From d87aa06c36fe1dade06406d2410233de7559b41b Mon Sep 17 00:00:00 2001 From: Doro Wu Date: Mon, 17 Dec 2018 02:48:03 +0800 Subject: [PATCH 1/3] fix: security issue --- image/usr/local/lib/web/backend/requirements.txt | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/image/usr/local/lib/web/backend/requirements.txt b/image/usr/local/lib/web/backend/requirements.txt index eaf05dc..0c72599 100644 --- a/image/usr/local/lib/web/backend/requirements.txt +++ b/image/usr/local/lib/web/backend/requirements.txt @@ -15,6 +15,6 @@ meld3==1.0.2 requests==2.20.1 six==1.11.0 supervisor==3.2.0 -urllib3==1.22 +urllib3==1.23 websocket-client==0.47.0 Werkzeug==0.14.1 From 43238d93a8fed412efed44729bb8970d244f6040 Mon Sep 17 00:00:00 2001 From: Doro Wu Date: Mon, 17 Dec 2018 02:48:25 +0800 Subject: [PATCH 2/3] fix: vnc crash (issue #88) upgrade x11vnc >= 0.9.13-6 --- Dockerfile.amd64 | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/Dockerfile.amd64 b/Dockerfile.amd64 index 0b410d9..3d0c36c 100644 --- a/Dockerfile.amd64 +++ b/Dockerfile.amd64 @@ -8,11 +8,11 @@ ARG localbuild RUN echo "LOCALBUILD=$localbuild" RUN if [ "x$localbuild" != "x" ]; then sed -i 's#http://archive.ubuntu.com/#http://tw.archive.ubuntu.com/#' /etc/apt/sources.list; fi -# && add-apt-repository ppa:fcwu-tw/apps x11vnc # built-in packages RUN apt-get update \ && apt-get install -y --no-install-recommends software-properties-common curl apache2-utils \ && apt-get update \ + && add-apt-repository -y ppa:fcwu-tw/apps \ && apt-get install -y --no-install-recommends --allow-unauthenticated \ supervisor nginx sudo vim-tiny net-tools zenity xz-utils \ dbus-x11 x11-utils alsa-utils \ From 6d8a4b2569a10004eca38b3b40e01581c6decc62 Mon Sep 17 00:00:00 2001 From: Doro Wu Date: Tue, 18 Dec 2018 17:35:41 +0800 Subject: [PATCH 3/3] fix: novnc disconnected if idle 1 min --- image/etc/nginx/sites-enabled/default | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/image/etc/nginx/sites-enabled/default b/image/etc/nginx/sites-enabled/default index 34d525d..07a8170 100644 --- a/image/etc/nginx/sites-enabled/default +++ b/image/etc/nginx/sites-enabled/default @@ -21,6 +21,10 @@ server { proxy_http_version 1.1; proxy_set_header Upgrade $http_upgrade; proxy_set_header Connection "upgrade"; + proxy_buffering off; + proxy_connect_timeout 7d; + proxy_send_timeout 7d; + proxy_read_timeout 7d; proxy_pass http://127.0.0.1:6081; }