mirror of
https://github.com/snapotter-hq/SnapOtter.git
synced 2026-08-03 07:46:42 +02:00
chore: prepare the 2.2.0 release (#660)
Bumps every version surface to 2.2.0, fixes a latent version-coupling bug in the OCR runtime tests, and stops an absent GPU runner from silently stalling a release. Version surfaces: scripts/sync-version.sh covers the 11 workspaces, APP_VERSION, and the docs release commands across all locales. Root package.json plus the three surfaces the script never reaches are done by hand: the DOCKERHUB.md banner and tag table, the docker-tags.md pinning table in 21 locales, and the example runtimeVersion in tools/image/ocr.md in 21 locales. The release-notes archive step is deliberately not pre-run, so the notes text stays editable until the release. Latent bug: runtime-state rejects any runtime whose compatibility.snapotterVersion is not exactly APP_VERSION, and five fixtures pinned the literal 2.1.0. Since semantic-release rewrites APP_VERSION on every release, the first PR after any bump would have gone red for a reason nobody would trace to the release. The fixtures now derive from APP_VERSION. GPU runner: sign-ocr-index needs verify-ocr-nvidia on self-hosted hardware, and the gated manifest job needs ai-bundles, so a missing runner queued instead of failing and produced no image tags. preflight-gpu-runner claims the same labels with no dependencies, so it is scheduled first and validates the GPU before the 90-minute build. An API preflight is impossible because listing self-hosted runners needs Administration:read, which GITHUB_TOKEN cannot hold, so RELEASE.md carries the maintainer-side check.
This commit is contained in:
@@ -1,6 +1,6 @@
|
||||
{
|
||||
"name": "@snapotter/api",
|
||||
"version": "2.1.0",
|
||||
"version": "2.2.0",
|
||||
"private": true,
|
||||
"type": "module",
|
||||
"scripts": {
|
||||
|
||||
@@ -1,6 +1,6 @@
|
||||
{
|
||||
"name": "@snapotter/demo",
|
||||
"version": "2.1.0",
|
||||
"version": "2.2.0",
|
||||
"private": true,
|
||||
"type": "module",
|
||||
"scripts": {
|
||||
|
||||
@@ -141,8 +141,8 @@ volumes:
|
||||
| العلامة | الوصف |
|
||||
|-----|------------|
|
||||
| `latest` | أحدث إصدار |
|
||||
| `2.1.0` | إصدار محدد |
|
||||
| `2.1` | أحدث تصحيح في 2.1.x |
|
||||
| `2.2.0` | إصدار محدد |
|
||||
| `2.2` | أحدث تصحيح في 2.2.x |
|
||||
| `2` | أحدث إصدار فرعي في 2.x |
|
||||
|
||||
## المنصات {#platforms}
|
||||
|
||||
@@ -59,7 +59,7 @@ docker run -d --name SnapOtter -p 1349:1349 -v SnapOtter-data:/data ghcr.io/snap
|
||||
```bash
|
||||
install -d -m 700 snapotter && cd snapotter
|
||||
curl --proto '=https' --tlsv1.2 -fsSLo docker-compose.yml \
|
||||
https://raw.githubusercontent.com/snapotter-hq/SnapOtter/v2.1.0/docker/docker-compose.yml
|
||||
https://raw.githubusercontent.com/snapotter-hq/SnapOtter/v2.2.0/docker/docker-compose.yml
|
||||
|
||||
# Keep generated service credentials out of shell history and world-readable files.
|
||||
umask 077
|
||||
@@ -72,7 +72,7 @@ docker compose -f docker-compose.yml pull
|
||||
docker compose -f docker-compose.yml up -d --no-build
|
||||
```
|
||||
|
||||
يتضمن [`docker/docker-compose.yml`](https://github.com/snapotter-hq/SnapOtter/blob/v2.1.0/docker/docker-compose.yml) الأساسي جميع وحدات تخزين وقت التشغيل الأربعة، وفحوصات السلامة، وحدود الموارد، وتكوين Redis الدائم، وصور قاعدة البيانات/ذاكرة التخزين المؤقت المثبتة، وتصلب الحاوية الحالية. قم بتغيير كلمة مرور المسؤول الافتراضية مباشرة بعد تسجيل الدخول الأول. للحصول على نشر قابل للتكرار، قم بتثبيت صورة تطبيق SnapOtter على علامة الإصدار أو الملخص الذي قمت بالتحقق منه بدلاً من اتباع `latest`.
|
||||
يتضمن [`docker/docker-compose.yml`](https://github.com/snapotter-hq/SnapOtter/blob/v2.2.0/docker/docker-compose.yml) الأساسي جميع وحدات تخزين وقت التشغيل الأربعة، وفحوصات السلامة، وحدود الموارد، وتكوين Redis الدائم، وصور قاعدة البيانات/ذاكرة التخزين المؤقت المثبتة، وتصلب الحاوية الحالية. قم بتغيير كلمة مرور المسؤول الافتراضية مباشرة بعد تسجيل الدخول الأول. للحصول على نشر قابل للتكرار، قم بتثبيت صورة تطبيق SnapOtter على علامة الإصدار أو الملخص الذي قمت بالتحقق منه بدلاً من اتباع `latest`.
|
||||
|
||||
راجع [التكوين](/ar/guide/configuration) للتعرف على كافة متغيرات البيئة و[الأمان والصلابة](/ar/guide/security) للتعرف على الأسرار وسياسة الشبكة وإرشادات النسخ الاحتياطي.
|
||||
|
||||
|
||||
@@ -242,7 +242,7 @@ sha256sum backup/snapotter-*.tar.gz > backup/SHA256SUMS
|
||||
قم بتنزيل بيان موضوع الإصدار وتحقق من أنه تم التصديق عليه من خلال سير عمل الإصدار:
|
||||
|
||||
```bash
|
||||
gh attestation verify snapotter-v2.1.0-release-subjects.json \
|
||||
gh attestation verify snapotter-v2.2.0-release-subjects.json \
|
||||
--repo snapotter-hq/SnapOtter \
|
||||
--signer-workflow snapotter-hq/SnapOtter/.github/workflows/release.yml
|
||||
```
|
||||
@@ -253,13 +253,13 @@ gh attestation verify snapotter-v2.1.0-release-subjects.json \
|
||||
|
||||
```bash
|
||||
# Scan with Grype using the CycloneDX SBOM
|
||||
grype sbom:snapotter-v2.1.0-image-linux-amd64-sbom.cdx.json
|
||||
grype sbom:snapotter-v2.2.0-image-linux-amd64-sbom.cdx.json
|
||||
|
||||
# Scan with Trivy using the SPDX SBOM
|
||||
trivy sbom snapotter-v2.1.0-image-linux-amd64-sbom.spdx.json
|
||||
trivy sbom snapotter-v2.2.0-image-linux-amd64-sbom.spdx.json
|
||||
|
||||
# Scan the Docker image directly
|
||||
trivy image snapotter/snapotter:2.1.0
|
||||
trivy image snapotter/snapotter:2.2.0
|
||||
```
|
||||
|
||||
::: info
|
||||
|
||||
@@ -76,7 +76,7 @@ curl -X POST http://localhost:1349/api/v1/tools/image/ocr \
|
||||
"provider": "CPUExecutionProvider",
|
||||
"degraded": false,
|
||||
"warnings": [],
|
||||
"runtimeVersion": "2.1.0",
|
||||
"runtimeVersion": "2.2.0",
|
||||
"modelVersion": "PP-OCRv6-best-v1-medium"
|
||||
}
|
||||
}
|
||||
|
||||
@@ -141,8 +141,8 @@ Für NVIDIA-CUDA-Beschleunigung über Docker Compose fügen Sie den deploy-Absch
|
||||
| Tag | Beschreibung |
|
||||
|-----|------------|
|
||||
| `latest` | Neueste Version |
|
||||
| `2.1.0` | Exakte Version |
|
||||
| `2.1` | Neuester Patch in 2.1.x |
|
||||
| `2.2.0` | Exakte Version |
|
||||
| `2.2` | Neuester Patch in 2.2.x |
|
||||
| `2` | Neueste Minor-Version in 2.x |
|
||||
|
||||
## Plattformen {#platforms}
|
||||
|
||||
@@ -59,7 +59,7 @@ Verwenden Sie die Produktionsdatei, die mit jeder Version gepflegt und getestet
|
||||
```bash
|
||||
install -d -m 700 snapotter && cd snapotter
|
||||
curl --proto '=https' --tlsv1.2 -fsSLo docker-compose.yml \
|
||||
https://raw.githubusercontent.com/snapotter-hq/SnapOtter/v2.1.0/docker/docker-compose.yml
|
||||
https://raw.githubusercontent.com/snapotter-hq/SnapOtter/v2.2.0/docker/docker-compose.yml
|
||||
|
||||
# Keep generated service credentials out of shell history and world-readable files.
|
||||
umask 077
|
||||
@@ -72,7 +72,7 @@ docker compose -f docker-compose.yml pull
|
||||
docker compose -f docker-compose.yml up -d --no-build
|
||||
```
|
||||
|
||||
Das kanonische [`docker/docker-compose.yml`](https://github.com/snapotter-hq/SnapOtter/blob/v2.1.0/docker/docker-compose.yml) umfasst alle vier Laufzeit-Volumes, Gesundheitsprüfungen, Ressourcenlimits, dauerhafte Redis-Konfiguration, angeheftete Datenbank-/Cache-Images und die aktuelle Containerhärtung. Ändern Sie das Standard-Administratorkennwort sofort nach der ersten Anmeldung. Für eine reproduzierbare Bereitstellung heften Sie das SnapOtter-Anwendungsimage an das von Ihnen überprüfte Release-Tag oder Digest, anstatt `latest` zu folgen.
|
||||
Das kanonische [`docker/docker-compose.yml`](https://github.com/snapotter-hq/SnapOtter/blob/v2.2.0/docker/docker-compose.yml) umfasst alle vier Laufzeit-Volumes, Gesundheitsprüfungen, Ressourcenlimits, dauerhafte Redis-Konfiguration, angeheftete Datenbank-/Cache-Images und die aktuelle Containerhärtung. Ändern Sie das Standard-Administratorkennwort sofort nach der ersten Anmeldung. Für eine reproduzierbare Bereitstellung heften Sie das SnapOtter-Anwendungsimage an das von Ihnen überprüfte Release-Tag oder Digest, anstatt `latest` zu folgen.
|
||||
|
||||
Siehe [Konfiguration](/de/guide/configuration) für alle Umgebungsvariablen und [Sicherheit und Härtung](/de/guide/security) für Geheimnisse, Netzwerkrichtlinien und Backup-Anleitungen.
|
||||
|
||||
|
||||
@@ -245,7 +245,7 @@ Jede SnapOtter-Version enthält die folgenden Sicherheitsartefakte:
|
||||
Laden Sie das Release-Subjekt-Manifest herunter und überprüfen Sie, ob es vom Release-Workflow bestätigt wurde:
|
||||
|
||||
```bash
|
||||
gh attestation verify snapotter-v2.1.0-release-subjects.json \
|
||||
gh attestation verify snapotter-v2.2.0-release-subjects.json \
|
||||
--repo snapotter-hq/SnapOtter \
|
||||
--signer-workflow snapotter-hq/SnapOtter/.github/workflows/release.yml
|
||||
```
|
||||
@@ -256,13 +256,13 @@ Sie können auch ein heruntergeladenes SBOM oder das Bild direkt scannen:
|
||||
|
||||
```bash
|
||||
# Scan with Grype using the CycloneDX SBOM
|
||||
grype sbom:snapotter-v2.1.0-image-linux-amd64-sbom.cdx.json
|
||||
grype sbom:snapotter-v2.2.0-image-linux-amd64-sbom.cdx.json
|
||||
|
||||
# Scan with Trivy using the SPDX SBOM
|
||||
trivy sbom snapotter-v2.1.0-image-linux-amd64-sbom.spdx.json
|
||||
trivy sbom snapotter-v2.2.0-image-linux-amd64-sbom.spdx.json
|
||||
|
||||
# Scan the Docker image directly
|
||||
trivy image snapotter/snapotter:2.1.0
|
||||
trivy image snapotter/snapotter:2.2.0
|
||||
```
|
||||
|
||||
::: info
|
||||
|
||||
@@ -76,7 +76,7 @@ Verbinden Sie sich mit `GET /api/v1/jobs/{jobId}/progress` und verwenden Sie die
|
||||
"provider": "CPUExecutionProvider",
|
||||
"degraded": false,
|
||||
"warnings": [],
|
||||
"runtimeVersion": "2.1.0",
|
||||
"runtimeVersion": "2.2.0",
|
||||
"modelVersion": "PP-OCRv6-best-v1-medium"
|
||||
}
|
||||
}
|
||||
|
||||
@@ -141,8 +141,8 @@ Para la aceleración NVIDIA CUDA mediante Docker Compose, añade la sección dep
|
||||
| Etiqueta | Descripción |
|
||||
|-----|------------|
|
||||
| `latest` | Última versión |
|
||||
| `2.1.0` | Versión exacta |
|
||||
| `2.1` | Último parche en 2.1.x |
|
||||
| `2.2.0` | Versión exacta |
|
||||
| `2.2` | Último parche en 2.2.x |
|
||||
| `2` | Última versión menor en 2.x |
|
||||
|
||||
## Plataformas {#platforms}
|
||||
|
||||
@@ -59,7 +59,7 @@ Utilice el archivo de producción mantenido y probado con cada versión en lugar
|
||||
```bash
|
||||
install -d -m 700 snapotter && cd snapotter
|
||||
curl --proto '=https' --tlsv1.2 -fsSLo docker-compose.yml \
|
||||
https://raw.githubusercontent.com/snapotter-hq/SnapOtter/v2.1.0/docker/docker-compose.yml
|
||||
https://raw.githubusercontent.com/snapotter-hq/SnapOtter/v2.2.0/docker/docker-compose.yml
|
||||
|
||||
# Keep generated service credentials out of shell history and world-readable files.
|
||||
umask 077
|
||||
@@ -72,7 +72,7 @@ docker compose -f docker-compose.yml pull
|
||||
docker compose -f docker-compose.yml up -d --no-build
|
||||
```
|
||||
|
||||
El canónico [`docker/docker-compose.yml`](https://github.com/snapotter-hq/SnapOtter/blob/v2.1.0/docker/docker-compose.yml) incluye los cuatro volúmenes de tiempo de ejecución, comprobaciones de estado, límites de recursos, configuración duradera de Redis, imágenes de caché/base de datos fijadas y el refuerzo del contenedor actual. Cambie la contraseña de administrador predeterminada inmediatamente después del primer inicio de sesión. Para una implementación reproducible, fije la imagen de la aplicación SnapOtter a la etiqueta de versión o resumen que verificó en lugar de seguir `latest`.
|
||||
El canónico [`docker/docker-compose.yml`](https://github.com/snapotter-hq/SnapOtter/blob/v2.2.0/docker/docker-compose.yml) incluye los cuatro volúmenes de tiempo de ejecución, comprobaciones de estado, límites de recursos, configuración duradera de Redis, imágenes de caché/base de datos fijadas y el refuerzo del contenedor actual. Cambie la contraseña de administrador predeterminada inmediatamente después del primer inicio de sesión. Para una implementación reproducible, fije la imagen de la aplicación SnapOtter a la etiqueta de versión o resumen que verificó en lugar de seguir `latest`.
|
||||
|
||||
Consulte [Configuración](/es/guide/configuration) para conocer todas las variables de entorno y [Seguridad y refuerzo](/es/guide/security) para conocer secretos, políticas de red y orientación sobre copias de seguridad.
|
||||
|
||||
|
||||
@@ -242,7 +242,7 @@ Cada versión de SnapOtter incluye los siguientes artefactos de seguridad:
|
||||
Descargue el manifiesto sujeto a la versión y verifique que haya sido atestiguado por el flujo de trabajo de la versión:
|
||||
|
||||
```bash
|
||||
gh attestation verify snapotter-v2.1.0-release-subjects.json \
|
||||
gh attestation verify snapotter-v2.2.0-release-subjects.json \
|
||||
--repo snapotter-hq/SnapOtter \
|
||||
--signer-workflow snapotter-hq/SnapOtter/.github/workflows/release.yml
|
||||
```
|
||||
@@ -253,13 +253,13 @@ También puedes escanear un SBOM descargado o la imagen directamente:
|
||||
|
||||
```bash
|
||||
# Scan with Grype using the CycloneDX SBOM
|
||||
grype sbom:snapotter-v2.1.0-image-linux-amd64-sbom.cdx.json
|
||||
grype sbom:snapotter-v2.2.0-image-linux-amd64-sbom.cdx.json
|
||||
|
||||
# Scan with Trivy using the SPDX SBOM
|
||||
trivy sbom snapotter-v2.1.0-image-linux-amd64-sbom.spdx.json
|
||||
trivy sbom snapotter-v2.2.0-image-linux-amd64-sbom.spdx.json
|
||||
|
||||
# Scan the Docker image directly
|
||||
trivy image snapotter/snapotter:2.1.0
|
||||
trivy image snapotter/snapotter:2.2.0
|
||||
```
|
||||
|
||||
::: info
|
||||
|
||||
@@ -76,7 +76,7 @@ Conéctese a `GET /api/v1/jobs/{jobId}/progress` con el `jobId` devuelto por la
|
||||
"provider": "CPUExecutionProvider",
|
||||
"degraded": false,
|
||||
"warnings": [],
|
||||
"runtimeVersion": "2.1.0",
|
||||
"runtimeVersion": "2.2.0",
|
||||
"modelVersion": "PP-OCRv6-best-v1-medium"
|
||||
}
|
||||
}
|
||||
|
||||
@@ -141,8 +141,8 @@ Pour l'accélération NVIDIA CUDA via Docker Compose, ajoutez la section deploy
|
||||
| Tag | Description |
|
||||
|-----|------------|
|
||||
| `latest` | Dernière version |
|
||||
| `2.1.0` | Version exacte |
|
||||
| `2.1` | Dernier correctif de la 2.1.x |
|
||||
| `2.2.0` | Version exacte |
|
||||
| `2.2` | Dernier correctif de la 2.2.x |
|
||||
| `2` | Dernière version mineure de la 2.x |
|
||||
|
||||
## Plateformes {#platforms}
|
||||
|
||||
@@ -59,7 +59,7 @@ Utilisez le fichier de production maintenu et testé avec chaque version au lieu
|
||||
```bash
|
||||
install -d -m 700 snapotter && cd snapotter
|
||||
curl --proto '=https' --tlsv1.2 -fsSLo docker-compose.yml \
|
||||
https://raw.githubusercontent.com/snapotter-hq/SnapOtter/v2.1.0/docker/docker-compose.yml
|
||||
https://raw.githubusercontent.com/snapotter-hq/SnapOtter/v2.2.0/docker/docker-compose.yml
|
||||
|
||||
# Keep generated service credentials out of shell history and world-readable files.
|
||||
umask 077
|
||||
@@ -72,7 +72,7 @@ docker compose -f docker-compose.yml pull
|
||||
docker compose -f docker-compose.yml up -d --no-build
|
||||
```
|
||||
|
||||
Le canonique [`docker/docker-compose.yml`](https://github.com/snapotter-hq/SnapOtter/blob/v2.1.0/docker/docker-compose.yml) inclut les quatre volumes d'exécution, les vérifications de l'état, les limites de ressources, la configuration Redis durable, les images de base de données/cache épinglées et le renforcement actuel du conteneur. Modifiez le mot de passe administrateur par défaut immédiatement après la première connexion. Pour un déploiement reproductible, épinglez l’image de l’application SnapOtter à la balise de version ou au résumé que vous avez vérifié au lieu de suivre `latest`.
|
||||
Le canonique [`docker/docker-compose.yml`](https://github.com/snapotter-hq/SnapOtter/blob/v2.2.0/docker/docker-compose.yml) inclut les quatre volumes d'exécution, les vérifications de l'état, les limites de ressources, la configuration Redis durable, les images de base de données/cache épinglées et le renforcement actuel du conteneur. Modifiez le mot de passe administrateur par défaut immédiatement après la première connexion. Pour un déploiement reproductible, épinglez l’image de l’application SnapOtter à la balise de version ou au résumé que vous avez vérifié au lieu de suivre `latest`.
|
||||
|
||||
Voir [Configuration](/fr/guide/configuration) pour toutes les variables d'environnement et [Sécurité et renforcement](/fr/guide/security) pour les secrets, la politique réseau et les conseils de sauvegarde.
|
||||
|
||||
|
||||
@@ -242,7 +242,7 @@ Chaque version SnapOtter inclut les artefacts de sécurité suivants :
|
||||
Téléchargez le manifeste du sujet de la version et vérifiez qu'il a été attesté par le workflow de version :
|
||||
|
||||
```bash
|
||||
gh attestation verify snapotter-v2.1.0-release-subjects.json \
|
||||
gh attestation verify snapotter-v2.2.0-release-subjects.json \
|
||||
--repo snapotter-hq/SnapOtter \
|
||||
--signer-workflow snapotter-hq/SnapOtter/.github/workflows/release.yml
|
||||
```
|
||||
@@ -253,13 +253,13 @@ Vous pouvez également numériser un SBOM téléchargé ou l'image directement
|
||||
|
||||
```bash
|
||||
# Scan with Grype using the CycloneDX SBOM
|
||||
grype sbom:snapotter-v2.1.0-image-linux-amd64-sbom.cdx.json
|
||||
grype sbom:snapotter-v2.2.0-image-linux-amd64-sbom.cdx.json
|
||||
|
||||
# Scan with Trivy using the SPDX SBOM
|
||||
trivy sbom snapotter-v2.1.0-image-linux-amd64-sbom.spdx.json
|
||||
trivy sbom snapotter-v2.2.0-image-linux-amd64-sbom.spdx.json
|
||||
|
||||
# Scan the Docker image directly
|
||||
trivy image snapotter/snapotter:2.1.0
|
||||
trivy image snapotter/snapotter:2.2.0
|
||||
```
|
||||
|
||||
::: info
|
||||
|
||||
@@ -76,7 +76,7 @@ Connectez-vous à `GET /api/v1/jobs/{jobId}/progress` avec le `jobId` renvoyé p
|
||||
"provider": "CPUExecutionProvider",
|
||||
"degraded": false,
|
||||
"warnings": [],
|
||||
"runtimeVersion": "2.1.0",
|
||||
"runtimeVersion": "2.2.0",
|
||||
"modelVersion": "PP-OCRv6-best-v1-medium"
|
||||
}
|
||||
}
|
||||
|
||||
@@ -137,8 +137,8 @@ For NVIDIA CUDA acceleration via Docker Compose, add the deploy section to the S
|
||||
| Tag | Description |
|
||||
|-----|------------|
|
||||
| `latest` | Latest release |
|
||||
| `2.1.0` | Exact version |
|
||||
| `2.1` | Latest patch in 2.1.x |
|
||||
| `2.2.0` | Exact version |
|
||||
| `2.2` | Latest patch in 2.2.x |
|
||||
| `2` | Latest minor in 2.x |
|
||||
|
||||
## Platforms {#platforms}
|
||||
|
||||
@@ -55,7 +55,7 @@ Use the production file maintained and tested with each release instead of copyi
|
||||
```bash
|
||||
install -d -m 700 snapotter && cd snapotter
|
||||
curl --proto '=https' --tlsv1.2 -fsSLo docker-compose.yml \
|
||||
https://raw.githubusercontent.com/snapotter-hq/SnapOtter/v2.1.0/docker/docker-compose.yml
|
||||
https://raw.githubusercontent.com/snapotter-hq/SnapOtter/v2.2.0/docker/docker-compose.yml
|
||||
|
||||
# Keep generated service credentials out of shell history and world-readable files.
|
||||
umask 077
|
||||
@@ -68,7 +68,7 @@ docker compose -f docker-compose.yml pull
|
||||
docker compose -f docker-compose.yml up -d --no-build
|
||||
```
|
||||
|
||||
The canonical [`docker/docker-compose.yml`](https://github.com/snapotter-hq/SnapOtter/blob/v2.1.0/docker/docker-compose.yml) includes all four runtime volumes, health checks, resource limits, durable Redis configuration, pinned database/cache images, and the current container hardening. Change the default admin password immediately after first login. For a reproducible deployment, pin the SnapOtter application image to the release tag or digest you verified instead of following `latest`.
|
||||
The canonical [`docker/docker-compose.yml`](https://github.com/snapotter-hq/SnapOtter/blob/v2.2.0/docker/docker-compose.yml) includes all four runtime volumes, health checks, resource limits, durable Redis configuration, pinned database/cache images, and the current container hardening. Change the default admin password immediately after first login. For a reproducible deployment, pin the SnapOtter application image to the release tag or digest you verified instead of following `latest`.
|
||||
|
||||
See [Configuration](/guide/configuration) for all environment variables and [Security & Hardening](/guide/security) for secrets, network policy, and backup guidance.
|
||||
|
||||
|
||||
@@ -238,7 +238,7 @@ Each SnapOtter release includes the following security artifacts:
|
||||
Download the release-subject manifest and verify that it was attested by the release workflow:
|
||||
|
||||
```bash
|
||||
gh attestation verify snapotter-v2.1.0-release-subjects.json \
|
||||
gh attestation verify snapotter-v2.2.0-release-subjects.json \
|
||||
--repo snapotter-hq/SnapOtter \
|
||||
--signer-workflow snapotter-hq/SnapOtter/.github/workflows/release.yml
|
||||
```
|
||||
@@ -249,13 +249,13 @@ You can also scan a downloaded SBOM or the image directly:
|
||||
|
||||
```bash
|
||||
# Scan with Grype using the CycloneDX SBOM
|
||||
grype sbom:snapotter-v2.1.0-image-linux-amd64-sbom.cdx.json
|
||||
grype sbom:snapotter-v2.2.0-image-linux-amd64-sbom.cdx.json
|
||||
|
||||
# Scan with Trivy using the SPDX SBOM
|
||||
trivy sbom snapotter-v2.1.0-image-linux-amd64-sbom.spdx.json
|
||||
trivy sbom snapotter-v2.2.0-image-linux-amd64-sbom.spdx.json
|
||||
|
||||
# Scan the Docker image directly
|
||||
trivy image snapotter/snapotter:2.1.0
|
||||
trivy image snapotter/snapotter:2.2.0
|
||||
```
|
||||
|
||||
::: info
|
||||
|
||||
@@ -141,8 +141,8 @@ Docker Compose के माध्यम से NVIDIA CUDA acceleration के
|
||||
| Tag | Description |
|
||||
|-----|------------|
|
||||
| `latest` | नवीनतम release |
|
||||
| `2.1.0` | सटीक version |
|
||||
| `2.1` | 2.1.x में नवीनतम patch |
|
||||
| `2.2.0` | सटीक version |
|
||||
| `2.2` | 2.2.x में नवीनतम patch |
|
||||
| `2` | 2.x में नवीनतम minor |
|
||||
|
||||
## Platforms {#platforms}
|
||||
|
||||
@@ -59,7 +59,7 @@ docker run -d --name SnapOtter -p 1349:1349 -v SnapOtter-data:/data ghcr.io/snap
|
||||
```bash
|
||||
install -d -m 700 snapotter && cd snapotter
|
||||
curl --proto '=https' --tlsv1.2 -fsSLo docker-compose.yml \
|
||||
https://raw.githubusercontent.com/snapotter-hq/SnapOtter/v2.1.0/docker/docker-compose.yml
|
||||
https://raw.githubusercontent.com/snapotter-hq/SnapOtter/v2.2.0/docker/docker-compose.yml
|
||||
|
||||
# Keep generated service credentials out of shell history and world-readable files.
|
||||
umask 077
|
||||
@@ -72,7 +72,7 @@ docker compose -f docker-compose.yml pull
|
||||
docker compose -f docker-compose.yml up -d --no-build
|
||||
```
|
||||
|
||||
कैनोनिकल [`docker/docker-compose.yml`](https://github.com/snapotter-hq/SnapOtter/blob/v2.1.0/docker/docker-compose.yml) में सभी चार रनटाइम वॉल्यूम, स्वास्थ्य जांच, संसाधन सीमाएं, टिकाऊ रेडिस कॉन्फ़िगरेशन, पिन किए गए डेटाबेस/कैश छवियां और वर्तमान कंटेनर हार्डनिंग शामिल हैं। प्रथम लॉगिन के तुरंत बाद डिफ़ॉल्ट एडमिन पासवर्ड बदलें। प्रतिलिपि प्रस्तुत करने योग्य परिनियोजन के लिए, `latest` का अनुसरण करने के बजाय SnapOtter एप्लिकेशन छवि को रिलीज़ टैग पर पिन करें या आपके द्वारा सत्यापित डाइजेस्ट करें।
|
||||
कैनोनिकल [`docker/docker-compose.yml`](https://github.com/snapotter-hq/SnapOtter/blob/v2.2.0/docker/docker-compose.yml) में सभी चार रनटाइम वॉल्यूम, स्वास्थ्य जांच, संसाधन सीमाएं, टिकाऊ रेडिस कॉन्फ़िगरेशन, पिन किए गए डेटाबेस/कैश छवियां और वर्तमान कंटेनर हार्डनिंग शामिल हैं। प्रथम लॉगिन के तुरंत बाद डिफ़ॉल्ट एडमिन पासवर्ड बदलें। प्रतिलिपि प्रस्तुत करने योग्य परिनियोजन के लिए, `latest` का अनुसरण करने के बजाय SnapOtter एप्लिकेशन छवि को रिलीज़ टैग पर पिन करें या आपके द्वारा सत्यापित डाइजेस्ट करें।
|
||||
|
||||
सभी पर्यावरण चर के लिए [कॉन्फ़िगरेशन](/hi/guide/configuration) और रहस्यों, नेटवर्क नीति और बैकअप मार्गदर्शन के लिए [सुरक्षा और हार्डनिंग](/hi/guide/security) देखें।
|
||||
|
||||
|
||||
@@ -242,7 +242,7 @@ sha256sum backup/snapotter-*.tar.gz > backup/SHA256SUMS
|
||||
रिलीज़-विषय मेनिफ़ेस्ट डाउनलोड करें और सत्यापित करें कि यह रिलीज़ वर्कफ़्लो द्वारा प्रमाणित किया गया था:
|
||||
|
||||
```bash
|
||||
gh attestation verify snapotter-v2.1.0-release-subjects.json \
|
||||
gh attestation verify snapotter-v2.2.0-release-subjects.json \
|
||||
--repo snapotter-hq/SnapOtter \
|
||||
--signer-workflow snapotter-hq/SnapOtter/.github/workflows/release.yml
|
||||
```
|
||||
@@ -253,13 +253,13 @@ gh attestation verify snapotter-v2.1.0-release-subjects.json \
|
||||
|
||||
```bash
|
||||
# Scan with Grype using the CycloneDX SBOM
|
||||
grype sbom:snapotter-v2.1.0-image-linux-amd64-sbom.cdx.json
|
||||
grype sbom:snapotter-v2.2.0-image-linux-amd64-sbom.cdx.json
|
||||
|
||||
# Scan with Trivy using the SPDX SBOM
|
||||
trivy sbom snapotter-v2.1.0-image-linux-amd64-sbom.spdx.json
|
||||
trivy sbom snapotter-v2.2.0-image-linux-amd64-sbom.spdx.json
|
||||
|
||||
# Scan the Docker image directly
|
||||
trivy image snapotter/snapotter:2.1.0
|
||||
trivy image snapotter/snapotter:2.2.0
|
||||
```
|
||||
|
||||
::: info
|
||||
|
||||
@@ -76,7 +76,7 @@ curl -X POST http://localhost:1349/api/v1/tools/image/ocr \
|
||||
"provider": "CPUExecutionProvider",
|
||||
"degraded": false,
|
||||
"warnings": [],
|
||||
"runtimeVersion": "2.1.0",
|
||||
"runtimeVersion": "2.2.0",
|
||||
"modelVersion": "PP-OCRv6-best-v1-medium"
|
||||
}
|
||||
}
|
||||
|
||||
@@ -141,8 +141,8 @@ Untuk akselerasi NVIDIA CUDA via Docker Compose, tambahkan bagian deploy ke laya
|
||||
| Tag | Deskripsi |
|
||||
|-----|------------|
|
||||
| `latest` | Rilis terbaru |
|
||||
| `2.1.0` | Versi persis |
|
||||
| `2.1` | Patch terbaru di 2.1.x |
|
||||
| `2.2.0` | Versi persis |
|
||||
| `2.2` | Patch terbaru di 2.2.x |
|
||||
| `2` | Minor terbaru di 2.x |
|
||||
|
||||
## Platform {#platforms}
|
||||
|
||||
@@ -59,7 +59,7 @@ Gunakan file produksi yang dikelola dan diuji pada setiap rilis alih-alih menyal
|
||||
```bash
|
||||
install -d -m 700 snapotter && cd snapotter
|
||||
curl --proto '=https' --tlsv1.2 -fsSLo docker-compose.yml \
|
||||
https://raw.githubusercontent.com/snapotter-hq/SnapOtter/v2.1.0/docker/docker-compose.yml
|
||||
https://raw.githubusercontent.com/snapotter-hq/SnapOtter/v2.2.0/docker/docker-compose.yml
|
||||
|
||||
# Keep generated service credentials out of shell history and world-readable files.
|
||||
umask 077
|
||||
@@ -72,7 +72,7 @@ docker compose -f docker-compose.yml pull
|
||||
docker compose -f docker-compose.yml up -d --no-build
|
||||
```
|
||||
|
||||
[`docker/docker-compose.yml`](https://github.com/snapotter-hq/SnapOtter/blob/v2.1.0/docker/docker-compose.yml) kanonik mencakup keempat volume runtime, health check, batasan sumber daya, konfigurasi Redis yang tahan lama, gambar database/cache yang disematkan, dan pengerasan kontainer saat ini. Ubah kata sandi admin default segera setelah login pertama. Untuk penerapan yang dapat direproduksi, sematkan gambar aplikasi SnapOtter ke tag rilis atau intisari yang Anda verifikasi, bukan mengikuti `latest`.
|
||||
[`docker/docker-compose.yml`](https://github.com/snapotter-hq/SnapOtter/blob/v2.2.0/docker/docker-compose.yml) kanonik mencakup keempat volume runtime, health check, batasan sumber daya, konfigurasi Redis yang tahan lama, gambar database/cache yang disematkan, dan pengerasan kontainer saat ini. Ubah kata sandi admin default segera setelah login pertama. Untuk penerapan yang dapat direproduksi, sematkan gambar aplikasi SnapOtter ke tag rilis atau intisari yang Anda verifikasi, bukan mengikuti `latest`.
|
||||
|
||||
Lihat [Konfigurasi](/id/guide/configuration) untuk semua variabel lingkungan dan [Keamanan & Pengerasan](/id/guide/security) untuk rahasia, kebijakan jaringan, dan panduan pencadangan.
|
||||
|
||||
|
||||
@@ -242,7 +242,7 @@ Setiap rilis SnapOtter menyertakan artefak keamanan berikut:
|
||||
Unduh manifes subjek rilis dan verifikasi bahwa manifes tersebut dibuktikan oleh alur kerja rilis:
|
||||
|
||||
```bash
|
||||
gh attestation verify snapotter-v2.1.0-release-subjects.json \
|
||||
gh attestation verify snapotter-v2.2.0-release-subjects.json \
|
||||
--repo snapotter-hq/SnapOtter \
|
||||
--signer-workflow snapotter-hq/SnapOtter/.github/workflows/release.yml
|
||||
```
|
||||
@@ -253,13 +253,13 @@ Anda juga dapat memindai SBOM atau gambar yang diunduh secara langsung:
|
||||
|
||||
```bash
|
||||
# Scan with Grype using the CycloneDX SBOM
|
||||
grype sbom:snapotter-v2.1.0-image-linux-amd64-sbom.cdx.json
|
||||
grype sbom:snapotter-v2.2.0-image-linux-amd64-sbom.cdx.json
|
||||
|
||||
# Scan with Trivy using the SPDX SBOM
|
||||
trivy sbom snapotter-v2.1.0-image-linux-amd64-sbom.spdx.json
|
||||
trivy sbom snapotter-v2.2.0-image-linux-amd64-sbom.spdx.json
|
||||
|
||||
# Scan the Docker image directly
|
||||
trivy image snapotter/snapotter:2.1.0
|
||||
trivy image snapotter/snapotter:2.2.0
|
||||
```
|
||||
|
||||
::: info
|
||||
|
||||
@@ -76,7 +76,7 @@ Hubungkan ke `GET /api/v1/jobs/{jobId}/progress` dengan `jobId` yang dikembalika
|
||||
"provider": "CPUExecutionProvider",
|
||||
"degraded": false,
|
||||
"warnings": [],
|
||||
"runtimeVersion": "2.1.0",
|
||||
"runtimeVersion": "2.2.0",
|
||||
"modelVersion": "PP-OCRv6-best-v1-medium"
|
||||
}
|
||||
}
|
||||
|
||||
@@ -141,8 +141,8 @@ Per l'accelerazione NVIDIA CUDA tramite Docker Compose, aggiungi la sezione depl
|
||||
| Tag | Descrizione |
|
||||
|-----|------------|
|
||||
| `latest` | Ultima release |
|
||||
| `2.1.0` | Versione esatta |
|
||||
| `2.1` | Ultima patch di 2.1.x |
|
||||
| `2.2.0` | Versione esatta |
|
||||
| `2.2` | Ultima patch di 2.2.x |
|
||||
| `2` | Ultima minor di 2.x |
|
||||
|
||||
## Piattaforme {#platforms}
|
||||
|
||||
@@ -59,7 +59,7 @@ Utilizza il file di produzione mantenuto e testato con ogni versione invece di c
|
||||
```bash
|
||||
install -d -m 700 snapotter && cd snapotter
|
||||
curl --proto '=https' --tlsv1.2 -fsSLo docker-compose.yml \
|
||||
https://raw.githubusercontent.com/snapotter-hq/SnapOtter/v2.1.0/docker/docker-compose.yml
|
||||
https://raw.githubusercontent.com/snapotter-hq/SnapOtter/v2.2.0/docker/docker-compose.yml
|
||||
|
||||
# Keep generated service credentials out of shell history and world-readable files.
|
||||
umask 077
|
||||
@@ -72,7 +72,7 @@ docker compose -f docker-compose.yml pull
|
||||
docker compose -f docker-compose.yml up -d --no-build
|
||||
```
|
||||
|
||||
Il [`docker/docker-compose.yml`](https://github.com/snapotter-hq/SnapOtter/blob/v2.1.0/docker/docker-compose.yml) canonico include tutti e quattro i volumi di runtime, controlli di integrità, limiti delle risorse, configurazione Redis durevole, immagini di database/cache bloccate e l'attuale rafforzamento del contenitore. Modificare la password amministratore predefinita immediatamente dopo il primo accesso. Per una distribuzione riproducibile, aggiungi l'immagine dell'applicazione SnapOtter al tag di rilascio o al digest che hai verificato invece di seguire `latest`.
|
||||
Il [`docker/docker-compose.yml`](https://github.com/snapotter-hq/SnapOtter/blob/v2.2.0/docker/docker-compose.yml) canonico include tutti e quattro i volumi di runtime, controlli di integrità, limiti delle risorse, configurazione Redis durevole, immagini di database/cache bloccate e l'attuale rafforzamento del contenitore. Modificare la password amministratore predefinita immediatamente dopo il primo accesso. Per una distribuzione riproducibile, aggiungi l'immagine dell'applicazione SnapOtter al tag di rilascio o al digest che hai verificato invece di seguire `latest`.
|
||||
|
||||
Consulta [Configurazione](/it/guide/configuration) per tutte le variabili di ambiente e [Sicurezza e protezione avanzata](/it/guide/security) per segreti, criteri di rete e indicazioni sul backup.
|
||||
|
||||
|
||||
@@ -242,7 +242,7 @@ Ogni versione SnapOtter include i seguenti elementi di sicurezza:
|
||||
Scarica il manifest dell'oggetto del rilascio e verifica che sia stato attestato dal flusso di lavoro del rilascio:
|
||||
|
||||
```bash
|
||||
gh attestation verify snapotter-v2.1.0-release-subjects.json \
|
||||
gh attestation verify snapotter-v2.2.0-release-subjects.json \
|
||||
--repo snapotter-hq/SnapOtter \
|
||||
--signer-workflow snapotter-hq/SnapOtter/.github/workflows/release.yml
|
||||
```
|
||||
@@ -253,13 +253,13 @@ Puoi anche scansionare direttamente un SBOM scaricato o l'immagine:
|
||||
|
||||
```bash
|
||||
# Scan with Grype using the CycloneDX SBOM
|
||||
grype sbom:snapotter-v2.1.0-image-linux-amd64-sbom.cdx.json
|
||||
grype sbom:snapotter-v2.2.0-image-linux-amd64-sbom.cdx.json
|
||||
|
||||
# Scan with Trivy using the SPDX SBOM
|
||||
trivy sbom snapotter-v2.1.0-image-linux-amd64-sbom.spdx.json
|
||||
trivy sbom snapotter-v2.2.0-image-linux-amd64-sbom.spdx.json
|
||||
|
||||
# Scan the Docker image directly
|
||||
trivy image snapotter/snapotter:2.1.0
|
||||
trivy image snapotter/snapotter:2.2.0
|
||||
```
|
||||
|
||||
::: info
|
||||
|
||||
@@ -76,7 +76,7 @@ Connettiti a `GET /api/v1/jobs/{jobId}/progress` con il `jobId` restituito dalla
|
||||
"provider": "CPUExecutionProvider",
|
||||
"degraded": false,
|
||||
"warnings": [],
|
||||
"runtimeVersion": "2.1.0",
|
||||
"runtimeVersion": "2.2.0",
|
||||
"modelVersion": "PP-OCRv6-best-v1-medium"
|
||||
}
|
||||
}
|
||||
|
||||
@@ -141,8 +141,8 @@ Docker Compose 経由の NVIDIA CUDA アクセラレーションには、SnapOtt
|
||||
| タグ | 説明 |
|
||||
|-----|------------|
|
||||
| `latest` | 最新リリース |
|
||||
| `2.1.0` | 正確なバージョン |
|
||||
| `2.1` | 2.1.x の最新パッチ |
|
||||
| `2.2.0` | 正確なバージョン |
|
||||
| `2.2` | 2.2.x の最新パッチ |
|
||||
| `2` | 2.x の最新マイナー |
|
||||
|
||||
## プラットフォーム {#platforms}
|
||||
|
||||
@@ -59,7 +59,7 @@ docker run -d --name SnapOtter -p 1349:1349 -v SnapOtter-data:/data ghcr.io/snap
|
||||
```bash
|
||||
install -d -m 700 snapotter && cd snapotter
|
||||
curl --proto '=https' --tlsv1.2 -fsSLo docker-compose.yml \
|
||||
https://raw.githubusercontent.com/snapotter-hq/SnapOtter/v2.1.0/docker/docker-compose.yml
|
||||
https://raw.githubusercontent.com/snapotter-hq/SnapOtter/v2.2.0/docker/docker-compose.yml
|
||||
|
||||
# Keep generated service credentials out of shell history and world-readable files.
|
||||
umask 077
|
||||
@@ -72,7 +72,7 @@ docker compose -f docker-compose.yml pull
|
||||
docker compose -f docker-compose.yml up -d --no-build
|
||||
```
|
||||
|
||||
正規の [`docker/docker-compose.yml`](https://github.com/snapotter-hq/SnapOtter/blob/v2.1.0/docker/docker-compose.yml) には、4 つのランタイム ボリュームすべて、ヘルス チェック、リソース制限、耐久性のある Redis 構成、固定されたデータベース/キャッシュ イメージ、および現在のコンテナーの強化が含まれています。最初のログイン直後にデフォルトの管理者パスワードを変更します。再現可能な展開を行うには、`latest` をフォローする代わりに、SnapOtter アプリケーション イメージをリリース タグまたは確認したダイジェストに固定します。
|
||||
正規の [`docker/docker-compose.yml`](https://github.com/snapotter-hq/SnapOtter/blob/v2.2.0/docker/docker-compose.yml) には、4 つのランタイム ボリュームすべて、ヘルス チェック、リソース制限、耐久性のある Redis 構成、固定されたデータベース/キャッシュ イメージ、および現在のコンテナーの強化が含まれています。最初のログイン直後にデフォルトの管理者パスワードを変更します。再現可能な展開を行うには、`latest` をフォローする代わりに、SnapOtter アプリケーション イメージをリリース タグまたは確認したダイジェストに固定します。
|
||||
|
||||
すべての環境変数については [構成](/ja/guide/configuration) を、シークレット、ネットワーク ポリシー、およびバックアップ ガイダンスについては [セキュリティと強化](/ja/guide/security) を参照してください。
|
||||
|
||||
|
||||
@@ -242,7 +242,7 @@ sha256sum backup/snapotter-*.tar.gz > backup/SHA256SUMS
|
||||
リリース対象のマニフェストをダウンロードし、それがリリース ワークフローによって証明されていることを確認します。
|
||||
|
||||
```bash
|
||||
gh attestation verify snapotter-v2.1.0-release-subjects.json \
|
||||
gh attestation verify snapotter-v2.2.0-release-subjects.json \
|
||||
--repo snapotter-hq/SnapOtter \
|
||||
--signer-workflow snapotter-hq/SnapOtter/.github/workflows/release.yml
|
||||
```
|
||||
@@ -253,13 +253,13 @@ gh attestation verify snapotter-v2.1.0-release-subjects.json \
|
||||
|
||||
```bash
|
||||
# Scan with Grype using the CycloneDX SBOM
|
||||
grype sbom:snapotter-v2.1.0-image-linux-amd64-sbom.cdx.json
|
||||
grype sbom:snapotter-v2.2.0-image-linux-amd64-sbom.cdx.json
|
||||
|
||||
# Scan with Trivy using the SPDX SBOM
|
||||
trivy sbom snapotter-v2.1.0-image-linux-amd64-sbom.spdx.json
|
||||
trivy sbom snapotter-v2.2.0-image-linux-amd64-sbom.spdx.json
|
||||
|
||||
# Scan the Docker image directly
|
||||
trivy image snapotter/snapotter:2.1.0
|
||||
trivy image snapotter/snapotter:2.2.0
|
||||
```
|
||||
|
||||
::: info
|
||||
|
||||
@@ -76,7 +76,7 @@ curl -X POST http://localhost:1349/api/v1/tools/image/ocr \
|
||||
"provider": "CPUExecutionProvider",
|
||||
"degraded": false,
|
||||
"warnings": [],
|
||||
"runtimeVersion": "2.1.0",
|
||||
"runtimeVersion": "2.2.0",
|
||||
"modelVersion": "PP-OCRv6-best-v1-medium"
|
||||
}
|
||||
}
|
||||
|
||||
@@ -141,8 +141,8 @@ Docker Compose를 통한 NVIDIA CUDA 가속을 위해서는 SnapOtter 서비스
|
||||
| Tag | Description |
|
||||
|-----|------------|
|
||||
| `latest` | 최신 릴리스 |
|
||||
| `2.1.0` | 정확한 버전 |
|
||||
| `2.1` | 2.1.x의 최신 패치 |
|
||||
| `2.2.0` | 정확한 버전 |
|
||||
| `2.2` | 2.2.x의 최신 패치 |
|
||||
| `2` | 2.x의 최신 마이너 |
|
||||
|
||||
## Platforms {#platforms}
|
||||
|
||||
@@ -59,7 +59,7 @@ docker run -d --name SnapOtter -p 1349:1349 -v SnapOtter-data:/data ghcr.io/snap
|
||||
```bash
|
||||
install -d -m 700 snapotter && cd snapotter
|
||||
curl --proto '=https' --tlsv1.2 -fsSLo docker-compose.yml \
|
||||
https://raw.githubusercontent.com/snapotter-hq/SnapOtter/v2.1.0/docker/docker-compose.yml
|
||||
https://raw.githubusercontent.com/snapotter-hq/SnapOtter/v2.2.0/docker/docker-compose.yml
|
||||
|
||||
# Keep generated service credentials out of shell history and world-readable files.
|
||||
umask 077
|
||||
@@ -72,7 +72,7 @@ docker compose -f docker-compose.yml pull
|
||||
docker compose -f docker-compose.yml up -d --no-build
|
||||
```
|
||||
|
||||
표준 [`docker/docker-compose.yml`](https://github.com/snapotter-hq/SnapOtter/blob/v2.1.0/docker/docker-compose.yml)에는 4개의 런타임 볼륨, 상태 확인, 리소스 제한, 내구성 있는 Redis 구성, 고정된 데이터베이스/캐시 이미지 및 현재 컨테이너 강화가 모두 포함됩니다. 처음 로그인한 후 즉시 기본 관리자 비밀번호를 변경하세요. 재현 가능한 배포를 위해 `latest`를 따르는 대신 SnapOtter 애플리케이션 이미지를 확인한 릴리스 태그 또는 다이제스트에 고정하세요.
|
||||
표준 [`docker/docker-compose.yml`](https://github.com/snapotter-hq/SnapOtter/blob/v2.2.0/docker/docker-compose.yml)에는 4개의 런타임 볼륨, 상태 확인, 리소스 제한, 내구성 있는 Redis 구성, 고정된 데이터베이스/캐시 이미지 및 현재 컨테이너 강화가 모두 포함됩니다. 처음 로그인한 후 즉시 기본 관리자 비밀번호를 변경하세요. 재현 가능한 배포를 위해 `latest`를 따르는 대신 SnapOtter 애플리케이션 이미지를 확인한 릴리스 태그 또는 다이제스트에 고정하세요.
|
||||
|
||||
모든 환경 변수는 [구성](/ko/guide/configuration)을 참조하고 비밀, 네트워크 정책 및 백업 지침은 [보안 및 강화](/ko/guide/security)를 참조하세요.
|
||||
|
||||
|
||||
@@ -242,7 +242,7 @@ sha256sum backup/snapotter-*.tar.gz > backup/SHA256SUMS
|
||||
릴리스 주제 매니페스트를 다운로드하고 릴리스 워크플로에서 증명되었는지 확인합니다.
|
||||
|
||||
```bash
|
||||
gh attestation verify snapotter-v2.1.0-release-subjects.json \
|
||||
gh attestation verify snapotter-v2.2.0-release-subjects.json \
|
||||
--repo snapotter-hq/SnapOtter \
|
||||
--signer-workflow snapotter-hq/SnapOtter/.github/workflows/release.yml
|
||||
```
|
||||
@@ -253,13 +253,13 @@ gh attestation verify snapotter-v2.1.0-release-subjects.json \
|
||||
|
||||
```bash
|
||||
# Scan with Grype using the CycloneDX SBOM
|
||||
grype sbom:snapotter-v2.1.0-image-linux-amd64-sbom.cdx.json
|
||||
grype sbom:snapotter-v2.2.0-image-linux-amd64-sbom.cdx.json
|
||||
|
||||
# Scan with Trivy using the SPDX SBOM
|
||||
trivy sbom snapotter-v2.1.0-image-linux-amd64-sbom.spdx.json
|
||||
trivy sbom snapotter-v2.2.0-image-linux-amd64-sbom.spdx.json
|
||||
|
||||
# Scan the Docker image directly
|
||||
trivy image snapotter/snapotter:2.1.0
|
||||
trivy image snapotter/snapotter:2.2.0
|
||||
```
|
||||
|
||||
::: info
|
||||
|
||||
@@ -76,7 +76,7 @@ curl -X POST http://localhost:1349/api/v1/tools/image/ocr \
|
||||
"provider": "CPUExecutionProvider",
|
||||
"degraded": false,
|
||||
"warnings": [],
|
||||
"runtimeVersion": "2.1.0",
|
||||
"runtimeVersion": "2.2.0",
|
||||
"modelVersion": "PP-OCRv6-best-v1-medium"
|
||||
}
|
||||
}
|
||||
|
||||
@@ -141,8 +141,8 @@ Voeg voor NVIDIA CUDA-versnelling via Docker Compose de deploy-sectie toe aan de
|
||||
| Tag | Beschrijving |
|
||||
|-----|------------|
|
||||
| `latest` | Nieuwste release |
|
||||
| `2.1.0` | Exacte versie |
|
||||
| `2.1` | Nieuwste patch in 2.1.x |
|
||||
| `2.2.0` | Exacte versie |
|
||||
| `2.2` | Nieuwste patch in 2.2.x |
|
||||
| `2` | Nieuwste minor in 2.x |
|
||||
|
||||
## Platforms {#platforms}
|
||||
|
||||
@@ -59,7 +59,7 @@ Gebruik het productiebestand dat bij elke release wordt onderhouden en getest in
|
||||
```bash
|
||||
install -d -m 700 snapotter && cd snapotter
|
||||
curl --proto '=https' --tlsv1.2 -fsSLo docker-compose.yml \
|
||||
https://raw.githubusercontent.com/snapotter-hq/SnapOtter/v2.1.0/docker/docker-compose.yml
|
||||
https://raw.githubusercontent.com/snapotter-hq/SnapOtter/v2.2.0/docker/docker-compose.yml
|
||||
|
||||
# Keep generated service credentials out of shell history and world-readable files.
|
||||
umask 077
|
||||
@@ -72,7 +72,7 @@ docker compose -f docker-compose.yml pull
|
||||
docker compose -f docker-compose.yml up -d --no-build
|
||||
```
|
||||
|
||||
De canonieke [`docker/docker-compose.yml`](https://github.com/snapotter-hq/SnapOtter/blob/v2.1.0/docker/docker-compose.yml) omvat alle vier de runtimevolumes, gezondheidscontroles, resourcelimieten, duurzame Redis-configuratie, vastgezette database-/cache-images en de huidige containerverharding. Wijzig het standaard beheerderswachtwoord onmiddellijk na de eerste keer inloggen. Voor een reproduceerbare implementatie maakt u de SnapOtter-toepassingsimage vast aan de releasetag of -digest die u hebt geverifieerd, in plaats van `latest` te volgen.
|
||||
De canonieke [`docker/docker-compose.yml`](https://github.com/snapotter-hq/SnapOtter/blob/v2.2.0/docker/docker-compose.yml) omvat alle vier de runtimevolumes, gezondheidscontroles, resourcelimieten, duurzame Redis-configuratie, vastgezette database-/cache-images en de huidige containerverharding. Wijzig het standaard beheerderswachtwoord onmiddellijk na de eerste keer inloggen. Voor een reproduceerbare implementatie maakt u de SnapOtter-toepassingsimage vast aan de releasetag of -digest die u hebt geverifieerd, in plaats van `latest` te volgen.
|
||||
|
||||
Zie [Configuratie](/nl/guide/configuration) voor alle omgevingsvariabelen en [Beveiliging en beveiliging](/nl/guide/security) voor geheimen, netwerkbeleid en back-uprichtlijnen.
|
||||
|
||||
|
||||
@@ -242,7 +242,7 @@ Elke SnapOtter-release bevat de volgende beveiligingsartefacten:
|
||||
Download het release-onderwerpmanifest en controleer of dit is bevestigd door de releaseworkflow:
|
||||
|
||||
```bash
|
||||
gh attestation verify snapotter-v2.1.0-release-subjects.json \
|
||||
gh attestation verify snapotter-v2.2.0-release-subjects.json \
|
||||
--repo snapotter-hq/SnapOtter \
|
||||
--signer-workflow snapotter-hq/SnapOtter/.github/workflows/release.yml
|
||||
```
|
||||
@@ -253,13 +253,13 @@ U kunt ook een gedownloade SBOM of de afbeelding rechtstreeks scannen:
|
||||
|
||||
```bash
|
||||
# Scan with Grype using the CycloneDX SBOM
|
||||
grype sbom:snapotter-v2.1.0-image-linux-amd64-sbom.cdx.json
|
||||
grype sbom:snapotter-v2.2.0-image-linux-amd64-sbom.cdx.json
|
||||
|
||||
# Scan with Trivy using the SPDX SBOM
|
||||
trivy sbom snapotter-v2.1.0-image-linux-amd64-sbom.spdx.json
|
||||
trivy sbom snapotter-v2.2.0-image-linux-amd64-sbom.spdx.json
|
||||
|
||||
# Scan the Docker image directly
|
||||
trivy image snapotter/snapotter:2.1.0
|
||||
trivy image snapotter/snapotter:2.2.0
|
||||
```
|
||||
|
||||
::: info
|
||||
|
||||
@@ -76,7 +76,7 @@ Maak verbinding met `GET /api/v1/jobs/{jobId}/progress` met de `jobId` uit het `
|
||||
"provider": "CPUExecutionProvider",
|
||||
"degraded": false,
|
||||
"warnings": [],
|
||||
"runtimeVersion": "2.1.0",
|
||||
"runtimeVersion": "2.2.0",
|
||||
"modelVersion": "PP-OCRv6-best-v1-medium"
|
||||
}
|
||||
}
|
||||
|
||||
@@ -1,6 +1,6 @@
|
||||
{
|
||||
"name": "@snapotter/docs",
|
||||
"version": "2.1.0",
|
||||
"version": "2.2.0",
|
||||
"private": true,
|
||||
"scripts": {
|
||||
"docs:dev": "vitepress dev .",
|
||||
|
||||
@@ -141,8 +141,8 @@ Dla akceleracji NVIDIA CUDA przez Docker Compose dodaj sekcję deploy do usługi
|
||||
| Tag | Opis |
|
||||
|-----|------------|
|
||||
| `latest` | Najnowsze wydanie |
|
||||
| `2.1.0` | Dokładna wersja |
|
||||
| `2.1` | Najnowsza łatka w 2.1.x |
|
||||
| `2.2.0` | Dokładna wersja |
|
||||
| `2.2` | Najnowsza łatka w 2.2.x |
|
||||
| `2` | Najnowsza wersja podrzędna w 2.x |
|
||||
|
||||
## Platformy {#platforms}
|
||||
|
||||
@@ -59,7 +59,7 @@ Użyj pliku produkcyjnego utrzymywanego i testowanego w każdym wydaniu, zamiast
|
||||
```bash
|
||||
install -d -m 700 snapotter && cd snapotter
|
||||
curl --proto '=https' --tlsv1.2 -fsSLo docker-compose.yml \
|
||||
https://raw.githubusercontent.com/snapotter-hq/SnapOtter/v2.1.0/docker/docker-compose.yml
|
||||
https://raw.githubusercontent.com/snapotter-hq/SnapOtter/v2.2.0/docker/docker-compose.yml
|
||||
|
||||
# Keep generated service credentials out of shell history and world-readable files.
|
||||
umask 077
|
||||
@@ -72,7 +72,7 @@ docker compose -f docker-compose.yml pull
|
||||
docker compose -f docker-compose.yml up -d --no-build
|
||||
```
|
||||
|
||||
Kanoniczny [`docker/docker-compose.yml`](https://github.com/snapotter-hq/SnapOtter/blob/v2.1.0/docker/docker-compose.yml) obejmuje wszystkie cztery woluminy wykonawcze, kontrole stanu, limity zasobów, trwałą konfigurację Redis, przypięte obrazy bazy danych/pamięci podręcznej oraz bieżące zabezpieczenie kontenera. Zmień domyślne hasło administratora natychmiast po pierwszym logowaniu. Aby zapewnić powtarzalne wdrożenie, przypnij obraz aplikacji SnapOtter do zweryfikowanego znacznika wydania lub podsumowania, zamiast podążać za `latest`.
|
||||
Kanoniczny [`docker/docker-compose.yml`](https://github.com/snapotter-hq/SnapOtter/blob/v2.2.0/docker/docker-compose.yml) obejmuje wszystkie cztery woluminy wykonawcze, kontrole stanu, limity zasobów, trwałą konfigurację Redis, przypięte obrazy bazy danych/pamięci podręcznej oraz bieżące zabezpieczenie kontenera. Zmień domyślne hasło administratora natychmiast po pierwszym logowaniu. Aby zapewnić powtarzalne wdrożenie, przypnij obraz aplikacji SnapOtter do zweryfikowanego znacznika wydania lub podsumowania, zamiast podążać za `latest`.
|
||||
|
||||
Zobacz [Konfiguracja](/pl/guide/configuration) w celu uzyskania wszystkich zmiennych środowiskowych oraz [Zabezpieczenia i wzmacnianie](/pl/guide/security), aby uzyskać informacje tajne, zasady sieciowe i wskazówki dotyczące tworzenia kopii zapasowych.
|
||||
|
||||
|
||||
@@ -243,7 +243,7 @@ Każde wydanie SnapOtter zawiera następujące artefakty zabezpieczeń:
|
||||
Pobierz manifest tematu wydania i sprawdź, czy został on potwierdzony w przepływie pracy wydania:
|
||||
|
||||
```bash
|
||||
gh attestation verify snapotter-v2.1.0-release-subjects.json \
|
||||
gh attestation verify snapotter-v2.2.0-release-subjects.json \
|
||||
--repo snapotter-hq/SnapOtter \
|
||||
--signer-workflow snapotter-hq/SnapOtter/.github/workflows/release.yml
|
||||
```
|
||||
@@ -254,13 +254,13 @@ Możesz także zeskanować pobrany plik SBOM lub obraz bezpośrednio:
|
||||
|
||||
```bash
|
||||
# Scan with Grype using the CycloneDX SBOM
|
||||
grype sbom:snapotter-v2.1.0-image-linux-amd64-sbom.cdx.json
|
||||
grype sbom:snapotter-v2.2.0-image-linux-amd64-sbom.cdx.json
|
||||
|
||||
# Scan with Trivy using the SPDX SBOM
|
||||
trivy sbom snapotter-v2.1.0-image-linux-amd64-sbom.spdx.json
|
||||
trivy sbom snapotter-v2.2.0-image-linux-amd64-sbom.spdx.json
|
||||
|
||||
# Scan the Docker image directly
|
||||
trivy image snapotter/snapotter:2.1.0
|
||||
trivy image snapotter/snapotter:2.2.0
|
||||
```
|
||||
|
||||
::: info
|
||||
|
||||
@@ -76,7 +76,7 @@ Połącz się z `GET /api/v1/jobs/{jobId}/progress`, używając `jobId` zwrócon
|
||||
"provider": "CPUExecutionProvider",
|
||||
"degraded": false,
|
||||
"warnings": [],
|
||||
"runtimeVersion": "2.1.0",
|
||||
"runtimeVersion": "2.2.0",
|
||||
"modelVersion": "PP-OCRv6-best-v1-medium"
|
||||
}
|
||||
}
|
||||
|
||||
@@ -141,8 +141,8 @@ Para aceleração NVIDIA CUDA via Docker Compose, adicione a seção deploy ao s
|
||||
| Tag | Descrição |
|
||||
|-----|------------|
|
||||
| `latest` | Última versão |
|
||||
| `2.1.0` | Versão exata |
|
||||
| `2.1` | Último patch na 2.1.x |
|
||||
| `2.2.0` | Versão exata |
|
||||
| `2.2` | Último patch na 2.2.x |
|
||||
| `2` | Última versão menor na 2.x |
|
||||
|
||||
## Plataformas {#platforms}
|
||||
|
||||
@@ -59,7 +59,7 @@ Use o arquivo de produção mantido e testado com cada versão em vez de copiar
|
||||
```bash
|
||||
install -d -m 700 snapotter && cd snapotter
|
||||
curl --proto '=https' --tlsv1.2 -fsSLo docker-compose.yml \
|
||||
https://raw.githubusercontent.com/snapotter-hq/SnapOtter/v2.1.0/docker/docker-compose.yml
|
||||
https://raw.githubusercontent.com/snapotter-hq/SnapOtter/v2.2.0/docker/docker-compose.yml
|
||||
|
||||
# Keep generated service credentials out of shell history and world-readable files.
|
||||
umask 077
|
||||
@@ -72,7 +72,7 @@ docker compose -f docker-compose.yml pull
|
||||
docker compose -f docker-compose.yml up -d --no-build
|
||||
```
|
||||
|
||||
O [`docker/docker-compose.yml`](https://github.com/snapotter-hq/SnapOtter/blob/v2.1.0/docker/docker-compose.yml) canônico inclui todos os quatro volumes de tempo de execução, verificações de integridade, limites de recursos, configuração durável do Redis, imagens de banco de dados/cache fixadas e a proteção atual do contêiner. Altere a senha de administrador padrão imediatamente após o primeiro login. Para uma implantação reproduzível, fixe a imagem do aplicativo SnapOtter na tag de lançamento ou resumo que você verificou em vez de seguir `latest`.
|
||||
O [`docker/docker-compose.yml`](https://github.com/snapotter-hq/SnapOtter/blob/v2.2.0/docker/docker-compose.yml) canônico inclui todos os quatro volumes de tempo de execução, verificações de integridade, limites de recursos, configuração durável do Redis, imagens de banco de dados/cache fixadas e a proteção atual do contêiner. Altere a senha de administrador padrão imediatamente após o primeiro login. Para uma implantação reproduzível, fixe a imagem do aplicativo SnapOtter na tag de lançamento ou resumo que você verificou em vez de seguir `latest`.
|
||||
|
||||
Consulte [Configuração](/pt-BR/guide/configuration) para todas as variáveis de ambiente e [Segurança e proteção](/pt-BR/guide/security) para segredos, política de rede e orientação de backup.
|
||||
|
||||
|
||||
@@ -242,7 +242,7 @@ Cada versão SnapOtter inclui os seguintes artefatos de segurança:
|
||||
Baixe o manifesto do assunto do lançamento e verifique se ele foi atestado pelo fluxo de trabalho do lançamento:
|
||||
|
||||
```bash
|
||||
gh attestation verify snapotter-v2.1.0-release-subjects.json \
|
||||
gh attestation verify snapotter-v2.2.0-release-subjects.json \
|
||||
--repo snapotter-hq/SnapOtter \
|
||||
--signer-workflow snapotter-hq/SnapOtter/.github/workflows/release.yml
|
||||
```
|
||||
@@ -253,13 +253,13 @@ Você também pode digitalizar um SBOM baixado ou a imagem diretamente:
|
||||
|
||||
```bash
|
||||
# Scan with Grype using the CycloneDX SBOM
|
||||
grype sbom:snapotter-v2.1.0-image-linux-amd64-sbom.cdx.json
|
||||
grype sbom:snapotter-v2.2.0-image-linux-amd64-sbom.cdx.json
|
||||
|
||||
# Scan with Trivy using the SPDX SBOM
|
||||
trivy sbom snapotter-v2.1.0-image-linux-amd64-sbom.spdx.json
|
||||
trivy sbom snapotter-v2.2.0-image-linux-amd64-sbom.spdx.json
|
||||
|
||||
# Scan the Docker image directly
|
||||
trivy image snapotter/snapotter:2.1.0
|
||||
trivy image snapotter/snapotter:2.2.0
|
||||
```
|
||||
|
||||
::: info
|
||||
|
||||
@@ -76,7 +76,7 @@ Conecte-se a `GET /api/v1/jobs/{jobId}/progress` com o `jobId` retornado pela re
|
||||
"provider": "CPUExecutionProvider",
|
||||
"degraded": false,
|
||||
"warnings": [],
|
||||
"runtimeVersion": "2.1.0",
|
||||
"runtimeVersion": "2.2.0",
|
||||
"modelVersion": "PP-OCRv6-best-v1-medium"
|
||||
}
|
||||
}
|
||||
|
||||
@@ -141,8 +141,8 @@ volumes:
|
||||
| Тег | Описание |
|
||||
|-----|------------|
|
||||
| `latest` | Последний релиз |
|
||||
| `2.1.0` | Точная версия |
|
||||
| `2.1` | Последний патч в 2.1.x |
|
||||
| `2.2.0` | Точная версия |
|
||||
| `2.2` | Последний патч в 2.2.x |
|
||||
| `2` | Последний минорный в 2.x |
|
||||
|
||||
## Платформы {#platforms}
|
||||
|
||||
@@ -59,7 +59,7 @@ docker run -d --name SnapOtter -p 1349:1349 -v SnapOtter-data:/data ghcr.io/snap
|
||||
```bash
|
||||
install -d -m 700 snapotter && cd snapotter
|
||||
curl --proto '=https' --tlsv1.2 -fsSLo docker-compose.yml \
|
||||
https://raw.githubusercontent.com/snapotter-hq/SnapOtter/v2.1.0/docker/docker-compose.yml
|
||||
https://raw.githubusercontent.com/snapotter-hq/SnapOtter/v2.2.0/docker/docker-compose.yml
|
||||
|
||||
# Keep generated service credentials out of shell history and world-readable files.
|
||||
umask 077
|
||||
@@ -72,7 +72,7 @@ docker compose -f docker-compose.yml pull
|
||||
docker compose -f docker-compose.yml up -d --no-build
|
||||
```
|
||||
|
||||
Канонический [`docker/docker-compose.yml`](https://github.com/snapotter-hq/SnapOtter/blob/v2.1.0/docker/docker-compose.yml) включает все четыре тома среды выполнения, проверки работоспособности, ограничения ресурсов, устойчивую конфигурацию Redis, закрепленные образы базы данных/кэша и текущее усиление защиты контейнера. Измените пароль администратора по умолчанию сразу после первого входа в систему. Для воспроизводимого развертывания прикрепите образ приложения SnapOtter к проверенному вами тегу выпуска или дайджесту вместо того, чтобы следовать `latest`.
|
||||
Канонический [`docker/docker-compose.yml`](https://github.com/snapotter-hq/SnapOtter/blob/v2.2.0/docker/docker-compose.yml) включает все четыре тома среды выполнения, проверки работоспособности, ограничения ресурсов, устойчивую конфигурацию Redis, закрепленные образы базы данных/кэша и текущее усиление защиты контейнера. Измените пароль администратора по умолчанию сразу после первого входа в систему. Для воспроизводимого развертывания прикрепите образ приложения SnapOtter к проверенному вами тегу выпуска или дайджесту вместо того, чтобы следовать `latest`.
|
||||
|
||||
См. [Конфигурация](/ru/guide/configuration) для всех переменных среды и [Безопасность и усиление](/ru/guide/security) для секретов, сетевой политики и инструкций по резервному копированию.
|
||||
|
||||
|
||||
@@ -246,7 +246,7 @@ sha256sum backup/snapotter-*.tar.gz > backup/SHA256SUMS
|
||||
Загрузите манифест объекта выпуска и убедитесь, что он подтвержден рабочим процессом выпуска:
|
||||
|
||||
```bash
|
||||
gh attestation verify snapotter-v2.1.0-release-subjects.json \
|
||||
gh attestation verify snapotter-v2.2.0-release-subjects.json \
|
||||
--repo snapotter-hq/SnapOtter \
|
||||
--signer-workflow snapotter-hq/SnapOtter/.github/workflows/release.yml
|
||||
```
|
||||
@@ -257,13 +257,13 @@ gh attestation verify snapotter-v2.1.0-release-subjects.json \
|
||||
|
||||
```bash
|
||||
# Scan with Grype using the CycloneDX SBOM
|
||||
grype sbom:snapotter-v2.1.0-image-linux-amd64-sbom.cdx.json
|
||||
grype sbom:snapotter-v2.2.0-image-linux-amd64-sbom.cdx.json
|
||||
|
||||
# Scan with Trivy using the SPDX SBOM
|
||||
trivy sbom snapotter-v2.1.0-image-linux-amd64-sbom.spdx.json
|
||||
trivy sbom snapotter-v2.2.0-image-linux-amd64-sbom.spdx.json
|
||||
|
||||
# Scan the Docker image directly
|
||||
trivy image snapotter/snapotter:2.1.0
|
||||
trivy image snapotter/snapotter:2.2.0
|
||||
```
|
||||
|
||||
::: info
|
||||
|
||||
@@ -76,7 +76,7 @@ curl -X POST http://localhost:1349/api/v1/tools/image/ocr \
|
||||
"provider": "CPUExecutionProvider",
|
||||
"degraded": false,
|
||||
"warnings": [],
|
||||
"runtimeVersion": "2.1.0",
|
||||
"runtimeVersion": "2.2.0",
|
||||
"modelVersion": "PP-OCRv6-best-v1-medium"
|
||||
}
|
||||
}
|
||||
|
||||
@@ -141,8 +141,8 @@ För NVIDIA CUDA-acceleration via Docker Compose lägger du till deploy-avsnitte
|
||||
| Tagg | Beskrivning |
|
||||
|-----|------------|
|
||||
| `latest` | Senaste utgåvan |
|
||||
| `2.1.0` | Exakt version |
|
||||
| `2.1` | Senaste patch i 2.1.x |
|
||||
| `2.2.0` | Exakt version |
|
||||
| `2.2` | Senaste patch i 2.2.x |
|
||||
| `2` | Senaste minor i 2.x |
|
||||
|
||||
## Plattformar {#platforms}
|
||||
|
||||
@@ -59,7 +59,7 @@ Använd produktionsfilen som underhålls och testas med varje release istället
|
||||
```bash
|
||||
install -d -m 700 snapotter && cd snapotter
|
||||
curl --proto '=https' --tlsv1.2 -fsSLo docker-compose.yml \
|
||||
https://raw.githubusercontent.com/snapotter-hq/SnapOtter/v2.1.0/docker/docker-compose.yml
|
||||
https://raw.githubusercontent.com/snapotter-hq/SnapOtter/v2.2.0/docker/docker-compose.yml
|
||||
|
||||
# Keep generated service credentials out of shell history and world-readable files.
|
||||
umask 077
|
||||
@@ -72,7 +72,7 @@ docker compose -f docker-compose.yml pull
|
||||
docker compose -f docker-compose.yml up -d --no-build
|
||||
```
|
||||
|
||||
Den kanoniska [`docker/docker-compose.yml`](https://github.com/snapotter-hq/SnapOtter/blob/v2.1.0/docker/docker-compose.yml) inkluderar alla fyra körtidsvolymer, hälsokontroller, resursgränser, hållbar Redis-konfiguration, fästa databas/cache-bilder och den aktuella behållarhärdningen. Ändra standardlösenordet för administratören direkt efter första inloggningen. För en reproducerbar distribution, fäst SnapOtter-applikationsbilden till releasetaggen eller sammanfattningen du verifierade istället för att följa `latest`.
|
||||
Den kanoniska [`docker/docker-compose.yml`](https://github.com/snapotter-hq/SnapOtter/blob/v2.2.0/docker/docker-compose.yml) inkluderar alla fyra körtidsvolymer, hälsokontroller, resursgränser, hållbar Redis-konfiguration, fästa databas/cache-bilder och den aktuella behållarhärdningen. Ändra standardlösenordet för administratören direkt efter första inloggningen. För en reproducerbar distribution, fäst SnapOtter-applikationsbilden till releasetaggen eller sammanfattningen du verifierade istället för att följa `latest`.
|
||||
|
||||
Se [Configuration](/sv/guide/configuration) för alla miljövariabler och [Security & Hardening](/sv/guide/security) för hemligheter, nätverkspolicy och säkerhetskopieringsvägledning.
|
||||
|
||||
|
||||
@@ -242,7 +242,7 @@ Varje SnapOtter-version innehåller följande säkerhetsartefakter:
|
||||
Ladda ned release-subject-manifestet och verifiera att det intygades av release-arbetsflödet:
|
||||
|
||||
```bash
|
||||
gh attestation verify snapotter-v2.1.0-release-subjects.json \
|
||||
gh attestation verify snapotter-v2.2.0-release-subjects.json \
|
||||
--repo snapotter-hq/SnapOtter \
|
||||
--signer-workflow snapotter-hq/SnapOtter/.github/workflows/release.yml
|
||||
```
|
||||
@@ -253,13 +253,13 @@ Du kan också skanna en nedladdad SBOM eller bilden direkt:
|
||||
|
||||
```bash
|
||||
# Scan with Grype using the CycloneDX SBOM
|
||||
grype sbom:snapotter-v2.1.0-image-linux-amd64-sbom.cdx.json
|
||||
grype sbom:snapotter-v2.2.0-image-linux-amd64-sbom.cdx.json
|
||||
|
||||
# Scan with Trivy using the SPDX SBOM
|
||||
trivy sbom snapotter-v2.1.0-image-linux-amd64-sbom.spdx.json
|
||||
trivy sbom snapotter-v2.2.0-image-linux-amd64-sbom.spdx.json
|
||||
|
||||
# Scan the Docker image directly
|
||||
trivy image snapotter/snapotter:2.1.0
|
||||
trivy image snapotter/snapotter:2.2.0
|
||||
```
|
||||
|
||||
::: info
|
||||
|
||||
@@ -76,7 +76,7 @@ Anslut till `GET /api/v1/jobs/{jobId}/progress` med det `jobId` som returnerades
|
||||
"provider": "CPUExecutionProvider",
|
||||
"degraded": false,
|
||||
"warnings": [],
|
||||
"runtimeVersion": "2.1.0",
|
||||
"runtimeVersion": "2.2.0",
|
||||
"modelVersion": "PP-OCRv6-best-v1-medium"
|
||||
}
|
||||
}
|
||||
|
||||
@@ -141,8 +141,8 @@ volumes:
|
||||
| แท็ก | คำอธิบาย |
|
||||
|-----|------------|
|
||||
| `latest` | รุ่นล่าสุด |
|
||||
| `2.1.0` | เวอร์ชันที่ระบุแน่นอน |
|
||||
| `2.1` | patch ล่าสุดใน 2.1.x |
|
||||
| `2.2.0` | เวอร์ชันที่ระบุแน่นอน |
|
||||
| `2.2` | patch ล่าสุดใน 2.2.x |
|
||||
| `2` | minor ล่าสุดใน 2.x |
|
||||
|
||||
## แพลตฟอร์ม {#platforms}
|
||||
|
||||
@@ -59,7 +59,7 @@ docker run -d --name SnapOtter -p 1349:1349 -v SnapOtter-data:/data ghcr.io/snap
|
||||
```bash
|
||||
install -d -m 700 snapotter && cd snapotter
|
||||
curl --proto '=https' --tlsv1.2 -fsSLo docker-compose.yml \
|
||||
https://raw.githubusercontent.com/snapotter-hq/SnapOtter/v2.1.0/docker/docker-compose.yml
|
||||
https://raw.githubusercontent.com/snapotter-hq/SnapOtter/v2.2.0/docker/docker-compose.yml
|
||||
|
||||
# Keep generated service credentials out of shell history and world-readable files.
|
||||
umask 077
|
||||
@@ -72,7 +72,7 @@ docker compose -f docker-compose.yml pull
|
||||
docker compose -f docker-compose.yml up -d --no-build
|
||||
```
|
||||
|
||||
Canonical [`docker/docker-compose.yml`](https://github.com/snapotter-hq/SnapOtter/blob/v2.1.0/docker/docker-compose.yml) ประกอบด้วยรันไทม์วอลุ่มทั้งสี่ การตรวจสอบสภาพ ขีดจำกัดทรัพยากร การกำหนดค่า Redis ที่คงทน ฐานข้อมูล/อิมเมจแคชที่ปักหมุดไว้ และการทำให้คอนเทนเนอร์ปัจจุบันแข็งตัว เปลี่ยนรหัสผ่านผู้ดูแลระบบเริ่มต้นทันทีหลังจากเข้าสู่ระบบครั้งแรก สำหรับการปรับใช้ที่ทำซ้ำได้ ให้ปักหมุดอิมเมจแอปพลิเคชัน SnapOtter ไว้ที่แท็ก release หรือแยกย่อยที่คุณตรวจสอบแล้ว แทนที่จะติดตาม `latest`
|
||||
Canonical [`docker/docker-compose.yml`](https://github.com/snapotter-hq/SnapOtter/blob/v2.2.0/docker/docker-compose.yml) ประกอบด้วยรันไทม์วอลุ่มทั้งสี่ การตรวจสอบสภาพ ขีดจำกัดทรัพยากร การกำหนดค่า Redis ที่คงทน ฐานข้อมูล/อิมเมจแคชที่ปักหมุดไว้ และการทำให้คอนเทนเนอร์ปัจจุบันแข็งตัว เปลี่ยนรหัสผ่านผู้ดูแลระบบเริ่มต้นทันทีหลังจากเข้าสู่ระบบครั้งแรก สำหรับการปรับใช้ที่ทำซ้ำได้ ให้ปักหมุดอิมเมจแอปพลิเคชัน SnapOtter ไว้ที่แท็ก release หรือแยกย่อยที่คุณตรวจสอบแล้ว แทนที่จะติดตาม `latest`
|
||||
|
||||
ดู [การกำหนดค่า](/th/guide/configuration) สำหรับตัวแปรสภาพแวดล้อมทั้งหมด และ [ความปลอดภัยและการป้องกัน](/th/guide/security) สำหรับความลับ นโยบายเครือข่าย และคำแนะนำในการสำรองข้อมูล
|
||||
|
||||
|
||||
@@ -242,7 +242,7 @@ SnapOtter แต่ละรุ่นมีอาร์ติแฟกต์ด
|
||||
ดาวน์โหลดรายการหัวข้อการเผยแพร่และตรวจสอบว่าได้รับการยืนยันโดยเวิร์กโฟลว์การเผยแพร่:
|
||||
|
||||
```bash
|
||||
gh attestation verify snapotter-v2.1.0-release-subjects.json \
|
||||
gh attestation verify snapotter-v2.2.0-release-subjects.json \
|
||||
--repo snapotter-hq/SnapOtter \
|
||||
--signer-workflow snapotter-hq/SnapOtter/.github/workflows/release.yml
|
||||
```
|
||||
@@ -253,13 +253,13 @@ gh attestation verify snapotter-v2.1.0-release-subjects.json \
|
||||
|
||||
```bash
|
||||
# Scan with Grype using the CycloneDX SBOM
|
||||
grype sbom:snapotter-v2.1.0-image-linux-amd64-sbom.cdx.json
|
||||
grype sbom:snapotter-v2.2.0-image-linux-amd64-sbom.cdx.json
|
||||
|
||||
# Scan with Trivy using the SPDX SBOM
|
||||
trivy sbom snapotter-v2.1.0-image-linux-amd64-sbom.spdx.json
|
||||
trivy sbom snapotter-v2.2.0-image-linux-amd64-sbom.spdx.json
|
||||
|
||||
# Scan the Docker image directly
|
||||
trivy image snapotter/snapotter:2.1.0
|
||||
trivy image snapotter/snapotter:2.2.0
|
||||
```
|
||||
|
||||
::: info
|
||||
|
||||
@@ -76,7 +76,7 @@ curl -X POST http://localhost:1349/api/v1/tools/image/ocr \
|
||||
"provider": "CPUExecutionProvider",
|
||||
"degraded": false,
|
||||
"warnings": [],
|
||||
"runtimeVersion": "2.1.0",
|
||||
"runtimeVersion": "2.2.0",
|
||||
"modelVersion": "PP-OCRv6-best-v1-medium"
|
||||
}
|
||||
}
|
||||
|
||||
@@ -67,7 +67,7 @@ Connect to `GET /api/v1/jobs/{jobId}/progress` with the `jobId` returned by the
|
||||
"provider": "CPUExecutionProvider",
|
||||
"degraded": false,
|
||||
"warnings": [],
|
||||
"runtimeVersion": "2.1.0",
|
||||
"runtimeVersion": "2.2.0",
|
||||
"modelVersion": "PP-OCRv6-best-v1-medium"
|
||||
}
|
||||
}
|
||||
|
||||
@@ -141,8 +141,8 @@ Docker Compose aracılığıyla NVIDIA CUDA hızlandırması için, SnapOtter hi
|
||||
| Etiket | Açıklama |
|
||||
|-----|------------|
|
||||
| `latest` | En son sürüm |
|
||||
| `2.1.0` | Tam sürüm |
|
||||
| `2.1` | 2.1.x içindeki en son yama |
|
||||
| `2.2.0` | Tam sürüm |
|
||||
| `2.2` | 2.2.x içindeki en son yama |
|
||||
| `2` | 2.x içindeki en son ara sürüm |
|
||||
|
||||
## Platformlar {#platforms}
|
||||
|
||||
@@ -59,7 +59,7 @@ Bu sayfadaki kısaltılmış bir Oluşturma örneğini kopyalamak yerine, her s
|
||||
```bash
|
||||
install -d -m 700 snapotter && cd snapotter
|
||||
curl --proto '=https' --tlsv1.2 -fsSLo docker-compose.yml \
|
||||
https://raw.githubusercontent.com/snapotter-hq/SnapOtter/v2.1.0/docker/docker-compose.yml
|
||||
https://raw.githubusercontent.com/snapotter-hq/SnapOtter/v2.2.0/docker/docker-compose.yml
|
||||
|
||||
# Keep generated service credentials out of shell history and world-readable files.
|
||||
umask 077
|
||||
@@ -72,7 +72,7 @@ docker compose -f docker-compose.yml pull
|
||||
docker compose -f docker-compose.yml up -d --no-build
|
||||
```
|
||||
|
||||
Kurallı [`docker/docker-compose.yml`](https://github.com/snapotter-hq/SnapOtter/blob/v2.1.0/docker/docker-compose.yml) dört çalışma zamanı biriminin tümünü, durum denetimlerini, kaynak sınırlarını, dayanıklı Redis yapılandırmasını, sabitlenmiş veritabanı/önbellek görüntülerini ve geçerli kapsayıcı güçlendirmeyi içerir. İlk girişten hemen sonra varsayılan yönetici şifresini değiştirin. Tekrarlanabilir bir dağıtım için `latest`'yi takip etmek yerine SnapOtter uygulama görüntüsünü doğruladığınız sürüm etiketine veya özete sabitleyin.
|
||||
Kurallı [`docker/docker-compose.yml`](https://github.com/snapotter-hq/SnapOtter/blob/v2.2.0/docker/docker-compose.yml) dört çalışma zamanı biriminin tümünü, durum denetimlerini, kaynak sınırlarını, dayanıklı Redis yapılandırmasını, sabitlenmiş veritabanı/önbellek görüntülerini ve geçerli kapsayıcı güçlendirmeyi içerir. İlk girişten hemen sonra varsayılan yönetici şifresini değiştirin. Tekrarlanabilir bir dağıtım için `latest`'yi takip etmek yerine SnapOtter uygulama görüntüsünü doğruladığınız sürüm etiketine veya özete sabitleyin.
|
||||
|
||||
Tüm ortam değişkenleri için [Yapılandırma](/tr/guide/configuration)'ya ve gizli diziler, ağ politikası ve yedekleme kılavuzu için [Güvenlik ve Güçlendirme](/tr/guide/security)'ye bakın.
|
||||
|
||||
|
||||
@@ -242,7 +242,7 @@ Her SnapOtter sürümü aşağıdaki güvenlik yapılarını içerir:
|
||||
Yayın konusu bildirimini indirin ve yayın iş akışı tarafından onaylandığını doğrulayın:
|
||||
|
||||
```bash
|
||||
gh attestation verify snapotter-v2.1.0-release-subjects.json \
|
||||
gh attestation verify snapotter-v2.2.0-release-subjects.json \
|
||||
--repo snapotter-hq/SnapOtter \
|
||||
--signer-workflow snapotter-hq/SnapOtter/.github/workflows/release.yml
|
||||
```
|
||||
@@ -253,13 +253,13 @@ Bildirim, `releaseTag`, `releaseCommit` ve `workflowTriggerCommit`'yi ayrı ayr
|
||||
|
||||
```bash
|
||||
# Scan with Grype using the CycloneDX SBOM
|
||||
grype sbom:snapotter-v2.1.0-image-linux-amd64-sbom.cdx.json
|
||||
grype sbom:snapotter-v2.2.0-image-linux-amd64-sbom.cdx.json
|
||||
|
||||
# Scan with Trivy using the SPDX SBOM
|
||||
trivy sbom snapotter-v2.1.0-image-linux-amd64-sbom.spdx.json
|
||||
trivy sbom snapotter-v2.2.0-image-linux-amd64-sbom.spdx.json
|
||||
|
||||
# Scan the Docker image directly
|
||||
trivy image snapotter/snapotter:2.1.0
|
||||
trivy image snapotter/snapotter:2.2.0
|
||||
```
|
||||
|
||||
::: info
|
||||
|
||||
@@ -76,7 +76,7 @@ curl -X POST http://localhost:1349/api/v1/tools/image/ocr \
|
||||
"provider": "CPUExecutionProvider",
|
||||
"degraded": false,
|
||||
"warnings": [],
|
||||
"runtimeVersion": "2.1.0",
|
||||
"runtimeVersion": "2.2.0",
|
||||
"modelVersion": "PP-OCRv6-best-v1-medium"
|
||||
}
|
||||
}
|
||||
|
||||
@@ -141,8 +141,8 @@ volumes:
|
||||
| Тег | Опис |
|
||||
|-----|------------|
|
||||
| `latest` | Останній випуск |
|
||||
| `2.1.0` | Точна версія |
|
||||
| `2.1` | Останній патч у 2.1.x |
|
||||
| `2.2.0` | Точна версія |
|
||||
| `2.2` | Останній патч у 2.2.x |
|
||||
| `2` | Останній мінорний у 2.x |
|
||||
|
||||
## Платформи {#platforms}
|
||||
|
||||
@@ -59,7 +59,7 @@ docker run -d --name SnapOtter -p 1349:1349 -v SnapOtter-data:/data ghcr.io/snap
|
||||
```bash
|
||||
install -d -m 700 snapotter && cd snapotter
|
||||
curl --proto '=https' --tlsv1.2 -fsSLo docker-compose.yml \
|
||||
https://raw.githubusercontent.com/snapotter-hq/SnapOtter/v2.1.0/docker/docker-compose.yml
|
||||
https://raw.githubusercontent.com/snapotter-hq/SnapOtter/v2.2.0/docker/docker-compose.yml
|
||||
|
||||
# Keep generated service credentials out of shell history and world-readable files.
|
||||
umask 077
|
||||
@@ -72,7 +72,7 @@ docker compose -f docker-compose.yml pull
|
||||
docker compose -f docker-compose.yml up -d --no-build
|
||||
```
|
||||
|
||||
Канонічний [`docker/docker-compose.yml`](https://github.com/snapotter-hq/SnapOtter/blob/v2.1.0/docker/docker-compose.yml) включає всі чотири томи часу виконання, перевірки працездатності, обмеження ресурсів, надійну конфігурацію Redis, закріплені зображення бази даних/кешу та поточний захист контейнера. Змініть стандартний пароль адміністратора одразу після першого входу. Для відтворюваного розгортання прикріпіть зображення програми SnapOtter до тегу випуску або перевіреного дайджесту замість `latest`.
|
||||
Канонічний [`docker/docker-compose.yml`](https://github.com/snapotter-hq/SnapOtter/blob/v2.2.0/docker/docker-compose.yml) включає всі чотири томи часу виконання, перевірки працездатності, обмеження ресурсів, надійну конфігурацію Redis, закріплені зображення бази даних/кешу та поточний захист контейнера. Змініть стандартний пароль адміністратора одразу після першого входу. Для відтворюваного розгортання прикріпіть зображення програми SnapOtter до тегу випуску або перевіреного дайджесту замість `latest`.
|
||||
|
||||
Перегляньте [Конфігурація](/uk/guide/configuration) для всіх змінних середовища та [Безпека та зміцнення](/uk/guide/security) для секретів, мережевої політики та вказівок щодо резервного копіювання.
|
||||
|
||||
|
||||
@@ -245,7 +245,7 @@ sha256sum backup/snapotter-*.tar.gz > backup/SHA256SUMS
|
||||
Завантажте маніфест теми випуску та переконайтеся, що він підтверджений робочим процесом випуску:
|
||||
|
||||
```bash
|
||||
gh attestation verify snapotter-v2.1.0-release-subjects.json \
|
||||
gh attestation verify snapotter-v2.2.0-release-subjects.json \
|
||||
--repo snapotter-hq/SnapOtter \
|
||||
--signer-workflow snapotter-hq/SnapOtter/.github/workflows/release.yml
|
||||
```
|
||||
@@ -256,13 +256,13 @@ gh attestation verify snapotter-v2.1.0-release-subjects.json \
|
||||
|
||||
```bash
|
||||
# Scan with Grype using the CycloneDX SBOM
|
||||
grype sbom:snapotter-v2.1.0-image-linux-amd64-sbom.cdx.json
|
||||
grype sbom:snapotter-v2.2.0-image-linux-amd64-sbom.cdx.json
|
||||
|
||||
# Scan with Trivy using the SPDX SBOM
|
||||
trivy sbom snapotter-v2.1.0-image-linux-amd64-sbom.spdx.json
|
||||
trivy sbom snapotter-v2.2.0-image-linux-amd64-sbom.spdx.json
|
||||
|
||||
# Scan the Docker image directly
|
||||
trivy image snapotter/snapotter:2.1.0
|
||||
trivy image snapotter/snapotter:2.2.0
|
||||
```
|
||||
|
||||
::: info
|
||||
|
||||
@@ -76,7 +76,7 @@ curl -X POST http://localhost:1349/api/v1/tools/image/ocr \
|
||||
"provider": "CPUExecutionProvider",
|
||||
"degraded": false,
|
||||
"warnings": [],
|
||||
"runtimeVersion": "2.1.0",
|
||||
"runtimeVersion": "2.2.0",
|
||||
"modelVersion": "PP-OCRv6-best-v1-medium"
|
||||
}
|
||||
}
|
||||
|
||||
@@ -141,8 +141,8 @@ volumes:
|
||||
| Thẻ | Mô tả |
|
||||
|-----|------------|
|
||||
| `latest` | Bản phát hành mới nhất |
|
||||
| `2.1.0` | Phiên bản chính xác |
|
||||
| `2.1` | Bản vá mới nhất trong 2.1.x |
|
||||
| `2.2.0` | Phiên bản chính xác |
|
||||
| `2.2` | Bản vá mới nhất trong 2.2.x |
|
||||
| `2` | Bản minor mới nhất trong 2.x |
|
||||
|
||||
## Nền tảng {#platforms}
|
||||
|
||||
@@ -59,7 +59,7 @@ Sử dụng tệp sản xuất được duy trì và thử nghiệm với mỗi
|
||||
```bash
|
||||
install -d -m 700 snapotter && cd snapotter
|
||||
curl --proto '=https' --tlsv1.2 -fsSLo docker-compose.yml \
|
||||
https://raw.githubusercontent.com/snapotter-hq/SnapOtter/v2.1.0/docker/docker-compose.yml
|
||||
https://raw.githubusercontent.com/snapotter-hq/SnapOtter/v2.2.0/docker/docker-compose.yml
|
||||
|
||||
# Keep generated service credentials out of shell history and world-readable files.
|
||||
umask 077
|
||||
@@ -72,7 +72,7 @@ docker compose -f docker-compose.yml pull
|
||||
docker compose -f docker-compose.yml up -d --no-build
|
||||
```
|
||||
|
||||
[`docker/docker-compose.yml`](https://github.com/snapotter-hq/SnapOtter/blob/v2.1.0/docker/docker-compose.yml) chuẩn bao gồm tất cả bốn khối thời gian chạy, kiểm tra tình trạng, giới hạn tài nguyên, cấu hình Redis bền vững, hình ảnh bộ đệm/cơ sở dữ liệu được ghim và tăng cường vùng chứa hiện tại. Thay đổi mật khẩu quản trị mặc định ngay sau lần đăng nhập đầu tiên. Để triển khai có thể lặp lại, hãy ghim hình ảnh ứng dụng SnapOtter vào thẻ phát hành hoặc thông báo mà bạn đã xác minh thay vì theo dõi `latest`.
|
||||
[`docker/docker-compose.yml`](https://github.com/snapotter-hq/SnapOtter/blob/v2.2.0/docker/docker-compose.yml) chuẩn bao gồm tất cả bốn khối thời gian chạy, kiểm tra tình trạng, giới hạn tài nguyên, cấu hình Redis bền vững, hình ảnh bộ đệm/cơ sở dữ liệu được ghim và tăng cường vùng chứa hiện tại. Thay đổi mật khẩu quản trị mặc định ngay sau lần đăng nhập đầu tiên. Để triển khai có thể lặp lại, hãy ghim hình ảnh ứng dụng SnapOtter vào thẻ phát hành hoặc thông báo mà bạn đã xác minh thay vì theo dõi `latest`.
|
||||
|
||||
Xem [Cấu hình](/vi/guide/configuration) để biết tất cả các biến môi trường và [Bảo mật & tăng cường](/vi/guide/security) để biết bí mật, chính sách mạng và hướng dẫn sao lưu.
|
||||
|
||||
|
||||
@@ -242,7 +242,7 @@ Mỗi bản phát hành SnapOtter bao gồm các tạo phẩm bảo mật sau:
|
||||
Tải xuống bản kê khai chủ đề phát hành và xác minh rằng nó đã được chứng thực bởi quy trình phát hành:
|
||||
|
||||
```bash
|
||||
gh attestation verify snapotter-v2.1.0-release-subjects.json \
|
||||
gh attestation verify snapotter-v2.2.0-release-subjects.json \
|
||||
--repo snapotter-hq/SnapOtter \
|
||||
--signer-workflow snapotter-hq/SnapOtter/.github/workflows/release.yml
|
||||
```
|
||||
@@ -253,13 +253,13 @@ Bạn cũng có thể quét trực tiếp SBOM đã tải xuống hoặc hình
|
||||
|
||||
```bash
|
||||
# Scan with Grype using the CycloneDX SBOM
|
||||
grype sbom:snapotter-v2.1.0-image-linux-amd64-sbom.cdx.json
|
||||
grype sbom:snapotter-v2.2.0-image-linux-amd64-sbom.cdx.json
|
||||
|
||||
# Scan with Trivy using the SPDX SBOM
|
||||
trivy sbom snapotter-v2.1.0-image-linux-amd64-sbom.spdx.json
|
||||
trivy sbom snapotter-v2.2.0-image-linux-amd64-sbom.spdx.json
|
||||
|
||||
# Scan the Docker image directly
|
||||
trivy image snapotter/snapotter:2.1.0
|
||||
trivy image snapotter/snapotter:2.2.0
|
||||
```
|
||||
|
||||
::: info
|
||||
|
||||
@@ -76,7 +76,7 @@ Kết nối tới `GET /api/v1/jobs/{jobId}/progress` bằng `jobId` do phản h
|
||||
"provider": "CPUExecutionProvider",
|
||||
"degraded": false,
|
||||
"warnings": [],
|
||||
"runtimeVersion": "2.1.0",
|
||||
"runtimeVersion": "2.2.0",
|
||||
"modelVersion": "PP-OCRv6-best-v1-medium"
|
||||
}
|
||||
}
|
||||
|
||||
@@ -141,8 +141,8 @@ volumes:
|
||||
| 标签 | 说明 |
|
||||
|-----|------------|
|
||||
| `latest` | 最新发布版 |
|
||||
| `2.1.0` | 精确版本 |
|
||||
| `2.1` | 2.1.x 中的最新补丁版 |
|
||||
| `2.2.0` | 精确版本 |
|
||||
| `2.2` | 2.2.x 中的最新补丁版 |
|
||||
| `2` | 2.x 中的最新次版本 |
|
||||
|
||||
## 平台 {#platforms}
|
||||
|
||||
@@ -59,7 +59,7 @@ docker run -d --name SnapOtter -p 1349:1349 -v SnapOtter-data:/data ghcr.io/snap
|
||||
```bash
|
||||
install -d -m 700 snapotter && cd snapotter
|
||||
curl --proto '=https' --tlsv1.2 -fsSLo docker-compose.yml \
|
||||
https://raw.githubusercontent.com/snapotter-hq/SnapOtter/v2.1.0/docker/docker-compose.yml
|
||||
https://raw.githubusercontent.com/snapotter-hq/SnapOtter/v2.2.0/docker/docker-compose.yml
|
||||
|
||||
# Keep generated service credentials out of shell history and world-readable files.
|
||||
umask 077
|
||||
@@ -72,7 +72,7 @@ docker compose -f docker-compose.yml pull
|
||||
docker compose -f docker-compose.yml up -d --no-build
|
||||
```
|
||||
|
||||
规范的 [`docker/docker-compose.yml`](https://github.com/snapotter-hq/SnapOtter/blob/v2.1.0/docker/docker-compose.yml) 包括所有四个运行时卷、运行状况检查、资源限制、持久 Redis 配置、固定数据库/缓存映像以及当前容器强化。首次登录后立即更改默认管理员密码。对于可重现的部署,请将 SnapOtter 应用程序映像固定到您验证的发布标签或摘要,而不是遵循 `latest`。
|
||||
规范的 [`docker/docker-compose.yml`](https://github.com/snapotter-hq/SnapOtter/blob/v2.2.0/docker/docker-compose.yml) 包括所有四个运行时卷、运行状况检查、资源限制、持久 Redis 配置、固定数据库/缓存映像以及当前容器强化。首次登录后立即更改默认管理员密码。对于可重现的部署,请将 SnapOtter 应用程序映像固定到您验证的发布标签或摘要,而不是遵循 `latest`。
|
||||
|
||||
有关所有环境变量,请参阅[配置](/zh-CN/guide/configuration);有关机密、网络策略和备份指南,请参阅[安全和强化](/zh-CN/guide/security)。
|
||||
|
||||
|
||||
@@ -242,7 +242,7 @@ sha256sum backup/snapotter-*.tar.gz > backup/SHA256SUMS
|
||||
下载发布主题清单并验证它是否已由发布工作流程证明:
|
||||
|
||||
```bash
|
||||
gh attestation verify snapotter-v2.1.0-release-subjects.json \
|
||||
gh attestation verify snapotter-v2.2.0-release-subjects.json \
|
||||
--repo snapotter-hq/SnapOtter \
|
||||
--signer-workflow snapotter-hq/SnapOtter/.github/workflows/release.yml
|
||||
```
|
||||
@@ -253,13 +253,13 @@ gh attestation verify snapotter-v2.1.0-release-subjects.json \
|
||||
|
||||
```bash
|
||||
# Scan with Grype using the CycloneDX SBOM
|
||||
grype sbom:snapotter-v2.1.0-image-linux-amd64-sbom.cdx.json
|
||||
grype sbom:snapotter-v2.2.0-image-linux-amd64-sbom.cdx.json
|
||||
|
||||
# Scan with Trivy using the SPDX SBOM
|
||||
trivy sbom snapotter-v2.1.0-image-linux-amd64-sbom.spdx.json
|
||||
trivy sbom snapotter-v2.2.0-image-linux-amd64-sbom.spdx.json
|
||||
|
||||
# Scan the Docker image directly
|
||||
trivy image snapotter/snapotter:2.1.0
|
||||
trivy image snapotter/snapotter:2.2.0
|
||||
```
|
||||
|
||||
::: info
|
||||
|
||||
@@ -76,7 +76,7 @@ curl -X POST http://localhost:1349/api/v1/tools/image/ocr \
|
||||
"provider": "CPUExecutionProvider",
|
||||
"degraded": false,
|
||||
"warnings": [],
|
||||
"runtimeVersion": "2.1.0",
|
||||
"runtimeVersion": "2.2.0",
|
||||
"modelVersion": "PP-OCRv6-best-v1-medium"
|
||||
}
|
||||
}
|
||||
|
||||
@@ -141,8 +141,8 @@ volumes:
|
||||
| 標籤 | 說明 |
|
||||
|-----|------------|
|
||||
| `latest` | 最新版本 |
|
||||
| `2.1.0` | 明確版本 |
|
||||
| `2.1` | 2.1.x 中的最新修補版 |
|
||||
| `2.2.0` | 明確版本 |
|
||||
| `2.2` | 2.2.x 中的最新修補版 |
|
||||
| `2` | 2.x 中的最新次要版 |
|
||||
|
||||
## 平台 {#platforms}
|
||||
|
||||
@@ -59,7 +59,7 @@ docker run -d --name SnapOtter -p 1349:1349 -v SnapOtter-data:/data ghcr.io/snap
|
||||
```bash
|
||||
install -d -m 700 snapotter && cd snapotter
|
||||
curl --proto '=https' --tlsv1.2 -fsSLo docker-compose.yml \
|
||||
https://raw.githubusercontent.com/snapotter-hq/SnapOtter/v2.1.0/docker/docker-compose.yml
|
||||
https://raw.githubusercontent.com/snapotter-hq/SnapOtter/v2.2.0/docker/docker-compose.yml
|
||||
|
||||
# Keep generated service credentials out of shell history and world-readable files.
|
||||
umask 077
|
||||
@@ -72,7 +72,7 @@ docker compose -f docker-compose.yml pull
|
||||
docker compose -f docker-compose.yml up -d --no-build
|
||||
```
|
||||
|
||||
規範的 [`docker/docker-compose.yml`](https://github.com/snapotter-hq/SnapOtter/blob/v2.1.0/docker/docker-compose.yml) 包括所有四個運行時卷、運行狀況檢查、資源限制、持久性 Redis 配置、固定資料庫/快取映像以及當前容器強化。首次登入後立即變更預設管理員密碼。對於可重現的部署,請將 SnapOtter 應用程式映像固定到您驗證的發布標籤或摘要,而不是遵循 `latest`。
|
||||
規範的 [`docker/docker-compose.yml`](https://github.com/snapotter-hq/SnapOtter/blob/v2.2.0/docker/docker-compose.yml) 包括所有四個運行時卷、運行狀況檢查、資源限制、持久性 Redis 配置、固定資料庫/快取映像以及當前容器強化。首次登入後立即變更預設管理員密碼。對於可重現的部署,請將 SnapOtter 應用程式映像固定到您驗證的發布標籤或摘要,而不是遵循 `latest`。
|
||||
|
||||
有關所有環境變量,請參閱[配置](/zh-TW/guide/configuration);有關機密、網路策略和備份指南,請參閱[安全性和強化](/zh-TW/guide/security)。
|
||||
|
||||
|
||||
@@ -242,7 +242,7 @@ sha256sum backup/snapotter-*.tar.gz > backup/SHA256SUMS
|
||||
下載發布主題清單並驗證它是否已由發布工作流程證明:
|
||||
|
||||
```bash
|
||||
gh attestation verify snapotter-v2.1.0-release-subjects.json \
|
||||
gh attestation verify snapotter-v2.2.0-release-subjects.json \
|
||||
--repo snapotter-hq/SnapOtter \
|
||||
--signer-workflow snapotter-hq/SnapOtter/.github/workflows/release.yml
|
||||
```
|
||||
@@ -253,13 +253,13 @@ gh attestation verify snapotter-v2.1.0-release-subjects.json \
|
||||
|
||||
```bash
|
||||
# Scan with Grype using the CycloneDX SBOM
|
||||
grype sbom:snapotter-v2.1.0-image-linux-amd64-sbom.cdx.json
|
||||
grype sbom:snapotter-v2.2.0-image-linux-amd64-sbom.cdx.json
|
||||
|
||||
# Scan with Trivy using the SPDX SBOM
|
||||
trivy sbom snapotter-v2.1.0-image-linux-amd64-sbom.spdx.json
|
||||
trivy sbom snapotter-v2.2.0-image-linux-amd64-sbom.spdx.json
|
||||
|
||||
# Scan the Docker image directly
|
||||
trivy image snapotter/snapotter:2.1.0
|
||||
trivy image snapotter/snapotter:2.2.0
|
||||
```
|
||||
|
||||
::: info
|
||||
|
||||
@@ -76,7 +76,7 @@ curl -X POST http://localhost:1349/api/v1/tools/image/ocr \
|
||||
"provider": "CPUExecutionProvider",
|
||||
"degraded": false,
|
||||
"warnings": [],
|
||||
"runtimeVersion": "2.1.0",
|
||||
"runtimeVersion": "2.2.0",
|
||||
"modelVersion": "PP-OCRv6-best-v1-medium"
|
||||
}
|
||||
}
|
||||
|
||||
@@ -1,6 +1,6 @@
|
||||
{
|
||||
"name": "@snapotter/landing",
|
||||
"version": "2.1.0",
|
||||
"version": "2.2.0",
|
||||
"private": true,
|
||||
"type": "module",
|
||||
"scripts": {
|
||||
|
||||
@@ -1,6 +1,6 @@
|
||||
{
|
||||
"name": "@snapotter/web",
|
||||
"version": "2.1.0",
|
||||
"version": "2.2.0",
|
||||
"private": true,
|
||||
"type": "module",
|
||||
"scripts": {
|
||||
|
||||
Reference in New Issue
Block a user