v17.7.0
Changed 5
- Docker images now run as a non-root user (app, uid/gid 1000) by default instead of as root
- Docker images now default their working directory to /data
- Ubuntu Docker image now installs Tesseract 5 from the Ubuntu archive instead of the alex-p/tesseract-ocr5 PPA
- Base images updated to Ubuntu 26.04 and Alpine 3.24
- Updated packaged dependencies including starlette, tornado, python-multipart, and cryptography
Fixed 1
- Fixed a missing space in the error message shown when OCRmyPDF cannot access its working directory inside a Docker container
- The Docker images now run as a non-root user (
app, uid/gid 1000) by default rather than as root, as a defense-in-depth measure. If you bind-mount a directory for input and output, you may now need to add a--userargument so the container can write to it; the correct value differs for rootless Docker, Podman, and rootful Docker, and is described in the Docker documentation. Piping the input and output through stdin/stdout still works with no permission setup. - The Docker images now default their working directory to
/data, so files in a directory mounted there can be given as relative paths without an explicit--workdir. - The Ubuntu Docker image now installs Tesseract 5 from the Ubuntu archive
instead of the third-party
alex-p/tesseract-ocr5PPA, and the base images were updated to Ubuntu 26.04 and Alpine 3.24. - Fixed a missing space in the error message shown when OCRmyPDF cannot access its working directory inside a Docker container.
- Updated packaged dependencies, including the optional web service stack (starlette, tornado, python-multipart) and cryptography.