chore(deps): update updates-patch-minor (#1377)

* chore(deps): update updates-patch-minor * use appropriate user --------- Co-authored-by: bugclerk <[email protected]> Co-authored-by: Stavros Kois <[email protected]>
truenas · Jan 16, 2025 · 7b7ecd9 · 7b7ecd9
1 parent b5b3f8d
commit 7b7ecd9
Show file tree

Hide file tree

Showing 15 changed files with 46 additions and 40 deletions.
diff --git a/ix-dev/community/drawio/app.yaml b/ix-dev/community/drawio/app.yaml
@@ -1,4 +1,4 @@
-app_version: 26.0.4
+app_version: 26.0.6
 capabilities: []
 categories:
 - productivity
@@ -32,4 +32,4 @@ sources:
 - https://github.com/jgraph/drawio
 title: Draw.io
 train: community
-version: 1.2.10
+version: 1.2.11
diff --git a/ix-dev/community/drawio/ix_values.yaml b/ix-dev/community/drawio/ix_values.yaml
@@ -1,7 +1,7 @@
 images:
   image:
     repository: jgraph/drawio
-    tag: 26.0.4
+    tag: 26.0.6
 
 consts:
   drawio_container_name: drawio

diff --git a/ix-dev/community/invoice-ninja/app.yaml b/ix-dev/community/invoice-ninja/app.yaml
@@ -1,4 +1,4 @@
-app_version: 5.11.24
+app_version: v5.11.25
 capabilities:
 - description: Invoice Ninja App, Worker and Scheduler are able to chown files.
   name: CHOWN
@@ -33,21 +33,21 @@ maintainers:
   url: https://www.truenas.com/
 name: invoice-ninja
 run_as_context:
-- description: Invoice Ninja runs as root user.
-  gid: 0
-  group_name: root
-  uid: 0
-  user_name: root
-- description: Invoice Ninja Worker runs as root user.
-  gid: 0
-  group_name: root
-  uid: 0
-  user_name: root
-- description: Invoice Ninja Scheduler runs as root user.
-  gid: 0
-  group_name: root
-  uid: 0
-  user_name: root
+- description: Invoice Ninja runs as non-root user.
+  gid: 999
+  group_name: invoice-ninja
+  uid: 999
+  user_name: invoice-ninja
+- description: Invoice Ninja Worker runs as non-root user.
+  gid: 999
+  group_name: invoice-ninja
+  uid: 999
+  user_name: invoice-ninja
+- description: Invoice Ninja Scheduler runs as non-root user.
+  gid: 999
+  group_name: invoice-ninja
+  uid: 999
+  user_name: invoice-ninja
 - description: MariaDB runs as non-root user.
   gid: 999
   group_name: mariadb
@@ -63,4 +63,4 @@ sources:
 - https://github.com/invoiceninja/dockerfiles
 title: Invoice Ninja
 train: community
-version: 1.0.7
+version: 1.0.8
diff --git a/ix-dev/community/invoice-ninja/ix_values.yaml b/ix-dev/community/invoice-ninja/ix_values.yaml
@@ -1,7 +1,7 @@
 images:
   image:
     repository: invoiceninja/invoiceninja-octane
-    tag: "5.11.24-o"
+    tag: "v5.11.25-o"
   mariadb_image:
     repository: mariadb
     tag: "10.11.10"

diff --git a/ix-dev/community/invoice-ninja/templates/docker-compose.yaml b/ix-dev/community/invoice-ninja/templates/docker-compose.yaml
@@ -57,9 +57,10 @@
   ("IN_PASSWORD", values.invoice_ninja.initial_user_password),
 ] %}
 
-{% do c1.set_user(0, 0) %}
-{% do worker.set_user(0, 0) %}
-{% do scheduler.set_user(0, 0) %}
+{% do c1.set_user(999, 999) %}
+{% do worker.set_user(999, 999) %}
+{% do scheduler.set_user(999, 999) %}
+{% set perms_config = {"uid": 999, "gid": 999, "mode": "check"} %}
 
 {% do c1.add_caps(["CHOWN", "DAC_OVERRIDE", "FOWNER", "SETUID", "SETGID", "NET_BIND_SERVICE"]) %}
 {% do worker.add_caps(["CHOWN", "DAC_OVERRIDE", "FOWNER", "SETUID", "SETGID", "NET_BIND_SERVICE"]) %}
@@ -120,15 +121,20 @@
 {% do c1.add_storage("/var/www/html/storage", values.storage.storage) %}
 {% do worker.add_storage("/var/www/html/storage", values.storage.storage) %}
 {% do scheduler.add_storage("/var/www/html/storage", values.storage.storage) %}
+{% do perm_container.add_or_skip_action("storage", values.storage.storage, perms_config) %}
 
 {% for store in values.storage.additional_storage %}
   {% do c1.add_storage(store.mount_path, store) %}
   {% do worker.add_storage(store.mount_path, store) %}
   {% do scheduler.add_storage(store.mount_path, store) %}
+  {% do perm_container.add_or_skip_action(store.mount_path, store, perms_config) %}
 {% endfor %}
 
 {% if perm_container.has_actions() %}
   {% do perm_container.activate() %}
+  {% do c1.depends.add_dependency(values.consts.perms_container_name, "service_completed_successfully") %}
+  {% do worker.depends.add_dependency(values.consts.perms_container_name, "service_completed_successfully") %}
+  {% do scheduler.depends.add_dependency(values.consts.perms_container_name, "service_completed_successfully") %}
   {% do redis.container.depends.add_dependency(values.consts.perms_container_name, "service_completed_successfully") %}
   {% do mariadb.container.depends.add_dependency(values.consts.perms_container_name, "service_completed_successfully") %}
 {% endif %}

diff --git a/ix-dev/community/metube/app.yaml b/ix-dev/community/metube/app.yaml
@@ -1,4 +1,4 @@
-app_version: '2025-01-15'
+app_version: '2025-01-16'
 capabilities: []
 categories:
 - media
@@ -30,4 +30,4 @@ sources:
 - https://github.com/alexta69/metube
 title: MeTube
 train: community
-version: 1.2.16
+version: 1.2.17
diff --git a/ix-dev/community/metube/ix_values.yaml b/ix-dev/community/metube/ix_values.yaml
@@ -1,7 +1,7 @@
 images:
   image:
     repository: alexta69/metube
-    tag: "2025-01-15"
+    tag: "2025-01-16"
 
 consts:
   metube_container_name: metube

diff --git a/ix-dev/community/ollama/app.yaml b/ix-dev/community/ollama/app.yaml
@@ -1,4 +1,4 @@
-app_version: 0.5.6
+app_version: 0.5.7
 capabilities: []
 categories:
 - ai
@@ -28,4 +28,4 @@ sources:
 - https://github.com/ollama/ollama
 title: Ollama
 train: community
-version: 1.0.27
+version: 1.0.28
diff --git a/ix-dev/community/ollama/ix_values.yaml b/ix-dev/community/ollama/ix_values.yaml
@@ -1,10 +1,10 @@
 images:
   image:
     repository: ollama/ollama
-    tag: 0.5.6
+    tag: 0.5.7
   rocm_image:
     repository: ollama/ollama
-    tag: 0.5.6-rocm
+    tag: 0.5.7-rocm
 
 consts:
   ollama_container_name: ollama

diff --git a/ix-dev/community/paperless-ngx/app.yaml b/ix-dev/community/paperless-ngx/app.yaml
@@ -1,4 +1,4 @@
-app_version: 2.14.2
+app_version: 2.14.3
 capabilities:
 - description: Paperless-ngx is able to chown files.
   name: CHOWN
@@ -67,4 +67,4 @@ sources:
 - https://github.com/paperless-ngx/paperless-ngx
 title: Paperless-ngx
 train: community
-version: 1.2.12
+version: 1.2.13
diff --git a/ix-dev/community/paperless-ngx/ix_values.yaml b/ix-dev/community/paperless-ngx/ix_values.yaml
@@ -1,7 +1,7 @@
 images:
   image:
     repository: paperlessngx/paperless-ngx
-    tag: "2.14.2"
+    tag: "2.14.3"
   postgres_15_image:
     repository: postgres
     tag: "15.10"

diff --git a/ix-dev/community/plex-auto-languages/app.yaml b/ix-dev/community/plex-auto-languages/app.yaml
@@ -1,4 +1,4 @@
-app_version: "1.3.1"
+app_version: 1.3.2
 capabilities: []
 categories:
 - media
@@ -27,4 +27,4 @@ sources:
 - https://github.com/JourneyDocker/Plex-Auto-Languages
 title: Plex Auto Languages
 train: community
-version: 1.2.8
+version: 1.2.9
diff --git a/ix-dev/community/plex-auto-languages/ix_values.yaml b/ix-dev/community/plex-auto-languages/ix_values.yaml
@@ -1,7 +1,7 @@
 images:
   image:
     repository: ghcr.io/journeydocker/plex-auto-languages
-    tag: "1.3.1"
+    tag: "1.3.2"
 
 consts:
   plex_auto_languages_container_name: plex-auto-languages

diff --git a/ix-dev/community/searxng/app.yaml b/ix-dev/community/searxng/app.yaml
@@ -1,4 +1,4 @@
-app_version: 2025.1.14-e4f8f0483
+app_version: 2025.1.16-41159fed3
 capabilities:
 - description: SearXNG requires this ability to switch user for sub-processes.
   name: SETUID
@@ -31,4 +31,4 @@ sources:
 - https://github.com/searxng/searxng
 title: SearXNG
 train: community
-version: 1.1.16
+version: 1.1.17
diff --git a/ix-dev/community/searxng/ix_values.yaml b/ix-dev/community/searxng/ix_values.yaml
@@ -1,7 +1,7 @@
 images:
   image:
     repository: searxng/searxng
-    tag: 2025.1.14-e4f8f0483
+    tag: 2025.1.16-41159fed3
 
 consts:
   searxng_container_name: searxng