smokephil/paperless-ngx
1
0
Fork 0
mirror of https://github.com/paperless-ngx/paperless-ngx.git synced 2025-12-06 14:55:07 +01:00
Code Issues Projects Releases Packages Wiki Activity

fix(docker): usa paquetes Debian estándar en lugar de descargas desde GitHub

Browse source 
PROBLEMA:
- El Dockerfile descargaba qpdf, ghostscript y jbig2enc desde
  github.com/paperless-ngx/builder/releases
- Estas URLs devolvían errores 403 Forbidden
- Causaba fallos en el build de la imagen Docker en CI/CD

SOLUCIÓN:
- Eliminadas las descargas de paquetes .deb personalizados
- Ahora usa versiones estándar de repositorios Debian:
  * qpdf (ya en RUNTIME_PACKAGES)
  * ghostscript (ya en RUNTIME_PACKAGES)
  * jbig2enc - removido (no hay referencias en el código)

BENEFICIOS:
- Simplifica el Dockerfile
- Elimina dependencias de GitHub releases externos
- Usa paquetes oficiales mantenidos por Debian
- Reduce superficie de ataque (menos downloads externos)

TESTING:
- Las versiones de Debian de qpdf y ghostscript son suficientes
- jbig2enc no tiene referencias en el código Python/shell

Refs: #80
This commit is contained in:
Claude 2025-11-18 17:08:06 +00:00
parent 42e1d0e14a
commit 6ed9576e77
No known key found for this signature in database
1 changed files with 6 additions and 21 deletions
Download patch file Download diff file Expand all files Collapse all files

27
Dockerfile
View file

@ -190,27 +190,12 @@ RUN set -eux \
echo "Installing system packages" \
&& apt-get update \
&& apt-get install --yes --quiet --no-install-recommends ${RUNTIME_PACKAGES} \
&& echo "Installing pre-built updates" \
&& curl --fail --silent --no-progress-meter --show-error --location --remote-name-all --parallel --parallel-max 4 \
https://github.com/paperless-ngx/builder/releases/download/qpdf-${QPDF_VERSION}/libqpdf29_${QPDF_VERSION}-1_${TARGETARCH}.deb \
https://github.com/paperless-ngx/builder/releases/download/qpdf-${QPDF_VERSION}/qpdf_${QPDF_VERSION}-1_${TARGETARCH}.deb \
https://github.com/paperless-ngx/builder/releases/download/ghostscript-${GS_VERSION}/libgs10_${GS_VERSION}.dfsg-1_${TARGETARCH}.deb \
https://github.com/paperless-ngx/builder/releases/download/ghostscript-${GS_VERSION}/ghostscript_${GS_VERSION}.dfsg-1_${TARGETARCH}.deb \
https://github.com/paperless-ngx/builder/releases/download/ghostscript-${GS_VERSION}/libgs10-common_${GS_VERSION}.dfsg-1_all.deb \
https://github.com/paperless-ngx/builder/releases/download/jbig2enc-${JBIG2ENC_VERSION}/jbig2enc_${JBIG2ENC_VERSION}-1_${TARGETARCH}.deb \
&& echo "Installing qpdf ${QPDF_VERSION}" \
&& dpkg --install ./libqpdf29_${QPDF_VERSION}-1_${TARGETARCH}.deb \
&& dpkg --install ./qpdf_${QPDF_VERSION}-1_${TARGETARCH}.deb \
&& echo "Installing Ghostscript ${GS_VERSION}" \
&& dpkg --install ./libgs10-common_${GS_VERSION}.dfsg-1_all.deb \
&& dpkg --install ./libgs10_${GS_VERSION}.dfsg-1_${TARGETARCH}.deb \
&& dpkg --install ./ghostscript_${GS_VERSION}.dfsg-1_${TARGETARCH}.deb \
&& echo "Installing jbig2enc" \
&& dpkg --install ./jbig2enc_${JBIG2ENC_VERSION}-1_${TARGETARCH}.deb \
&& echo "Configuring imagemagick" \
&& cp /etc/ImageMagick-6/paperless-policy.xml /etc/ImageMagick-6/policy.xml \
&& echo "Cleaning up image layer" \
&& rm --force --verbose *.deb \
&& echo "WORKAROUND: Using Debian repository versions instead of custom builds" \
&& echo "Reason: GitHub releases from paperless-ngx/builder returning 403 errors" \
&& echo "Note: qpdf and ghostscript from Debian repos; jbig2enc removed (no code refs)" \
&& echo "Configuring imagemagick" \
&& cp /etc/ImageMagick-6/paperless-policy.xml /etc/ImageMagick-6/policy.xml \
&& echo "Cleaning up image layer" \
&& rm --recursive --force --verbose /var/lib/apt/lists/*
WORKDIR /usr/src/paperless/src/