From 9588d0f560d0985a68f016ee74e5c53e99b2ee3a Mon Sep 17 00:00:00 2001 From: Nik <192305627+ntoulemonde@users.noreply.github.com> Date: Wed, 17 Jun 2026 17:22:53 +0200 Subject: [PATCH 01/36] update checkout version --- .github/workflows/preview.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/preview.yaml b/.github/workflows/preview.yaml index 3f8cfd7a..8eeaffcf 100644 --- a/.github/workflows/preview.yaml +++ b/.github/workflows/preview.yaml @@ -12,7 +12,7 @@ jobs: pull-requests: write steps: - name: Check out repository - uses: actions/checkout@v4 + uses: actions/checkout@v6 - name: Install R uses: r-lib/actions/setup-r@v2 From 020c9e85e5f85f61e091853c3f4fcce762771edc Mon Sep 17 00:00:00 2001 From: Nik <192305627+ntoulemonde@users.noreply.github.com> Date: Wed, 17 Jun 2026 17:38:29 +0200 Subject: [PATCH 02/36] no CNAME --- .github/workflows/preview.yaml | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/.github/workflows/preview.yaml b/.github/workflows/preview.yaml index 8eeaffcf..27d8cc78 100644 --- a/.github/workflows/preview.yaml +++ b/.github/workflows/preview.yaml @@ -27,6 +27,10 @@ jobs: source ~/.bashrc rv sync + - name: Don't publish CNAME for preview + run: | + rm CNAME + - name: Set up Quarto environment uses: quarto-dev/quarto-actions/setup@v2 From dfa1e7062c6dbbc944a9e70e3b776c81f9a475c8 Mon Sep 17 00:00:00 2001 From: Nik <192305627+ntoulemonde@users.noreply.github.com> Date: Wed, 17 Jun 2026 17:56:22 +0200 Subject: [PATCH 03/36] with docker --- .github/workflows/preview.yaml | 12 ++++++++---- 1 file changed, 8 insertions(+), 4 deletions(-) diff --git a/.github/workflows/preview.yaml b/.github/workflows/preview.yaml index 27d8cc78..0c2e2bab 100644 --- a/.github/workflows/preview.yaml +++ b/.github/workflows/preview.yaml @@ -10,14 +10,18 @@ jobs: permissions: contents: read pull-requests: write + container: + image: inseefrlab/onyxia-r-minimal:4.6.0 + volumes: + - /tmp/data:/data steps: - name: Check out repository uses: actions/checkout@v6 - - name: Install R - uses: r-lib/actions/setup-r@v2 - with: - r-version: '4.6' + # - name: Install R + # uses: r-lib/actions/setup-r@v2 + # with: + # r-version: '4.6' - name: Install dependencies run: | From 78e275e41a324e16b90d44d2c661f4eaa8c5b165 Mon Sep 17 00:00:00 2001 From: Nik <192305627+ntoulemonde@users.noreply.github.com> Date: Wed, 17 Jun 2026 17:57:26 +0200 Subject: [PATCH 04/36] typo tag container --- .github/workflows/preview.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/preview.yaml b/.github/workflows/preview.yaml index 0c2e2bab..b5e0f665 100644 --- a/.github/workflows/preview.yaml +++ b/.github/workflows/preview.yaml @@ -11,7 +11,7 @@ jobs: contents: read pull-requests: write container: - image: inseefrlab/onyxia-r-minimal:4.6.0 + image: inseefrlab/onyxia-r-minimal:r4.6.0 volumes: - /tmp/data:/data steps: From 5cf395d0ada35313c1af786eaa239292208dc6c6 Mon Sep 17 00:00:00 2001 From: Nik <192305627+ntoulemonde@users.noreply.github.com> Date: Wed, 17 Jun 2026 18:03:40 +0200 Subject: [PATCH 05/36] with admin for container --- .github/workflows/preview.yaml | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) diff --git a/.github/workflows/preview.yaml b/.github/workflows/preview.yaml index b5e0f665..4c0a6885 100644 --- a/.github/workflows/preview.yaml +++ b/.github/workflows/preview.yaml @@ -12,8 +12,7 @@ jobs: pull-requests: write container: image: inseefrlab/onyxia-r-minimal:r4.6.0 - volumes: - - /tmp/data:/data + options: --user root # Force root user steps: - name: Check out repository uses: actions/checkout@v6 From eff90059ca8253922e795e4dadd85e64b4a2dc1c Mon Sep 17 00:00:00 2001 From: Nik <192305627+ntoulemonde@users.noreply.github.com> Date: Wed, 17 Jun 2026 20:18:27 +0200 Subject: [PATCH 06/36] no source --- .github/workflows/preview.yaml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/preview.yaml b/.github/workflows/preview.yaml index 4c0a6885..cf49aafe 100644 --- a/.github/workflows/preview.yaml +++ b/.github/workflows/preview.yaml @@ -26,8 +26,8 @@ jobs: run: | sudo ./docker/dependencies.sh curl -sSL https://raw.githubusercontent.com/A2-ai/rv/refs/heads/main/scripts/install.sh | bash - export PATH="~/.local/bin:$PATH" - source ~/.bashrc + export PATH="$HOME/.local/bin:$PATH" # Use $HOME instead of ~ for reliability + . ~/.bashrc rv sync - name: Don't publish CNAME for preview From 310889488b4b7c15cce8ab4afc697b34e6638d62 Mon Sep 17 00:00:00 2001 From: Nik <192305627+ntoulemonde@users.noreply.github.com> Date: Wed, 17 Jun 2026 21:02:14 +0200 Subject: [PATCH 07/36] fix permissions bot --- .github/workflows/preview.yaml | 7 +------ 1 file changed, 1 insertion(+), 6 deletions(-) diff --git a/.github/workflows/preview.yaml b/.github/workflows/preview.yaml index cf49aafe..17edeeba 100644 --- a/.github/workflows/preview.yaml +++ b/.github/workflows/preview.yaml @@ -8,7 +8,7 @@ jobs: build-preview: runs-on: ubuntu-latest permissions: - contents: read + contents: write pull-requests: write container: image: inseefrlab/onyxia-r-minimal:r4.6.0 @@ -17,11 +17,6 @@ jobs: - name: Check out repository uses: actions/checkout@v6 - # - name: Install R - # uses: r-lib/actions/setup-r@v2 - # with: - # r-version: '4.6' - - name: Install dependencies run: | sudo ./docker/dependencies.sh From 2a207d3db6584fd6351f6cf56dbeda0f31b09355 Mon Sep 17 00:00:00 2001 From: Nik <192305627+ntoulemonde@users.noreply.github.com> Date: Wed, 17 Jun 2026 22:04:53 +0200 Subject: [PATCH 08/36] with concurrency --- .github/workflows/preview.yaml | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/.github/workflows/preview.yaml b/.github/workflows/preview.yaml index 17edeeba..30eb7539 100644 --- a/.github/workflows/preview.yaml +++ b/.github/workflows/preview.yaml @@ -4,12 +4,14 @@ on: name: Quarto Preview +concurrency: + group: ${{ github.workflow }}-${{ github.ref }} + jobs: build-preview: runs-on: ubuntu-latest permissions: contents: write - pull-requests: write container: image: inseefrlab/onyxia-r-minimal:r4.6.0 options: --user root # Force root user From c52adad974608ae59102dfcfb64ca46e8e338f23 Mon Sep 17 00:00:00 2001 From: Nik <192305627+ntoulemonde@users.noreply.github.com> Date: Wed, 17 Jun 2026 22:08:07 +0200 Subject: [PATCH 09/36] update render site --- .github/workflows/preview.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/preview.yaml b/.github/workflows/preview.yaml index 30eb7539..ca6cc22b 100644 --- a/.github/workflows/preview.yaml +++ b/.github/workflows/preview.yaml @@ -41,7 +41,7 @@ jobs: uses: peaceiris/actions-gh-pages@v3 with: github_token: ${{ secrets.GITHUB_TOKEN }} - publish_dir: ./_site + publish_dir: ./_public destination_dir: previews/pr-${{ github.event.pull_request.number }} keep_files: true From d091de6ded25b087d4611b939ef215f4d21e9b6a Mon Sep 17 00:00:00 2001 From: Nik <192305627+ntoulemonde@users.noreply.github.com> Date: Wed, 17 Jun 2026 22:16:11 +0200 Subject: [PATCH 10/36] update concurrency --- .github/workflows/preview.yaml | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/.github/workflows/preview.yaml b/.github/workflows/preview.yaml index ca6cc22b..c6f7ca32 100644 --- a/.github/workflows/preview.yaml +++ b/.github/workflows/preview.yaml @@ -5,7 +5,8 @@ on: name: Quarto Preview concurrency: - group: ${{ github.workflow }}-${{ github.ref }} + group: ${{ github.workflow }}-pr-${{ github.event.pull_request.number }} # Unique Quarto Preview per PR + cancel-in-progress: true jobs: build-preview: From d4453bf1ce067c803120eaa4256770b9de2c8673 Mon Sep 17 00:00:00 2001 From: Nik <192305627+ntoulemonde@users.noreply.github.com> Date: Wed, 17 Jun 2026 22:23:03 +0200 Subject: [PATCH 11/36] update permissions to write comment --- .github/workflows/preview.yaml | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/.github/workflows/preview.yaml b/.github/workflows/preview.yaml index c6f7ca32..355fbaa6 100644 --- a/.github/workflows/preview.yaml +++ b/.github/workflows/preview.yaml @@ -12,7 +12,8 @@ jobs: build-preview: runs-on: ubuntu-latest permissions: - contents: write + contents: write # For pushing to gh-pages branch + pull-requests: write # For permissions to write comments on PRs container: image: inseefrlab/onyxia-r-minimal:r4.6.0 options: --user root # Force root user From 952860a680b10c0b6f58c9e418ab0d5d112d7bda Mon Sep 17 00:00:00 2001 From: Nik <192305627+ntoulemonde@users.noreply.github.com> Date: Wed, 17 Jun 2026 22:25:59 +0200 Subject: [PATCH 12/36] with delete preview when closed --- .github/workflows/preview.yaml | 28 ++++++++++++++++++++++++++++ 1 file changed, 28 insertions(+) diff --git a/.github/workflows/preview.yaml b/.github/workflows/preview.yaml index 355fbaa6..47dae5fe 100644 --- a/.github/workflows/preview.yaml +++ b/.github/workflows/preview.yaml @@ -10,6 +10,7 @@ concurrency: jobs: build-preview: + if: github.event.action != 'closed' # If closing the PR, no publishing runs-on: ubuntu-latest permissions: contents: write # For pushing to gh-pages branch @@ -59,3 +60,30 @@ jobs: repo: context.repo.repo, body: `🔍 Preview deployed! View it here: [PR #${pr_number} Preview](${preview_url})` }); + +# For this workflow only + delete-preview: + if: github.event.action == 'closed' # Only run when PR is closed + runs-on: ubuntu-latest + steps: + - name: Check out repository + uses: actions/checkout@v6 + with: + fetch-depth: 0 # To enable full access to Git repo + ref: ${{ github.event.pull_request.head.ref }} # Reference of the commit to checkout to. To ensure it's the one of the PR + repository: ${{github.event.pull_request.head.repo.full_name}} # Reference to the branch to checkout to. Useful with PR from forks + + - name: Remove preview + id: remove-preview + uses: rossjrw/pr-preview-action@v1.8.1 + with: + action: remove + token: ${{ secrets.DEPLOY_GH_PAGES_TOKEN }} # Uses a token to allow preview from forks + + - name: Comment PR that preview was removed + uses: marocchino/sticky-pull-request-comment@v3 + with: + header: pr-preview + message: | + Preview removed because the pull request was closed. + ${{ steps.remove-preview.outputs.action-start-time }} \ No newline at end of file From 5805076b01176b5174f9c08a369f230aba7cf121 Mon Sep 17 00:00:00 2001 From: Nik <192305627+ntoulemonde@users.noreply.github.com> Date: Wed, 17 Jun 2026 22:49:08 +0200 Subject: [PATCH 13/36] triggered when PR is closed --- .github/workflows/preview.yaml | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/.github/workflows/preview.yaml b/.github/workflows/preview.yaml index 47dae5fe..517d7a69 100644 --- a/.github/workflows/preview.yaml +++ b/.github/workflows/preview.yaml @@ -1,5 +1,10 @@ on: pull_request: + types: + - opened + - reopened + - synchronize # When the ref of the branch is updated (= commit to the branch to merge) + - closed # Including closed to remove preview when PR is closed. branches: main name: Quarto Preview From c69ee03cca77545a60958ae508a9cee6ff93014b Mon Sep 17 00:00:00 2001 From: Nik <192305627+ntoulemonde@users.noreply.github.com> Date: Wed, 17 Jun 2026 22:51:51 +0200 Subject: [PATCH 14/36] update comment to sticky comment - to avoid multiple comment --- .github/workflows/preview.yaml | 18 +++++++----------- 1 file changed, 7 insertions(+), 11 deletions(-) diff --git a/.github/workflows/preview.yaml b/.github/workflows/preview.yaml index 517d7a69..5c7aa9f3 100644 --- a/.github/workflows/preview.yaml +++ b/.github/workflows/preview.yaml @@ -53,18 +53,14 @@ jobs: destination_dir: previews/pr-${{ github.event.pull_request.number }} keep_files: true - - name: Comment PR with preview link - uses: actions/github-script@v7 + - name: Comment PR (custom) + uses: marocchino/sticky-pull-request-comment@v3 with: - script: | - const pr_number = context.issue.number; - const preview_url = `https://${{ github.repository_owner }}.github.io/utilitR/previews/pr-${pr_number}/`; - github.rest.issues.createComment({ - issue_number: context.issue.number, - owner: context.repo.owner, - repo: context.repo.repo, - body: `🔍 Preview deployed! View it here: [PR #${pr_number} Preview](${preview_url})` - }); + header: pr-preview + message: | + :rocket: View preview at
${{ steps.deploy-preview.outputs.preview-url }}
+
Built to branch gh-pages at ${{ steps.deploy-preview.outputs.action-start-time }}.
Preview will be ready when the GitHub Pages deployment is complete.
+ # For this workflow only delete-preview: From 31f64deefc4711abbb6e41e56b7aa2f72c3eeeb2 Mon Sep 17 00:00:00 2001 From: Nik <192305627+ntoulemonde@users.noreply.github.com> Date: Wed, 17 Jun 2026 22:55:33 +0200 Subject: [PATCH 15/36] no mc and lib dependancies --- .github/workflows/preview.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/preview.yaml b/.github/workflows/preview.yaml index 5c7aa9f3..d23ea808 100644 --- a/.github/workflows/preview.yaml +++ b/.github/workflows/preview.yaml @@ -29,7 +29,7 @@ jobs: - name: Install dependencies run: | - sudo ./docker/dependencies.sh + # sudo ./docker/dependencies.sh curl -sSL https://raw.githubusercontent.com/A2-ai/rv/refs/heads/main/scripts/install.sh | bash export PATH="$HOME/.local/bin:$PATH" # Use $HOME instead of ~ for reliability . ~/.bashrc From 91dc9c5886e9568e6b23f61fe380e96923a66120 Mon Sep 17 00:00:00 2001 From: Nik <192305627+ntoulemonde@users.noreply.github.com> Date: Thu, 18 Jun 2026 09:54:00 +0200 Subject: [PATCH 16/36] update token permissions and rm checkout --- .github/workflows/preview.yaml | 23 ++++++++++++----------- 1 file changed, 12 insertions(+), 11 deletions(-) diff --git a/.github/workflows/preview.yaml b/.github/workflows/preview.yaml index d23ea808..ac589db4 100644 --- a/.github/workflows/preview.yaml +++ b/.github/workflows/preview.yaml @@ -32,7 +32,7 @@ jobs: # sudo ./docker/dependencies.sh curl -sSL https://raw.githubusercontent.com/A2-ai/rv/refs/heads/main/scripts/install.sh | bash export PATH="$HOME/.local/bin:$PATH" # Use $HOME instead of ~ for reliability - . ~/.bashrc + . ~/.bashrc # no source command for this container, so use . instead rv sync - name: Don't publish CNAME for preview @@ -64,22 +64,23 @@ jobs: # For this workflow only delete-preview: - if: github.event.action == 'closed' # Only run when PR is closed + if: github.event.action == 'closed' runs-on: ubuntu-latest + permissions: + contents: write # Required for gh-pages pushes steps: - - name: Check out repository - uses: actions/checkout@v6 - with: - fetch-depth: 0 # To enable full access to Git repo - ref: ${{ github.event.pull_request.head.ref }} # Reference of the commit to checkout to. To ensure it's the one of the PR - repository: ${{github.event.pull_request.head.repo.full_name}} # Reference to the branch to checkout to. Useful with PR from forks - - name: Remove preview - id: remove-preview uses: rossjrw/pr-preview-action@v1.8.1 with: action: remove - token: ${{ secrets.DEPLOY_GH_PAGES_TOKEN }} # Uses a token to allow preview from forks + token: ${{ secrets.GITHUB_TOKEN }} + deploy-repository: ${{ github.repository }} + preview-branch: gh-pages + umbrella-dir: previews # Match your deploy dir (e.g., "previews/pr-1") + env: + DEPLOY_REPO: ${{ github.repository }} + DEPLOY_BRANCH: gh-pages + DEPLOY_TOKEN: ${{ secrets.GITHUB_TOKEN }} - name: Comment PR that preview was removed uses: marocchino/sticky-pull-request-comment@v3 From 71d587a191ab04d90c1e604eccc8315158e00935 Mon Sep 17 00:00:00 2001 From: Nik <192305627+ntoulemonde@users.noreply.github.com> Date: Thu, 18 Jun 2026 09:57:57 +0200 Subject: [PATCH 17/36] fix --- .github/workflows/preview.yaml | 19 ++++++++++--------- 1 file changed, 10 insertions(+), 9 deletions(-) diff --git a/.github/workflows/preview.yaml b/.github/workflows/preview.yaml index ac589db4..c87642a6 100644 --- a/.github/workflows/preview.yaml +++ b/.github/workflows/preview.yaml @@ -64,23 +64,24 @@ jobs: # For this workflow only delete-preview: - if: github.event.action == 'closed' + if: github.event.action == 'closed' # Only run when PR is closed runs-on: ubuntu-latest permissions: contents: write # Required for gh-pages pushes steps: + - name: Check out repository + uses: actions/checkout@v6 + with: + fetch-depth: 0 # To enable full access to Git repo + ref: ${{ github.event.pull_request.head.ref }} # Reference of the commit to checkout to. To ensure it's the one of the PR + repository: ${{github.event.pull_request.head.repo.full_name}} # Reference to the branch to checkout to. Useful with PR from forks + - name: Remove preview + id: remove-preview uses: rossjrw/pr-preview-action@v1.8.1 with: action: remove - token: ${{ secrets.GITHUB_TOKEN }} - deploy-repository: ${{ github.repository }} - preview-branch: gh-pages - umbrella-dir: previews # Match your deploy dir (e.g., "previews/pr-1") - env: - DEPLOY_REPO: ${{ github.repository }} - DEPLOY_BRANCH: gh-pages - DEPLOY_TOKEN: ${{ secrets.GITHUB_TOKEN }} + token: ${{ secrets.GITHUB_TOKEN }} - name: Comment PR that preview was removed uses: marocchino/sticky-pull-request-comment@v3 From 4c5ba7e4e0debee8cdeb49950ee7f1a5aa75851b Mon Sep 17 00:00:00 2001 From: Nik <192305627+ntoulemonde@users.noreply.github.com> Date: Thu, 18 Jun 2026 10:01:44 +0200 Subject: [PATCH 18/36] fix sticky comment --- .github/workflows/preview.yaml | 1 + 1 file changed, 1 insertion(+) diff --git a/.github/workflows/preview.yaml b/.github/workflows/preview.yaml index c87642a6..650543bc 100644 --- a/.github/workflows/preview.yaml +++ b/.github/workflows/preview.yaml @@ -68,6 +68,7 @@ jobs: runs-on: ubuntu-latest permissions: contents: write # Required for gh-pages pushes + pull-requests: write # Required to comment PR steps: - name: Check out repository uses: actions/checkout@v6 From 68601c07d9b8d775add6644010f6769cd0db758a Mon Sep 17 00:00:00 2001 From: Nik <192305627+ntoulemonde@users.noreply.github.com> Date: Thu, 18 Jun 2026 10:16:27 +0200 Subject: [PATCH 19/36] with correct dir to delete previews --- .github/workflows/preview.yaml | 1 + 1 file changed, 1 insertion(+) diff --git a/.github/workflows/preview.yaml b/.github/workflows/preview.yaml index 650543bc..9647bb6a 100644 --- a/.github/workflows/preview.yaml +++ b/.github/workflows/preview.yaml @@ -82,6 +82,7 @@ jobs: uses: rossjrw/pr-preview-action@v1.8.1 with: action: remove + umbrella-dir: previews # <-- Match your deploy directory token: ${{ secrets.GITHUB_TOKEN }} - name: Comment PR that preview was removed From 81f62ab81adf7a4658bf989448bd21189bb767c6 Mon Sep 17 00:00:00 2001 From: Nik <192305627+ntoulemonde@users.noreply.github.com> Date: Thu, 18 Jun 2026 10:23:00 +0200 Subject: [PATCH 20/36] typos comment previews --- .github/workflows/preview.yaml | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) diff --git a/.github/workflows/preview.yaml b/.github/workflows/preview.yaml index 9647bb6a..3b2075af 100644 --- a/.github/workflows/preview.yaml +++ b/.github/workflows/preview.yaml @@ -29,7 +29,6 @@ jobs: - name: Install dependencies run: | - # sudo ./docker/dependencies.sh curl -sSL https://raw.githubusercontent.com/A2-ai/rv/refs/heads/main/scripts/install.sh | bash export PATH="$HOME/.local/bin:$PATH" # Use $HOME instead of ~ for reliability . ~/.bashrc # no source command for this container, so use . instead @@ -82,7 +81,7 @@ jobs: uses: rossjrw/pr-preview-action@v1.8.1 with: action: remove - umbrella-dir: previews # <-- Match your deploy directory + umbrella-dir: previews token: ${{ secrets.GITHUB_TOKEN }} - name: Comment PR that preview was removed From 302cf65f8f460e1b76d3050b6ed04f1b89e46a67 Mon Sep 17 00:00:00 2001 From: nicotlm <192305627+ntoulemonde@users.noreply.github.com> Date: Thu, 2 Jul 2026 13:40:00 +0000 Subject: [PATCH 21/36] rm folder #592 --- docker/dependencies.sh | 32 - docker/seccomp/chromium.json | 1535 ---------------------------------- 2 files changed, 1567 deletions(-) delete mode 100755 docker/dependencies.sh delete mode 100644 docker/seccomp/chromium.json diff --git a/docker/dependencies.sh b/docker/dependencies.sh deleted file mode 100755 index 6c70f511..00000000 --- a/docker/dependencies.sh +++ /dev/null @@ -1,32 +0,0 @@ -#!/bin/bash - -# Update package lists -apt-get update && apt-get -qq install gnupg - -# Install necessary packages without recommended dependencies -apt-get -qq install --no-install-recommends \ - libssl-dev - -apt-get -qq install --no-install-recommends \ - imagemagick \ - libmagick++-dev \ - ghostscript \ - libglpk40 \ - libgdal-dev libgeos-dev \ - libudunits2-dev - -apt-get -qq install --no-install-recommends \ - libgs-dev \ - librsvg2-dev \ - libwebp-dev \ - jq - -# Clean up apt cache -rm -rf /var/lib/apt/lists/* && rm -rf /src/*.deb - -# Upgrade packages -apt-get upgrade -y - -# Install mc (MinIO Client) -wget https://dl.min.io/client/mc/release/linux-amd64/mc -O /usr/local/bin/mc && \ - chmod +x /usr/local/bin/mc diff --git a/docker/seccomp/chromium.json b/docker/seccomp/chromium.json deleted file mode 100644 index e5b0f2d6..00000000 --- a/docker/seccomp/chromium.json +++ /dev/null @@ -1,1535 +0,0 @@ -{ - "defaultAction": "SCMP_ACT_ERRNO", - "syscalls": [ - { - "name": "accept", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "accept4", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "access", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "alarm", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "arch_prctl", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "bind", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "brk", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "capget", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "capset", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "chdir", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "chmod", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "chown", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "chown32", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "chroot", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "clock_getres", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "clock_gettime", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "clock_nanosleep", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "clone", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "close", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "connect", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "creat", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "dup", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "dup2", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "dup3", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "epoll_create", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "epoll_create1", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "epoll_ctl", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "epoll_ctl_old", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "epoll_pwait", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "epoll_wait", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "epoll_wait_old", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "eventfd", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "eventfd2", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "execve", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "execveat", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "exit", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "exit_group", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "faccessat", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "fadvise64", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "fadvise64_64", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "fallocate", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "fanotify_init", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "fanotify_mark", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "fchdir", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "fchmod", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "fchmodat", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "fchown", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "fchown32", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "fchownat", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "fcntl", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "fcntl64", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "fdatasync", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "fgetxattr", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "flistxattr", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "flock", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "fork", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "fremovexattr", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "fsetxattr", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "fstat", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "fstat64", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "fstatat64", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "fstatfs", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "fstatfs64", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "fsync", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "ftruncate", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "ftruncate64", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "futex", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "futimesat", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "getcpu", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "getcwd", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "getdents", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "getdents64", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "getegid", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "getegid32", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "geteuid", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "geteuid32", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "getgid", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "getgid32", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "getgroups", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "getgroups32", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "getitimer", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "getpeername", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "getpgid", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "getpgrp", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "getpid", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "getppid", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "getpriority", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "getrandom", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "getresgid", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "getresgid32", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "getresuid", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "getresuid32", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "getrlimit", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "get_robust_list", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "getrusage", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "getsid", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "getsockname", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "getsockopt", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "get_thread_area", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "gettid", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "gettimeofday", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "getuid", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "getuid32", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "getxattr", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "inotify_add_watch", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "inotify_init", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "inotify_init1", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "inotify_rm_watch", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "io_cancel", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "ioctl", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "io_destroy", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "io_getevents", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "ioprio_get", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "ioprio_set", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "io_setup", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "io_submit", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "kill", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "lchown", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "lchown32", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "lgetxattr", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "link", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "linkat", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "listen", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "listxattr", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "llistxattr", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "_llseek", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "lremovexattr", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "lseek", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "lsetxattr", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "lstat", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "lstat64", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "madvise", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "memfd_create", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "mincore", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "mkdir", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "mkdirat", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "mknod", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "mknodat", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "mlock", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "mlockall", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "mmap", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "mmap2", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "mprotect", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "mq_getsetattr", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "mq_notify", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "mq_open", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "mq_timedreceive", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "mq_timedsend", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "mq_unlink", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "mremap", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "msgctl", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "msgget", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "msgrcv", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "msgsnd", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "msync", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "munlock", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "munlockall", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "munmap", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "name_to_handle_at", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "nanosleep", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "newfstatat", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "_newselect", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "open", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "open_by_handle_at", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "openat", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "pause", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "pipe", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "pipe2", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "poll", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "ppoll", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "prctl", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "pread64", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "preadv", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "prlimit64", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "pselect6", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "pwrite64", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "pwritev", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "read", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "readahead", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "readlink", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "readlinkat", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "readv", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "recvfrom", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "recvmmsg", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "recvmsg", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "remap_file_pages", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "removexattr", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "rename", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "renameat", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "renameat2", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "rmdir", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "rt_sigaction", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "rt_sigpending", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "rt_sigprocmask", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "rt_sigqueueinfo", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "rt_sigreturn", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "rt_sigsuspend", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "rt_sigtimedwait", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "rt_tgsigqueueinfo", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "sched_getaffinity", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "sched_getattr", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "sched_getparam", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "sched_get_priority_max", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "sched_get_priority_min", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "sched_getscheduler", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "sched_rr_get_interval", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "sched_setaffinity", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "sched_setattr", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "sched_setparam", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "sched_setscheduler", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "sched_yield", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "seccomp", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "select", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "semctl", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "semget", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "semop", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "semtimedop", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "sendfile", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "sendfile64", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "sendmmsg", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "sendmsg", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "sendto", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "setdomainname", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "setfsgid", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "setfsgid32", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "setfsuid", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "setfsuid32", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "setgid", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "setgid32", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "setgroups", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "setgroups32", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "sethostname", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "setitimer", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "setns", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "setpgid", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "setpriority", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "setregid", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "setregid32", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "setresgid", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "setresgid32", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "setresuid", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "setresuid32", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "setreuid", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "setreuid32", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "setrlimit", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "set_robust_list", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "setsid", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "setsockopt", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "set_thread_area", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "set_tid_address", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "setuid", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "setuid32", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "setxattr", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "shmat", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "shmctl", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "shmdt", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "shmget", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "shutdown", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "sigaltstack", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "signalfd", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "signalfd4", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "socket", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "socketpair", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "splice", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "stat", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "stat64", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "statfs", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "statfs64", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "symlink", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "symlinkat", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "sync", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "sync_file_range", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "syncfs", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "sysinfo", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "syslog", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "tee", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "tgkill", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "time", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "timer_create", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "timer_delete", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "timerfd_create", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "timerfd_gettime", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "timerfd_settime", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "timer_getoverrun", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "timer_gettime", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "timer_settime", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "times", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "tkill", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "truncate", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "truncate64", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "ugetrlimit", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "umask", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "uname", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "unlink", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "unlinkat", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "unshare", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "utime", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "utimensat", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "utimes", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "vfork", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "vhangup", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "vmsplice", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "wait4", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "waitid", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "write", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "writev", - "action": "SCMP_ACT_ALLOW", - "args": null - } - ] -} From 5c80760bc4203cae4735d59bd02abb26da365d4f Mon Sep 17 00:00:00 2001 From: nicotlm <192305627+ntoulemonde@users.noreply.github.com> Date: Thu, 2 Jul 2026 13:44:22 +0000 Subject: [PATCH 22/36] rm dockerfile --- Dockerfile | 45 --------------------------------------------- 1 file changed, 45 deletions(-) delete mode 100644 Dockerfile diff --git a/Dockerfile b/Dockerfile deleted file mode 100644 index 8b82e01c..00000000 --- a/Dockerfile +++ /dev/null @@ -1,45 +0,0 @@ -FROM inseefrlab/onyxia-rstudio:r4.4.1-2024.10.14 - -# R packages -COPY ./DESCRIPTION /tmp/build_image/ -RUN Rscript -e "install.packages(c('renv','yaml'))" - -RUN apt-get update \ - && apt-get -qq install gnupg - -RUN sh -c 'echo "deb http://http.us.debian.org/debian stable main contrib non-free" >> /etc/apt/sources.list' \ - && apt-key adv --keyserver keyserver.ubuntu.com --recv-keys 648ACFD622F3D138 \ - && apt-key adv --keyserver keyserver.ubuntu.com --recv-keys 0E98404D386FA1D9 \ - && apt-key adv --keyserver keyserver.ubuntu.com --recv-keys 605C66F00D6C9793 - -RUN apt-get update \ - && echo "ttf-mscorefonts-installer msttcorefonts/accepted-mscorefonts-eula select true" | debconf-set-selections - -RUN apt-get -qq install --no-install-recommends \ - ttf-mscorefonts-installer \ - fonts-liberation \ - fonts-freefont-ttf \ - libssl-dev - -RUN apt-get -qq install --no-install-recommends \ - imagemagick \ - libmagick++-dev \ - ghostscript \ - libglpk40 - -RUN apt-get -qq install --no-install-recommends \ - libgs-dev \ - librsvg2-dev \ - libwebp-dev \ - jq - -RUN rm -rf /var/lib/apt/lists/* \ - && rm -rf /src/*.deb -RUN apt-get upgrade -y - -# Installing mc - -RUN wget https://dl.min.io/client/mc/release/linux-amd64/mc -O /usr/local/bin/mc && \ - chmod +x /usr/local/bin/mc - - From 4b7a96dadabd63d76fa19f4132956916382fcff3 Mon Sep 17 00:00:00 2001 From: nicotlm <192305627+ntoulemonde@users.noreply.github.com> Date: Thu, 2 Jul 2026 13:46:24 +0000 Subject: [PATCH 23/36] rm unused init script --- resources/init_9juin.sh | 1 - 1 file changed, 1 deletion(-) delete mode 100644 resources/init_9juin.sh diff --git a/resources/init_9juin.sh b/resources/init_9juin.sh deleted file mode 100644 index 6fc4d3c5..00000000 --- a/resources/init_9juin.sh +++ /dev/null @@ -1 +0,0 @@ -runuser -l rstudio -c "Rscript -e \"source('https://raw.githubusercontent.com/InseeFrLab/utilitR/master/resources/fichiers_plats/script_init_fichiers_plats.R')\"" From 9c3655a0111dcb714157422a00d283b844c4cca0 Mon Sep 17 00:00:00 2001 From: nicotlm <192305627+ntoulemonde@users.noreply.github.com> Date: Thu, 2 Jul 2026 13:46:32 +0000 Subject: [PATCH 24/36] rm unused fichiers plats --- .../script_init_fichiers_plats.R | 21 ------------------- 1 file changed, 21 deletions(-) delete mode 100644 resources/fichiers_plats/script_init_fichiers_plats.R diff --git a/resources/fichiers_plats/script_init_fichiers_plats.R b/resources/fichiers_plats/script_init_fichiers_plats.R deleted file mode 100644 index 31c3879d..00000000 --- a/resources/fichiers_plats/script_init_fichiers_plats.R +++ /dev/null @@ -1,21 +0,0 @@ -remotes::install_github("inseefrlab/doremifasol") -install.packages("esquisse") - -# Télécharger les données grâce à doremifasol -options(doremifasol.telDir = "~") -doremifasol::telechargerFichier("BPE_ENS") -doremifasol::telechargerFichier("DECES_COM_0918") - -fichiers_zip <- list.files(pattern = "\\.zip$", full.names = TRUE) - -# Décompresser les fichiers .zip -invisible( - lapply( - fichiers_zip, - utils::unzip, - overwrite = TRUE - ) -) - -# Supprimer les fichiers .zip -unlink(fichiers_zip) From 924a69e6a29e4c25c4ac43b825e3adc448d918cb Mon Sep 17 00:00:00 2001 From: nicotlm <192305627+ntoulemonde@users.noreply.github.com> Date: Thu, 2 Jul 2026 13:46:40 +0000 Subject: [PATCH 25/36] rm ref to docker --- doc/extra_info.md | 76 ----------------------------------------------- 1 file changed, 76 deletions(-) diff --git a/doc/extra_info.md b/doc/extra_info.md index b62d86f4..6d7db3a8 100644 --- a/doc/extra_info.md +++ b/doc/extra_info.md @@ -18,79 +18,3 @@ install.packages("remotes") remotes::install_deps(dependencies = TRUE) ``` -## :three: Utilisation d'un container - -L'environnement de travail utilisé pour la compilation de la documentation est disponible sous la forme d'une image docker : - -``` -docker.io/inseefrlab/utilitr:latest -``` - -Cette image comprend toutes les dépendances système ainsi que les packages R nécessaires à la compilation du livre. -Il comprend également RStudio : voir la procédure ci-après pour exécuter cet environnement. - -### Container temporaire - -_Cette solution vous sera utile si vous souhaitez apporter une modification ponctuelle au projet._ - -### Utilisation en ligne avec Binder - -:warning: Cette solution ne fonctionne plus à l'heure actuelle. Elle sera remise en état dès que possible - -Afin d'assurer une parfaite reproductibilité, un environnement de travail est disponible en ligne en cliquant sur ce bouton -[![Binder](https://mybinder.org/badge_logo.svg)](https://mybinder.org/v2/gl/linogaliana%2FdocumentationR/binder?urlpath=rstudio). - -Vous arrivez sur un environnement de travail RStudio avec tous les packages déjà installés. Cet environnement utilise le service [Binder](https://mybinder.org) : il peut être indisponible ponctuellement. - -### Utilisation de docker sur un poste de travail - -Si docker est installé sur votre machine, vous pouvez exécuter : - -```bash -docker run --rm -p 8787:8787 -e PASSWORD=monpassword docker.io/inseefrlab/utilitr:latest -``` - -Vous pouvez remplacer `monpassword` par le mot de passe de votre choix. - -Un serveur RStudio est alors disponible à l'url . -Pour vous connecter sur ce serveur, vous devez utiliser : - -- nom d'utilisateur : `rstudio` -- mot de passe : le mot de passe choisi ci-dessus (`monpassword`) dans l'exemple. - -Une fois connecté à RStudio, vous devez ensuite cloner le projet . -Si vous opérez des modifications, n'oubliez pas de transmettre vos modifications à l'aide de `git` grâce à un `push`. En effet, l'utilisation de l'option `--rm` détruira automatiquement votre container et son système de fichiers. - -### Container permanent - -Il vous est possible de créer un container permanent (attention, celui peut-être obsolète si de nouvelles dépendances sont ajoutées) ce qui vous permettra de ne pas perdre vos fichiers. - -Créez un container appelé `mon_container` (vous pouvez changer ce nom) en mode détaché : - -```bash -docker run --name mon_container -d -p 8787:8787 -e PASSWORD=monpassword docker.io/inseefrlab/utilitr:latest -``` - -Vous pouvez aussi attacher un volume à ce container grâce à l'option `-v` (sous linux, n'oubliez pas de rajouter l'option `-e USERID=$UID`). Par exemple, pour ajouter vos clés `ssh` : - -```bash -docker run --name mon_container -d -p 8787:8787 -v $HOME/.ssh:/home/rstudio/.ssh -e USERID=$UID -e PASSWORD=monpassword docker.io/inseefrlab/utilitr:latest -``` - -Une fois ce container créé et lancé, vous pouvez vous connecter sur le serveur RStudio disponible à l'adresse . Pour se connecter, le nom d'utilisateur est `rstudio` et le mot de passe `monpassword`. - -Dans RStudio, vous pouvez ensuite cloner le projet et travailler. N'oubliez pas de sauvegarder vos modifications. - -Une fois que vous avez fini de travailler : - -- dans RStudio, cliquez sur l'icone rouge située en haut à droite _"Quit the current R session"_. -- dans votre terminal, exécutez : - ```bash - docker stop mon_container - ``` - -Pour relancer plus tard votre serveur RStudio et retrouver vos fichiers, vous pouvez redémarrer votre container : - -```bash -docker start mon_container -``` From 2b4a44c759c0dabb2c61633516b1b68cabb4b617 Mon Sep 17 00:00:00 2001 From: nicotlm <192305627+ntoulemonde@users.noreply.github.com> Date: Thu, 2 Jul 2026 13:48:39 +0000 Subject: [PATCH 26/36] rm ref to docker --- .github/workflows/preview.yaml | 1 - .github/workflows/prod.yaml | 1 - 2 files changed, 2 deletions(-) diff --git a/.github/workflows/preview.yaml b/.github/workflows/preview.yaml index 3f8cfd7a..6692802c 100644 --- a/.github/workflows/preview.yaml +++ b/.github/workflows/preview.yaml @@ -21,7 +21,6 @@ jobs: - name: Install dependencies run: | - sudo ./docker/dependencies.sh curl -sSL https://raw.githubusercontent.com/A2-ai/rv/refs/heads/main/scripts/install.sh | bash export PATH="~/.local/bin:$PATH" source ~/.bashrc diff --git a/.github/workflows/prod.yaml b/.github/workflows/prod.yaml index 5daf535b..cb24616a 100644 --- a/.github/workflows/prod.yaml +++ b/.github/workflows/prod.yaml @@ -21,7 +21,6 @@ jobs: - name: Install dependencies run: | - sudo ./docker/dependencies.sh curl -sSL https://raw.githubusercontent.com/A2-ai/rv/refs/heads/main/scripts/install.sh | bash export PATH="~/.local/bin:$PATH" source ~/.bashrc From f923384081f50a29bcb9e6de17dfb6daa93bf2c3 Mon Sep 17 00:00:00 2001 From: nicotlm <192305627+ntoulemonde@users.noreply.github.com> Date: Thu, 2 Jul 2026 13:49:18 +0000 Subject: [PATCH 27/36] rm ref docker doc --- README.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/README.md b/README.md index 4d6c3a72..a03dc530 100644 --- a/README.md +++ b/README.md @@ -3,7 +3,7 @@ [![build-doc Actions Status](https://github.com/InseeFrLab/utilitR/workflows/Production%20de%20la%20documentation/badge.svg)](https://github.com/InseeFrLab/utilitR/actions) -[![Docker Pulls](https://img.shields.io/docker/pulls/inseefrlab/utilitr)](https://hub.docker.com/repository/docker/inseefrlab/utilitr/general) + [![SSPcloud](https://img.shields.io/badge/SSPcloud-Tester%20via%20SSP--cloud-informational?logo=R)](https://datalab.sspcloud.fr/launcher/ide/rstudio?name=rstudio%20utilitr&version=2.4.7&s3=default&init.personalInit=%C2%ABhttps%3A%2F%2Fraw.githubusercontent.com%2FInseeFrLab%2FutilitR%2Frefs%2Fheads%2Fmain%2Finit_utilitr.sh%C2%BB&kubernetes.role=%C2%ABadmin%C2%BB&git.repository=%C2%ABhttps%3A%2F%2Fgithub.com%2Finseefrlab%2Futilitr.git%C2%BB&networking.user.enabled=true&autoLaunch=false) From 738e175d7bb39a660ba83b1b9ed714a49d736bfb Mon Sep 17 00:00:00 2001 From: nicotlm <192305627+ntoulemonde@users.noreply.github.com> Date: Thu, 2 Jul 2026 13:40:00 +0000 Subject: [PATCH 28/36] rm folder #592 --- docker/dependencies.sh | 32 - docker/seccomp/chromium.json | 1535 ---------------------------------- 2 files changed, 1567 deletions(-) delete mode 100755 docker/dependencies.sh delete mode 100644 docker/seccomp/chromium.json diff --git a/docker/dependencies.sh b/docker/dependencies.sh deleted file mode 100755 index 6c70f511..00000000 --- a/docker/dependencies.sh +++ /dev/null @@ -1,32 +0,0 @@ -#!/bin/bash - -# Update package lists -apt-get update && apt-get -qq install gnupg - -# Install necessary packages without recommended dependencies -apt-get -qq install --no-install-recommends \ - libssl-dev - -apt-get -qq install --no-install-recommends \ - imagemagick \ - libmagick++-dev \ - ghostscript \ - libglpk40 \ - libgdal-dev libgeos-dev \ - libudunits2-dev - -apt-get -qq install --no-install-recommends \ - libgs-dev \ - librsvg2-dev \ - libwebp-dev \ - jq - -# Clean up apt cache -rm -rf /var/lib/apt/lists/* && rm -rf /src/*.deb - -# Upgrade packages -apt-get upgrade -y - -# Install mc (MinIO Client) -wget https://dl.min.io/client/mc/release/linux-amd64/mc -O /usr/local/bin/mc && \ - chmod +x /usr/local/bin/mc diff --git a/docker/seccomp/chromium.json b/docker/seccomp/chromium.json deleted file mode 100644 index e5b0f2d6..00000000 --- a/docker/seccomp/chromium.json +++ /dev/null @@ -1,1535 +0,0 @@ -{ - "defaultAction": "SCMP_ACT_ERRNO", - "syscalls": [ - { - "name": "accept", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "accept4", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "access", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "alarm", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "arch_prctl", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "bind", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "brk", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "capget", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "capset", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "chdir", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "chmod", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "chown", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "chown32", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "chroot", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "clock_getres", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "clock_gettime", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "clock_nanosleep", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "clone", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "close", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "connect", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "creat", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "dup", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "dup2", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "dup3", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "epoll_create", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "epoll_create1", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "epoll_ctl", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "epoll_ctl_old", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "epoll_pwait", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "epoll_wait", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "epoll_wait_old", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "eventfd", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "eventfd2", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "execve", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "execveat", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "exit", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "exit_group", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "faccessat", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "fadvise64", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "fadvise64_64", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "fallocate", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "fanotify_init", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "fanotify_mark", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "fchdir", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "fchmod", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "fchmodat", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "fchown", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "fchown32", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "fchownat", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "fcntl", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "fcntl64", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "fdatasync", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "fgetxattr", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "flistxattr", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "flock", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "fork", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "fremovexattr", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "fsetxattr", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "fstat", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "fstat64", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "fstatat64", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "fstatfs", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "fstatfs64", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "fsync", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "ftruncate", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "ftruncate64", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "futex", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "futimesat", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "getcpu", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "getcwd", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "getdents", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "getdents64", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "getegid", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "getegid32", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "geteuid", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "geteuid32", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "getgid", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "getgid32", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "getgroups", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "getgroups32", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "getitimer", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "getpeername", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "getpgid", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "getpgrp", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "getpid", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "getppid", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "getpriority", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "getrandom", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "getresgid", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "getresgid32", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "getresuid", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "getresuid32", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "getrlimit", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "get_robust_list", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "getrusage", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "getsid", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "getsockname", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "getsockopt", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "get_thread_area", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "gettid", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "gettimeofday", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "getuid", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "getuid32", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "getxattr", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "inotify_add_watch", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "inotify_init", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "inotify_init1", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "inotify_rm_watch", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "io_cancel", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "ioctl", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "io_destroy", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "io_getevents", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "ioprio_get", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "ioprio_set", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "io_setup", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "io_submit", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "kill", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "lchown", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "lchown32", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "lgetxattr", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "link", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "linkat", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "listen", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "listxattr", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "llistxattr", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "_llseek", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "lremovexattr", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "lseek", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "lsetxattr", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "lstat", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "lstat64", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "madvise", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "memfd_create", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "mincore", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "mkdir", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "mkdirat", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "mknod", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "mknodat", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "mlock", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "mlockall", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "mmap", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "mmap2", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "mprotect", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "mq_getsetattr", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "mq_notify", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "mq_open", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "mq_timedreceive", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "mq_timedsend", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "mq_unlink", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "mremap", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "msgctl", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "msgget", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "msgrcv", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "msgsnd", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "msync", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "munlock", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "munlockall", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "munmap", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "name_to_handle_at", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "nanosleep", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "newfstatat", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "_newselect", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "open", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "open_by_handle_at", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "openat", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "pause", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "pipe", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "pipe2", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "poll", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "ppoll", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "prctl", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "pread64", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "preadv", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "prlimit64", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "pselect6", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "pwrite64", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "pwritev", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "read", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "readahead", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "readlink", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "readlinkat", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "readv", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "recvfrom", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "recvmmsg", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "recvmsg", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "remap_file_pages", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "removexattr", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "rename", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "renameat", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "renameat2", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "rmdir", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "rt_sigaction", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "rt_sigpending", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "rt_sigprocmask", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "rt_sigqueueinfo", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "rt_sigreturn", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "rt_sigsuspend", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "rt_sigtimedwait", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "rt_tgsigqueueinfo", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "sched_getaffinity", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "sched_getattr", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "sched_getparam", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "sched_get_priority_max", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "sched_get_priority_min", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "sched_getscheduler", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "sched_rr_get_interval", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "sched_setaffinity", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "sched_setattr", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "sched_setparam", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "sched_setscheduler", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "sched_yield", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "seccomp", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "select", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "semctl", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "semget", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "semop", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "semtimedop", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "sendfile", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "sendfile64", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "sendmmsg", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "sendmsg", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "sendto", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "setdomainname", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "setfsgid", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "setfsgid32", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "setfsuid", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "setfsuid32", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "setgid", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "setgid32", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "setgroups", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "setgroups32", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "sethostname", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "setitimer", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "setns", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "setpgid", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "setpriority", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "setregid", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "setregid32", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "setresgid", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "setresgid32", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "setresuid", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "setresuid32", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "setreuid", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "setreuid32", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "setrlimit", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "set_robust_list", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "setsid", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "setsockopt", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "set_thread_area", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "set_tid_address", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "setuid", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "setuid32", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "setxattr", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "shmat", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "shmctl", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "shmdt", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "shmget", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "shutdown", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "sigaltstack", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "signalfd", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "signalfd4", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "socket", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "socketpair", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "splice", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "stat", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "stat64", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "statfs", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "statfs64", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "symlink", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "symlinkat", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "sync", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "sync_file_range", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "syncfs", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "sysinfo", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "syslog", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "tee", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "tgkill", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "time", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "timer_create", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "timer_delete", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "timerfd_create", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "timerfd_gettime", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "timerfd_settime", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "timer_getoverrun", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "timer_gettime", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "timer_settime", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "times", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "tkill", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "truncate", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "truncate64", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "ugetrlimit", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "umask", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "uname", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "unlink", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "unlinkat", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "unshare", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "utime", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "utimensat", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "utimes", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "vfork", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "vhangup", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "vmsplice", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "wait4", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "waitid", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "write", - "action": "SCMP_ACT_ALLOW", - "args": null - }, - { - "name": "writev", - "action": "SCMP_ACT_ALLOW", - "args": null - } - ] -} From c4e13f1e095883865c34d6d422c28ca7e94d71cd Mon Sep 17 00:00:00 2001 From: nicotlm <192305627+ntoulemonde@users.noreply.github.com> Date: Thu, 2 Jul 2026 13:44:22 +0000 Subject: [PATCH 29/36] rm dockerfile --- Dockerfile | 45 --------------------------------------------- 1 file changed, 45 deletions(-) delete mode 100644 Dockerfile diff --git a/Dockerfile b/Dockerfile deleted file mode 100644 index 8b82e01c..00000000 --- a/Dockerfile +++ /dev/null @@ -1,45 +0,0 @@ -FROM inseefrlab/onyxia-rstudio:r4.4.1-2024.10.14 - -# R packages -COPY ./DESCRIPTION /tmp/build_image/ -RUN Rscript -e "install.packages(c('renv','yaml'))" - -RUN apt-get update \ - && apt-get -qq install gnupg - -RUN sh -c 'echo "deb http://http.us.debian.org/debian stable main contrib non-free" >> /etc/apt/sources.list' \ - && apt-key adv --keyserver keyserver.ubuntu.com --recv-keys 648ACFD622F3D138 \ - && apt-key adv --keyserver keyserver.ubuntu.com --recv-keys 0E98404D386FA1D9 \ - && apt-key adv --keyserver keyserver.ubuntu.com --recv-keys 605C66F00D6C9793 - -RUN apt-get update \ - && echo "ttf-mscorefonts-installer msttcorefonts/accepted-mscorefonts-eula select true" | debconf-set-selections - -RUN apt-get -qq install --no-install-recommends \ - ttf-mscorefonts-installer \ - fonts-liberation \ - fonts-freefont-ttf \ - libssl-dev - -RUN apt-get -qq install --no-install-recommends \ - imagemagick \ - libmagick++-dev \ - ghostscript \ - libglpk40 - -RUN apt-get -qq install --no-install-recommends \ - libgs-dev \ - librsvg2-dev \ - libwebp-dev \ - jq - -RUN rm -rf /var/lib/apt/lists/* \ - && rm -rf /src/*.deb -RUN apt-get upgrade -y - -# Installing mc - -RUN wget https://dl.min.io/client/mc/release/linux-amd64/mc -O /usr/local/bin/mc && \ - chmod +x /usr/local/bin/mc - - From 57eb8ff9a4f10636425ddf677c732c4216d90a6d Mon Sep 17 00:00:00 2001 From: nicotlm <192305627+ntoulemonde@users.noreply.github.com> Date: Thu, 2 Jul 2026 13:46:24 +0000 Subject: [PATCH 30/36] rm unused init script --- resources/init_9juin.sh | 1 - 1 file changed, 1 deletion(-) delete mode 100644 resources/init_9juin.sh diff --git a/resources/init_9juin.sh b/resources/init_9juin.sh deleted file mode 100644 index 6fc4d3c5..00000000 --- a/resources/init_9juin.sh +++ /dev/null @@ -1 +0,0 @@ -runuser -l rstudio -c "Rscript -e \"source('https://raw.githubusercontent.com/InseeFrLab/utilitR/master/resources/fichiers_plats/script_init_fichiers_plats.R')\"" From 2b9addd9b19602807098762e50cb8f955c5d4b8a Mon Sep 17 00:00:00 2001 From: nicotlm <192305627+ntoulemonde@users.noreply.github.com> Date: Thu, 2 Jul 2026 13:46:32 +0000 Subject: [PATCH 31/36] rm unused fichiers plats --- .../script_init_fichiers_plats.R | 21 ------------------- 1 file changed, 21 deletions(-) delete mode 100644 resources/fichiers_plats/script_init_fichiers_plats.R diff --git a/resources/fichiers_plats/script_init_fichiers_plats.R b/resources/fichiers_plats/script_init_fichiers_plats.R deleted file mode 100644 index 31c3879d..00000000 --- a/resources/fichiers_plats/script_init_fichiers_plats.R +++ /dev/null @@ -1,21 +0,0 @@ -remotes::install_github("inseefrlab/doremifasol") -install.packages("esquisse") - -# Télécharger les données grâce à doremifasol -options(doremifasol.telDir = "~") -doremifasol::telechargerFichier("BPE_ENS") -doremifasol::telechargerFichier("DECES_COM_0918") - -fichiers_zip <- list.files(pattern = "\\.zip$", full.names = TRUE) - -# Décompresser les fichiers .zip -invisible( - lapply( - fichiers_zip, - utils::unzip, - overwrite = TRUE - ) -) - -# Supprimer les fichiers .zip -unlink(fichiers_zip) From d6f39a089ec2605b244431011fa7604ddb1c41a7 Mon Sep 17 00:00:00 2001 From: nicotlm <192305627+ntoulemonde@users.noreply.github.com> Date: Thu, 2 Jul 2026 13:46:40 +0000 Subject: [PATCH 32/36] rm ref to docker --- doc/extra_info.md | 76 ----------------------------------------------- 1 file changed, 76 deletions(-) diff --git a/doc/extra_info.md b/doc/extra_info.md index b62d86f4..6d7db3a8 100644 --- a/doc/extra_info.md +++ b/doc/extra_info.md @@ -18,79 +18,3 @@ install.packages("remotes") remotes::install_deps(dependencies = TRUE) ``` -## :three: Utilisation d'un container - -L'environnement de travail utilisé pour la compilation de la documentation est disponible sous la forme d'une image docker : - -``` -docker.io/inseefrlab/utilitr:latest -``` - -Cette image comprend toutes les dépendances système ainsi que les packages R nécessaires à la compilation du livre. -Il comprend également RStudio : voir la procédure ci-après pour exécuter cet environnement. - -### Container temporaire - -_Cette solution vous sera utile si vous souhaitez apporter une modification ponctuelle au projet._ - -### Utilisation en ligne avec Binder - -:warning: Cette solution ne fonctionne plus à l'heure actuelle. Elle sera remise en état dès que possible - -Afin d'assurer une parfaite reproductibilité, un environnement de travail est disponible en ligne en cliquant sur ce bouton -[![Binder](https://mybinder.org/badge_logo.svg)](https://mybinder.org/v2/gl/linogaliana%2FdocumentationR/binder?urlpath=rstudio). - -Vous arrivez sur un environnement de travail RStudio avec tous les packages déjà installés. Cet environnement utilise le service [Binder](https://mybinder.org) : il peut être indisponible ponctuellement. - -### Utilisation de docker sur un poste de travail - -Si docker est installé sur votre machine, vous pouvez exécuter : - -```bash -docker run --rm -p 8787:8787 -e PASSWORD=monpassword docker.io/inseefrlab/utilitr:latest -``` - -Vous pouvez remplacer `monpassword` par le mot de passe de votre choix. - -Un serveur RStudio est alors disponible à l'url . -Pour vous connecter sur ce serveur, vous devez utiliser : - -- nom d'utilisateur : `rstudio` -- mot de passe : le mot de passe choisi ci-dessus (`monpassword`) dans l'exemple. - -Une fois connecté à RStudio, vous devez ensuite cloner le projet . -Si vous opérez des modifications, n'oubliez pas de transmettre vos modifications à l'aide de `git` grâce à un `push`. En effet, l'utilisation de l'option `--rm` détruira automatiquement votre container et son système de fichiers. - -### Container permanent - -Il vous est possible de créer un container permanent (attention, celui peut-être obsolète si de nouvelles dépendances sont ajoutées) ce qui vous permettra de ne pas perdre vos fichiers. - -Créez un container appelé `mon_container` (vous pouvez changer ce nom) en mode détaché : - -```bash -docker run --name mon_container -d -p 8787:8787 -e PASSWORD=monpassword docker.io/inseefrlab/utilitr:latest -``` - -Vous pouvez aussi attacher un volume à ce container grâce à l'option `-v` (sous linux, n'oubliez pas de rajouter l'option `-e USERID=$UID`). Par exemple, pour ajouter vos clés `ssh` : - -```bash -docker run --name mon_container -d -p 8787:8787 -v $HOME/.ssh:/home/rstudio/.ssh -e USERID=$UID -e PASSWORD=monpassword docker.io/inseefrlab/utilitr:latest -``` - -Une fois ce container créé et lancé, vous pouvez vous connecter sur le serveur RStudio disponible à l'adresse . Pour se connecter, le nom d'utilisateur est `rstudio` et le mot de passe `monpassword`. - -Dans RStudio, vous pouvez ensuite cloner le projet et travailler. N'oubliez pas de sauvegarder vos modifications. - -Une fois que vous avez fini de travailler : - -- dans RStudio, cliquez sur l'icone rouge située en haut à droite _"Quit the current R session"_. -- dans votre terminal, exécutez : - ```bash - docker stop mon_container - ``` - -Pour relancer plus tard votre serveur RStudio et retrouver vos fichiers, vous pouvez redémarrer votre container : - -```bash -docker start mon_container -``` From 7bc56309375273b1d33d9022c9cdc79e70a98999 Mon Sep 17 00:00:00 2001 From: nicotlm <192305627+ntoulemonde@users.noreply.github.com> Date: Thu, 2 Jul 2026 13:48:39 +0000 Subject: [PATCH 33/36] rm ref to docker --- .github/workflows/prod.yaml | 1 - 1 file changed, 1 deletion(-) diff --git a/.github/workflows/prod.yaml b/.github/workflows/prod.yaml index 5daf535b..cb24616a 100644 --- a/.github/workflows/prod.yaml +++ b/.github/workflows/prod.yaml @@ -21,7 +21,6 @@ jobs: - name: Install dependencies run: | - sudo ./docker/dependencies.sh curl -sSL https://raw.githubusercontent.com/A2-ai/rv/refs/heads/main/scripts/install.sh | bash export PATH="~/.local/bin:$PATH" source ~/.bashrc From 478366f986cf92aed8fe6821974d7d2229753f23 Mon Sep 17 00:00:00 2001 From: nicotlm <192305627+ntoulemonde@users.noreply.github.com> Date: Thu, 2 Jul 2026 13:49:18 +0000 Subject: [PATCH 34/36] rm ref docker doc --- README.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/README.md b/README.md index 4d6c3a72..a03dc530 100644 --- a/README.md +++ b/README.md @@ -3,7 +3,7 @@ [![build-doc Actions Status](https://github.com/InseeFrLab/utilitR/workflows/Production%20de%20la%20documentation/badge.svg)](https://github.com/InseeFrLab/utilitR/actions) -[![Docker Pulls](https://img.shields.io/docker/pulls/inseefrlab/utilitr)](https://hub.docker.com/repository/docker/inseefrlab/utilitr/general) + [![SSPcloud](https://img.shields.io/badge/SSPcloud-Tester%20via%20SSP--cloud-informational?logo=R)](https://datalab.sspcloud.fr/launcher/ide/rstudio?name=rstudio%20utilitr&version=2.4.7&s3=default&init.personalInit=%C2%ABhttps%3A%2F%2Fraw.githubusercontent.com%2FInseeFrLab%2FutilitR%2Frefs%2Fheads%2Fmain%2Finit_utilitr.sh%C2%BB&kubernetes.role=%C2%ABadmin%C2%BB&git.repository=%C2%ABhttps%3A%2F%2Fgithub.com%2Finseefrlab%2Futilitr.git%C2%BB&networking.user.enabled=true&autoLaunch=false) From a96272bd0805d76e2d7b9156b4586445671994bf Mon Sep 17 00:00:00 2001 From: nicotlm <192305627+ntoulemonde@users.noreply.github.com> Date: Thu, 2 Jul 2026 14:13:08 +0000 Subject: [PATCH 35/36] update image to speed up --- .github/workflows/preview.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/preview.yaml b/.github/workflows/preview.yaml index 3b2075af..eb6b1ba6 100644 --- a/.github/workflows/preview.yaml +++ b/.github/workflows/preview.yaml @@ -21,7 +21,7 @@ jobs: contents: write # For pushing to gh-pages branch pull-requests: write # For permissions to write comments on PRs container: - image: inseefrlab/onyxia-r-minimal:r4.6.0 + image: inseefrlab/onyxia-r-datascience:r4.6.0 options: --user root # Force root user steps: - name: Check out repository From 29477d6fbf8712da17a2865b95aa5dd78751af8d Mon Sep 17 00:00:00 2001 From: nicotlm <192305627+ntoulemonde@users.noreply.github.com> Date: Thu, 2 Jul 2026 14:35:53 +0000 Subject: [PATCH 36/36] update version duckdb 1.5.4 --- rproject.toml | 1 + rv.lock | 2 +- 2 files changed, 2 insertions(+), 1 deletion(-) diff --git a/rproject.toml b/rproject.toml index c62bdf63..13fc563f 100644 --- a/rproject.toml +++ b/rproject.toml @@ -48,4 +48,5 @@ dependencies = [ { name = "OECD", git = "https://github.com/expersso/OECD", branch = "master" }, "visNetwork", "tarchetypes", + "knitr", ] diff --git a/rv.lock b/rv.lock index 039ffb5e..c6b77b08 100644 --- a/rv.lock +++ b/rv.lock @@ -615,7 +615,7 @@ dependencies = [ [[packages]] name = "duckdb" -version = "1.5.2" +version = "1.5.4.2" source = { repository = "https://packagemanager.posit.co/cran/latest" } force_source = false dependencies = [