cd tmp/hubzilla
# 源码包（实测经 gitlab.com 镜像 + 代理下载，74.7MB）
curl -x http://192.168.1.72:7897 -LO https://gitlab.com/fork/hubzilla/core/-/archive/11.4.2/core-11.4.2.tar.gz
tar xzf core-11.4.2.tar.gz
mv core-11.4.2 web

FROM php:8.3-apache

RUN apt-get update \
    && apt-get install -y --no-install-recommends \
        libicu-dev libpng-dev libjpeg-dev libfreetype6-dev \
        libzip-dev libgmp-dev git unzip msmtp-mta \
    && docker-php-ext-configure gd --with-jpeg --with-freetype \
    && docker-php-ext-install intl gd mysqli pdo_mysql zip gmp \
    && apt-get clean && rm -rf /var/lib/apt/lists/*

RUN a2enmod rewrite expires headers

COPY msmtp.conf /etc/msmtprc
COPY php.ini /usr/local/etc/php/conf.d/99-hubzilla.ini

defaults
auth           off
tls            off
auto_from      on
maildomain     10.89.72.10

account        default
host           mail
port           1025

upload_max_filesize = 64M
post_max_size = 64M
memory_limit = 512M
max_execution_time = 120
date.timezone = Asia/Shanghai

name: hubzilla-11.4.2-stack

services:
  web:
    build: ./
    image: hubzilla-11.4.2-web:local
    container_name: hubzilla-11.4.2-web
    restart: unless-stopped
    depends_on:
      - db
      - mail
    ports:
      - "8148:80"
    volumes:
      - ../web:/var/www/html
    networks:
      default:
        ipv4_address: 10.89.72.10
    environment:
      - HUBZILLA_DB_HOST=db

  db:
    image: mariadb:11
    container_name: hubzilla-11.4.2-db
    restart: unless-stopped
    command: --character-set-server=utf8mb4 --collation-server=utf8mb4_unicode_ci
    volumes:
      - ../db:/var/lib/mysql
    environment:
      - MYSQL_ROOT_PASSWORD=q1w2e3r4
      - MYSQL_DATABASE=hubzilla
      - MYSQL_USER=hubzilla
      - MYSQL_PASSWORD=q1w2e3r4

  mail:
    image: axllent/mailpit:latest
    container_name: hubzilla-11.4.2-mail
    restart: unless-stopped
    ports:
      - "8149:8025"
    networks:
      default:
        ipv4_address: 10.89.72.30

networks:
  default:
    name: hubzilla-11.4.2-net
    ipam:
      config:
        - subnet: 10.89.72.0/24

cd tmp/hubzilla/compose
docker compose up -d --build

#11 naming to docker.io/library/hubzilla-11.4.2-web:local done
#11 unpacking to docker.io/library/hubzilla-11.4.2-web:local done
 Image hubzilla-11.4.2-web:local Built
 Network hubzilla-11.4.2-net Creating
 Network hubzilla-11.4.2-net Created
 Container hubzilla-11.4.2-mail Creating
 Container hubzilla-11.4.2-db Creating
 Container hubzilla-11.4.2-mail Created
 Container hubzilla-11.4.2-db Created
 Container hubzilla-11.4.2-web Creating
 Container hubzilla-11.4.2-web Created
 Container hubzilla-11.4.2-mail Starting
 Container hubzilla-11.4.2-db Starting
 Container hubzilla-11.4.2-mail Started
 Container hubzilla-11.4.2-db Started
 Container hubzilla-11.4.2-web Starting
 Container hubzilla-11.4.2-web Started

$ docker compose ps
NAME                   IMAGE                       COMMAND                  SERVICE   CREATED        STATUS                                     PORTS
hubzilla-11.4.2-db     mariadb:11                  "docker-entrypoint.s…"   db        1 second ago   Up Less than a second                      3306/tcp
hubzilla-11.4.2-mail   axllent/mailpit:latest      "/mailpit"               mail      1 second ago   Up Less than a second (health: starting)   1025/tcp, 1110/tcp, 0.0.0.0:8149->8025/tcp
hubzilla-11.4.2-web    hubzilla-11.4.2-web:local   "docker-php-entrypoi…"   web       1 second ago   Up Less than a second                      0.0.0.0:8148->80/tcp

hubzilla-11.4.2-db  | Version: '11.8.9-MariaDB-ubu2404'  socket: '/run/mysqld/mysqld.sock'  port: 3306  mariadb.org binary distribution
hubzilla-11.4.2-db  | mariadbd: ready for connections.
hubzilla-11.4.2-web | [Mon Nov 02 05:35:03 2026] [mpm_prefork:notice] [pid 1] AH00163: Apache/2.4.69 (Debian) PHP/8.3.36 configured -- resuming normal operations

$ curl -s -c w_ck.txt -o w1.html -w "%{http_code} %{size_download}\n" http://10.89.72.10/setup
200 9550

System check
  libCurl / GD graphics / OpenSSL / PDO database / mb_string / xml / zip / intl / gmp PHP module (required)
  Apache mod_rewrite module (required)
  exec / shell_exec (required)
  .htconfig.php is writable (required)
  store is writable (required)
  store/[data]/smarty3 is writable (required)
  Generate encryption keys / Generate ed25519 encryption keys (required)
  Command line PHP ( /usr/local/bin/php )
  PHP register_argc_argv (required)
  PHP upload limits: total 64 MB, one file 64 MB, up to 20 files
  Url rewrite is working (required)

$ curl -s -b w_ck.txt -c w_ck.txt -o w2.html -w "%{http_code} %{size_download}\n" \
  -d "pass=2&phpath=/usr/local/bin/php" http://10.89.72.10/setup
200 9083

$ curl -s -b w_ck.txt -c w_ck.txt -o w3.html -w "%{http_code} %{size_download}\n" \
  -d "pass=3&dbhost=db&dbport=0&dbuser=hubzilla&dbpass=q1w2e3r4&dbdata=hubzilla&dbtype=0&phpath=/usr/local/bin/php&adminmail=root@example.com&siteurl=http://10.89.72.10" \
  http://10.89.72.10/setup
200 32102

$ curl -s -b w_ck.txt -c w_ck.txt -o w4.html -w "%{http_code} %{size_download}\n" \
  -d "pass=4&dbhost=db&dbport=0&dbuser=hubzilla&dbpass=q1w2e3r4&dbdata=hubzilla&dbtype=0&phpath=/usr/local/bin/php&timezone=Asia/Shanghai&adminmail=root@example.com&siteurl=http://10.89.72.10" \
  http://10.89.72.10/setup
200 7115

Installation succeeded! Your site database has been installed.
What next?
IMPORTANT: You will need to [manually] setup a scheduled task for the poller.
Please see the file "install/INSTALL.txt".
Go to your new hub registration page and register as new member.
Remember to use the same email you have entered as administrator email.
This will allow you to enter the site admin panel.

$ ls -la ../web/.htconfig.php
-rw-r--r-- 1 www-data www-data 4721 Nov  2 13:37 ../web/.htconfig.php

$ docker exec hubzilla-11.4.2-db mariadb -uhubzilla -pq1w2e3r4 hubzilla -N \
  -e "select count(*) from information_schema.tables where table_schema='hubzilla';"
83

$db_host = 'db';
$db_user = 'hubzilla';
$db_data = 'hubzilla';
App::$config['system']['timezone'] = 'Asia/Shanghai';
App::$config['system']['baseurl'] = 'http://10.89.72.10';
App::$config['system']['admin_email'] = 'root@example.com';
App::$config['system']['register_policy'] = REGISTER_OPEN;
App::$config['system']['access_policy'] = ACCESS_PRIVATE;
App::$config['system']['directory_mode']  = DIRECTORY_MODE_NORMAL;
App::$config['system']['theme'] = 'redbasic';

$ curl -s -c r_ck.txt -o r1.html -w "%{http_code} %{size_download}\n" http://10.89.72.10/register
200 19268

$ curl -s -b r_ck.txt -c r_ck.txt -w "%{http_code} -> %{redirect_url}\n" \
  -d "form_security_token=$TOK&name=admin&nickname=admin&email=root@example.com&password=q1w2e3r4&password2=q1w2e3r4&tos=1" \
  http://10.89.72.10/register
302 -> http://10.89.72.10/regate/726f6f74406578616d706c652e636f6de

Thank you for registering at Hubzilla.

Site Location:	http://10.89.72.10
Login Name:	root@example.com

Your verification token is

a55d87cc3c0b7af868443568

This token is valid from 2026-11-02 05:38:27 UTC until 2026-11-05 05:38:27 UTC

$ curl -s -b r_ck.txt -c r_ck.txt -w "%{http_code} -> %{redirect_url}\n" \
  -d "form_security_token=$TOK&acpin=a55d87cc3c0b7af868443568&submit=Submit" \
  http://10.89.72.10/regate/726f6f74406578616d706c652e636f6de
302 -> http://10.89.72.10/profiles

+------------+------------------+---------------+---------------+
| account_id | account_email    | account_roles | account_flags |
+------------+------------------+---------------+---------------+
|          1 | root@example.com |          4096 |             0 |
+------------+------------------+---------------+---------------+
+------------+-----------------+--------------------+
| channel_id | channel_address | channel_account_id |
+------------+-----------------+--------------------+
|          1 | sys             |                  0 |
|          2 | admin           |                  1 |
+------------+-----------------+--------------------+

$ curl -s -b l_ck.txt -c l_ck.txt -w "%{http_code} -> %{redirect_url}\n" \
  -d "form_security_token=$TOK&auth-params=login&main_login_username=admin&main_login_password=q1w2e3r4" \
  http://10.89.72.10/login
302 -> http://10.89.72.10/

$ curl -s -b l_ck.txt -o /dev/null -w "%{http_code} %{size_download}\n" http://10.89.72.10/channel/admin
200 117260

$ curl -s http://10.89.72.10/api/z/1.0/version
"11.4.2"

$ curl -s http://10.89.72.10/.well-known/host-meta
<?xml version='1.0' encoding='UTF-8'?>
<XRD xmlns='http://docs.oasis-open.org/ns/xri/xrd-1.0' xmlns:hm='http://host-meta.net/xrd/1.0'>
	<hm:Host>10.89.72.10</hm:Host>
	<Link rel='lrdd' type="application/xrd+xml" template='http://10.89.72.10/xrd/?uri={uri}' />
	<Link rel="http://oexchange.org/spec/0.8/rel/resident-target" type="application/xrd+xml" href="http://10.89.72.10/oexchange/xrd" />
</XRD>

$ curl -s "http://10.89.72.10/xrd/?uri=acct%3Aadmin%4010.89.72.10"
<?xml version="1.0" encoding="UTF-8"?>
<XRD xmlns="http://docs.oasis-open.org/ns/xri/xrd-1.0">
	<Subject>acct:admin@10.89.72.10</Subject>
	<Alias>http://10.89.72.10/channel/admin</Alias>
	<Alias>http://10.89.72.10/~admin</Alias>
	<Link rel="http://schemas.google.com/g/2010#updates-from" type="application/atom+xml" href="http://10.89.72.10/ofeed/admin" />
	<Link rel="http://webfinger.net/rel/profile-page" type="text/html" href="http://10.89.72.10/channel/admin" />
	<Link rel="http://portablecontacts.net/spec/1.0" href="http://10.89.72.10/poco/admin" />
	<Link rel="http://webfinger.net/rel/avatar" type="image/jpeg" href="http://10.89.72.10/photo/profile/l/2" />
	<Link rel="http://microformats.org/profile/hcard" type="text/html" href="http://10.89.72.10/hcard/admin" />
	<Link rel="http://ostatus.org/schema/1.0/subscribe" template="http://10.89.72.10/follow?f=&amp;url={uri}" />

$ docker exec -w /var/www/html hubzilla-11.4.2-web php Zotlabs/Daemon/Master.php Cron
$ echo $?
0

* * * * * docker exec -w /var/www/html hubzilla-11.4.2-web php Zotlabs/Daemon/Master.php Cron >/dev/null 2>&1

    volumes:
      - ../web:/var/www/html
      - ./msmtp.conf:/etc/msmtprc:ro
      - ./php.ini:/usr/local/etc/php/conf.d/99-hubzilla.ini:ro

# 数据库
docker run -d --name hubzilla-11.4.2-db --network hubzilla-11.4.2-net \
  -e MYSQL_ROOT_PASSWORD=q1w2e3r4 -e MYSQL_DATABASE=hubzilla \
  -e MYSQL_USER=hubzilla -e MYSQL_PASSWORD=q1w2e3r4 \
  -v $(pwd)/../db:/var/lib/mysql \
  mariadb:11 --character-set-server=utf8mb4 --collation-server=utf8mb4_unicode_ci

# 邮件通道
docker run -d --name hubzilla-11.4.2-mail --network hubzilla-11.4.2-net --ip 10.89.72.30 \
  -p 8149:8025 axllent/mailpit:latest

# Web（自建镜像需先 docker build -t hubzilla-11.4.2-web:local .）
docker run -d --name hubzilla-11.4.2-web --network hubzilla-11.4.2-net --ip 10.89.72.10 \
  -p 8148:80 -v $(pwd)/../web:/var/www/html \
  hubzilla-11.4.2-web:local

# 状态与日志
docker compose ps
docker compose logs -f web
docker compose logs db | grep "ready for connections"

# 进入容器 / 执行 CLI（Hubzilla 的 util 工具必须在 Web 根目录运行）
docker compose exec web bash
docker compose exec -w /var/www/html web php util/config system
docker compose exec -w /var/www/html web php util/update_db

# 数据库
docker compose exec db mariadb -uhubzilla -pq1w2e3r4 hubzilla -e "select count(*) from account;"

# 手动触发一轮轮询/定时任务
docker compose exec -w /var/www/html web php Zotlabs/Daemon/Master.php Cron

# 升级 Hubzilla：替换 ../web 源码目录（保留 .htconfig.php 与 store/）后跑 DB 升级
docker compose exec -w /var/www/html web php util/update_db

$ docker exec hubzilla-11.4.2-web sh -c "printf 'To: t@10.89.72.10\nSubject: t\n\nbody\n' | /usr/sbin/sendmail -t"; echo rc=$?
rc=0

[smtpd] response (10.89.72.10) 553 5.1.3 The address is not a valid RFC 5321 address
[smtpd] error parsing message: malformed header line: "test body"
[smtpd] response (10.89.72.10) 451 4.3.5 Unable to process mail

$ docker compose exec -w /var/www/html web php util/config system curl_connecttimeout 3
config[system][curl_connecttimeout] = 3
$ docker compose exec -w /var/www/html web php util/config system curl_timeout 5
config[system][curl_timeout] = 5
$ curl -m 30 -b l_ck.txt -o /dev/null -w "%{http_code} %{time_total}s\n" http://10.89.72.10/admin
200 6.017704s

$ curl -s http://10.89.72.10/setup/testrewrite
ok

$ docker compose exec -w /var/www/html web php util/config system directory_mode 256
config[system][directory_mode] = 256
$ docker compose exec -w /var/www/html web php util/config system directory_server http://10.89.72.10
config[system][directory_server] = http://10.89.72.10