mirror of
https://github.com/fatedier/frp.git
synced 2026-10-15 01:35:56 +08:00
f8be1cdfe2
x/crypto v0.56.0 fixes two denial-of-service bugs in golang.org/x/crypto/ssh channel handling (GO-2026-6354 / CVE-2026-78662, GO-2026-6355 / CVE-2026-56855), reachable through the frps SSH tunnel gateway in pkg/ssh. v0.55.0 fixes GO-2026-6303 / CVE-2026-56854. v0.56.0 requires Go 1.26, so the go directive, CI and Docker builders move from 1.25 to 1.26; Go 1.25 stopped receiving security fixes when Go 1.27 was released. Also bumps github.com/Azure/go-ntlmssp to v0.1.1 (GO-2026-5543 / CVE-2026-32952). Claude-Session: https://claude.ai/code/session_01FV4GkYDtbatepp2KH3s247 Co-authored-by: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
26 lines
543 B
Plaintext
26 lines
543 B
Plaintext
FROM node:22 AS web-builder
|
|
|
|
COPY web/package.json /web/package.json
|
|
COPY web/shared/ /web/shared/
|
|
COPY web/frpc/ /web/frpc/
|
|
WORKDIR /web
|
|
RUN npm install
|
|
WORKDIR /web/frpc
|
|
RUN npm run build
|
|
|
|
FROM golang:1.26 AS building
|
|
|
|
COPY . /building
|
|
COPY --from=web-builder /web/frpc/dist /building/web/frpc/dist
|
|
WORKDIR /building
|
|
|
|
RUN env CGO_ENABLED=0 go build -trimpath -ldflags "-s -w" -tags frpc -o bin/frpc ./cmd/frpc
|
|
|
|
FROM alpine:3
|
|
|
|
RUN apk add --no-cache tzdata
|
|
|
|
COPY --from=building /building/bin/frpc /usr/bin/frpc
|
|
|
|
ENTRYPOINT ["/usr/bin/frpc"]
|