edcdd643d2
All checks were successful
CI / skinny-install (aco) (push) Successful in 50s
CI / skinny-install (api) (push) Successful in 30s
CI / skinny-install (bcda) (push) Successful in 27s
CI / skinny-install (bib) (push) Successful in 23s
CI / skinny-install (bls) (push) Successful in 22s
CI / skinny-install (pfs) (push) Successful in 1m2s
CI / skinny-install (rex) (push) Successful in 24s
CI / skinny-install (ccw) (push) Successful in 25s
CI / skinny-install (cli) (push) Successful in 26s
CI / skinny-install (cms) (push) Successful in 23s
CI / skinny-install (conf) (push) Successful in 23s
CI / lint-test (push) Successful in 5m54s
Infra CI / notebooks (push) Successful in 1m25s
Infra CI / zotero (push) Successful in 5m24s
Infra CI / docs (push) Successful in 8s
Infra CI / api (push) Successful in 7s
Infra CI / mc (push) Successful in 6s
Deploy / build-scan-report (push) Successful in 10m34s
33 lines
1.2 KiB
Docker
33 lines
1.2 KiB
Docker
# syntax=docker/dockerfile:1
|
|
FROM ghcr.io/selkies-project/nvidia-egl-desktop:latest
|
|
|
|
USER root
|
|
|
|
# System-level security patches — pulls latest fixes for all OS packages.
|
|
# Go stdlib CVEs (CVE-2024-24790, CVE-2025-68121) are in static binaries
|
|
# from the base image; they resolve when upstream rebuilds with patched Go.
|
|
# The harden.yml weekly --no-cache rebuild ensures we track upstream fixes.
|
|
RUN apt-get update \
|
|
&& apt-get upgrade -y \
|
|
&& rm -rf /var/lib/apt/lists/*
|
|
|
|
# Install Zotero
|
|
RUN apt-get update && apt-get install -y --no-install-recommends \
|
|
curl \
|
|
ca-certificates \
|
|
&& curl -sL https://raw.githubusercontent.com/retorquere/zotero-deb/master/install.sh | bash \
|
|
&& apt-get update && apt-get install -y --no-install-recommends \
|
|
zotero \
|
|
&& rm -rf /var/lib/apt/lists/*
|
|
|
|
# Patch Python packages with known CVEs from base image
|
|
RUN pip install --no-cache-dir --break-system-packages --upgrade "pillow>=12.1.1"
|
|
|
|
# Create desktop shortcut for Zotero
|
|
RUN mkdir -p /home/ubuntu/Desktop \
|
|
&& cp /usr/share/applications/zotero.desktop /home/ubuntu/Desktop/ \
|
|
&& chmod +x /home/ubuntu/Desktop/zotero.desktop \
|
|
&& chown -R ubuntu:ubuntu /home/ubuntu/Desktop
|
|
|
|
USER ubuntu
|