Info: docker-gutenberg

[Apfelwurm]

Hey all,
i just wanted to let you know that since i had a really hard time to get gutenberg running in my environment, i've worked on a Docker image (and a corresponding docker-compose file) of gutenberg in the last weeks.
It is working so far, but there are some things that have to be done to finalize it or better to make it perfect. (see todo section in the readme)

https://github.com/Apfelwurm/docker-gutenberg

The most "critical" thing is, i had to remove the sandboxing because i was not able to get bwrap to work fine on a debian docker host inside the container. But maybe this can be fixed in the future, as well as the other things listed there (like cups-browsed).

If you are interested, we could connect in the future to build an "official" docker image housed here, so new users have a better onboarding process :)

[apardyl]

Hey,

Interesting idea! We don't use Docker at @KSIUJ (we use LXD containers instead), but I agree, that a Docker image would greatly help others to use this project. We would gladly accept a pull request and help developing it!

About the problem with bwrap - it might be caused by AppArmor or SELinux preventing mounting filesystems inside containers
we had that problem with LXD. Could you try running Docker with --security-opt apparmor=unconfined? (or similar setting, it solved the issue for LXD). The job sandboxing with bwrap is desired as gutenberg runs quite a lot of external tools, including libreoffice, that theoretically could execute malicious code from converted files.

[m4tx]

That's excellent; thanks for quite a bit of work on that! It's really cool to see someone using Gutenberg and contributing back.

A question purely out of curiosity: what is the benefit of having CUPS server running inside Docker? I believe you still need CUPS on the host system for it to work correctly; am I missing anything here?

As @apardyl said, it would be cool to see Gutenberg as a Docker image that can be brought up to run in a few terminal commands. We'd definitely appreciate making a PR out of the work you've done.