Skip to content

Restart unless stopped - and fix lots of bit-rot. - #194

Merged
hcooper merged 9 commits into
masterfrom
restart-unless-stopped
Aug 31, 2026
Merged

hcooper merged 9 commits into
masterfrom
restart-unless-stopped

Conversation

@hcooper

@hcooper hcooper commented Aug 30, 2026

Copy link
Copy Markdown
Contributor

All I wanted was for the mailserver container to have restart: unless-stopped enabled (so it automatically restarts after reboot like all the other containers.

However I ran into so much bit-rot that needed fixing:

  • Pages of new security advisories blocking composer, rather than just adding to the list of exclusions I've disabled checking until we're up to date, as there's no other action to take. This applies to the Sphinx extension too.

  • docker build cache was failing to pick up dockerfile changes, so disabled it during tests (also force pulling of images).

  • pear install mail kept failing, pear site seems very slow but working, just switched to the apt packages.

  • UserMerge github report deleted old tags/branches, switched to gerrit which still had REL1_39 tag.

  • Found out about docker-compose.override.yaml, added to git ignore. It lets me override some stuff locally as I have complex container network setup.

I'll make another PR to run the github tests on a schedule (not just on a PR) so these breakages get flagged sooner.

The mailserver docker container doesn't automatically restart like the rest of them do (e.g. reboot, docker daemon restart, etc).
Updated Composer configuration to block policy advisories instead of ignoring them.
Updated UserMerge extension checkout to a specific commit instead of the branch.

@BenjaminPelletier BenjaminPelletier left a comment

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

docker build cache was failing to pick up dockerfile changes, so disabled it during tests (also force pulling of images).

That seems particularly weird, but I'm not at all bothered by --no-cache --pull here

Comment thread webserver/Dockerfile
audit.ignore "PKSA-t71x-qf1n-7xwy" \
audit.ignore "PKSA-z3gr-8qht-p93v" \
audit.ignore "PKSA-4s4z-t146-6123"
RUN COMPOSER_ALLOW_SUPERUSER=yes composer config --no-plugins --json policy.advisories.block false

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

nit: a TODO note or Issue might help us track the eventual definitive resolution

Copy link
Copy Markdown
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

There's one on the line above :-D

@hcooper hcooper mentioned this pull request Aug 31, 2026
3 tasks
@hcooper
hcooper merged commit 27cb829 into master Aug 31, 2026
2 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants