Version 1.111.0

minio now stores the config as part of the storage system under .minio.sys
when passed config dir, it merely "migrates" config.json to the new system
and renames config.json to config.json.deprecated

CHANGELOG

@@ -159,3 +159,322 @@
 [1.16.0]
 * Update minio to 2018-05-11T00-29-24Z
 
+[1.17.0]
+* Update minio to 2018-05-16T23-35-33Z
+
+[1.18.0]
+* Update minio to 2018-05-25T19-49-13Z
+
+[1.19.0]
+* Update minio to 2018-06-08T03-49-38Z
+
+[1.20.0]
+* Update minio to 2018-06-09T03-43-35Z
+
+[1.21.0]
+* Update minio to 2018-06-22T23-48-46Z 
+
+[1.22.0]
+* Update minio to 2018-06-29T02-11-29Z
+
+[1.23.0]
+* Update minio to 2018-07-13T00-09-07Z
+* Miscellaneous bug fixes in encryption/decryption, notification targets, signature validation
+  and etcd federation targets.
+* Update federation target to etcd/clientv3 (#6119) (07/13/18)
+* fix size computation for en/decrypted objects (#6147) (07/12/18)
+* Support multiple values for x-amz-meta header (#6145) (07/12/18)
+* Fix decrypted object size and key derivation in CopyObjectPart (#6141) (07/12/18)
+* SignatureV4 validation with Metadata in the presignedUrl (#5894) (07/11/18)
+* Update distributed docs (#6123) (07/10/18)
+* Avoid startup abort when a notify target is down (#6126) (07/10/18)
+
+[1.24.0]
+* Update minio to 2018-07-23T18-34-49Z
+* Improvements in logging and error message printing
+* Do not set Key and BucketName in ErrorResponse, if empty (#6174) (07/23/18)
+* Do not use parallel deletes to avoid random I/O (#6178) (07/20/18)
+* Log x-amz-request-id as log and XML error response (#6173) (07/20/18)
+* Remove ppc64le support from .travis.yml (#6180) (07/20/18)
+* Remove unused functions and constants (#6175) (07/20/18)
+* Do not trace HTTP body of PostPolicyBuckethandler (#6177) (07/20/18) 
+
+[1.25.0]
+* Update minio to 2018-07-31T02-11-47Z
+
+[1.26.0]
+* Update minio to 2018-08-02T23-11-36Z
+
+[1.27.0]
+* Update minio to 2018-08-21T00-37-20Z
+
+[1.28.0]
+* Update minio to 2018-08-25T01-56-38Z
+
+[1.29.0]
+* Update minio to 2018-09-01T00-38-25Z
+
+[1.30.0]
+* Update minio to 2018-09-11T01-39-21Z
+
+[1.31.0]
+* Update minio to 2018-09-12T18-49-56Z
+
+[1.32.0]
+* Update minio to 2018-09-25T21-34-43Z
+
+[1.33.0]
+* Update minio to 2018-10-05T01-03-03Z
+
+[1.34.0]
+* Update minio to 2018-10-06T00-15-16Z
+* Use latest base image
+
+[1.35.0]
+* Update minio to 2018-10-18T00-28-58Z
+
+[1.36.0]
+* Update minio to 2018-10-25T01-27-03Z
+
+[1.37.0]
+* Update minio to 2018-11-06T01-01-02Z
+
+[1.38.0]
+* Update minio to 2018-11-17T01-23-48Z
+
+[1.39.0]
+* Update minio to 2018-11-30T03-56-59Z
+
+[1.40.0]
+* Update minio to 2018-12-06T01-27-43Z
+
+[1.41.0]
+* Update minio to 2018-12-13T02-04-19Z
+
+[1.42.0]
+* Update minio to 2018-12-19T23-46-24Z
+
+[1.43.0]
+* Update minio to 2018-12-27T18-33-08Z
+
+[1.44.0]
+* Update minio to 2019-01-16T21-44-08Z
+
+[1.45.0]
+* Update minio to 2019-01-23T23-18-58Z
+
+[1.46.0]
+* Update minio to 2019-01-31T00-31-19Z
+
+[1.47.0]
+* Update minio to 2019-02-06T21-16-36Z
+
+[1.48.0]
+* Update minio to 2019-02-12T21-58-47Z
+
+[1.49.0]
+* Update minio to 2019-02-14T00-21-45Z
+
+[1.50.0]
+* Update minio to 2019-02-20T22-44-29Z
+* [Full changelog](https://github.com/minio/minio/releases/tag/RELEASE.2019-02-20T22-44-29Z)
+* Security Fix: Incoming requests with unusual behavior are now validated.Please see here for more details. Upgrade is recommended.
+* Simplified and fixed vault token renewal. See #7241 for details.
+* Added support for HTTP/2.0 in Minio Server. See #7204 for details.
+
+[1.51.0]
+* Update minio to 2019-02-26T19-51-46Z
+* Bug fixes in various areas such as json & csv handling.
+* s3: Encode StartAfter when encoding type is passed (#7281) (02/25/19)
+* s3: Add support of encodingType parameter (#7265) (02/24/19)
+
+[1.52.0]
+* Update minio to 2019-03-06T22-47-10Z
+* Added support for temporary credentials for minio users via AssumeRole API. See here for details.
+* Miscellaneous bugfix improvements in areas such as snappy compression, copyobjectpart, listobjects performance and detecting mountpoints.
+
+[1.53.0]
+* Update minio to 2019-03-13T21-59-47Z
+* Miscellaneous improvements in various areas such as healing, S3Select, http2, etcd & coreDNS integrations.
+
+[1.54.0]
+* Update minio to 2019-03-20T22-38-47Z
+
+[1.55.0]
+* Update minio to 2019-03-27T22-35-21Z
+
+[1.56.0]
+* Update miniot to 2019-04-04T18-31-46Z
+* (security) fix privilege escalation against inter-node communication 
+* (security) Validate if bucket names are internal
+* canonicalize ETag correctly
+
+[1.57.0]
+* Update minio to 2019-04-09T01-22-30Z
+
+[1.58.0]
+* Update minio to 2019-04-18T21-44-59Z
+
+[1.59.0]
+* Update minio to 2019-04-23T23-50-36Z
+
+[1.60.0]
+* Update minio to 2019-05-02T19-07-09Z
+
+[1.61.0]
+* Update minio to 2019-05-14T23-57-45Z
+
+[1.62.0]
+* Update minio to 2019-05-23T00-29-34Z
+
+[1.63.0]
+* Update minio to 2019-06-01T03-46-14Z
+
+[1.64.0]
+* Update minio to 2019-06-04T01-15-58Z
+
+[1.65.0]
+* Update minio to 2019-06-11T00-44-33Z
+
+[1.66.0]
+* Update minio to 2019-06-15T23-07-18Z
+
+[1.67.0]
+* Update minio to 2019-06-19T18-24-42Z
+
+[1.68.0]
+* Update minio to 2019-06-27T21-13-50Z
+
+[1.69.0]
+* Update minio to 2019-07-05T21-20-21Z
+
+[1.70.0]
+* Update minio to 2019-07-10T00-34-56Z
+
+[1.71.0]
+* Update minio to 2019-07-17T22-54-12Z
+
+[1.72.0]
+* Update minio to 2019-07-24T02-02-23Z
+
+[1.73.0]
+* Update minio to 2019-08-01T22-18-54Z
+
+[1.74.0]
+* Update minio to 2019-08-07T01-59-21Z
+
+[1.75.0]
+* Update minio to 2019-08-14T20-37-41Z
+
+[1.76.0]
+* Update minio to 2019-08-21T19-40-07Z
+
+[1.77.0]
+* Update minio to 2019-08-29T00-25-01Z
+
+[1.78.0]
+* Update minio to 2019-09-05T23-24-38Z
+
+[1.79.0]
+* Update minio to 2019-09-11T19-53-16Z
+
+[1.80.0]
+* Update minio to 2019-09-18T21-55-05Z
+
+[1.81.0]
+* Update minio to 2019-09-25T18-25-51Z
+
+[1.82.0]
+* Update minio to 2019-09-26T19-42-35Z
+
+[1.83.0]
+* Update minio to 2019-10-02T21-19-38Z
+
+[1.84.0]
+* Update minio to 2019-10-11T00-38-09Z
+
+[1.85.0]
+* Update minio to 2019-10-12T01-39-57Z
+
+[1.86.0]
+* Update minio to 2019-12-19T22-52-26Z
+
+[1.87.0]
+* Update minio to 2019-12-30T05-45-39Z
+
+[1.88.0]
+* Update minio to 2020-01-03T19-12-21Z
+
+[1.89.0]
+* Update minio to 2020-01-16T03-05-44Z
+
+[1.90.0]
+* Update minio to 2020-01-16T22-40-29Z
+
+[1.91.0]
+* Update minio to 2020-01-25T02-50-51Z
+
+[1.92.0]
+* Update minio to 2020-02-07T23-28-16Z
+
+[1.93.0]
+* Update minio to 2020-02-20T22-51-23Z
+
+[1.94.0]
+* Update minio to 2020-02-27T00-23-05Z
+
+[1.95.0]
+* Update minio to 2020-03-06T22-23-56Z
+
+[1.96.0]
+* Update minio to 2020-03-09T18-26-53Z
+
+[1.97.0]
+* Update minio to 2020-03-14T02-21-58Z
+
+[1.98.0]
+* Update minio to 2020-03-19T21-49-00Z
+
+[1.99.0]
+* Update minio to 2020-03-25T07-03-04Z
+
+[1.100.0]
+* Update minio to 2020-04-02T21-34-49Z
+
+[1.101.0]
+* Update minio to 2020-04-04T05-39-31Z
+
+[1.102.0]
+* Update minio to 2020-04-10T03-34-42Z
+
+[1.103.0]
+* Update minio to 2020-04-15T00-39-01Z
+
+[1.104.0]
+* Update minio to 2020-04-15T19-42-18Z
+
+[1.105.0]
+* Update minio to 2020-04-23T00-58-49Z
+* Use latest docker image
+
+[1.106.0]
+* Update minio to 2020-04-28T23-56-56Z
+
+[1.107.0]
+* Update minio to 2020-05-01T22-19-14Z
+
+[1.108.0]
+* Update minio to 2020-05-08T02-40-49Z
+
+[1.109.0]
+* Update minio to 2020-05-16T01-33-21Z
+* [Full changelog](https://github.com/minio/minio/releases/tag/RELEASE.2020-05-16T01-33-21Z)
+
+[1.110.0]
+* Update minio to 2020-05-28T23-29-21Z
+* [Full changelog](https://github.com/minio/minio/releases/tag/RELEASE.2020-05-28T23-29-21Z)
+
+[1.111.0]
+* Update minio to 2020-05-29T14-08-49Z
+* [Full changelog](https://github.com/minio/minio/releases/tag/RELEASE.2020-05-29T14-08-49Z)
+

CloudronManifest.json

@@ -5,15 +5,15 @@
   "description": "file://DESCRIPTION.md",
   "changelog": "file://CHANGELOG",
   "tagline": "Distributed object storage",
-  "version": "1.16.0",
+  "version": "1.111.0",
   "healthCheckPath": "/minio/login",
   "httpPort": 8000,
   "addons": {
     "localstorage": {}
   },
-  "manifestVersion": 1,
+  "manifestVersion": 2,
   "website": "http://www.minio.io",
-  "minBoxVersion": "1.8.1",
+  "minBoxVersion": "4.1.4",
   "documentationUrl": "https://cloudron.io/documentation/apps/minio/",
   "contactEmail": "support@cloudron.io",
   "icon": "logo.png",

DESCRIPTION.md

@@ -1,4 +1,4 @@
-This app packages Minio <upstream>2018-05-11T00-29-24Z</upstream>.
+This app packages Minio <upstream>2020-05-29T14-08-49Z</upstream>.
 
 Minio is a distributed object storage server built for cloud applications and devops.
 

Dockerfile

@@ -1,14 +1,14 @@
-FROM cloudron/base:0.10.0
+FROM cloudron/base:2.0.0@sha256:f9fea80513aa7c92fe2e7bf3978b54c8ac5222f47a9a32a7f8833edf0eb5a4f4
 
-EXPOSE 8000
+ARG VERSION=RELEASE.2020-05-29T14-08-49Z
 
 RUN mkdir -p /app/code \
-    && wget https://dl.minio.io/server/minio/release/linux-amd64/minio.RELEASE.2018-05-11T00-29-24Z -O /app/code/minio \
+    && wget https://dl.minio.io/server/minio/release/linux-amd64/minio.${VERSION} -O /app/code/minio \
     && chmod +x /app/code/minio
 
 WORKDIR /app/code
 
-ADD config.json /app/code/config.json
 ADD start.sh /app/code/start.sh
+ADD minio-credentials /app/code/minio-credentials
 
 CMD [ "/app/code/start.sh" ]

POSTINSTALL.md

@@ -2,7 +2,7 @@ This application does not integrate with Cloudron authentication.
 
 Please use the following credentials to login:
 
-* AccessKey: `admin`
-* SecretKey: `secretkey`
+* AccessKey: `minioadmin`
+* SecretKey: `minioadmin`
 
-**Please change the credentials immediately**
+**Please change the credentials immediately following the docs**

config.json

@@ -1,75 +0,0 @@
-{
-        "version": "10",
-        "credential": {
-                "accessKey": "admin",
-                "secretKey": "secretkey"
-        },
-        "region": "us-east-1",
-        "logger": {
-                "console": {
-                        "enable": true,
-                        "level": "error"
-                },
-                "file": {
-                        "enable": false,
-                        "fileName": "",
-                        "level": ""
-                }
-        },
-        "notify": {
-                "amqp": {
-                        "1": {
-                                "enable": false,
-                                "url": "",
-                                "exchange": "",
-                                "routingKey": "",
-                                "exchangeType": "",
-                                "mandatory": false,
-                                "immediate": false,
-                                "durable": false,
-                                "internal": false,
-                                "noWait": false,
-                                "autoDeleted": false
-                        }
-                },
-                "nats": {
-                        "1": {
-                                "enable": false,
-                                "address": "",
-                                "subject": "",
-                                "username": "",
-                                "password": "",
-                                "token": "",
-                                "secure": false,
-                                "pingInterval": 0
-                        }
-                },
-                "elasticsearch": {
-                        "1": {
-                                "enable": false,
-                                "url": "",
-                                "index": ""
-                        }
-                },
-                "redis": {
-                        "1": {
-                                "enable": false,
-                                "address": "",
-                                "password": "",
-                                "key": ""
-                        }
-                },
-                "postgresql": {
-                        "1": {
-                                "enable": false,
-                                "connectionString": "",
-                                "table": "",
-                                "host": "",
-                                "port": "",
-                                "user": "",
-                                "password": "",
-                                "database": ""
-                        }
-                }
-        }
-}

minio-credentials

@@ -0,0 +1,41 @@
+#!/usr/bin/env node
+
+'use strict';
+
+const fs = require('fs');
+
+const MINIO_CONFIG = '/app/data/data/.minio.sys/config/config.json';
+
+function usage() {
+    console.log('Usage:\n');
+    console.log('\tminio-credentials get');
+    console.log('\tminio-credentials set <access key> <secret key>');
+    console.log();
+}
+
+let config = JSON.parse(fs.readFileSync(MINIO_CONFIG, 'utf8'));
+let adminCredentials = config['credentials']['_'];
+let accessKey = adminCredentials.filter(kv => kv.key === 'access_key')[0];
+let secretKey = adminCredentials.filter(kv => kv.key === 'secret_key')[0];
+
+if (process.argv[2] === 'get') {
+    console.log('Access Key:', accessKey.value);
+    console.log('Secret Key:', secretKey.value);
+} else if (process.argv[2] === 'set') {
+    if (process.argv.length !== 5) return usage();
+
+    // https://docs.aws.amazon.com/IAM/latest/APIReference/API_CreateAccessKey.html
+    if (process.argv[4].length < 5) return console.log('secret key must be atleast 5 characters');
+    if (!/^[\w+=,.@-]+$/.test(process.argv[3])) return console.log('access key has invalid characters');
+
+    accessKey.value = process.argv[3];
+    if (process.argv[4].length < 8) return console.log('secret key must be atleast 8 characters');
+
+    secretKey.value = process.argv[4];
+
+    fs.writeFileSync(MINIO_CONFIG, JSON.stringify(config), 'utf8');
+    console.log('Credentials updated. Restart minio app for new credentials to take effect.\n');
+} else {
+    usage();
+}
+

start.sh

@@ -2,12 +2,13 @@
 
 set -eu
 
-mkdir -p /app/data/data /app/data/config
+mkdir -p /app/data/data /run/minio/config /run/minio/certs
 
-if ! [ -f /app/data/config/config.json ]; then
-  cp /app/code/config.json /app/data/config/config.json
-fi
+echo "==> Changing ownership"
+chown -R cloudron:cloudron /app/data
 
-exec ./minio server -C /app/data/config --address :8000 /app/data/data
+# the --config-dir is deprecated and not used. but without it, minio will try to create $HOME/.minio :/ same for --certs-dir
+echo "==> Starting minio"
+exec /usr/local/bin/gosu cloudron:cloudron /app/code/minio --certs-dir /run/minio/certs --config-dir /run/minio/config --quiet server --address :8000 /app/data/data
 
 

test/package.json

@@ -9,14 +9,14 @@
   "author": "",
   "license": "ISC",
   "dependencies": {
-    "chromedriver": "^2.36.0",
-    "ejs": "^2.4.2",
+    "chromedriver": "^83.0.0",
+    "ejs": "^3.1.3",
     "expect.js": "^0.3.1",
-    "mkdirp": "^0.5.1",
-    "mocha": "^2.5.3",
-    "rimraf": "^2.5.3",
-    "selenium-server-standalone-jar": "^2.53.1",
-    "selenium-webdriver": "^2.53.3",
-    "superagent": "^1.4.0"
+    "mkdirp": "^1.0.4",
+    "mocha": "^7.2.0",
+    "rimraf": "^3.0.2",
+    "selenium-server-standalone-jar": "^3.141.59",
+    "selenium-webdriver": "^3.6.0",
+    "superagent": "^5.2.2"
   }
 }

test/test.js

@@ -9,22 +9,19 @@ var execSync = require('child_process').execSync,
     path = require('path'),
     webdriver = require('selenium-webdriver');
 
-var by = webdriver.By,
-    until = webdriver.until;
-
-var accessKey = 'admin',
-    secretKey = 'secretkey';
+var by = require('selenium-webdriver').By,
+    until = require('selenium-webdriver').until,
+    Key = require('selenium-webdriver').Key,
+    Builder = require('selenium-webdriver').Builder;
 
 var bucket = 'cloudrontestbucket';
 
 process.env.NODE_TLS_REJECT_UNAUTHORIZED = '0';
 
-
 describe('Application life cycle test', function () {
     this.timeout(0);
 
-    var chrome = require('selenium-webdriver/chrome');
-    var server, browser = new chrome.Driver();
+    var server, browser = new Builder().forBrowser('chrome').build();
 
     before(function (done) {
         var seleniumJar= require('selenium-server-standalone-jar');
@@ -55,7 +52,7 @@ describe('Application life cycle test', function () {
         });
     }
 
-    function login(callback) {
+    function login(accessKey, secretKey, callback) {
         browser.manage().deleteAllCookies();
         browser.get('https://' + app.fqdn).then(function () {
             return visible(by.id('accessKey'));
@@ -95,13 +92,15 @@ describe('Application life cycle test', function () {
         browser.get('https://' + app.fqdn);
 
         pageLoaded().then(function () {
-            return visible(by.className('fa fa-plus'));
+            return visible(by.className('fa-plus'));
         }).then(function () {
-            return browser.findElement(by.className('fa fa-plus')).click();
+            return browser.findElement(by.className('fa-plus')).click();
         }).then(function () {
-            return visible(by.className('fa fa-hdd-o'));
+            const c = 'fa-hdd';
+            return visible(by.className(c));
         }).then(function () {
-            return browser.findElement(by.className('fa fa-hdd-o')).click();
+            const c = 'fa-hdd';
+            return browser.findElement(by.className(c)).click();
         }).then(function () {
             return visible(by.xpath('//*[@class="modal-body"]/form/div/input'));
         }).then(function () {
@@ -148,7 +147,7 @@ describe('Application life cycle test', function () {
     });
 
     it('install app', function () {
-        execSync('cloudron install --new --wait --location ' + LOCATION, { cwd: path.resolve(__dirname, '..'), stdio: 'inherit' });
+        execSync('cloudron install --location ' + LOCATION, { cwd: path.resolve(__dirname, '..'), stdio: 'inherit' });
     });
 
     it('can get app information', function () {
@@ -159,17 +158,21 @@ describe('Application life cycle test', function () {
         expect(app).to.be.an('object');
     });
 
-    it('can login', login);
+    it('can login', login.bind(null, 'minioadmin', 'minioadmin'));
     it('can add bucket', addBucket);
     it('can open settings', openSettings);
     it('can logout', logout);
 
+    it('can change credentials', function () {
+    execSync('cloudron exec --app ' + app.id + ' -- /app/code/minio-credentials set minioakey minioskey', { cwd: path.resolve(__dirname, '..'), stdio: 'inherit' });
+    });
+
     it('can restart app', function (done) {
-        execSync('cloudron restart --wait');
+        execSync('cloudron restart');
         done();
     });
 
-    it('can login', login);
+    it('can login', login.bind(null, 'minioakey', 'minioskey'));
     it('has bucket', checkBucket);
     it('can logout', logout);
 
@@ -181,20 +184,20 @@ describe('Application life cycle test', function () {
         execSync('cloudron restore --app ' + app.id, { cwd: path.resolve(__dirname, '..'), stdio: 'inherit' });
     });
 
-    it('can login', login);
+    it('can login', login.bind(null, 'minioakey', 'minioskey'));
     it('has bucket', checkBucket);
     it('can open settings', openSettings);
     it('can logout', logout);
 
     it('move to different location', function () {
         browser.manage().deleteAllCookies();
-        execSync('cloudron configure --wait --location ' + LOCATION + '2', { cwd: path.resolve(__dirname, '..'), stdio: 'inherit' });
+        execSync('cloudron configure --location ' + LOCATION + '2', { cwd: path.resolve(__dirname, '..'), stdio: 'inherit' });
         var inspect = JSON.parse(execSync('cloudron inspect'));
         app = inspect.apps.filter(function (a) { return a.location === LOCATION + '2'; })[0];
         expect(app).to.be.an('object');
     });
 
-    it('can login', login);
+    it('can login', login.bind(null, 'minioakey', 'minioskey'));
     it('has bucket', checkBucket);
     it('can logout', logout);
 
@@ -204,19 +207,19 @@ describe('Application life cycle test', function () {
 
     // test update
     it('can install app', function () {
-        execSync('cloudron install --new --wait --appstore-id io.minio.cloudronapp --location ' + LOCATION, { cwd: path.resolve(__dirname, '..'), stdio: 'inherit' });
+        execSync('cloudron install --appstore-id io.minio.cloudronapp --location ' + LOCATION, { cwd: path.resolve(__dirname, '..'), stdio: 'inherit' });
         var inspect = JSON.parse(execSync('cloudron inspect'));
         app = inspect.apps.filter(function (a) { return a.location === LOCATION; })[0];
         expect(app).to.be.an('object');
     });
 
-    it('can login', login);
+    it('can login', login.bind(null, 'minioadmin', 'minioadmin'));
     it('can add buckets', addBucket);
     it('can logout', logout);
     it('can update', function () {
-        execSync('cloudron install --wait --app ' + LOCATION, { cwd: path.resolve(__dirname, '..'), stdio: 'inherit' });
+        execSync('cloudron update --app ' + LOCATION, { cwd: path.resolve(__dirname, '..'), stdio: 'inherit' });
     });
-    it('can login', login);
+    it('can login', login.bind(null, 'minioadmin', 'minioadmin'));
     it('has bucket', checkBucket);
     it('can logout', logout);
     it('uninstall app', function () {