jcoffey-dev
fdf6d9df5d
An administrator moves a domain in from inbuxa Admin. The server keeps the guide's answers as an inbuxa:Migration and runs the bundled inbuxa-migrate on them as a child process: preview, move, final pass, stop, the new passwords once, close. Spec: docs/spec/features/migrations.md. - sysMigrationRun, for administrators only; a tenant is refused. - The child writes as the administrator who started the migration, with a run token held in memory, taken from loopback only and never cached, and audited as via: migration. - The source's secret is held in memory and passed in the child's environment, which holds only it, the token and PATH. - The image carries inbuxa-migrate 27.1-rc.8, pinned by checksum. - Tests: system::migration with a stand-in engine, and on demand the real engine against a Dovecot (tests/resources/migrations/dovecot-source).
19 lines
719 B
Docker
19 lines
719 B
Docker
# SPDX-FileCopyrightText: 2026 Coffey Labs LLC
|
|
# SPDX-License-Identifier: AGPL-3.0-only
|
|
#
|
|
# The IMAP source for migration_real_engine_tests: two accounts and a
|
|
# master login. `python3 seed.py PORT` puts their mail in.
|
|
|
|
FROM debian:bookworm-20260518-slim
|
|
RUN apt-get update && \
|
|
DEBIAN_FRONTEND=noninteractive apt-get install -y --no-install-recommends dovecot-imapd && \
|
|
rm -rf /var/lib/apt/lists/* && \
|
|
addgroup --gid 5000 vmail && \
|
|
adduser --system --no-create-home --uid 5000 --gid 5000 vmail && \
|
|
mkdir -p /var/vmail && chown -R vmail:vmail /var/vmail
|
|
COPY dovecot.conf /etc/dovecot/dovecot.conf
|
|
COPY users /etc/dovecot/users
|
|
COPY masters /etc/dovecot/masters
|
|
EXPOSE 143
|
|
CMD ["dovecot", "-F"]
|