cleanup: Be selective about image formats in appimage as well.

TokTok · Jan 8, 2025 · 9b3dcc0 · 9b3dcc0
1 parent a762072
commit 9b3dcc0
Showing 1 changed file with 9 additions and 0 deletions.
diff --git a/qtox/docker/Dockerfile.alpine-appimage b/qtox/docker/Dockerfile.alpine-appimage
@@ -115,5 +115,14 @@ RUN mkdir -p /src/tox \
  && /build/build_toxcore.sh --arch "$SCRIPT_ARCH" --libtype shared \
  && rm -fr /src/tox
 
+# We're selective about Qt image format plugins for security reasons. We only
+# include the ones we've tested (e.g. with fuzzing).
+RUN mkdir /work/tmp \
+ && for fmt in kimg_qoi qgif qjpeg qsvg qwebp; do \
+      cp "/work/qt/plugins/imageformats/lib$fmt.so" /work/tmp; \
+    done \
+ && rm -rf /work/qt/plugins/imageformats \
+ && mv /work/tmp /work/qt/plugins/imageformats
+
 WORKDIR /qtox
 ENV HOME=/qtox