Branch: refs/heads/XDOCKER-426 Home: https://github.com/xwiki/xwiki-docker Commit: 407d2e40d4ad1decdfcb61e596dab9be5dc1e12b https://github.com/xwiki/xwiki-docker/commit/407d2e40d4ad1decdfcb61e596dab9b... Author: Vincent Massol <vincent@massol.net> Date: 2026-07-29 (Wed, 29 Jul 2026) Changed paths: M 16/mariadb-tomcat/Dockerfile M 16/mysql-tomcat/Dockerfile M 16/postgres-tomcat/Dockerfile M 17/mariadb-tomcat/Dockerfile M 17/mysql-tomcat/Dockerfile M 17/postgres-tomcat/Dockerfile M 18.4/mariadb-tomcat/Dockerfile M 18.4/mysql-tomcat/Dockerfile M 18.4/postgres-tomcat/Dockerfile M 18/mariadb-tomcat/Dockerfile M 18/mysql-tomcat/Dockerfile M 18/postgres-tomcat/Dockerfile M template/Dockerfile Log Message: ----------- XDOCKER-426: Harden the Dockerfile build steps Applies the suggestions made while reviewing the Docker Official Images PR for XWiki 18.6.0: * Derive the LibreOffice symlink target from LIBREOFFICE_VERSION instead of globbing /opt (the command substitution was unquoted), and assert that it resolves to a soffice binary. That symlink is the only thing making JODConverter find LibreOffice, so an installation landing elsewhere must fail the build rather than produce an image where office import/export silently doesn't work. Pass -n to ln so that it replaces the symlink itself rather than dereferencing an existing one and creating the link inside the directory it points to. * Use "set -eux" instead of chaining commands with "&&", so that a command added later without its trailing "&&" cannot have its failure silently ignored, and so that each step is traced in the build log. * Verify the downloaded archives with the conventional binary-mode checksum format ("*" prefix and --strict). Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com> To unsubscribe from these emails, change your notification settings at https://github.com/xwiki/xwiki-docker/settings/notifications