thepraandClaude Opus 5.5
a85ebd30c0
Most of the threadiverse runs Lemmy 0.19, whose release trusts only the roots its rustls bundles. images/lemmy19 builds 0.19.20 from its tag with reqwest's rustls-tls-native-roots added, and the pasture runs it as lemmy19.test. scenarios/lemmy19.sh passes 27 checks with no change to PrivaPub (communities, threads, comments, votes, its private message, moderation) and one known gap: 0.19 takes private messages only as ChatMessage and answers our direct Note 400, like Mbin, so G-0008 now covers both and waits for the owner. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01LsXgEaXee4GCU1hwYgPJXw
14 lines
935 B
Docker
14 lines
935 B
Docker
# Lemmy 0.19.20, built from its tag with one change: reqwest's rustls also trusts the platform's roots
|
|
# (rustls-tls-native-roots), where the pasture's CA is, besides the roots it bundles. The release image trusts only
|
|
# those, so 0.19 could not reach any pasture peer.
|
|
FROM docker.io/library/rust:1.81-bookworm AS build
|
|
RUN git clone --depth 1 --branch 0.19.20 --recurse-submodules https://github.com/LemmyNet/lemmy.git /lemmy
|
|
WORKDIR /lemmy
|
|
RUN sed -i 's/^ "rustls-tls",$/ "rustls-tls",\n "rustls-tls-native-roots",/' Cargo.toml && grep -q '"rustls-tls-native-roots"' Cargo.toml
|
|
RUN cargo build --release && strip target/release/lemmy_server
|
|
|
|
FROM docker.io/library/debian:bookworm-slim
|
|
RUN apt-get update && apt-get install -y --no-install-recommends libpq5 ca-certificates && rm -rf /var/lib/apt/lists/*
|
|
COPY --from=build /lemmy/target/release/lemmy_server /usr/local/bin/lemmy_server
|
|
ENTRYPOINT ["/usr/local/bin/lemmy_server"]
|