Load the website's Plausible site script

Plausible gives each new site its own script and an init call instead of the generic script with data-domain. Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01V9NnLxnPp8vaaurb3Z1MFy
Build the amd64 image with QEMU 9.2.2 and only emulate the final stage
2026-09-13 16:21:51 +02:00 · 2026-09-13 15:52:58 +02:00
5 changed files with 25 additions and 9 deletions
@@ -67,12 +67,14 @@ jobs:
      - name: Checkout code
        uses: actions/checkout@v6

-      # The runner is an arm64 server, so the amd64 image is emulated. On its 6.8 kernel, recent
-      # QEMU builds segfault compiling PHP extensions (docker/buildx#3170); QEMU 8 is pinned.
+      # The runner is an arm64 server, so the amd64 image's final stage is emulated. QEMU 8.x
+      # crashes running x86_64 programs on an arm64 host (QEMU issue 2168, "QEMU internal
+      # SIGSEGV {code=MAPERR, addr=0x20}") and 10.2 segfaults on this runner too; 9.2.2 was
+      # checked on the runner's host: node, composer and install-php-extensions all run.
      - name: Set up QEMU
        uses: docker/setup-qemu-action@v3
        with:
-          image: tonistiigi/binfmt:qemu-v8.1.5
+          image: tonistiigi/binfmt:qemu-v9.2.2

      - name: Set up Docker Buildx
        uses: docker/setup-buildx-action@v3
@@ -1,7 +1,9 @@
 # ============================================
 # Stage 1: Install PHP dependencies
 # ============================================
-FROM composer:2 AS vendor
+# Built on the build machine's own platform: vendor/ is plain PHP, the same for every target, so a
+# multi-arch build runs it once and never under emulation.
+FROM --platform=$BUILDPLATFORM composer:2 AS vendor

 WORKDIR /app

@@ -21,8 +23,9 @@ RUN composer dump-autoload --optimize --no-dev
 # ============================================
 # Stage 2: Build frontend assets
 # ============================================
-# After Composer: the stylesheet and script import Livewire Material from vendor/.
-FROM node:24-alpine AS assets
+# After Composer: the stylesheet and script import Livewire Material from vendor/. On the build
+# machine's platform too: the output is CSS and JavaScript, whatever the target.
+FROM --platform=$BUILDPLATFORM node:24-alpine AS assets

 WORKDIR /app

@@ -107,7 +107,8 @@ test('the pages are titled, described and in English', function () {
            ->toContain('<html lang="en"')
            ->toMatch('/<title>[^<]+<\/title>/')
            ->toMatch('/<meta name="description" content="[^"]+"/')
-            ->toContain('data-domain="sealshare.nonameweb.ch"');
+            ->toContain('<script async src="https://plausible.io/js/pa-zWB4R2-rrBeLfwms3uIBT.js"></script>')
+            ->toContain('plausible.init()');
    }
 });

@@ -12,7 +12,12 @@
    <meta property="og:title" content="SealShare — your own secure upload platform">
    <meta property="og:description" content="SealShare is self-hosted file sharing: your company&#x27;s own upload platform to exchange files with customers, encrypted at rest, on your own server and domain. Open source, one Docker image.">
    <meta property="og:image" content="https://sealshare.nonameweb.ch/img/screenshots/desktop/light/01-upload-1600.webp">
-    <script defer data-domain="sealshare.nonameweb.ch" src="https://plausible.io/js/script.js"></script>
+    <!-- Privacy-friendly analytics by Plausible -->
+    <script async src="https://plausible.io/js/pa-zWB4R2-rrBeLfwms3uIBT.js"></script>
+    <script>
+        window.plausible=window.plausible||function(){(plausible.q=plausible.q||[]).push(arguments)},plausible.init=plausible.init||function(i){plausible.o=i||{}};
+        plausible.init()
+    </script>
    <link rel="icon" href="img/favicon.svg" type="image/svg+xml">
    <link rel="apple-touch-icon" href="img/icon.png">
    <link rel="preload" href="fonts/GoogleSansFlex-Latin.woff2" as="font" type="font/woff2" crossorigin>
@@ -7,7 +7,12 @@
    <meta name="description" content="How the SealShare website handles visitor data: server logs at the host and Plausible analytics, nothing else.">
    <meta name="theme-color" content="#faf4ff" media="(prefers-color-scheme: light)">
    <meta name="theme-color" content="#10062d" media="(prefers-color-scheme: dark)">
-    <script defer data-domain="sealshare.nonameweb.ch" src="https://plausible.io/js/script.js"></script>
+    <!-- Privacy-friendly analytics by Plausible -->
+    <script async src="https://plausible.io/js/pa-zWB4R2-rrBeLfwms3uIBT.js"></script>
+    <script>
+        window.plausible=window.plausible||function(){(plausible.q=plausible.q||[]).push(arguments)},plausible.init=plausible.init||function(i){plausible.o=i||{}};
+        plausible.init()
+    </script>
    <link rel="icon" href="img/favicon.svg" type="image/svg+xml">
    <link rel="apple-touch-icon" href="img/icon.png">
    <link rel="preload" href="fonts/GoogleSansFlex-Latin.woff2" as="font" type="font/woff2" crossorigin>
Author	SHA1	Message	Date
Andreas Reinhold / reiniandClaude Opus 5	c95d0c43c2	Load the website's Plausible site script linter / quality (push) Successful in 1m7s Details tests / ci (8.5) (push) Successful in 2m16s Details docker / build-and-push (push) Successful in 7m5s Details docker / test (8.5) (push) Successful in 2m25s Details docker / release (push) Successful in 5s Details Plausible gives each new site its own script and an init call instead of the generic script with data-domain. Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01V9NnLxnPp8vaaurb3Z1MFy	2026-09-13 16:21:51 +02:00
Andreas Reinhold / reiniandClaude Opus 5	09e24ade14	Build the amd64 image with QEMU 9.2.2 and only emulate the final stage docker / test (8.5) (push) Successful in 2m20s Details linter / quality (push) Successful in 1m5s Details tests / ci (8.5) (push) Successful in 2m16s Details docker / build-and-push (push) Successful in 20m13s Details docker / release (push) Skipped Details QEMU 8.x crashes running x86_64 programs on an arm64 host (QEMU issue 2168), which the 8.1.5 pin walked into, and 10.2 segfaults on the runner as well; 9.2.2 runs node, composer and install-php-extensions on the runner's host. The Composer and npm stages now build on the build machine's platform: their output is the same for every target, so a multi-arch build runs them once and natively. Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01V9NnLxnPp8vaaurb3Z1MFy	2026-09-13 15:52:58 +02:00