
|
|
mix deps.clean --all &&\
|
|
mix deps.get --only prod &&\
|
|
mkdir release &&\
|
|
mix release --path release
|
|
|
|
FROM ${ALPINE_IMG}:${ALPINE_VER}
|
|
|
|
ARG BUILD_DATE
|
|
ARG VCS_REF
|
|
|
|
LABEL maintainer="ops@pleroma.social" \
|
|
org.opencontainers.image.title="pleroma" \
|
|
org.opencontainers.image.description="Pleroma for Docker" \
|
|
org.opencontainers.image.authors="ops@pleroma.social" \
|
|
org.opencontainers.image.vendor="pleroma.social" \
|
|
org.opencontainers.image.documentation="https://git.pleroma.social/pleroma/pleroma" \
|
|
org.opencontainers.image.licenses="AGPL-3.0" \
|
|
org.opencontainers.image.url="https://pleroma.social" \
|
|
org.opencontainers.image.revision=$VCS_REF \
|
|
org.opencontainers.image.created=$BUILD_DATE
|
|
|
|
ARG HOME=/opt/pleroma
|
|
ARG DATA=/var/lib/pleroma
|
|
|
|
RUN apk update &&\
|
|
apk add exiftool ffmpeg vips libmagic ncurses postgresql-client &&\
|
|
adduser --system --shell /bin/false --home ${HOME} pleroma &&\
|
|
mkdir -p ${DATA}/uploads &&\
|
|
mkdir -p ${DATA}/static &&\
|
|
chown -R pleroma ${DATA} &&\
|
|
mkdir -p /etc/pleroma &&\
|
|
chown -R pleroma /etc/pleroma
|
|
|
|
USER pleroma
|
|
|
|
COPY --from=build --chown=pleroma:0 /release ${HOME}
|
|
|
|
COPY --chown=pleroma --chmod=640 ./config/docker.exs /etc/pleroma/config.exs
|
|
COPY ./docker-entrypoint.sh ${HOME}
|
|
|
|
EXPOSE 4000
|
|
|
|
ENTRYPOINT ["/opt/pleroma/docker-entrypoint.sh"]
|