Update package version to 5.3.0

| datasource      | package     | from                         | to                           |
| --------------- | ----------- | ---------------------------- | ---------------------------- |
| github-releases | minio/minio | RELEASE.2025-09-07T16-13-09Z | RELEASE.2025-10-15T17-29-55Z |

CloudronManifest.json

@@ -5,10 +5,10 @@
   "description": "file://DESCRIPTION.md",
   "changelog": "file://CHANGELOG",
   "tagline": "Distributed object storage",
-  "version": "2.7.6",
-  "upstreamVersion": "2022-06-25T15-50-16Z",
+  "version": "5.3.0",
+  "upstreamVersion": "RELEASE.2025-10-15T17-29-55Z",
   "healthCheckPath": "/minio/login",
-  "memoryLimit": 805306368,
+  "memoryLimit": 2147483648,
   "httpPort": 8000,
   "httpPorts": {
     "API_SERVER_DOMAIN": {
@@ -21,14 +21,25 @@
   "addons": {
     "localstorage": {}
   },
+  "optionalSso": true,
+  "checklist": {
+    "change-default-password": {
+      "message": "Change the default admin credentials by following this [guide](https://cloudron.io/documentation/apps/minio/#admin-credentials)"
+    }
+  },
   "manifestVersion": 2,
   "website": "http://www.minio.io",
-  "minBoxVersion": "7.1.2",
+  "minBoxVersion": "8.1.0",
   "forumUrl": "https://forum.cloudron.io/category/69/minio",
-  "documentationUrl": "https://docs.cloudron.io/apps/minio/",
+  "documentationUrl": "https://docs.cloudron.io/packages/minio/",
   "contactEmail": "support@cloudron.io",
   "icon": "logo.png",
-  "tags": [ "storage", "hosting", "s3", "objectstore" ],
+  "tags": [
+    "storage",
+    "hosting",
+    "s3",
+    "objectstore"
+  ],
   "mediaLinks": [
     "https://screenshots.cloudron.io/io.minio.cloudronapp/pic1.png",
     "https://screenshots.cloudron.io/io.minio.cloudronapp/pic2.png"

Dockerfile

@@ -1,16 +1,26 @@
-FROM cloudron/base:3.2.0@sha256:ba1d566164a67c266782545ea9809dc611c4152e27686fd14060332dd88263ea
+FROM cloudron/base:5.0.0@sha256:04fd70dbd8ad6149c19de39e35718e024417c3e01dc9c6637eaf4a41ec4e596c
 
-RUN mkdir -p /app/code
+RUN mkdir -p /app/code/go
 WORKDIR /app/code
 
-ARG VERSION=RELEASE.2022-06-25T15-50-16Z
-ARG MC_VERSION=RELEASE.2022-06-26T18-51-48Z
+# Go (https://golang.org/dl/)
+ARG GOVERSION=1.25.1
+ENV GOROOT /usr/local/go-${GOVERSION}
+ENV PATH $GOROOT/bin:$PATH
+ENV GOPATH=/app/code/go
+RUN mkdir -p /usr/local/go-${GOVERSION} && \
+    curl -L https://storage.googleapis.com/golang/go${GOVERSION}.linux-amd64.tar.gz | tar zxf - -C /usr/local/go-${GOVERSION} --strip-components 1
 
-# sometimes here https://dl.min.io/server/minio/release/linux-amd64/archive/
-RUN wget https://dl.min.io/server/minio/release/linux-amd64/minio.${VERSION} -O /app/code/minio && chmod +x /app/code/minio
-# https://dl.min.io/client/mc/release/linux-amd64/
-RUN wget https://dl.min.io/client/mc/release/linux-amd64/mc.${MC_VERSION} -O /app/code/mc && chmod +x /app/code/mc
+RUN ln -sf /usr/local/go-${GOVERSION} /usr/local/go
 
-COPY env.sh start.sh /app/code/
+# renovate: datasource=github-releases depName=minio/minio versioning=regex:^RELEASE\.(?<major>\d{4})-(?<minor>\d{2})-(?<patch>\d{2})T(?<build>.+)
+ARG MINIO_VERSION=RELEASE.2025-10-15T17-29-55Z
+RUN go install github.com/minio/minio@${MINIO_VERSION} && \
+    go clean -cache -modcache -testcache
+
+# Latest CLI
+RUN wget https://dl.min.io/client/mc/release/linux-amd64/mc -O /app/code/mc && chmod +x /app/code/mc
+
+COPY env.sh.template start.sh /app/code/
 
 CMD [ "/app/code/start.sh" ]

POSTINSTALL.md

@@ -3,5 +3,3 @@ Please use the following credentials to login:
 **Username**: minioadmin<br/>
 **Password**: minioadmin<br/>
 
-Please change the credentials immediately by following this [guide](https://cloudron.io/documentation/apps/minio/#admin-credentials).
-

README.md

@@ -37,3 +37,8 @@ PATH=$PATH:node_modules/.bin mocha --bail test.js
 ## Notes
 
 MinIO Console is an embedded web-based object browser built into MinIO Server
+
+## Multi-domain
+
+MINIO_DOMAIN=domain.com env var can be set to server DNS style requests as bucket.domain.com . This requires the platform code to set aliases for the httpPorts and not the primaryport.
+

env.sh

@@ -1,9 +0,0 @@
-# Add custom minio configuration to this file. Restart the app for changes to take effect.
-
-export CLOUDRON_MINIO_STARTUP_ARGS='server /app/data/data'
-
-# See https://docs.min.io/minio/baremetal/reference/minio-server/minio-server.html#envvar.MINIO_ROOT_USER
-# You can use pwgen -1s 64 to generate usernames and passwords
-export MINIO_ROOT_USER=minioadmin
-export MINIO_ROOT_PASSWORD=minioadmin
-

env.sh.template

@@ -0,0 +1,4 @@
+# Add custom minio configuration to this file. Restart the app for changes to take effect.
+
+export CLOUDRON_MINIO_STARTUP_ARGS='server /app/data/data'
+

logo.svg

@@ -0,0 +1,41 @@
+<?xml version="1.0" encoding="UTF-8" standalone="no"?>
+<svg
+   width="512"
+   height="512"
+   fill="#ffffff"
+   version="1.1"
+   id="svg3"
+   sodipodi:docname="logo.svg"
+   inkscape:version="1.4 (e7c3feb100, 2024-10-09)"
+   inkscape:export-filename="logo.png"
+   inkscape:export-xdpi="96"
+   inkscape:export-ydpi="96"
+   xmlns:inkscape="http://www.inkscape.org/namespaces/inkscape"
+   xmlns:sodipodi="http://sodipodi.sourceforge.net/DTD/sodipodi-0.dtd"
+   xmlns="http://www.w3.org/2000/svg"
+   xmlns:svg="http://www.w3.org/2000/svg">
+  <defs
+     id="defs3" />
+  <sodipodi:namedview
+     id="namedview3"
+     pagecolor="#ffffff"
+     bordercolor="#666666"
+     borderopacity="1.0"
+     inkscape:showpageshadow="2"
+     inkscape:pageopacity="0.0"
+     inkscape:pagecheckerboard="0"
+     inkscape:deskcolor="#d1d1d1"
+     inkscape:zoom="0.98823083"
+     inkscape:cx="222.1141"
+     inkscape:cy="376.93623"
+     inkscape:window-width="1920"
+     inkscape:window-height="1014"
+     inkscape:window-x="0"
+     inkscape:window-y="0"
+     inkscape:window-maximized="1"
+     inkscape:current-layer="svg3" />
+  <path
+     d="m 156.67193,317.75421 a 286.44793,286.44793 0 0 1 56.74397,-80.47822 290.54005,290.54005 0 0 1 28.37199,-24.89369 v 61.3817 z m -49.10536,56.88038 134.22132,-68.20188 v 156.18233 l 30.21344,39.28427 V 290.47346 l 18.3463,-9.48007 a 91.049521,91.049521 0 0 0 25.0301,-144.04238 L 246.28921,64.725212 a 15.345425,15.345425 0 0 1 0.75022,-21.619998 15.413627,15.413627 0 0 1 21.6882,0.750221 l 9.68467,10.093879 20.46057,-19.914953 C 274.38839,2.2522814 244.31136,6.2761929 227.05628,22.167233 a 44.058422,44.058422 0 0 0 -1.90965,62.200124 l 69.83873,72.771413 a 62.336528,62.336528 0 0 1 -13.64038,96.02826 l -9.48006,4.91053 V 159.38943 A 315.97936,315.97936 0 0 0 107.56657,374.29359 Z"
+     id="path2"
+     style="fill:#cf163e;fill-opacity:1;stroke:none;stroke-width:6.82019" />
+</svg>

renovate.json5

@@ -0,0 +1,4 @@
+{
+    "$schema": "https://docs.renovatebot.com/renovate-schema.json",
+    "extends": ["local>devops/renovator//default.renovate.json5"]
+}

start.sh

@@ -4,11 +4,17 @@ set -eu
 
 mkdir -p /app/data/data /run/minio/config /run/minio/certs
 
-[[ ! -f /app/data/env.sh ]] && cp /app/code/env.sh /app/data/env.sh
+# env vars take precedence over config.yaml (https://github.com/minio/minio/blob/master/docs/distributed/CONFIG.md#things-to-know)
+if [[ ! -f /app/data/env.sh ]]; then
+    echo "=> First run"
+    cp /app/code/env.sh.template /app/data/env.sh
+    echo -e "export MINIO_ROOT_USER=minioadmin\nexport MINIO_ROOT_PASSWORD=minioadmin\n\n" >> /app/data/env.sh
+fi
+
 source /app/data/env.sh
 
 # https://docs.min.io/minio/baremetal/reference/minio-server/minio-server.html#envvar.MINIO_SERVER_URL
-[[ -n "${API_SERVER_DOMAIN:-}" ]] && export MINIO_SERVER_URL="https://${API_SERVER_DOMAIN}"
+export MINIO_SERVER_URL="https://${API_SERVER_DOMAIN}"
 export MINIO_BROWSER_REDIRECT_URL="https://${CLOUDRON_APP_DOMAIN}"
 
 if [[ ! -d /app/data/mc_config ]]; then
@@ -20,7 +26,6 @@ fi
 echo "==> Changing ownership"
 [[ $(stat --format '%U' /app/data/data) != "cloudron" ]] && chown -R cloudron:cloudron /app/data
 
-# the --config-dir is deprecated and not used. but without it, minio will try to create $HOME/.minio :/ same for --certs-dir
 echo "==> Starting minio"
-exec /usr/local/bin/gosu cloudron:cloudron /app/code/minio --certs-dir /run/minio/certs --config-dir /run/minio/config --quiet ${CLOUDRON_MINIO_STARTUP_ARGS} --address :9000 --console-address :8000
+exec /usr/local/bin/gosu cloudron:cloudron /app/code/go/bin/minio --quiet ${CLOUDRON_MINIO_STARTUP_ARGS} --address :9000 --console-address :8000
 

test/package.json

@@ -9,11 +9,11 @@
   "author": "",
   "license": "ISC",
   "dependencies": {
-    "chromedriver": "^102.0.0",
-    "delay": "^5.0.0",
+    "@eslint/js": "^9.37.0",
+    "chromedriver": "^141.0.3",
     "expect.js": "^0.3.1",
-    "mocha": "^10.0.0",
-    "selenium-webdriver": "^4.2.0",
-    "superagent": "^7.1.6"
+    "mocha": "^11.7.4",
+    "selenium-webdriver": "^4.36.0",
+    "superagent": "^10.2.3"
   }
 }

test/test.js

@@ -1,43 +1,62 @@
 #!/usr/bin/env node
 
 /* jshint esversion: 8 */
-/* global describe */
-/* global before */
-/* global after */
-/* global it */
-/* global xit */
+/* global it, xit, describe, before, after, afterEach */
 
 'use strict';
 
 require('chromedriver');
 
-const delay = require('delay'),
-    execSync = require('child_process').execSync,
+const execSync = require('child_process').execSync,
     expect = require('expect.js'),
     fs = require('fs'),
     path = require('path'),
     superagent = require('superagent'),
+    timers = require('timers/promises'),
     { Builder, By, until } = require('selenium-webdriver'),
     { Options } = require('selenium-webdriver/chrome');
 
+if (!process.env.USERNAME || !process.env.PASSWORD) {
+    console.log('USERNAME and PASSWORD env vars need to be set');
+    process.exit(1);
+}
+
 describe('Application life cycle test', function () {
     this.timeout(0);
 
-    const LOCATION = 'test';
-    const TEST_TIMEOUT = 30000;
+    const LOCATION = process.env.LOCATION || 'test';
+    const TEST_TIMEOUT = parseInt(process.env.TIMEOUT, 10) || 30000;
     const BUCKET = 'cloudrontestbucket';
     const EXEC_ARGS = { cwd: path.resolve(__dirname, '..'), stdio: 'inherit' };
 
     let browser, app;
+    let rootPassword;
+    const username = process.env.USERNAME;
+    const password = process.env.PASSWORD;
 
     before(function () {
-        browser = new Builder().forBrowser('chrome').setChromeOptions(new Options().windowSize({ width: 1280, height: 1024 })).build();
+        const chromeOptions = new Options().windowSize({ width: 1600, height: 1024 });
+        chromeOptions.addArguments('guest'); // disable password checks
+        if (process.env.CI) chromeOptions.addArguments('no-sandbox', 'disable-dev-shm-usage', 'headless');
+        browser = new Builder().forBrowser('chrome').setChromeOptions(chromeOptions).build();
+        if (!fs.existsSync('./screenshots')) fs.mkdirSync('./screenshots');
     });
 
     after(function () {
         browser.quit();
     });
 
+    afterEach(async function () {
+        if (!process.env.CI || !app) return;
+
+        const currentUrl = await browser.getCurrentUrl();
+        if (!currentUrl.includes(app.domain)) return;
+        expect(this.currentTest.title).to.be.a('string');
+
+        const screenshotData = await browser.takeScreenshot();
+        fs.writeFileSync(`./screenshots/${new Date().getTime()}-${this.currentTest.title.replaceAll(' ', '_')}.png`, screenshotData, 'base64');
+    });
+
     async function waitForElement(elem) {
         await browser.wait(until.elementLocated(elem), TEST_TIMEOUT);
         await browser.wait(until.elementIsVisible(browser.findElement(elem)), TEST_TIMEOUT);
@@ -49,36 +68,61 @@ describe('Application life cycle test', function () {
         expect(app).to.be.an('object');
     }
 
-    async function login(accessKey='minioadmin', secretKey='minioadmin') {
+    async function confirmLicense() {
+        await timers.setTimeout(5000);
+        await waitForElement(By.id('acknowledge-confirm'));
+        const button = await browser.findElement(By.id('acknowledge-confirm'));
+        await browser.executeScript('arguments[0].scrollIntoView(false)', button);
+        await browser.sleep(4000);
+        await button.click();
+        await browser.sleep(4000);
+    }
+
+    async function login(username, password, acceptLicense=false) {
+        await browser.manage().deleteAllCookies();
+        await browser.get('about:blank');
+        await browser.sleep(2000);
         await browser.get(`https://${app.fqdn}/login`);
+        await browser.sleep(2000);
+
         await waitForElement(By.id('accessKey'));
-        await browser.findElement(By.id('accessKey')).sendKeys(accessKey);
-        await browser.findElement(By.id('secretKey')).sendKeys(secretKey);
-        await browser.findElement(By.xpath('//button[contains(text(), "Login")]')).click();
-        await waitForElement(By.xpath('//span[contains(text(), "Buckets")]'));
-        await delay(5000);
+        await browser.findElement(By.id('accessKey')).sendKeys(username);
+        await browser.findElement(By.id('secretKey')).sendKeys(password);
+        await browser.findElement(By.xpath('//button[@id="do-login"]')).click();
+
+        if (acceptLicense) await confirmLicense();
+
+        await waitForElement(By.xpath('//button[contains(., "Create Bucket")]'));
+        await timers.setTimeout(5000);
     }
 
     async function logout() {
-        await browser.get(`https://${app.fqdn}/`);
-        await waitForElement(By.xpath('//span[contains(text(), "Buckets")]'));
-        await browser.findElement(By.xpath('//div/span[contains(text(), "Logout")]')).click();
-        await waitForElement(By.id('accessKey'));
+        await browser.sleep(10000);
+        // await browser.get(`https://${app.fqdn}/`);
+        await waitForElement(By.xpath('//button[contains(., "Create Bucket")]'));
+
+        const button = await browser.findElement(By.xpath('//button[@id="sign-out"]'));
+        await browser.executeScript('arguments[0].scrollIntoView(false)', button);
+        await button.click();
+        await browser.sleep(10000); // needed!
+        await waitForElement(By.xpath('//*[@id="accessKey"]'));
     }
 
     async function addBucket() {
-        await browser.get(`https://${app.fqdn}/buckets`);
-        await waitForElement(By.xpath('//button/span[text()="Create Bucket"]'));
-        await browser.findElement(By.xpath('//button/span[text()="Create Bucket"]')).click();
-        await browser.sleep(2000);
+        // await browser.get(`https://${app.fqdn}/buckets`);
+        await waitForElement(By.xpath('//button[contains(., "Create Bucket")]'));
+        await browser.findElement(By.xpath('//button[contains(., "Create Bucket")]')).click();
+        await browser.sleep(1000);
+        await waitForElement(By.xpath('//input[@id="bucket-name"]'));
         await browser.findElement(By.xpath('//input[@id="bucket-name"]')).sendKeys(BUCKET);
-        await browser.findElement(By.xpath('//button[text()="Create Bucket"]')).click();
-        await waitForElement(By.xpath(`//a[contains(text(), "${BUCKET}")]`));
-        await delay(5000);
+        await browser.findElement(By.xpath('//button[@id="create-bucket"]')).click();
+        // await browser.get(`https://${app.fqdn}/buckets`);
+        await waitForElement(By.xpath(`//h1[contains(text(), "${BUCKET}")]`));
     }
 
     async function checkBucket() {
-        await browser.get(`https://${app.fqdn}/buckets`);
+        await browser.sleep(10000);
+        // await browser.get(`https://${app.fqdn}/buckets`);
         await waitForElement(By.xpath(`//h1[contains(text(), "${BUCKET}")]`));
     }
 
@@ -94,34 +138,46 @@ describe('Application life cycle test', function () {
         expect(response.body.toString('utf8')).to.contain('<Code>AccessDenied</Code>');
     }
 
+    async function changeAdminCredentials() {
+        let data = fs.readFileSync(path.join(__dirname, '../env.sh.template'), 'utf8');
+        data += '\nexport MINIO_ROOT_USER=minioakey\nexport MINIO_ROOT_PASSWORD=minioskey\n';
+        fs.writeFileSync('/tmp/env.sh', data);
+        execSync(`cloudron push --app ${app.id} /tmp/env.sh /app/data/env.sh`, EXEC_ARGS);
+        execSync(`cloudron restart --app ${app.id}`, EXEC_ARGS);
+        await timers.setTimeout(10000);
+    }
+
+    async function getAdminCredentials() {
+        execSync(`cloudron pull --app ${app.id} /app/data/env.sh /tmp/env.sh`, EXEC_ARGS);
+        const data = fs.readFileSync('/tmp/env.sh', 'utf8');
+        const m = data.match(/MINIO_ROOT_PASSWORD=(.*)/);
+        if (!m) throw new Error('Could not detect root password');
+        rootPassword = m[1].trim();
+        console.log(`root password is [${rootPassword}]`);
+    }
+
     xit('build app', function () { execSync('cloudron build', EXEC_ARGS); });
+
     it('install app', async function () {
         execSync(`cloudron install --location ${LOCATION} --secondary-domains API_SERVER_DOMAIN=${LOCATION}-api`, EXEC_ARGS);
-        await delay(10000);
+        await timers.setTimeout(10000);
     });
 
     it('can get app information', getAppInfo);
-
-    it('can login', login.bind(null, 'minioadmin', 'minioadmin'));
+    it('can admin login', login.bind(null, 'minioadmin', 'minioadmin', true));
     it('can add bucket', addBucket);
     it('can logout', logout);
     it('does redirect', checkRedirect);
     it('check api', checkApi);
 
-    it('can change credentials', async function () {
-        let data = fs.readFileSync(path.join(__dirname, '../env.sh'), 'utf8');
-        data = data
-            .replace(/MINIO_ROOT_USER=.*/, 'MINIO_ROOT_USER=minioakey')
-            .replace(/MINIO_ROOT_PASSWORD=.*/, 'MINIO_ROOT_PASSWORD=minioskey');
-        fs.writeFileSync('/tmp/env.sh', data);
-        execSync(`cloudron push --app ${app.id} /tmp/env.sh /app/data/env.sh`, EXEC_ARGS);
+    it('can change admin credentials', changeAdminCredentials);
+
+    it('can restart app', async function () {
         execSync(`cloudron restart --app ${app.id}`, EXEC_ARGS);
-        await delay(10000);
+        await timers.setTimeout(10000);
     });
 
-    it('can restart app', function () { execSync(`cloudron restart --app ${app.id}`, EXEC_ARGS); });
-
-    it('can login', login.bind(null, 'minioakey', 'minioskey'));
+    it('can admin login', login.bind(null, 'minioakey', 'minioskey', false));
     it('has bucket', checkBucket);
     it('can logout', logout);
     it('does redirect', checkRedirect);
@@ -134,47 +190,52 @@ describe('Application life cycle test', function () {
         execSync('cloudron install --location ' + LOCATION, EXEC_ARGS);
         getAppInfo();
         execSync(`cloudron restore --backup ${backups[0].id} --app ${app.id}`, EXEC_ARGS);
-        await delay(10000);
+        await timers.setTimeout(10000);
     });
 
-    it('can login', login.bind(null, 'minioakey', 'minioskey'));
+    it('can get app information', getAppInfo);
+    it('can admin login', login.bind(null, 'minioakey', 'minioskey', false));
     it('has bucket', checkBucket);
     it('can logout', logout);
+
     it('does redirect', checkRedirect);
     it('check api', checkApi);
 
     it('move to different location', async function () {
         browser.manage().deleteAllCookies();
         execSync('cloudron configure --location ' + LOCATION + '2', EXEC_ARGS);
-        await delay(10000);
+        await timers.setTimeout(10000);
     });
     it('can get app information', getAppInfo);
 
-    it('can login', login.bind(null, 'minioakey', 'minioskey'));
+    it('can admin login', login.bind(null, 'minioakey', 'minioskey', true));
     it('has bucket', checkBucket);
     it('can logout', logout);
+
     it('does redirect', checkRedirect);
     it('check api', checkApi);
 
     it('uninstall app', function () { execSync('cloudron uninstall --app ' + app.id, EXEC_ARGS); });
 
     // test update
-    it('can install app', function () { execSync('cloudron install --appstore-id io.minio.cloudronapp --location ' + LOCATION, EXEC_ARGS); });
-    it('can get app information', getAppInfo);
-
-    it('can login', login.bind(null, 'minioadmin', 'minioadmin'));
-    it('can add buckets', addBucket);
-    it('can logout', logout);
-    it('can update', function () { execSync(`cloudron update --app ${LOCATION}`, EXEC_ARGS); });
-    it('can configure', function () { execSync(`cloudron configure --app ${LOCATION} --location ${LOCATION} --secondary-domains API_SERVER_DOMAIN=${LOCATION}-api`, EXEC_ARGS); });
-    it('can get app information', getAppInfo);
-
-    it('can login', login.bind(null, 'minioadmin', 'minioadmin'));
-    it('has bucket', checkBucket);
-    it('can logout', logout);
-    it('does redirect', checkRedirect);
-    it('check api', checkApi);
-
-    it('uninstall app', function () { execSync('cloudron uninstall --app ' + app.id, EXEC_ARGS); });
+//    it('can install app for update', function () { execSync('cloudron install --appstore-id io.minio.cloudronapp --location ' + LOCATION, EXEC_ARGS); });
+//    it('can get app information', getAppInfo);
+//
+//    it('can get admin credentials', getAdminCredentials);
+//    it('can admin login', async () => await login('minioadmin', rootPassword, true));
+//    it('can add buckets', addBucket);
+//    it('can logout', logout);
+//
+//    it('can update', function () { execSync(`cloudron update --app ${LOCATION}`, EXEC_ARGS); });
+//    it('can configure', function () { execSync(`cloudron configure --app ${LOCATION} --location ${LOCATION} --secondary-domains API_SERVER_DOMAIN=${LOCATION}-api`, EXEC_ARGS); });
+//    it('can get app information', getAppInfo);
+//
+//    it('can admin login', async () => await login('minioadmin', rootPassword, true));
+//    it('has bucket', checkBucket);
+//    it('can logout', logout);
+//
+//    it('does redirect', checkRedirect);
+//    it('check api', checkApi);
+//
+//    it('uninstall app', function () { execSync('cloudron uninstall --app ' + app.id, EXEC_ARGS); });
 });
-