mirror of
https://github.com/pewdiepie-archdaemon/odysseus.git
synced 2026-10-24 07:42:21 +02:00
RaresKeYandLéo
c6d76b9a9b
Repair SearXNG system and certifi stores, validate native amd64/arm64 runtime images through Compose, and publish the exact verified artifacts through a trusted CI job. Adopt released Python, certifi, grpcio, uv and Docker CLI trust fixes, with strict controls for all fourteen public incident chains. Part of #6784 and #6790. Co-authored-by: Léo <leograndcontact@gmail.com>
22 lines
700 B
YAML
22 lines
700 B
YAML
# CI-only isolation; retain the service's entrypoint, healthcheck and capabilities.
|
|
services:
|
|
searxng:
|
|
image: ${SEARXNG_VALIDATION_IMAGE:?set the image being validated}
|
|
ports: !reset []
|
|
volumes: !override
|
|
- searxng-validation-data:/etc/searxng
|
|
- ${SEARXNG_VALIDATION_CHECKS:?}/settings.yml:/tmp/searxng-settings.yml.template:ro
|
|
- ${SEARXNG_VALIDATION_CHECKS:?}/migrate_searxng_settings.py:/tmp/migrate-searxng-settings.py:ro
|
|
- ${SEARXNG_VALIDATION_CHECKS:?}:/opt/odysseus-checks:ro
|
|
networks: !override
|
|
- default
|
|
restart: "no"
|
|
|
|
networks:
|
|
default: {}
|
|
|
|
volumes:
|
|
searxng-validation-data:
|
|
external: true
|
|
name: ${SEARXNG_VALIDATION_VOLUME:?}
|