Thanks for tracking this down. Who would have thought that image conversion would be so hard?
Craig > On Oct 28, 2018, at 10:50 AM, Sam Ruby <[email protected]> wrote: > > On Fri, Oct 26, 2018 at 2:38 PM Sam Ruby <[email protected]> wrote: >> >> I'm still digging, but may not have much spare time until this weekend. > > Lots of weirdness. It looks like the best fix is to switch to use > different pdf utilities. I've got a pull request to install them on > whimsy server: > https://github.com/apache/infrastructure-puppet/pull/1222. I see this > has been merged so I will wait until it is applied and then push the > whimsy changes. > > Weirdness #1: > > ImageMagick had a vulnerability reported against it ("ImageTragick") > which was tracked down to their usage of another utility > ("ghostscript"). Until that was fixed, the Ubuntu distribution > disabled pdf conversions in a configuration file. It since has been > fixed, but the configuration file changes have not yet been reverted. > > Weirdness #2: > > The normal way to update XML configuration files in Puppet is to use a > tool named "augeas". This tool doesn't seem to handle file names that > start with a capital letter, so it can't be used on > /etc/ImageMagick-6/policy.xml. sed can be used as an alternative. > > Weirdness #3: > > pdftk can no longer be installed as a package on Ubuntu 18.04. It > needs to be installed as a snap utility. Apparently, snap utilities > run in a mini-container, and therefore have their own /tmp directory > (and therefore no access to /tmp files created prior to this process > being run). Doesn't currently affect whimsy-vm4, which is using > Ubuntu 16.04. > > - - - > > The simplest fix seems to be avoid using ImageMagick convert and > pdftk. img2pdf and pdfunite are available on Ubuntu 16.04 and 18.04 > and do the job. I'll push this change later this afternoon. > > - Sam Ruby Craig L Russell Secretary, Apache Software Foundation [email protected] <mailto:[email protected]> http://db.apache.org/jdo <http://db.apache.org/jdo>
