Docker拉取命令

docker pull swr.cn-north-4.myhuaweicloud.com/ddn-k8s/ghcr.io/mpyw/php-eol-cve-2026-109618-109619:7.4-fpm
docker tag  swr.cn-north-4.myhuaweicloud.com/ddn-k8s/ghcr.io/mpyw/php-eol-cve-2026-109618-109619:7.4-fpm  ghcr.io/mpyw/php-eol-cve-2026-109618-109619:7.4-fpm

Containerd拉取命令

ctr images pull swr.cn-north-4.myhuaweicloud.com/ddn-k8s/ghcr.io/mpyw/php-eol-cve-2026-109618-109619:7.4-fpm
ctr images tag  swr.cn-north-4.myhuaweicloud.com/ddn-k8s/ghcr.io/mpyw/php-eol-cve-2026-109618-109619:7.4-fpm  ghcr.io/mpyw/php-eol-cve-2026-109618-109619:7.4-fpm

Shell快速替换命令

sed -i 's#ghcr.io/mpyw/php-eol-cve-2026-109618-109619:7.4-fpm#swr.cn-north-4.myhuaweicloud.com/ddn-k8s/ghcr.io/mpyw/php-eol-cve-2026-109618-109619:7.4-fpm#' deployment.yaml

Ansible快速分发-Docker

#ansible k8s -m shell -a 'docker pull swr.cn-north-4.myhuaweicloud.com/ddn-k8s/ghcr.io/mpyw/php-eol-cve-2026-109618-109619:7.4-fpm && docker tag  swr.cn-north-4.myhuaweicloud.com/ddn-k8s/ghcr.io/mpyw/php-eol-cve-2026-109618-109619:7.4-fpm  ghcr.io/mpyw/php-eol-cve-2026-109618-109619:7.4-fpm'

Ansible快速分发-Containerd

#ansible k8s -m shell -a 'ctr images pull swr.cn-north-4.myhuaweicloud.com/ddn-k8s/ghcr.io/mpyw/php-eol-cve-2026-109618-109619:7.4-fpm && ctr images tag  swr.cn-north-4.myhuaweicloud.com/ddn-k8s/ghcr.io/mpyw/php-eol-cve-2026-109618-109619:7.4-fpm  ghcr.io/mpyw/php-eol-cve-2026-109618-109619:7.4-fpm'

镜像构建历史

# 2026-10-21 23:11:18  0.00B 设置默认要执行的命令
CMD ["php-fpm"]
                        
# 2026-10-21 23:11:18  0.00B 声明容器运行时监听的端口
EXPOSE [9000/tcp]
                        
# 2026-10-21 23:11:18  0.00B 设置停止容器时发送的系统调用信号
STOPSIGNAL SIGQUIT
                        
# 2026-10-21 23:11:18  25.43KB 执行命令并创建新的镜像层
RUN /bin/sh -c set -eux; 	cd /usr/local/etc; 	if [ -d php-fpm.d ]; then 		sed 's!=NONE/!=!g' php-fpm.conf.default | tee php-fpm.conf > /dev/null; 		cp php-fpm.d/www.conf.default php-fpm.d/www.conf; 	else 		mkdir php-fpm.d; 		cp php-fpm.conf.default php-fpm.d/www.conf; 		{ 			echo '[global]'; 			echo 'include=etc/php-fpm.d/*.conf'; 		} | tee php-fpm.conf; 	fi; 	{ 		echo '[global]'; 		echo 'error_log = /proc/self/fd/2'; 		echo; echo '; https://github.com/docker-library/php/pull/725#issuecomment-443540114'; echo 'log_limit = 8192'; 		echo; 		echo '[www]'; 		echo '; if we send this to /proc/self/fd/1, it never appears'; 		echo 'access.log = /proc/self/fd/2'; 		echo; 		echo 'clear_env = no'; 		echo; 		echo '; Ensure worker stdout and stderr are sent to the main error log.'; 		echo 'catch_workers_output = yes'; 		echo 'decorate_workers_output = no'; 	} | tee php-fpm.d/docker.conf; 	{ 		echo '[global]'; 		echo 'daemonize = no'; 		echo; 		echo '[www]'; 		echo 'listen = 9000'; 	} | tee php-fpm.d/zz-docker.conf # buildkit
                        
# 2026-10-21 23:11:18  0.00B 设置工作目录为/var/www/html
WORKDIR /var/www/html
                        
# 2026-10-21 23:11:18  0.00B 配置容器启动时运行的命令
ENTRYPOINT ["docker-php-entrypoint"]
                        
# 2026-10-21 23:11:18  17.00B 执行命令并创建新的镜像层
RUN /bin/sh -c docker-php-ext-enable sodium # buildkit
                        
# 2026-10-21 23:11:18  7.20KB 复制新文件或目录到容器中
COPY docker-php-ext-* docker-php-entrypoint /usr/local/bin/ # buildkit
                        
# 2026-10-21 23:11:18  80.97MB 执行命令并创建新的镜像层
RUN /bin/sh -c set -eux; 		savedAptMark="$(apt-mark showmanual)"; 	apt-get update; 	apt-get install -y --no-install-recommends 		libargon2-dev 		libcurl4-openssl-dev 		libonig-dev 		libreadline-dev 		libsodium-dev 		libsqlite3-dev 		libssl-dev 		libxml2-dev 		zlib1g-dev 	; 		export 		CFLAGS="$PHP_CFLAGS" 		CPPFLAGS="$PHP_CPPFLAGS" 		LDFLAGS="$PHP_LDFLAGS" 	; 	docker-php-source extract; 	cd /usr/src/php; 	gnuArch="$(dpkg-architecture --query DEB_BUILD_GNU_TYPE)"; 	debMultiarch="$(dpkg-architecture --query DEB_BUILD_MULTIARCH)"; 	if [ ! -d /usr/include/curl ]; then 		ln -sT "/usr/include/$debMultiarch/curl" /usr/local/include/curl; 	fi; 	./configure 		--build="$gnuArch" 		--with-config-file-path="$PHP_INI_DIR" 		--with-config-file-scan-dir="$PHP_INI_DIR/conf.d" 				--enable-option-checking=fatal 				--with-mhash 				--with-pic 				--enable-ftp 		--enable-mbstring 		--enable-mysqlnd 		--with-password-argon2 		--with-sodium=shared 		--with-pdo-sqlite=/usr 		--with-sqlite3=/usr 				--with-curl 		--with-iconv 		--with-openssl 		--with-readline 		--with-zlib 				--disable-phpdbg 				--with-pear 				$(test "$gnuArch" = 's390x-linux-gnu' && echo '--without-pcre-jit') 		--with-libdir="lib/$debMultiarch" 				--disable-cgi 				--enable-fpm 		--with-fpm-user=www-data 		--with-fpm-group=www-data 	; 	make -j "$(nproc)"; 	find -type f -name '*.a' -delete; 	make install; 	find 		/usr/local 		-type f 		-perm '/0111' 		-exec sh -euxc ' 			strip --strip-all "$@" || : 		' -- '{}' + 	; 	make clean; 		cp -v php.ini-* "$PHP_INI_DIR/"; 		cd /; 	docker-php-source delete; 		apt-mark auto '.*' > /dev/null; 	[ -z "$savedAptMark" ] || apt-mark manual $savedAptMark; 	find /usr/local -type f -executable -exec ldd '{}' ';' 		| awk '/=>/ { print $(NF-1) }' 		| sort -u 		| xargs -r dpkg-query --search 		| cut -d: -f1 		| sort -u 		| xargs -r apt-mark manual 	; 	apt-get purge -y --auto-remove -o APT::AutoRemove::RecommendsImportant=false; 	rm -rf /var/lib/apt/lists/*; 		pecl update-channels; 	rm -rf /tmp/pear ~/.pearrc; 		php --version # buildkit
                        
# 2026-10-21 23:07:45  587.00B 复制新文件或目录到容器中
COPY docker-php-source /usr/local/bin/ # buildkit
                        
# 2026-10-21 23:07:45  11.05MB 执行命令并创建新的镜像层
RUN /bin/sh -c set -eux; 		savedAptMark="$(apt-mark showmanual)"; 	apt-get update; 	apt-get install -y --no-install-recommends gnupg patch dirmngr; 	rm -rf /var/lib/apt/lists/*; 		mkdir -p /usr/src; 	cd /usr/src; 		curl -fsSL -o php.tar.xz "$PHP_URL"; 		if [ -n "$PHP_SHA256" ]; then 		echo "$PHP_SHA256 *php.tar.xz" | sha256sum -c -; 	fi; 		if [ -n "$PHP_ASC_URL" ]; then 		curl -fsSL -o php.tar.xz.asc "$PHP_ASC_URL"; 		export GNUPGHOME="$(mktemp -d)"; 		for key in $GPG_KEYS; do 			gpg --batch --keyserver keyserver.ubuntu.com --recv-keys "$key"; 		done; 		gpg --batch --verify php.tar.xz.asc php.tar.xz; 		gpgconf --kill all; 		rm -rf "$GNUPGHOME"; 	fi; 		mkdir php-patched; 	tar -xJf php.tar.xz -C php-patched --strip-components=1; 	patch -d php-patched -p1 --forward --batch < php-CVE-2026-109618-109619.patch; 	rm php.tar.xz php.tar.xz.asc; 	tar -cJf php.tar.xz php-patched; 	rm -rf php-patched; 		apt-mark auto '.*' > /dev/null; 	apt-mark manual $savedAptMark > /dev/null; 	apt-get purge -y --auto-remove -o APT::AutoRemove::RecommendsImportant=false # buildkit
                        
# 2026-10-21 23:07:11  41.97KB 复制新文件或目录到容器中
COPY 7.4-CVE-2026-109618-109619.patch /usr/src/php-CVE-2026-109618-109619.patch # buildkit
                        
# 2026-10-21 23:07:11  0.00B 设置环境变量 PHP_SHA256
ENV PHP_SHA256=924846abf93bc613815c55dd3f5809377813ac62a9ec4eb3778675b82a27b927
                        
# 2026-10-21 23:07:11  0.00B 设置环境变量 PHP_URL PHP_ASC_URL
ENV PHP_URL=https://www.php.net/distributions/php-7.4.33.tar.xz PHP_ASC_URL=https://www.php.net/distributions/php-7.4.33.tar.xz.asc
                        
# 2026-10-21 23:07:11  0.00B 设置环境变量 PHP_VERSION
ENV PHP_VERSION=7.4.33
                        
# 2026-10-21 23:07:11  0.00B 设置环境变量 GPG_KEYS
ENV GPG_KEYS=42670A7FE4D0441C8E4632349E4FDC074A4EF02D 5A52880781F755608BF815FC910DEB46F53EA312
                        
# 2026-10-21 23:07:11  0.00B 设置环境变量 PHP_LDFLAGS
ENV PHP_LDFLAGS=-Wl,-O1 -pie
                        
# 2026-10-21 23:07:11  0.00B 设置环境变量 PHP_CPPFLAGS -D_FILE_OFFSET_BITS
ENV PHP_CPPFLAGS=-fstack-protector-strong -fpic -fpie -O2 -D_LARGEFILE_SOURCE -D_FILE_OFFSET_BITS=64
                        
# 2026-10-21 23:07:11  0.00B 设置环境变量 PHP_CFLAGS -D_FILE_OFFSET_BITS
ENV PHP_CFLAGS=-fstack-protector-strong -fpic -fpie -O2 -D_LARGEFILE_SOURCE -D_FILE_OFFSET_BITS=64
                        
# 2026-10-21 23:07:11  0.00B 执行命令并创建新的镜像层
RUN /bin/sh -c set -eux; 	mkdir -p "$PHP_INI_DIR/conf.d"; 	[ ! -d /var/www/html ]; 	mkdir -p /var/www/html; 	chown www-data:www-data /var/www/html; 	chmod 777 /var/www/html # buildkit
                        
# 2026-10-21 23:07:11  0.00B 设置环境变量 PHP_INI_DIR
ENV PHP_INI_DIR=/usr/local/etc/php
                        
# 2026-10-21 23:07:11  269.26MB 执行命令并创建新的镜像层
RUN /bin/sh -c set -eux; 	apt-get update; 	apt-get install -y --no-install-recommends 		$PHPIZE_DEPS 		ca-certificates 		curl 		xz-utils 	; 	rm -rf /var/lib/apt/lists/* # buildkit
                        
# 2026-10-21 23:07:11  0.00B 设置环境变量 PHPIZE_DEPS
ENV PHPIZE_DEPS=autoconf 		dpkg-dev 		file 		g++ 		gcc 		libc-dev 		make 		pkg-config 		re2c
                        
# 2026-10-21 23:06:58  46.00B 执行命令并创建新的镜像层
RUN /bin/sh -c set -eux; 	{ 		echo 'Package: php*'; 		echo 'Pin: release *'; 		echo 'Pin-Priority: -1'; 	} > /etc/apt/preferences.d/no-debian-php # buildkit
                        
# 2026-10-21 23:06:58  442.00B 执行命令并创建新的镜像层
RUN /bin/sh -c sed -i 's#http://deb.debian.org/#http://archive.debian.org/#' /etc/apt/sources.list # buildkit
                        
# 2026-08-24 08:00:00  80.68MB 
# debian.sh --arch 'amd64' out/ 'bullseye' '@1787529600'
                        
                    

镜像信息

{
    "Id": "sha256:c0513e79a8b7ef6747b2b995c3ab8a3305dc8aec40792c7cbe1c1de198b2474f",
    "RepoTags": [
        "ghcr.io/mpyw/php-eol-cve-2026-109618-109619:7.4-fpm",
        "swr.cn-north-4.myhuaweicloud.com/ddn-k8s/ghcr.io/mpyw/php-eol-cve-2026-109618-109619:7.4-fpm"
    ],
    "RepoDigests": [
        "ghcr.io/mpyw/php-eol-cve-2026-109618-109619@sha256:e7387ea53ae2a329ee2a4289dba3b77047e913e0e93ea405e8a999dc62010332",
        "swr.cn-north-4.myhuaweicloud.com/ddn-k8s/ghcr.io/mpyw/php-eol-cve-2026-109618-109619@sha256:95862aaa42348901a1d41cfc0f9cd487a48fd3a5a2eed5cd5f5a9ea1d64fe636"
    ],
    "Parent": "",
    "Comment": "buildkit.dockerfile.v0",
    "Created": "2026-10-21T15:11:18.923888462Z",
    "Container": "",
    "ContainerConfig": null,
    "DockerVersion": "",
    "Author": "",
    "Config": {
        "Hostname": "",
        "Domainname": "",
        "User": "",
        "AttachStdin": false,
        "AttachStdout": false,
        "AttachStderr": false,
        "ExposedPorts": {
            "9000/tcp": {}
        },
        "Tty": false,
        "OpenStdin": false,
        "StdinOnce": false,
        "Env": [
            "PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin",
            "PHPIZE_DEPS=autoconf \t\tdpkg-dev \t\tfile \t\tg++ \t\tgcc \t\tlibc-dev \t\tmake \t\tpkg-config \t\tre2c",
            "PHP_INI_DIR=/usr/local/etc/php",
            "PHP_CFLAGS=-fstack-protector-strong -fpic -fpie -O2 -D_LARGEFILE_SOURCE -D_FILE_OFFSET_BITS=64",
            "PHP_CPPFLAGS=-fstack-protector-strong -fpic -fpie -O2 -D_LARGEFILE_SOURCE -D_FILE_OFFSET_BITS=64",
            "PHP_LDFLAGS=-Wl,-O1 -pie",
            "GPG_KEYS=42670A7FE4D0441C8E4632349E4FDC074A4EF02D 5A52880781F755608BF815FC910DEB46F53EA312",
            "PHP_VERSION=7.4.33",
            "PHP_URL=https://www.php.net/distributions/php-7.4.33.tar.xz",
            "PHP_ASC_URL=https://www.php.net/distributions/php-7.4.33.tar.xz.asc",
            "PHP_SHA256=924846abf93bc613815c55dd3f5809377813ac62a9ec4eb3778675b82a27b927"
        ],
        "Cmd": [
            "php-fpm"
        ],
        "ArgsEscaped": true,
        "Image": "",
        "Volumes": null,
        "WorkingDir": "/var/www/html",
        "Entrypoint": [
            "docker-php-entrypoint"
        ],
        "OnBuild": null,
        "Labels": {
            "org.opencontainers.image.description": "PHP 7.4/bullseye/fpm with the CVE-2026-109618 / CVE-2026-109619 fix backported",
            "org.opencontainers.image.licenses": "MIT AND PHP-3.01",
            "org.opencontainers.image.source": "https://github.com/mpyw/php-eol-CVE-2026-109618-109619",
            "org.opencontainers.image.version": "v1.1.0"
        },
        "StopSignal": "SIGQUIT"
    },
    "Architecture": "amd64",
    "Os": "linux",
    "Size": 442040225,
    "GraphDriver": {
        "Data": {
            "LowerDir": "/var/lib/docker/overlay2/fbb3045b92b9f26b86a9e77fe17e725a920fddd3ea2af22c865403a2b8ca5267/diff:/var/lib/docker/overlay2/b446ad10f3b7615c8cb69c4614a5edb9056d4bfc4f5298e6a209cb803002248b/diff:/var/lib/docker/overlay2/ec2c5e3c852e71549aebd8e3403e5878bf913416339747156ce9a9a49582fbb3/diff:/var/lib/docker/overlay2/7812f2f5d28b089013696c611bffe71c6dca62084060960e26c914404ef4cbec/diff:/var/lib/docker/overlay2/52463c76bc892a3096425ddc91f548859a5b960495d94f4cedcafe88d3cb5ee3/diff:/var/lib/docker/overlay2/9efc3b9a65d87e4add38546bf6f9bc352b8e2b0a54ef9a833d4d42cfb2cb2915/diff:/var/lib/docker/overlay2/0a65a90cd62af8b04c14ac45758b023217edca2a94dfb52c56e04b142fad717c/diff:/var/lib/docker/overlay2/f14463d9a33aa16c15c195a724d5d9ae64df10a9fc5cf8e09557c60131645b9e/diff:/var/lib/docker/overlay2/b9ae5486f5a38d49ee4237dc42c3ef565319a258c856d83f8a49b41d4f850786/diff:/var/lib/docker/overlay2/29e5617001d220cf91163db21b2195f298baeadd3d566e8aec3ec4d193f21399/diff:/var/lib/docker/overlay2/500ac5d24bbe9a0571e90a253a5fd8eb49ca41e2eed1b2406f62aa1c6245e9e2/diff:/var/lib/docker/overlay2/8f17546e3bd02ff19a11c6006ef8f9c5cea98a56a2cb19f7013abe9dc180d7ad/diff",
            "MergedDir": "/var/lib/docker/overlay2/24730668e119a2988da861805a9a607aa936d8d3ddb42bfe36ca765473aa3b07/merged",
            "UpperDir": "/var/lib/docker/overlay2/24730668e119a2988da861805a9a607aa936d8d3ddb42bfe36ca765473aa3b07/diff",
            "WorkDir": "/var/lib/docker/overlay2/24730668e119a2988da861805a9a607aa936d8d3ddb42bfe36ca765473aa3b07/work"
        },
        "Name": "overlay2"
    },
    "RootFS": {
        "Type": "layers",
        "Layers": [
            "sha256:7fa716d1e5dcd5e47b13509206762a82e123c26d38401a84b44287e8731de7a0",
            "sha256:f8a95d2b1e8d0ef1fa8be9d52ad14af37a7f1f3d016ec96e54280191ef06f52d",
            "sha256:04c276525a6dba36e1204286629b3970a79ce3819a541b61abcffb1d106b5e7b",
            "sha256:6cc762b49a6597ad69a7df00107567b3b012ba545b9399f57dd922e52b9500e6",
            "sha256:cc611ef0e29e87d7ae06a7189ae24617e38c0ca671d901193a0aedf25ebf81a3",
            "sha256:1a78b2652aa98e14e590edd51bb5eadadd64b6a05f01b60f0120a538cdfedf8e",
            "sha256:93553ca8f447a4c3684e1a6c44963db71dbd995e2d46f30e7321f0bbea4b5f24",
            "sha256:c944aebb5f68830439fd30fbc756a301241614f9519b59a178569d7b0d39fcf0",
            "sha256:0812ca38b50dfe598584abdd97a102592cccba5cb770ea30b5d4a472c78e4825",
            "sha256:a46313d50a25457e49a38f824b72512e3e7b1ce4abcead3a5353178a15938d17",
            "sha256:bdb28f412d091eb3059a06964c384ce6f9f33f55b135db022e5144d90131f30d",
            "sha256:5f70bf18a086007016e948b04aed3b82103a36bea41755b6cddfaf10ace3c6ef",
            "sha256:8b81adf2cb6f4045e4ca3dae9d82685c4be25e7aa0ceecb679b499fd9b1f8de0"
        ]
    },
    "Metadata": {
        "LastTagTime": "2026-10-26T14:33:41.645257926+08:00"
    }
}