mirror of
https://github.com/Cockatrice/Cockatrice.git
synced 2026-09-21 00:55:09 -07:00
d6fbfb32a1
Some checks are pending
CodeQL / Analyze (cpp) (push) Waiting to run
CodeQL / Analyze (actions) (push) Waiting to run
Build Desktop / Configure (push) Waiting to run
Build Desktop / Debian 13 (push) Blocked by required conditions
Build Desktop / Debian 12 (push) Blocked by required conditions
Build Desktop / Fedora 44 (push) Blocked by required conditions
Build Desktop / Fedora 43 (push) Blocked by required conditions
Build Desktop / Servatrice_Debian 12 (push) Blocked by required conditions
Build Desktop / Ubuntu 26.04 (push) Blocked by required conditions
Build Desktop / Ubuntu 24.04 (push) Blocked by required conditions
Build Desktop / Arch (push) Blocked by required conditions
Build Desktop / macOS 13 Intel (push) Blocked by required conditions
Build Desktop / macOS 14 (push) Blocked by required conditions
Build Desktop / macOS 15 (push) Blocked by required conditions
Build Desktop / macOS 26 Debug (push) Blocked by required conditions
Build Desktop / Windows 10 (push) Blocked by required conditions
Build Docker / Servatrice (arm) (push) Waiting to run
Build Docker / Servatrice (x86) (push) Waiting to run
Build Docker / Publish multi-platform Servatrice image (push) Blocked by required conditions
* [Security] Use a CSPRNG for salts, tokens, and RNG seeding Password salts and activation tokens were generated with the global SFMT RNG, which was seeded from a 32-bit timestamp, making registration salts and activation tokens predictable. The game RNG used the same timestamp seed across restarts. Add CryptoUtil backed by OpenSSL RAND_bytes and use it for salt/token generation and to seed RNG_SFMT with a 64-bit CSPRNG value in both the client and server. Link libcockatrice_utility against OpenSSL::Crypto. Took 30 seconds Took 25 minutes * Lint. Took 4 minutes Took 36 seconds --------- Co-authored-by: Lukas Brübach <Bruebach.Lukas@bdosecurity.de>
56 lines
1.1 KiB
Docker
56 lines
1.1 KiB
Docker
# -------- Build Stage --------
|
|
FROM ubuntu:26.04 AS build
|
|
|
|
ARG DEBIAN_FRONTEND=noninteractive
|
|
|
|
RUN apt-get update \
|
|
&& apt-get install -y --no-install-recommends \
|
|
build-essential \
|
|
cmake \
|
|
ninja-build \
|
|
file \
|
|
g++ \
|
|
git \
|
|
libmariadb-dev-compat \
|
|
libprotobuf-dev \
|
|
libqt6sql6-mysql \
|
|
libssl-dev \
|
|
qt6-websockets-dev \
|
|
protobuf-compiler \
|
|
qt6-tools-dev \
|
|
qt6-tools-dev-tools
|
|
|
|
WORKDIR /src
|
|
COPY . .
|
|
RUN cmake \
|
|
-S . \
|
|
-B build \
|
|
-G Ninja \
|
|
-DWITH_CLIENT=0 \
|
|
-DWITH_ORACLE=0 \
|
|
-DWITH_SERVER=1 \
|
|
&& cmake --build build \
|
|
&& cmake --install build
|
|
|
|
|
|
# -------- Runtime Stage (clean) --------
|
|
FROM ubuntu:26.04
|
|
|
|
ARG DEBIAN_FRONTEND=noninteractive
|
|
|
|
RUN apt-get update \
|
|
&& apt-get install -y --no-install-recommends \
|
|
libprotobuf32t64 \
|
|
libqt6sql6-mysql \
|
|
libqt6websockets6 \
|
|
libssl3 \
|
|
&& apt-get clean \
|
|
&& rm -rf /var/lib/apt/lists/*
|
|
|
|
# Only copy installed binaries, not source
|
|
COPY --from=build /usr/local /usr/local
|
|
|
|
WORKDIR /home/servatrice
|
|
|
|
EXPOSE 4748
|
|
ENTRYPOINT [ "servatrice", "--log-to-console" ]
|