Upgrading to Version 6.5.7+240515

Upgrade to 5.6.46+231121 and 6.3.6+231120

.github/workflows/build-latest-container-images.yaml

@@ -15,7 +15,7 @@ jobs:
           - 6.0/fpm-alpine/Dockerfile
           - 6.0/fpm/Dockerfile
     steps:
-      - uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4
+      - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4
       - uses: hadolint/hadolint-action@v3.1.0
         with:
           dockerfile: ${{ matrix.dockerfile }}
@@ -31,7 +31,7 @@ jobs:
       contents: read
     steps:
       - name: 'Check out the repo'
-        uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4
+        uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4
       - name: 'Set up QEMU'
         uses: docker/setup-qemu-action@v3
         with:

.github/workflows/build-lts-container-images.yaml

@@ -15,7 +15,7 @@ jobs:
           - 5.0/fpm-alpine/Dockerfile
           - 5.0/fpm/Dockerfile
     steps:
-      - uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4
+      - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4
       - uses: hadolint/hadolint-action@v3.1.0
         with:
           dockerfile: ${{ matrix.dockerfile }}
@@ -31,7 +31,7 @@ jobs:
       contents: read
     steps:
       - name: 'Check out the repo'
-        uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4
+        uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4
       - name: 'Set up QEMU'
         uses: docker/setup-qemu-action@v3
         with:

.github/workflows/lint-dockerfiles.yaml

@@ -17,7 +17,7 @@ jobs:
           - 6.0/fpm/Dockerfile
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4
+      - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4
       - uses: hadolint/hadolint-action@v3.1.0
         with:
           dockerfile: ${{ matrix.dockerfile }}

.github/workflows/test-arm-container-images.yaml

@@ -22,7 +22,7 @@ jobs:
           - linux/arm64
     steps:
       - name: 'Check out the repo'
-        uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4
+        uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4
 
       - name: 'Set up QEMU'
         uses: docker/setup-qemu-action@v3

.github/workflows/test-latest-container-images.yaml

@@ -14,7 +14,7 @@ jobs:
           - fpm
     steps:
       - name: 'Check out the repo'
-        uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4
+        uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4
 
       - name: 'Set up QEMU'
         uses: docker/setup-qemu-action@v3

.github/workflows/test-lts-container-images.yaml

@@ -14,7 +14,7 @@ jobs:
           - fpm
     steps:
       - name: 'Check out the repo'
-        uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4
+        uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4
 
       - name: 'Set up QEMU'
         uses: docker/setup-qemu-action@v3

5.0/apache/Dockerfile

@@ -81,8 +81,8 @@ RUN a2enmod headers rewrite remoteip; \
 # Use the default production configuration
 RUN mv "$PHP_INI_DIR/php.ini-production" "$PHP_INI_DIR/php.ini"
 
-ARG version="5.6.38+230919"
+ARG version="5.6.63+240508"
-ARG sha256_checksum="0f7d6c59bf9f06bd2b326269b13792c546966b3ad18380152c37fd88bb6bd861"
+ARG sha256_checksum="a027fdaa78e07d960987f64b807719f3e85d32753ec8021e35eddd26aa3604e3"
 ARG archive_url="https://github.com/LimeSurvey/LimeSurvey/archive/refs/tags/${version}.tar.gz"
 ARG USER=www-data
 ARG LISTEN_PORT=8080

5.0/apache/entrypoint.sh

@@ -153,7 +153,7 @@ if [ -f application/config/security.php ]; then
     echo 'Info: security.php already provisioned'
 else
     echo 'Info: Creating security.php'
-    if [ -n "$ENCRYPT_KEYPAIR" ]; then
+    if [ -n "$ENCRYPT_KEYPAIR" ] || [ -n "$ENCRYPT_SECRET_BOX_KEY" ]; then
 
         cat <<EOF > application/config/security.php
 <?php if (!defined('BASEPATH')) exit('No direct script access allowed');

5.0/fpm-alpine/Dockerfile

@@ -51,8 +51,8 @@ RUN set -ex; \
     apk add --no-cache --no-network --virtual .limesurvey-phpext-rundeps $runDeps; \
     apk del --no-cache --no-network .build-deps
 
-ARG version="5.6.38+230919"
+ARG version="5.6.63+240508"
-ARG sha256_checksum="0f7d6c59bf9f06bd2b326269b13792c546966b3ad18380152c37fd88bb6bd861"
+ARG sha256_checksum="a027fdaa78e07d960987f64b807719f3e85d32753ec8021e35eddd26aa3604e3"
 ARG archive_url="https://github.com/LimeSurvey/LimeSurvey/archive/refs/tags/${version}.tar.gz"
 ARG USER=www-data
 ENV LIMESURVEY_VERSION=$version

5.0/fpm-alpine/entrypoint.sh

@@ -146,7 +146,7 @@ if [ -f application/config/security.php ]; then
     echo 'Info: security.php already provisioned'
 else
     echo 'Info: Creating security.php'
-    if [ -n "$ENCRYPT_KEYPAIR" ]; then
+    if [ -n "$ENCRYPT_KEYPAIR" ] || [ -n "$ENCRYPT_SECRET_BOX_KEY" ]; then
 
         cat <<EOF > application/config/security.php
 <?php if (!defined('BASEPATH')) exit('No direct script access allowed');

5.0/fpm/Dockerfile

@@ -68,8 +68,8 @@ RUN set -ex; \
         apt-get purge -y --auto-remove -o APT::AutoRemove::RecommendsImportant=false; \
         rm -rf /var/lib/apt/lists/*
 
-ARG version="5.6.38+230919"
+ARG version="5.6.63+240508"
-ARG sha256_checksum="0f7d6c59bf9f06bd2b326269b13792c546966b3ad18380152c37fd88bb6bd861"
+ARG sha256_checksum="a027fdaa78e07d960987f64b807719f3e85d32753ec8021e35eddd26aa3604e3"
 ARG archive_url="https://github.com/LimeSurvey/LimeSurvey/archive/refs/tags/${version}.tar.gz"
 ARG USER=www-data
 ENV LIMESURVEY_VERSION=$version

5.0/fpm/entrypoint.sh

@@ -146,7 +146,7 @@ if [ -f application/config/security.php ]; then
     echo 'Info: security.php already provisioned'
 else
     echo 'Info: Creating security.php'
-    if [ -n "$ENCRYPT_KEYPAIR" ]; then
+    if [ -n "$ENCRYPT_KEYPAIR" ] || [ -n "$ENCRYPT_SECRET_BOX_KEY" ]; then
 
         cat <<EOF > application/config/security.php
 <?php if (!defined('BASEPATH')) exit('No direct script access allowed');

6.0/apache/Dockerfile

@@ -1,4 +1,4 @@
-FROM docker.io/php:8.0-apache
+FROM docker.io/php:8.1-apache
 LABEL maintainer="markus@martialblog.de"
 
 # Install OS dependencies
@@ -64,6 +64,13 @@ RUN set -ex; \
                 | cut -d: -f1 \
                 | sort -u \
                 | xargs -rt apt-mark manual; \
+        ldd "$(php -r 'echo ini_get("extension_dir");')"/*.so \
+                | awk '$3 ~ /^\/lib/ { print "/usr"$3 }' \
+                | sort -u \
+                | xargs -r dpkg-query -S \
+                | cut -d: -f1 \
+                | sort -u \
+                | xargs -rt apt-mark manual; \
         \
         apt-get purge -y --auto-remove -o APT::AutoRemove::RecommendsImportant=false; \
         rm -rf /var/lib/apt/lists/*
@@ -81,8 +88,8 @@ RUN a2enmod headers rewrite remoteip; \
 # Use the default production configuration
 RUN mv "$PHP_INI_DIR/php.ini-production" "$PHP_INI_DIR/php.ini"
 
-ARG version="6.2.8+230921"
+ARG version="6.5.7+240515"
-ARG sha256_checksum="f0c59b5e9bfefe31e7962b994ec4d455647241813d49da4a80a25156d1690dc6"
+ARG sha256_checksum="a9d8b31fddba18054a472b3bcd1fca185e901e978f675883a9b0e0ec92a01c0b"
 ARG archive_url="https://github.com/LimeSurvey/LimeSurvey/archive/refs/tags/${version}.tar.gz"
 ARG USER=www-data
 ARG LISTEN_PORT=8080

6.0/apache/entrypoint.sh

@@ -153,7 +153,7 @@ if [ -f application/config/security.php ]; then
     echo 'Info: security.php already provisioned'
 else
     echo 'Info: Creating security.php'
-    if [ -n "$ENCRYPT_KEYPAIR" ]; then
+    if [ -n "$ENCRYPT_KEYPAIR" ] || [ -n "$ENCRYPT_SECRET_BOX_KEY" ]; then
 
         cat <<EOF > application/config/security.php
 <?php if (!defined('BASEPATH')) exit('No direct script access allowed');

6.0/fpm-alpine/Dockerfile

@@ -1,4 +1,4 @@
-FROM docker.io/php:8.0-fpm-alpine
+FROM docker.io/php:8.1-fpm-alpine
 LABEL maintainer="markus@martialblog.de"
 
 # Install OS dependencies
@@ -51,8 +51,8 @@ RUN set -ex; \
     apk add --no-cache --no-network --virtual .limesurvey-phpext-rundeps $runDeps; \
     apk del --no-cache --no-network .build-deps
 
-ARG version="6.2.8+230921"
+ARG version="6.5.7+240515"
-ARG sha256_checksum="f0c59b5e9bfefe31e7962b994ec4d455647241813d49da4a80a25156d1690dc6"
+ARG sha256_checksum="a9d8b31fddba18054a472b3bcd1fca185e901e978f675883a9b0e0ec92a01c0b"
 ARG archive_url="https://github.com/LimeSurvey/LimeSurvey/archive/refs/tags/${version}.tar.gz"
 ARG USER=www-data
 ENV LIMESURVEY_VERSION=$version

6.0/fpm-alpine/entrypoint.sh

@@ -146,7 +146,7 @@ if [ -f application/config/security.php ]; then
     echo 'Info: security.php already provisioned'
 else
     echo 'Info: Creating security.php'
-    if [ -n "$ENCRYPT_KEYPAIR" ]; then
+    if [ -n "$ENCRYPT_KEYPAIR" ] || [ -n "$ENCRYPT_SECRET_BOX_KEY" ]; then
 
         cat <<EOF > application/config/security.php
 <?php if (!defined('BASEPATH')) exit('No direct script access allowed');

6.0/fpm/Dockerfile

@@ -1,4 +1,4 @@
-FROM docker.io/php:8.0-fpm
+FROM docker.io/php:8.1-fpm
 LABEL maintainer="markus@martialblog.de"
 
 # Install OS dependencies
@@ -64,12 +64,19 @@ RUN set -ex; \
                 | cut -d: -f1 \
                 | sort -u \
                 | xargs -rt apt-mark manual; \
+        ldd "$(php -r 'echo ini_get("extension_dir");')"/*.so \
+                | awk '$3 ~ /^\/lib/ { print "/usr"$3 }' \
+                | sort -u \
+                | xargs -r dpkg-query -S \
+                | cut -d: -f1 \
+                | sort -u \
+                | xargs -rt apt-mark manual; \
         \
         apt-get purge -y --auto-remove -o APT::AutoRemove::RecommendsImportant=false; \
         rm -rf /var/lib/apt/lists/*
 
-ARG version="6.2.8+230921"
+ARG version="6.5.7+240515"
-ARG sha256_checksum="f0c59b5e9bfefe31e7962b994ec4d455647241813d49da4a80a25156d1690dc6"
+ARG sha256_checksum="a9d8b31fddba18054a472b3bcd1fca185e901e978f675883a9b0e0ec92a01c0b"
 ARG archive_url="https://github.com/LimeSurvey/LimeSurvey/archive/refs/tags/${version}.tar.gz"
 ARG USER=www-data
 ENV LIMESURVEY_VERSION=$version

6.0/fpm/entrypoint.sh

@@ -146,7 +146,7 @@ if [ -f application/config/security.php ]; then
     echo 'Info: security.php already provisioned'
 else
     echo 'Info: Creating security.php'
-    if [ -n "$ENCRYPT_KEYPAIR" ]; then
+    if [ -n "$ENCRYPT_KEYPAIR" ] || [ -n "$ENCRYPT_SECRET_BOX_KEY" ]; then
 
         cat <<EOF > application/config/security.php
 <?php if (!defined('BASEPATH')) exit('No direct script access allowed');

README.md

@@ -151,6 +151,8 @@ For further details on the settings see: https://manual.limesurvey.org/Optional_
 
 The easiest way to get a fully featured and functional setup is using a docker-compose file. Several examples are provided in the [repository](https://github.com/martialblog/docker-limesurvey).
 
+**Hint:** You need to configure a database and Limesurvey password in the `docker-compose` files before starting. No defaults are provided to discourage production use with default passwords.
+
 ```
 docker-compose up
 
@@ -161,8 +163,6 @@ http://localhost:8080/
 http://localhost:8080/index.php/admin
 ```
 
-Please note / warning: To sign into the admin panel in the examples, the credentials are username: *admin* password: *foobar*, however, if you are planning for any use beyond testing, it is highly recommended that you use environment variables to define a secure username and password.
-
 # Running LimeSurvey with Helm
 
 A Helm Chart for this Image can be used for deployments. Please refer to the Helm Repository for further details:

docker-compose.apache.yml

@@ -8,8 +8,8 @@ services:
       - lime-db
     environment:
       - "DB_HOST=lime-db"
-      - "DB_PASSWORD=secret"
+      # - "DB_PASSWORD="
-      - "ADMIN_PASSWORD=foobar"
+      # - "ADMIN_PASSWORD="
       - "PUBLIC_URL=http://my.survey.localhost:8080"  # Example, Change this
       - "BASE_URL=http://my.survey.localhost:8080"  # Example, Change this
   proxy:
@@ -24,6 +24,6 @@ services:
     environment:
       - "MYSQL_USER=limesurvey"
       - "MYSQL_DATABASE=limesurvey"
-      - "MYSQL_PASSWORD=secret"
+      # - "MYSQL_PASSWORD="
-      - "MYSQL_ROOT_PASSWORD=secret"
+      # - "MYSQL_ROOT_PASSWORD="
 

docker-compose.example.yml

@@ -7,12 +7,12 @@ services:
       - DB_TYPE=pgsql
       - DB_PORT=5432
       - DB_HOST=db
-      - DB_PASSWORD=example
+      # - DB_PASSWORD=
       - DB_NAME=limesurvey
       - DB_USERNAME=limesurvey
       - ADMIN_USER=admin
       - ADMIN_NAME=Admin
-      - ADMIN_PASSWORD=example
+      # - ADMIN_PASSWORD=
       - ADMIN_EMAIL=admin@example.com
       - PUBLIC_URL=foobar.com
     volumes:
@@ -25,11 +25,11 @@ services:
     image: docker.io/postgres:10-alpine
     restart: always
     volumes:
-      - db-data:/var/lib/postgresql
+      - db-data:/var/lib/postgresql/data
     environment:
       - POSTGRES_USER=limesurvey
       - POSTGRES_DB=limesurvey
-      - POSTGRES_PASSWORD=example
+      # - POSTGRES_PASSWORD=
 
 volumes:
   limesurvey:

docker-compose.fpm-certbot.yml

@@ -14,8 +14,8 @@ services:
       - lime-db
     environment:
       - "DB_HOST=lime-db"
-      - "DB_PASSWORD=secret"
+      # - "DB_PASSWORD="
-      - "ADMIN_PASSWORD=foobar"
+      # - "ADMIN_PASSWORD="
    lime-web:
     build:
       context: nginx-certbot/
@@ -44,7 +44,7 @@ services:
     environment:
       - "MYSQL_USER=limesurvey"
       - "MYSQL_DATABASE=limesurvey"
-      - "MYSQL_PASSWORD=secret"
+      # - "MYSQL_PASSWORD="
-      - "MYSQL_ROOT_PASSWORD=secret"
+      # - "MYSQL_ROOT_PASSWORD="
 volumes:
   lime:

docker-compose.fpm.alpine.yml

@@ -14,8 +14,8 @@ services:
       - lime-db
     environment:
       - "DB_HOST=lime-db"
-      - "DB_PASSWORD=secret"
+      # - "DB_PASSWORD="
-      - "ADMIN_PASSWORD=foobar"
+      # - "ADMIN_PASSWORD="
   lime-web:
     image: docker.io/nginx:alpine
     links:
@@ -32,7 +32,7 @@ services:
     environment:
       - "MYSQL_USER=limesurvey"
       - "MYSQL_DATABASE=limesurvey"
-      - "MYSQL_PASSWORD=secret"
+      # - "MYSQL_PASSWORD="
-      - "MYSQL_ROOT_PASSWORD=secret"
+      # - "MYSQL_ROOT_PASSWORD="
 volumes:
   lime:

docker-compose.fpm.yml

@@ -14,8 +14,8 @@ services:
       - lime-db
     environment:
       - "DB_HOST=lime-db"
-      - "DB_PASSWORD=secret"
+      # - "DB_PASSWORD="
-      - "ADMIN_PASSWORD=foobar"
+      # - "ADMIN_PASSWORD="
   lime-web:
     image: docker.io/nginx
     links:
@@ -30,7 +30,7 @@ services:
     environment:
       - "MYSQL_USER=limesurvey"
       - "MYSQL_DATABASE=limesurvey"
-      - "MYSQL_PASSWORD=secret"
+      # - "MYSQL_PASSWORD="
-      - "MYSQL_ROOT_PASSWORD=secret"
+      # - "MYSQL_ROOT_PASSWORD="
 volumes:
   lime:

docker-compose.pgsql.yml

@@ -19,8 +19,8 @@ services:
       - "DB_TYPE=pgsql"
       - "DB_PORT=5432"
       - "DB_HOST=lime-db"
-      - "DB_PASSWORD=secret"
+      # - "DB_PASSWORD="
-      - "ADMIN_PASSWORD=foobar"
+      # - "ADMIN_PASSWORD="
   lime-db:
     image: docker.io/postgres:10
     volumes:
@@ -28,7 +28,7 @@ services:
     environment:
       - "POSTGRES_USER=limesurvey"
       - "POSTGRES_DB=limesurvey"
-      - "POSTGRES_PASSWORD=secret"
+      # - "POSTGRES_PASSWORD="
 
 volumes:
   db-data:

docker-compose.traefik.domain.yml

@@ -15,8 +15,8 @@ services:
       - lime-db
     environment:
       - "DB_HOST=lime-db"
-      - "DB_PASSWORD=secret"
+      # - "DB_PASSWORD="
-      - "ADMIN_PASSWORD=foobar"
+      # - "ADMIN_PASSWORD="
       - "PUBLIC_URL=http://my.survey.localhost:8888"
       - "BASE_URL=http://my.survey.localhost:8888"
   traefik:
@@ -37,6 +37,5 @@ services:
     environment:
       - "MYSQL_USER=limesurvey"
       - "MYSQL_DATABASE=limesurvey"
-      - "MYSQL_PASSWORD=secret"
+      # - "MYSQL_PASSWORD="
-      - "MYSQL_ROOT_PASSWORD=secret"
+      # - "MYSQL_ROOT_PASSWORD="
-

docker-compose.traefik.yml

@@ -19,8 +19,8 @@ services:
       - "./examples/apache-example.conf:/etc/apache2/sites-available/000-default.conf:ro"
     environment:
       - "DB_HOST=lime-db"
-      - "DB_PASSWORD=secret"
+      # - "DB_PASSWORD="
-      - "ADMIN_PASSWORD=foobar"
+      # - "ADMIN_PASSWORD="
       - "PUBLIC_URL=http://localhost:8888/limesurvey"
       - "BASE_URL=http://localhost:8888/limesurvey"
   traefik:
@@ -41,6 +41,5 @@ services:
     environment:
       - "MYSQL_USER=limesurvey"
       - "MYSQL_DATABASE=limesurvey"
-      - "MYSQL_PASSWORD=secret"
+      # - "MYSQL_PASSWORD="
-      - "MYSQL_ROOT_PASSWORD=secret"
+      # - "MYSQL_ROOT_PASSWORD="
-

docker-compose.yml

@@ -15,8 +15,8 @@ services:
       - "8080:8080"
     environment:
       - "DB_HOST=lime-db"
-      - "DB_PASSWORD=secret"
+      # - "DB_PASSWORD="
-      - "ADMIN_PASSWORD=foobar"
+      # - "ADMIN_PASSWORD="
       # If you require an empty table prefix, use a space as the DB_TABLE_PREFIX
       # - "DB_TABLE_PREFIX= "
   lime-db:
@@ -24,5 +24,5 @@ services:
     environment:
       - "MYSQL_USER=limesurvey"
       - "MYSQL_DATABASE=limesurvey"
-      - "MYSQL_PASSWORD=secret"
+      # - "MYSQL_PASSWORD="
-      - "MYSQL_ROOT_PASSWORD=secret"
+      # - "MYSQL_ROOT_PASSWORD="