On Fri, Oct 26, 2018 at 2:38 PM Sam Ruby <[email protected]> wrote:
>
> I'm still digging, but may not have much spare time until this weekend.

Lots of weirdness.  It looks like the best fix is to switch to use
different pdf utilities.  I've got a pull request to install them on
whimsy server:
https://github.com/apache/infrastructure-puppet/pull/1222.  I see this
has been merged so I will wait until it is applied and then push the
whimsy changes.

Weirdness #1:

ImageMagick had a vulnerability reported against it ("ImageTragick")
which was tracked down to their usage of another utility
("ghostscript").  Until that was fixed, the Ubuntu distribution
disabled pdf conversions in a configuration file.  It since has been
fixed, but the configuration file changes have not yet been reverted.

Weirdness #2:

The normal way to update XML configuration files in Puppet is to use a
tool named "augeas".  This tool doesn't seem to handle file names that
start with a capital letter, so it can't be used on
/etc/ImageMagick-6/policy.xml.  sed can be used as an alternative.

Weirdness #3:

pdftk can no longer be installed as a package on Ubuntu 18.04.  It
needs to be installed as a snap utility.  Apparently, snap utilities
run in a mini-container, and therefore have their own /tmp directory
(and therefore no access to /tmp files created prior to this process
being run).  Doesn't currently affect whimsy-vm4, which is using
Ubuntu 16.04.

 - - -

The simplest fix seems to be avoid using ImageMagick convert and
pdftk.  img2pdf and pdfunite are available on Ubuntu 16.04 and 18.04
and do the job.  I'll push this change later this afternoon.

- Sam Ruby

Reply via email to