base-images/tmf7-base (sha256:b1f57454985afd80cce7669b06e90182d03807ad01531577c822a906543e3b3f)
Published 2026-10-22 22:10:37 -03:00 by tarcisio
Installation
docker pull git.trademarketingforce.com/tmf/base-images/tmf7-base@sha256:b1f57454985afd80cce7669b06e90182d03807ad01531577c822a906543e3b3fsha256:b1f57454985afd80cce7669b06e90182d03807ad01531577c822a906543e3b3fImage layers
| ADD file:d08e242792caa7f842fcf39a09ad59c97a856660e2013d5aed3e4a29197e9aaa in / |
| CMD ["bash"] |
| /bin/sh -c set -eux; { echo 'Package: php*'; echo 'Pin: release *'; echo 'Pin-Priority: -1'; } > /etc/apt/preferences.d/no-debian-php |
| ENV PHPIZE_DEPS=autoconf dpkg-dev file g++ gcc libc-dev make pkg-config re2c |
| /bin/sh -c set -eux; apt-get update; apt-get install -y --no-install-recommends $PHPIZE_DEPS ca-certificates curl xz-utils ; rm -rf /var/lib/apt/lists/* |
| ENV PHP_INI_DIR=/usr/local/etc/php |
| /bin/sh -c set -eux; mkdir -p "$PHP_INI_DIR/conf.d"; [ ! -d /var/www/html ]; mkdir -p /var/www/html; chown www-data:www-data /var/www/html; chmod 777 /var/www/html |
| ENV APACHE_CONFDIR=/etc/apache2 |
| ENV APACHE_ENVVARS=/etc/apache2/envvars |
| /bin/sh -c set -eux; apt-get update; apt-get install -y --no-install-recommends apache2; rm -rf /var/lib/apt/lists/*; sed -ri 's/^export ([^=]+)=(.*)$/: ${\1:=\2}\nexport \1/' "$APACHE_ENVVARS"; . "$APACHE_ENVVARS"; for dir in "$APACHE_LOCK_DIR" "$APACHE_RUN_DIR" "$APACHE_LOG_DIR" ; do rm -rvf "$dir"; mkdir -p "$dir"; chown "$APACHE_RUN_USER:$APACHE_RUN_GROUP" "$dir"; chmod 777 "$dir"; done; rm -rvf /var/www/html/*; ln -sfT /dev/stderr "$APACHE_LOG_DIR/error.log"; ln -sfT /dev/stdout "$APACHE_LOG_DIR/access.log"; ln -sfT /dev/stdout "$APACHE_LOG_DIR/other_vhosts_access.log"; chown -R --no-dereference "$APACHE_RUN_USER:$APACHE_RUN_GROUP" "$APACHE_LOG_DIR" |
| /bin/sh -c a2dismod mpm_event && a2enmod mpm_prefork |
| /bin/sh -c { echo '<FilesMatch \.php$>'; echo '\tSetHandler application/x-httpd-php'; echo '</FilesMatch>'; echo; echo 'DirectoryIndex disabled'; echo 'DirectoryIndex index.php index.html'; echo; echo '<Directory /var/www/>'; echo '\tOptions -Indexes'; echo '\tAllowOverride All'; echo '</Directory>'; } | tee "$APACHE_CONFDIR/conf-available/docker-php.conf" && a2enconf docker-php |
| ENV PHP_CFLAGS=-fstack-protector-strong -fpic -fpie -O2 -D_LARGEFILE_SOURCE -D_FILE_OFFSET_BITS=64 |
| ENV PHP_CPPFLAGS=-fstack-protector-strong -fpic -fpie -O2 -D_LARGEFILE_SOURCE -D_FILE_OFFSET_BITS=64 |
| ENV PHP_LDFLAGS=-Wl,-O1 -pie |
| ENV GPG_KEYS=42670A7FE4D0441C8E4632349E4FDC074A4EF02D 5A52880781F755608BF815FC910DEB46F53EA312 |
| ENV PHP_VERSION=7.4.33 |
| ENV PHP_URL=https://www.php.net/distributions/php-7.4.33.tar.xz PHP_ASC_URL=https://www.php.net/distributions/php-7.4.33.tar.xz.asc |
| ENV PHP_SHA256=924846abf93bc613815c55dd3f5809377813ac62a9ec4eb3778675b82a27b927 |
| /bin/sh -c set -eux; savedAptMark="$(apt-mark showmanual)"; apt-get update; apt-get install -y --no-install-recommends gnupg dirmngr; rm -rf /var/lib/apt/lists/*; mkdir -p /usr/src; cd /usr/src; curl -fsSL -o php.tar.xz "$PHP_URL"; if [ -n "$PHP_SHA256" ]; then echo "$PHP_SHA256 *php.tar.xz" | sha256sum -c -; fi; if [ -n "$PHP_ASC_URL" ]; then curl -fsSL -o php.tar.xz.asc "$PHP_ASC_URL"; export GNUPGHOME="$(mktemp -d)"; for key in $GPG_KEYS; do gpg --batch --keyserver keyserver.ubuntu.com --recv-keys "$key"; done; gpg --batch --verify php.tar.xz.asc php.tar.xz; gpgconf --kill all; rm -rf "$GNUPGHOME"; fi; apt-mark auto '.*' > /dev/null; apt-mark manual $savedAptMark > /dev/null; apt-get purge -y --auto-remove -o APT::AutoRemove::RecommendsImportant=false |
| COPY file:ce57c04b70896f77cc11eb2766417d8a1240fcffe5bba92179ec78c458844110 in /usr/local/bin/ |
| /bin/sh -c set -eux; savedAptMark="$(apt-mark showmanual)"; apt-get update; apt-get install -y --no-install-recommends apache2-dev libargon2-dev libcurl4-openssl-dev libonig-dev libreadline-dev libsodium-dev libsqlite3-dev libssl-dev libxml2-dev zlib1g-dev ; export CFLAGS="$PHP_CFLAGS" CPPFLAGS="$PHP_CPPFLAGS" LDFLAGS="$PHP_LDFLAGS" ; docker-php-source extract; cd /usr/src/php; gnuArch="$(dpkg-architecture --query DEB_BUILD_GNU_TYPE)"; debMultiarch="$(dpkg-architecture --query DEB_BUILD_MULTIARCH)"; if [ ! -d /usr/include/curl ]; then ln -sT "/usr/include/$debMultiarch/curl" /usr/local/include/curl; fi; ./configure --build="$gnuArch" --with-config-file-path="$PHP_INI_DIR" --with-config-file-scan-dir="$PHP_INI_DIR/conf.d" --enable-option-checking=fatal --with-mhash --with-pic --enable-ftp --enable-mbstring --enable-mysqlnd --with-password-argon2 --with-sodium=shared --with-pdo-sqlite=/usr --with-sqlite3=/usr --with-curl --with-iconv --with-openssl --with-readline --with-zlib --disable-phpdbg --with-pear $(test "$gnuArch" = 's390x-linux-gnu' && echo '--without-pcre-jit') --with-libdir="lib/$debMultiarch" --disable-cgi --with-apxs2 ; make -j "$(nproc)"; find -type f -name '*.a' -delete; make install; find /usr/local -type f -perm '/0111' -exec sh -euxc ' strip --strip-all "$@" || : ' -- '{}' + ; make clean; cp -v php.ini-* "$PHP_INI_DIR/"; cd /; docker-php-source delete; apt-mark auto '.*' > /dev/null; [ -z "$savedAptMark" ] || apt-mark manual $savedAptMark; find /usr/local -type f -executable -exec ldd '{}' ';' | awk '/=>/ { print $(NF-1) }' | sort -u | xargs -r dpkg-query --search | cut -d: -f1 | sort -u | xargs -r apt-mark manual ; apt-get purge -y --auto-remove -o APT::AutoRemove::RecommendsImportant=false; rm -rf /var/lib/apt/lists/*; pecl update-channels; rm -rf /tmp/pear ~/.pearrc; php --version |
| COPY multi:e11221d43af7136e4dbad5a74e659bcfa753214a9e615c3daf357f1633d9d3d1 in /usr/local/bin/ |
| /bin/sh -c docker-php-ext-enable sodium |
| ENTRYPOINT ["docker-php-entrypoint"] |
| STOPSIGNAL SIGWINCH |
| COPY file:e3123fcb6566efa979f945bfac1c94c854a559d7b82723e42118882a8ac4de66 in /usr/local/bin/ |
| WORKDIR /var/www/html |
| EXPOSE 80 |
| CMD ["apache2-foreground"] |
| RUN /bin/sh -c apt-get update && apt-get install -y --no-install-recommends cron curl git vim unzip libcurl4-openssl-dev libfreetype6-dev libjpeg62-turbo-dev libpng-dev libwebp-dev libicu-dev libldap2-dev libpspell-dev libxml2-dev libxslt1-dev libzip-dev libc-client-dev libkrb5-dev libmagickwand-dev && rm -rf /var/lib/apt/lists/* # buildkit |
| RUN /bin/sh -c docker-php-ext-configure gd --with-freetype --with-jpeg --with-webp && docker-php-ext-configure ldap --with-libdir=lib/x86_64-linux-gnu/ && docker-php-ext-configure imap --with-kerberos --with-imap-ssl && docker-php-ext-install -j"$(nproc)" calendar curl exif ftp gd gettext imap intl ldap mysqli opcache pdo_mysql pspell shmop soap sockets sysvmsg sysvsem sysvshm xsl zip # buildkit |
| RUN /bin/sh -c pecl install imagick && docker-php-ext-enable imagick # buildkit |
| RUN /bin/sh -c a2enmod rewrite headers # buildkit |
| RUN /bin/sh -c printf '<Directory /var/www/html>\n AllowOverride All\n Require all granted\n</Directory>\n' > /etc/apache2/conf-available/tmf-override.conf && a2enconf tmf-override # buildkit |
| COPY /yiiframework-1.1.32/ /home/server/yiiframework/yii-1.1.32/ # buildkit |
| COPY /yiiframework-1.1.32/ /home/server/yiiframework/ # buildkit |
| COPY /aws-sdk/ /home/server/aws-sdk/ # buildkit |
| RUN /bin/sh -c { echo 'display_errors = Off'; echo 'display_startup_errors = Off'; echo 'log_errors = On'; echo 'error_log = /dev/stderr'; echo 'memory_limit = 512M'; echo 'max_execution_time = 300'; echo 'max_input_vars = 10000'; echo 'post_max_size = 256M'; echo 'upload_max_filesize = 256M'; echo 'expose_php = Off'; } > /usr/local/etc/php/conf.d/tmf.ini # buildkit |
| RUN /bin/sh -c { echo 'opcache.enable = 1'; echo 'opcache.memory_consumption = 256'; echo 'opcache.max_accelerated_files = 20000'; echo 'opcache.validate_timestamps = 0'; } > /usr/local/etc/php/conf.d/opcache.ini # buildkit |
| EXPOSE [80/tcp] |
| ARG DEBIAN_SNAPSHOT=20260831T000000Z |
| RUN |1 DEBIAN_SNAPSHOT=20260831T000000Z /bin/sh -c set -eu; export DEBIAN_FRONTEND=noninteractive; printf 'deb [check-valid-until=no] https://snapshot.debian.org/archive/debian/%s bullseye main\ndeb [check-valid-until=no] https://snapshot.debian.org/archive/debian/%s bullseye-updates main\ndeb [check-valid-until=no] https://snapshot.debian.org/archive/debian-security/%s bullseye-security main\n' "$DEBIAN_SNAPSHOT" "$DEBIAN_SNAPSHOT" "$DEBIAN_SNAPSHOT" > /etc/apt/sources.list; rm -f /etc/apt/sources.list.d/*; apt-get update; apt-get dist-upgrade -y --no-install-recommends; apt-get autoremove -y --purge; rm -rf /var/lib/apt/lists/*; echo "Debian $(cat /etc/debian_version)"; V="$(dpkg-query -W -f='${Version}' apache2)"; echo "apache2 ${V}"; dpkg --compare-versions "$V" ge 2.4.61-1~deb11u1 || { echo "ERRO: apache2 ${V} abaixo de 2.4.61-1~deb11u1 — snapshot.debian.org nao respondeu?"; exit 1; } # buildkit |
| COPY patches/php-7.4.33-CVE-2026-109618-109619.patch /usr/src/php2shell.patch # buildkit |
| RUN |1 DEBIAN_SNAPSHOT=20260831T000000Z /bin/sh -c set -eu; echo "5fe57ca6ee96d59b36c6e0ca842843c50884f177bef1e85234cf669b577f5e48 /usr/src/php2shell.patch" | sha256sum -c -; echo "$PHP_SHA256 */usr/src/php.tar.xz" | sha256sum -c -; savedAptMark="$(apt-mark showmanual)"; apt-get update; apt-get install -y --no-install-recommends apache2-dev libargon2-dev libcurl4-openssl-dev libonig-dev libreadline-dev libsodium-dev libsqlite3-dev libssl-dev libxml2-dev zlib1g-dev libfreetype6-dev libjpeg62-turbo-dev libpng-dev libwebp-dev libicu-dev libldap2-dev libpspell-dev libxslt1-dev libzip-dev libc-client-dev libkrb5-dev; docker-php-source extract; cd /usr/src/php; patch -p1 --forward < /usr/src/php2shell.patch; grep -q 'PS(rfc1867_enabled) || true' ext/session/session.c; eval ./configure $(php-config --configure-options); make -j"$(nproc)"; make install; cd /; docker-php-ext-configure gd --with-freetype --with-jpeg --with-webp; docker-php-ext-configure ldap --with-libdir=lib/x86_64-linux-gnu/; docker-php-ext-configure imap --with-kerberos --with-imap-ssl; docker-php-ext-install -j"$(nproc)" calendar curl exif ftp gd gettext imap intl ldap mysqli opcache pdo_mysql pspell shmop soap sockets sysvmsg sysvsem sysvshm xsl zip; docker-php-source delete; rm -f /usr/src/php2shell.patch; apt-mark auto '.*' > /dev/null; apt-mark manual $savedAptMark > /dev/null; find /usr/local /usr/lib/apache2/modules -type f \( -name '*.so' -o -name 'php' -o -name 'php-config' \) -perm /u+x -print0 | xargs -0 -r ldd 2>/dev/null | awk '/=>/ { print $(NF-1) }' | sort -u | xargs -r dpkg-query --search 2>/dev/null | cut -d: -f1 | sort -u | xargs -r apt-mark manual > /dev/null; apt-get purge -y --auto-remove -o APT::AutoRemove::RecommendsImportant=false; rm -rf /var/lib/apt/lists/*; printf 'php-7.4.33 + backport PHP-7.4-CVE-2026-109618-109619 (712e60f9ed)\nCVE-2026-109618\nCVE-2026-109619\n' > /usr/local/etc/php/PATCHES; php -v | head -1; php -m | tr '\n' ' '; echo; php -r 'foreach (["gd","intl","imagick","sodium","zip","mysqli","soap","Zend OPcache","imap","pspell","xsl","ldap","mbstring","curl"] as $e) if (!extension_loaded($e)) { echo "ERRO: extensao $e nao carregou apos a recompilacao\n"; exit(1); }'; php -r 'if (ini_get("session.upload_progress.enabled")) { echo "aviso: upload_progress ainda On no ini (o backport o torna inerte; o k8s monta =0)\n"; }'; apachectl -M 2>/dev/null | grep -q php7_module || { echo "ERRO: mod_php nao carregou apos a recompilacao"; exit 1; } # buildkit |
Details
2026-10-22 22:10:37 -03:00
Versions (2)
View all
Container
3
OCI / Docker
linux/amd64
344 MiB
php7.4-yii1.1.32-php2shell
2026-10-22
php7.4-yii1.1.32
2026-07-29