65 Commits

Author SHA1 Message Date
Rostislav Dugin c6a5fb35e5 FIX (docker): Stop the startup UID remap that stalls for minutes on ZFS
hosts (issue #738)
2026-08-22 19:13:11 +03:00
Rostislav Dugin 4718db67df FIX (docker): Build backend cmd package instead of single main.go file
(issue #648)
2026-06-22 16:44:34 +00:00
Rostislav Dugin 1a65eb14f6 FEATURE (docker): Add databasus healthcheck command and image HEALTHCHECK (issue #648) 2026-06-22 16:26:33 +00:00
Rostislav Dugin cbfbe76ab8 FIX (security): Harden runtime Docker image (issue #613) 2026-06-18 10:35:17 +00:00
Rostislav Dugin 422d7bd1a8 FEATURE (physical backups): Move to PG 17 native physical backups 2026-06-17 15:19:17 +03:00
Rostislav Dugin 9334895a6b FEATURE (cloud): Allow to disable cloud notice in self-hosted version via env variable IS_DISABLE_CLOUD_NOTICE 2026-05-20 21:23:27 +03:00
Rostislav Dugin f4ad457c9e FEATURE (verifications): Add backups verification 2026-05-20 17:18:21 +03:00
Rostislav Dugin 0d075a3e62 FIX (deps): bump rclone, goose, Go toolchain, otel to clear CVEs 2026-05-13 10:16:12 +03:00
Rostislav Dugin 3ba79b415b REFACTOR (agent): Move backup agent to agent/backup/ subdirectory 2026-05-13 08:37:31 +03:00
Rostislav Dugin e4c511b469 FIX (mariadb): Install client_ed25519 auth plugin in runtime image 2026-05-10 12:22:13 +03:00
Rostislav Dugin 7a43cebe48 Merge pull request #564 from databasus/main
Merge main into develop
2026-05-07 12:15:44 +03:00
Jim Brännlund 4009a1495c FIX (security): bump Go from 1.26.1 to 1.26.2
Go 1.26.2 fixes multiple stdlib vulnerabilities:
- CVE-2026-33810: net/http
- CVE-2026-32280: crypto/tls
- CVE-2026-32281: os/exec
- CVE-2026-32283: net/http

Updates all Go image references in Dockerfile, CI workflow,
go.mod files, and E2E test Dockerfiles.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-05-06 15:45:10 +02:00
Jim Brännlund 8d8754e96c REFACTOR (security): run main application as non-root user
The main databasus process previously ran as root inside the container.
This adds a dedicated `databasus` system user (UID 65532) and uses
`gosu` to drop privileges before executing the application binary.

The entrypoint script still runs as root (required to bootstrap
PostgreSQL, Valkey, and adjust file ownership), but the long-running
Go process now runs unprivileged.

Changes:
- Dockerfile: create `databasus` user, split volume ownership between
  postgres (pgdata) and databasus (temp, backups, volume root), handle
  upgrade path for existing secret.key/instance.json ownership
- Helm: add podSecurityContext and securityContext values with
  documentation explaining the root entrypoint constraint

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-05-06 14:26:42 +02:00
Rostislav Dugin 63887c89d8 FIX (ci \ cd): Fix env resolving in new .env image path 2026-05-03 18:39:12 +03:00
Rostislav Dugin 9d490ed092 FIX (ci \ cd): Do not copy windows binaries in docker and simplify caching 2026-05-03 18:14:05 +03:00
Rostislav Dugin af6a5fbf51 FEATURE (tooling): Move to pnpm in frontend 2026-05-03 03:59:53 +03:00
Rostislav Dugin 343dcaeeab REFACTOR (tooling): Simplify downloading all DBs to keeping persistent binaries in assets 2026-05-03 03:50:41 +03:00
Rostislav Dugin 27d891fb34 FIX (docker): Use -k /tmp for PostgreSQL socket directory to fix lock file permission denied on NAS systems 2026-04-02 08:26:07 +03:00
Rostislav Dugin d1c41ed53a FIX (docker): Chown /var/run/postgresql after UID/GID adjustment to fix PostgreSQL lock file permission denied on startup 2026-03-31 14:24:43 +03:00
Rostislav Dugin f287967b5d FEATURE (docker): Add PUID/PGID environment variables to control postgres user UID/GID for host-level backup compatibility 2026-03-31 11:51:57 +03:00
Rostislav Dugin 67556a0db1 FIX (dockerfile): Fix index.html 2026-03-27 22:33:20 +03:00
Rostislav Dugin 61a0bcabb1 FEATURE (cloud): Add cloud 2026-03-27 22:02:25 +03:00
Rostislav Dugin 198b94ba9d FIX (playground): Move index.html for playground into <noscript> 2026-03-22 09:57:24 +03:00
Rostislav Dugin 881167f812 FEATURE (index.html): Adjust policices for playgronund index 2026-03-21 14:08:09 +03:00
Rostislav Dugin f60e3d956b FEAUTRE (go): Upgrade Go version to 1.26.1 2026-03-13 17:37:39 +03:00
Rostislav Dugin f2cb9022f2 FEATURE (agent): Setup agent directory, pre-commit and CI\CD workflow 2026-03-13 17:23:00 +03:00
Rostislav Dugin 446b96c6c0 FEATURE (arch): Add architecture to Databasus version in the bottom left of UI 2026-03-11 11:39:53 +03:00
Rostislav Dugin c70ad82c95 FEATURE (auth): Add optional CloudFlare Turnstile for sign in \ sign up \ password reset 2026-02-14 23:11:36 +03:00
Marc 33d6bf0147 Add image source label to dockerfiles
To get changelogs shown with Renovate a docker container has to add the source label described in the OCI Image Format Specification.

For reference: https://github.com/renovatebot/renovate/blob/main/lib/modules/datasource/docker/readme.md
2026-02-05 23:30:37 +01:00
Rostislav Dugin b2a94274d7 FIX (script): Fix script creation in playground head x2 2026-02-02 20:44:52 +03:00
Rostislav Dugin a9dc29f82c FIX (script): Fix script creation in playground head 2026-02-02 19:47:15 +03:00
Rostislav Dugin ebeb597f17 FEATURE (playground): Add support of Rybbit script for playground 2026-02-02 17:50:31 +03:00
Rostislav Dugin 105777ab6f FEATURE (email): Add sending email about members invitation and password reset 2026-01-28 17:28:36 +03:00
Rostislav Dugin 699ca16814 FIX (env): Fix env detection over startup 2026-01-28 11:32:19 +03:00
Rostislav Dugin 5cf7614772 FIX (playground): Make playground multiple nodes 2026-01-24 14:57:45 +03:00
Rostislav Dugin af2f978876 FEATURE (playground): Add playground 2026-01-23 12:00:56 +03:00
Rostislav Dugin 997fc01442 FEATURE (backups): Move backups cancellation to Valkey pub\sub 2026-01-12 11:24:25 +03:00
Rostislav Dugin 6397423298 FIX (temp folder): Ensure permissions 0700 for temp folders to meet PG requirements for .pgpass ownership 2026-01-09 11:10:50 +03:00
Rostislav Dugin b9668875ef FIX (mongodb): Fix MongoDB build for ARM 2026-01-02 12:21:02 +03:00
Rostislav Dugin 22e9c605da FEATURE (dockefile): Recover internal PostgreSQL in case of corruption 2025-12-27 22:39:39 +03:00
Rostislav Dugin 91ad57c003 FIX (migration): Add check for postgresus-data folder 2025-12-25 23:09:10 +03:00
Rostislav Dugin b44ce1f3ea FEATURE (databasus): Migrate to new name 2025-12-25 21:26:53 +03:00
Rostislav Dugin 54a6a30024 FEATURE (mysql): Add MySQL 9.x support 2025-12-24 14:49:26 +03:00
Rostislav Dugin 26bc3dd4f2 FIX (ci \ cd): Fix build for MongoDB for target arch 2025-12-22 15:24:52 +03:00
Rostislav Dugin b45158afa2 FIX (ci \ cd): Fix build for MongoDB for target arch 2025-12-22 14:44:32 +03:00
Rostislav Dugin 46512d2bc8 FEATURE (databases): Add MongoDB 2025-12-22 14:15:27 +03:00
Rostislav Dugin 3ae8761666 FEATURE (databases): Add MariaDB support 2025-12-21 14:53:53 +03:00
Rostislav Dugin 8638b2d136 FEATURE (databases): Add MySQL database 2025-12-20 19:14:48 +03:00
Rostislav Dugin d21a9398c6 FIX (Dockerfile): Upgrade Go version 2025-12-18 18:57:26 +03:00
Rostislav Dugin d8826d85c3 FEATURE (storanges): Add rclone 2025-12-18 17:46:16 +03:00