如何设置'；安全'；以及'；httpOnly'；DOCKERFILE中任何会话cookie的属性

我正在为我的项目使用此dockerfile映像，我想将“secure”和“httpOnly”属性设置为true

我的主要目标是将它们作为服务器上所有cookie和会话的默认值

我添加了与之对应的ENV变量：

ENV PHP_SESSION_COOKIE_SECURE=On
ENV PHP_SESSION_COOKIE_PATH=/
ENV PHP_SESSION_COOKIE_HTTPONLY=On

我也试过：

ENV PHP_SESSION_COOKIE_SECURE=true
ENV PHP_SESSION_COOKIE_PATH=/
ENV PHP_SESSION_COOKIE_HTTPONLY=true

然而，当我浏览网站时，我看到它们被设置为false

这是我的dockerfile：

FROM alpine:edge
MAINTAINER Paul Smith <pa.ulsmith.net>

# Add repos
RUN echo "http://dl-cdn.alpinelinux.org/alpine/edge/testing" >> /etc/apk/repositories

# Add basics first
RUN apk update && apk upgrade && apk add \
    bash apache2 php7-apache2 curl ca-certificates openssl openssh git php7 php7-phar php7-json php7-iconv php7-openssl tzdata openntpd nano

# Add Composer
RUN curl -sS https://getcomposer.org/installer | php && mv composer.phar /usr/local/bin/composer

# Setup apache and php
RUN apk add \
    php7-ftp \
    php7-xdebug \
    php7-mcrypt \
    php7-mbstring \
    php7-soap \
    php7-gmp \
    php7-pdo_odbc \
    php7-dom \
    php7-pdo \
    php7-zip \
    php7-mysqli \
    php7-sqlite3 \
    php7-pdo_pgsql \
    php7-bcmath \
    php7-gd \
    php7-odbc \
    php7-pdo_mysql \
    php7-pdo_sqlite \
    php7-gettext \
    php7-xml \
    php7-xmlreader \
    php7-xmlwriter \
    php7-tokenizer \
    php7-xmlrpc \
    php7-bz2 \
    php7-pdo_dblib \
    php7-curl \
    php7-ctype \
    php7-session \
    php7-redis \
    php7-exif \
    php7-intl \
    php7-fileinfo \
    php7-ldap \
    php7-apcu

# Problems installing in above stack
RUN apk add php7-simplexml

RUN cp /usr/bin/php7 /usr/bin/php \
    && rm -f /var/cache/apk/*

# Add apache to run and configure
RUN sed -i "s/#LoadModule\ rewrite_module/LoadModule\ rewrite_module/" /etc/apache2/httpd.conf \
    && sed -i "s/#LoadModule\ session_module/LoadModule\ session_module/" /etc/apache2/httpd.conf \
    && sed -i "s/#LoadModule\ session_cookie_module/LoadModule\ session_cookie_module/" /etc/apache2/httpd.conf \
    && sed -i "s/#LoadModule\ session_crypto_module/LoadModule\ session_crypto_module/" /etc/apache2/httpd.conf \
    && sed -i "s/#LoadModule\ deflate_module/LoadModule\ deflate_module/" /etc/apache2/httpd.conf \
    && sed -i "s#^DocumentRoot \".*#DocumentRoot \"/app/public\"#g" /etc/apache2/httpd.conf \
    && sed -i "s#/var/www/localhost/htdocs#/app/public#" /etc/apache2/httpd.conf \
    && printf "\n<Directory \"/app/public\">\n\tAllowOverride All\n</Directory>\n" >> /etc/apache2/httpd.conf
ENV PHP_ALLOW_URL_INCLUDE=On
ENV PHP_SESSION_COOKIE_SECURE=true
ENV PHP_SESSION_COOKIE_PATH=/
ENV PHP_SESSION_COOKIE_HTTPONLY=true
RUN mkdir /app && mkdir /app/public && chown -R apache:apache /app && chmod -R 755 /app && mkdir bootstrap
COPY app/ /app/public/
USER root
RUN chmod 0777 /app/public/api/emiratespost/awbpdf/
RUN chmod 0777 /app/public/assets/media/companies/
RUN chmod 0777 /app/public/assets/media/licenses/
RUN chmod 0777 /app/public/assets/media/payments/
RUN chmod 0777 /app/public/assets/media/products/
RUN chmod 0777 /app/public/assets/media/shipments/
ADD start.sh /bootstrap/
RUN chmod +x /bootstrap/start.sh

EXPOSE 80
ENTRYPOINT ["/bootstrap/start.sh"]

来自阿尔卑斯山：边缘
维修员保罗·史密斯
#添加回购协议
“运行回声”http://dl-cdn.alpinelinux.org/alpine/edge/testing“>>/etc/apk/repositories
#先添加基础知识
运行apk更新和apk升级和apk添加\
bash apache2 php7-apache2 curl ca证书openssl openssh git php7 php7 phar php7 json php7 iconv php7 openssl tzdata openntpd nano
#添加作曲家
运行curl-sShttps://getcomposer.org/installer |php&&mv composer.phar/usr/local/bin/composer
#安装apache和php
运行apk添加\
php7文件传输协议\
php7-xdebug\
php7 mcrypt\
php7 mbstring\
php7肥皂\
php7 gmp\
php7-pdo_odbc\
php7 dom\
php7-pdo\
php7拉链\
php7 mysqli\
php7-sqlite3\
php7-pdo_pgsql\
php7 bcmath\
php7-gd\
php7 odbc\
php7-pdo_mysql\
php7-pdo_sqlite\
php7获取文本\
PHP7XML\
php7 xmlreader\
php7 xmlwriter\
php7标记器\
php7 xmlrpc\
php7-bz2\
php7-pdo_dblib\
php7卷曲\
php7型\
php7会议\
php7 redis\
php7-exif\
php7国际\
php7文件信息\
php7 ldap\
php7 apcu
#在堆栈上安装时出现问题
运行apk add php7 simplexml
运行cp/usr/bin/php7/usr/bin/php\
&&rm-f/var/cache/apk/*
#添加apache以运行和配置
运行sed-i“s/#LoadModule\rewrite_module/LoadModule\rewrite_module/”/etc/apache2/httpd.conf\
&&sed-i“s/#LoadModule\session_module/LoadModule\session_module/”/etc/apache2/httpd.conf\
&&sed-i“s/#LoadModule\session\u cookie\u module/LoadModule\session\u cookie\u module/”/etc/apache2/httpd.conf\
&&sed-i“s/#LoadModule\session_crypto_module/LoadModule\session_crypto_module/”/etc/apache2/httpd.conf\
&&sed-i“s/#LoadModule\deflate_module/LoadModule\deflate_module/”/etc/apache2/httpd.conf\
&&sed-i“s#^DocumentRoot\”*#DocumentRoot\”/app/public\“#g”/etc/apache2/httpd.conf\
&&sed-i“s#/var/www/localhost/htdocs#/app/public#“/etc/apache2/httpd.conf\
&&printf“\n\n\tAllowOverride All\n\n”>>/etc/apache2/httpd.conf
ENV PHP\u ALLOW\u URL\u INCLUDE=On
ENV PHP\u SESSION\u COOKIE\u SECURE=true
ENV PHP_会话_COOKIE_路径=/
ENV PHP\u SESSION\u COOKIE\u HTTPONLY=true
运行mkdir/app&&mkdir/app/public&&chown-R apache:apache/app&&chmod-R 755/app&&mkdir引导
复制app//app/public/
用户根
运行chmod 0777/app/public/api/emiratespost/awbpdf/
运行chmod 0777/app/public/assets/media/companys/
运行chmod 0777/app/public/assets/media/licenses/
运行chmod 0777/app/public/assets/media/payments/
运行chmod 0777/app/public/assets/media/products/
运行chmod 0777/app/public/assets/media/shippings/
添加start.sh/bootstrap/
运行chmod+x/bootstrap/start.sh
暴露80
入口点[“/bootstrap/start.sh”]

这是否回答了您的问题？是的，这会有所帮助，但我希望默认情况下从配置文件启用它们。这是此容器的特定实现。您最好询问存储库的维护人员或在他们的GitHub跟踪器中创建一个问题。已经这样做了，但没有答复，谢谢。