[php2shell] nextcloud 25 (docker部署) php8.1 的一次补丁

FROM nextcloud:25.0.4-apache



# Debian 11 已 EOL，使用 Debian 官方归档仓库

RUN set -eux; \

    printf '%s\n' \

      'deb http://archive.debian.org/debian bullseye main' \

      'deb http://archive.debian.org/debian-security bullseye-security main' \

      > /etc/apt/sources.list; \

    rm -f /etc/apt/sources.list.d/*.list; \

    rm -rf /var/lib/apt/lists/*; \

    apt-get -o Acquire::Check-Valid-Until=false update; \

    apt-get install -y --no-install-recommends sudo; \

    rm -rf /var/lib/apt/lists/*



# 开启http2

RUN a2enmod http2



# 安全补丁来源：

# php/php81-security

# PHP-8.1-CVE-2026-109618-109619

# Commit: 1d7dec178a094e6e75b229ce22754045f8c6070a



LABEL org.opencontainers.image.description="Nextcloud 25.0.4 with patched PHP 8.1"

LABEL org.opencontainers.image.php-patch-commit="1d7dec178a094e6e75b229ce22754045f8c6070a"



# 安装编译依赖和原有 sudo

RUN set -eux; \

    apt-get update; \

    apt-get install -y --no-install-recommends \

        sudo \

        autoconf \

        automake \

        bison \

        re2c \

        libtool \

        pkg-config \

        build-essential \

        apache2-dev \

        libargon2-dev \

        libcurl4-openssl-dev \

        libonig-dev \

        libreadline-dev \

        libsodium-dev \

        libsqlite3-dev \

        libssl-dev \

        libxml2-dev \

        zlib1g-dev \

        libfreetype6-dev \

        libjpeg62-turbo-dev \

        libpng-dev \

        libwebp-dev \

        libgmp-dev \

        libicu-dev \

        libldap2-dev \

        libpq-dev \

        libzip-dev; \

    rm -rf /var/lib/apt/lists/*



# 将补丁源码复制到 PHP 官方构建目录

COPY php81-security/ /usr/src/php/



WORKDIR /usr/src/php



# 从补丁源码构建 PHP CLI 和 Apache 模块

# 生成 configure

RUN set -eux; \

    cd /usr/src/php; \

    test -f buildconf; \

    autoconf --version | head -n 1; \

    automake --version | head -n 1; \

    php -v; \

    if ! sh -x ./buildconf --force > /tmp/buildconf.log 2>&1; then \

        tail -n 100 /tmp/buildconf.log; \

        exit 1; \

    fi



RUN set -eux; \

    ./configure \

        --build=x86_64-linux-gnu \

        --with-config-file-path=/usr/local/etc/php \

        --with-config-file-scan-dir=/usr/local/etc/php/conf.d \

        --enable-option-checking=fatal \

        --with-mhash \

        --with-pic \

        --enable-ftp \

        --enable-mbstring \

        --enable-mysqlnd \

        --with-password-argon2 \

        --with-sodium=shared \

        --with-pdo-sqlite=/usr \

        --with-sqlite3=/usr \

        --with-curl \

        --with-iconv \

        --with-openssl \

        --with-readline \

        --with-zlib \

        --disable-phpdbg \

        --without-pear \

        --with-libdir=lib/x86_64-linux-gnu \

        --disable-cgi \

        --with-apxs2



RUN make -j2



RUN make install



# 重新编译 Nextcloud 所需的主要 PHP 核心扩展

RUN set -eux; \

    docker-php-ext-configure gd \

        --with-freetype \

        --with-jpeg \

        --with-webp; \

    docker-php-ext-configure ldap \

        --with-libdir=lib/x86_64-linux-gnu; \

    docker-php-ext-install -j2 \

        bcmath \

        exif \

        gd \

        gmp \

        intl \

        ldap \

        opcache \

        pcntl \

        pdo_mysql \

        pdo_pgsql \

        sysvsem \

        zip; \

    docker-php-ext-install -j2 sodium



WORKDIR /var/www/html



# 构建阶段验证 PHP 与 Apache

RUN set -eux; \

    php -v; \

    php -m; \

    php-config --version; \

    apache2ctl -t; \

    apache2ctl -M 2>/dev/null | grep 'php_module'



# 继续继承 Nextcloud 官方 ENTRYPOINT 和 CMD

services:

  nextcloud:

    build:

      context: ./Dockerfile

      dockerfile: Dockerfile

    image: nextcloud:25.0.4-apache-changed