Commit Graph

80 Commits (709023ab5a1ef93cba472772cec1d85ab47cba30)

Author SHA1 Message Date
Florent Daigniere e03d91a1ec Merge remote-tracking branch 'upstream/master' into oletools
Florent Daigniere 4881e0db2a ghost is right, it should be pinned here too
Florent Daigniere adacf579fc Rollback to mysql-connector-python==8.0.29
See 
Florent Daigniere 3e45a791cf Implement oletools to filter out bad macros
Florent Daigniere d3d7916b58 Merge remote-tracking branch 'upstream/master' into upgrade-alpine
bors[bot] 31c6c26ec8
Merge
2547: Disable libhardened-malloc for non x86. r=mergify[bot] a=nextgens

## What type of PR?

bug-fix

## What does this PR do?

Support is going to be a nightmare if RPI4 is not working; We can always reintroduce it later.

### Related issue(s)
- closes  


Co-authored-by: Florent Daigniere <nextgens@freenetproject.org>
Florent Daigniere db9ed1fd59 Disable libhardened-malloc for non x86.
@see 

Support is going to be a nightmare if RPI4 is not working.
Florent Daigniere 42cd5bf2dc Move it to base since admin will also use it
Florent Daigniere e5a1a353db Upgrade to alpine 3.16.3
This has PHP fixes and a new rspamd
bors[bot] 68bb8da2b7
Merge
2538: Fix the ARM build again r=mergify[bot] a=nextgens

I have double-checked from the builder and this works.

gcc -v from the alpine image tells me that we have  ``--enable-default-pie``

Co-authored-by: Florent Daigniere <nextgens@freenetproject.org>
Florent Daigniere 7745420fe0 Fix the ARM build again
bors[bot] b66f3fe9de
Merge
2537: Fix the armv7 build (again)! r=mergify[bot] a=nextgens

Revert "simplify": ghostwheel42's approach was right
This reverts commit 04f6bd2633.

Without the build still errors-out because of ``set -euxo pipefail``
see https://github.com/Mailu/Mailu/actions/runs/3479399158/jobs/5817902589

Co-authored-by: Florent Daigniere <nextgens@freenetproject.org>
Florent Daigniere b9b0c77d2e Revert "simplify": ghostwheel42's approach was right
This reverts commit 04f6bd2633.
bors[bot] f43c8c652e
Merge
2483: Introduce FETCHMAIL_ENABLED r=mergify[bot] a=DjVinnii

## What type of PR?

Enhancement

## What does this PR do?
Add `FETCHMAIL_ENABLED` to enable/disable the Fetchmail functionality in the Admin UI.

### Related issue(s)
- closes 

## Prerequisites
Before we can consider review and merge, please make sure the following list is done and checked.
If an entry in not applicable, you can check it or remove it from the list.

- [x] In case of feature or enhancement: documentation updated accordingly
- [x] Unless it's docs or a minor change: add [changelog](https://mailu.io/master/contributors/workflow.html#changelog) entry file.


2535: fix the linux/arm/v7 build r=mergify[bot] a=nextgens

## What type of PR?

bug-fix

## What does this PR do?

The arm builder is running aarch64 ... and there is no package for arm/v7


Co-authored-by: Vincent Kling <v.kling@vinniict.nl>
Co-authored-by: Dimitri Huisman <diman@huisman.xyz>
Co-authored-by: Florent Daigniere <nextgens@freenetproject.org>
Florent Daigniere 32f3241569 ensure we have -pie too
Florent Daigniere 7ab3d8f9fe There is no good reason not to export them is the base image too
Florent Daigniere aa44a42654 ensure we compile the wheels with bells and whistles too
Florent Daigniere 04f6bd2633 simplify
Florent Daigniere d43e7f72df ghostwheel42's suggestion
Florent Daigniere 1f895d5f82 ghostwheel42's suggestion
Florent Daigniere 031a157ad9 fix the linux/arm/v7 build
bors[bot] 04a196c417
Merge
2525: Switch to GrapheneOS's hardened_malloc r=mergify[bot] a=nextgens

## What type of PR?

Feature

## What does this PR do?

Switch to GrapheneOS's hardened_malloc

This was suggested during the dev meeting of the 18/09/22.

It may break things and it may make things unbearably slow... but it should also make the exploitation of memory corruption bugs a lot harder.

## Prerequisites
Before we can consider review and merge, please make sure the following list is done and checked.
If an entry in not applicable, you can check it or remove it from the list.

- [ ] In case of feature or enhancement: documentation updated accordingly
- [x] Unless it's docs or a minor change: add [changelog](https://mailu.io/master/contributors/workflow.html#changelog) entry file.


2534: Close : document SQLALCHEMY_DATABASE_URI r=mergify[bot] a=nextgens

## What type of PR?

documentation

## What does this PR do?

document SQLALCHEMY_DATABASE_URI

### Related issue(s)
- closes 

## Prerequisites
Before we can consider review and merge, please make sure the following list is done and checked.
If an entry in not applicable, you can check it or remove it from the list.

- [x] In case of feature or enhancement: documentation updated accordingly
- [ ] Unless it's docs or a minor change: add [changelog](https://mailu.io/master/contributors/workflow.html#changelog) entry file.


Co-authored-by: Florent Daigniere <nextgens@freenetproject.org>
Florent Daigniere 81628149a2 don't fake the library
Florent Daigniere 9b2f018be6 add --no-cache
Florent Daigniere 455180043d doh
Florent Daigniere f11c451403 Restrict it to arch where there is a package
Florent Daigniere 97df65e9ef Switch to GrapheneOS's hardened_malloc
This was suggested during the dev meeting of the 18/09/22.

It may break things and it may make things unbearably slow
Alexander Graf 1ae9156756
Add bcyrpt as direct dependency for better crypto. Also some updates
Alexander Graf 047413185e
Mask Flask-SQLAlchemy >= 3.0.0 for now as it breaks mailu
Alexander Graf 7e36694b64
Update python deps
bors[bot] e0ff135a00
Merge
2498: Implement ITERATE in podop r=mergify[bot] a=nextgens

## What type of PR?

Feature

## What does this PR do?

This makes ``doveadm -A`` work.

The easiest way to try it out is:
```
doveadm dict iter proxy:/tmp/podop.socket:auth shared/userdb

or 

doveadm user '*'
```

The protocol is described at https://doc.dovecot.org/developer_manual/design/dict_protocol/
The current version of dovecot is not using flags... so there's little gain in implementing them.

### Related issue(s)
- close 

## Prerequisites
Before we can consider review and merge, please make sure the following list is done and checked.
If an entry in not applicable, you can check it or remove it from the list.

- [ ] In case of feature or enhancement: documentation updated accordingly
- [x] Unless it's docs or a minor change: add [changelog](https://mailu.io/master/contributors/workflow.html#changelog) entry file.


Co-authored-by: Florent Daigniere <nextgens@freenetproject.org>
Co-authored-by: Alexander Graf <ghostwheel42@users.noreply.github.com>
Florent Daigniere ff9f152a52 This may be helpful too
Florent Daigniere 5137b235e9 whitelist what we know works
If other people use other arch and want their builds to go faster we can
whitelist them too after they have confirmed it works.
Alexander Graf a2d43be6de
Fix building wheels when deps need to compile
Alexander Graf bba98b320e
Fix armv7 build by manually downloading crates.io index
Florent Daigniere 6def1b555b doh
Florent Daigniere 96d9289630 No need to send an extra \n
Florent Daigniere cdc9b63a46 Guard the message logging too
Florent Daigniere 2a417dbfc2 doesn't belong here
Florent Daigniere 1ce889b91b Do it the pythonic way
Florent Daigniere e10527a4bf This is not used anymore
Florent Daigniere 1ae4c37cb9 Don't do fancy, just re-raise it
Florent Daigniere 5ec4277e1e Make it async. I'm not sure it's a good idea
Florent Daigniere cf34be967c Implement ITERATE
Florent Daigniere 340e359096 doh
Florent Daigniere 076d67b513 follow the protocol
Florent Daigniere 2e467092a2 The newer dovecot sends data podop should ignore
Florent Daigniere 8942448561 Upgrade to alpine 3.16.2
This may fix the build issues on arm
Alexander Graf 024b0573b3
Update build reqs and fix armv7 build
Alexander Graf 7441a420c4
Fix and speed-up arm build. Allow chosing of prod/dev env.