mirror of
https://github.com/pewdiepie-archdaemon/odysseus.git
synced 2026-10-25 15:22:24 +01:00
RaresKeYandLéo
ed78beee1b
Select the official immutable SearXNG release with corrected system and certifi stores in all Compose deployments. Retain native offline, actual-entrypoint and Compose/live regression checks while removing the custom trust-repair image and registry publication path. Reuse the canonical CA inventory checker. Include released Python, certifi, grpcio, uv and Docker CLI trust updates and strict fourteen-chain validation. Keep unreleased CPython verifier and native-helper fixes separate from claims about shipped artifacts. Part of #6784 and #6790. Co-authored-by: Léo <leograndcontact@gmail.com>
10 lines
492 B
Docker
10 lines
492 B
Docker
# Validation only. Deploy the unmodified upstream image selected by Compose.
|
|
ARG SEARXNG_IMAGE
|
|
FROM ${SEARXNG_IMAGE} AS validation
|
|
COPY scripts/check_ca_trust.py docker/searxng/validate_image.py /opt/odysseus-trust/
|
|
COPY tests/fixtures/ca-trust/incident.json /opt/odysseus-trust/incident.json
|
|
RUN /usr/local/searxng/.venv/bin/python /opt/odysseus-trust/validate_image.py
|
|
|
|
FROM validation AS live-validation
|
|
RUN /usr/local/searxng/.venv/bin/python /opt/odysseus-trust/validate_image.py --live
|