Tuesday, June 6, 2017

PostgreSQL supports for Bitnami Docker Redmine


We are thrilled to announce that the Bitnami Docker Redmine container has been recently released with support for PostgreSQL databases. 

Selecting between MariaDB or PostgreSQL is now possible via the following environment variables:

- REDMINE_DB_MYSQL
- REDMINE_DB_POSTGRES

You can use the following docker-compose.yml file to deploy our Bitnami Redmine container using a PostgreSQL database:

version: '2'
services:
  postgresql:
    image: 'bitnami/postgresql:latest'
    volumes:
      - 'postgresql_data:/bitnami/postgresql'
  redmine:
    image: 'bitnami/redmine:latest'
    ports:
      - '80:3000'
    environment:
      - REDMINE_DB_POSTGRES=postgresql
    volumes:
      - 'redmine_data:/bitnami/redmine'
    depends_on:
      - postgresql
volumes:
  postgresql_data:
    driver: local
  redmine_data:
    driver: local

Test it by running the following commands:

$ git clone https://github.com/bitnami/bitnami-docker-redmine
$ cd bitnami-docker-redmine
$ docker-compose -f docker-compose-postgresql.yml up

If you'd like to find the Redmine Docker Compose files for both MariaDB and PostgreSQL databases, please check the Bitnami Docker Redmine repository.

In addition, the stable Redmine Helm chart has also been updated to support this new feature. You can read more on how to deploy your Redmine application on top of a Kubernetes cluster using Helm in the Kubernetes Charts repository.

If you have any other questions in regards to Bitnami containers, Kubernetes, or Helm Charts, feel free to check out or documention at docs.bitnami.com or ask one of our engineers at community.bitnami.com!

Thursday, June 1, 2017

Security Release: Magento 2.1.7



The Magento project has released a new update that fixes several critical vulnerabilities. A few of the notable fixes include:

  • APPSEC-1686: Remote Code Execution in the Admin panel
  • APPSEC-1626: RCE in video upload
  • APPSEC-1746: Zend Mail vulnerability - continued
  • APPSEC-1565: Customer password hash exposed in admin
  • APPSEC-1752: Stored XSS in admin panel
  • APPSEC-1663: Mass actions do not follow ACL
  • APPSEC-1661: UI controllers do not follow ACL
  • APPSEC-1679: APIs vulnerable to CSRF
  • APPSEC-1559: Possible remote code execution in email reminders
  • APPSEC-1699: API tokens not invalidated after disabling admin user

We highly recommend upgrading your existing Magento Community Edition 2.0 sites. For more information about the security issues fixed within recently released update, Magento 2.1.7, please check out Magento's Security Center.

We have released Bitnami Magento 2.1.7 containers, installers, virtual machines and cloud images in order to address these security vulnerabilities. If you already have a running version of Bitnami Magento, you can upgrade the application by following the detailed steps through our documentation.

Users launching Bitnami Magento via a cloud marketplace are advised to select version 2.1.7, once it is published. Installations based on previous versions will need to be upgraded as described above.

If you have additional questions about Bitnami Magento, post to our community forum, and we will be happy to help you.

Meet the Bitnami Team: Angus Lees

The Bitnami team is a diverse group of talented people distributed all over the world. Get to know them better through this series of blog posts.

Angus Lees is one of our Senior Engineers who works remotely from Australia.


A brief bio

I have been lucky enough to spend my entire career working with Linux and Free Software (since 1995), and in a lot of ways Bitnami is a return to my early interests.

From early university days running the Linux user group “installfests”, I have been a proud member of the Debian project since about 2000. From university, I worked for a string of small Australian companies as a sysadmin / programmer / everything-else-guy. One of the more interesting projects involved driving over sand dunes in the hottest Australian desert to install our Linux-based routers on poles with solar panels and a two-way satellite dish.

In 2005, I moved to Ireland to work for Google on one of the original SRE teams. We looked after the main search engine and common networking infrastructure. I and 2 others built ipv6.google.com and as part of the following rollout, my home was the first place to ever receive a AAAA response from www.google.com. I eventually moved back to the new Google Sydney office to work on a new storage system and finally as a team lead and manager for some of the parts of the new Google cloud overlay network.

By this point, it was becoming obvious that a number of the engineering candidates I was interviewing were mentioning projects and tools that I had never heard of. My eldest daughter was about to start university and talked about leaving home soon, and so I took the rather unusual step of leaving Google to work from home on OpenStack with Rackspace. I accidentally got involved in Kubernetes quite early (v0.15) by writing the Kubernetes OpenStack cloud provider plugin and some related pieces and really enjoyed the experience. The opportunity to work on Kubernetes full time for Bitnami came up and I jumped at it.

Why did you join Bitnami and what excites you about working here?


I have always had a fascination with compilers, toolchains, and the low-level details of how applications interact with kernel and hardware. Bitnami has been working in this space for many years, and so it seemed an obvious fit.

For me, Bitnami is almost the perfect combination of: working from home, on free software, on something new and exciting, without big corporate bureaucracy, and with an excellent bunch of colleagues.

What are you working on?

I am currently working on “ksonnet” - a set of related tools to make it easier to manage more complex services on Kubernetes. This grew out of personal experience setting up and managing multiple internal Kubernetes clusters within Bitnami, and a decade of something similar within Google. I feel Kubernetes is rapidly moving from “demo” to “production” for many people, so I am happy to be able to share tools and a workflow that can really take advantage of the Kubernetes design.

What do you like to do for fun?

I like food. I have a small vegetable garden and a few chickens. With no daily commute, I like to spend that little bit of extra time in the evenings cooking and enjoying a nice meal with my family.

I have never been a sporting person, but I have also recently started playing soccer/football.

Interested in working with Bitnami and Angus? Apply for one of our open positions!