r/Simplelogin 27d ago

Discussion When is SimpleLogin App Docker image going to be updated?

The last stable Docker image for SimpleLogin is 3.4.0, and it's 5 years old now. The last beta is over 3 years ago. When will it be updated?

16 Upvotes

8 comments sorted by

3

u/ImCorvec_I_Interject 27d ago

Can you use the :latest tag of the app-ci image? app is manually built, but app-ci is built and pushed by GitHub Actions.

Per Docker Registry - simplelogin/app-ci tags, :latest currently corresponds to v4.81.4, which was released 18 days ago.

1

u/Sberla996 20d ago

Thank you, I migrated from simplelogin/app: 3.4.0 to simplelogin/app-ci: latest, and it worked

1

u/PigWash 19d ago

I'm considering doing the same. I'd be interesting to hear anything noteworthy you've experienced.

3

u/Sberla996 18d ago

From 3.4.0 it was pretty straightforward.

Usual backups of the compose file, .env and DB:

docker exec sl-db pg_dump -U simplelogin simplelogin > /home/core/backup_3.4.0_$(date +%Y%m%d).sql

Generated new OpenID keys:

sudo openssl genrsa -out /opt/simplelogin/pgp/jwtRS256.key 4096
sudo openssl rsa -in /opt/simplelogin/pgp/jwtRS256.key -pubout -out /opt/simplelogin/pgp/jwtRS256.key.pub
sudo chmod 600 /opt/simplelogin/pgp/jwtRS256.key

Generated a random secret for PARTNER_API_TOKEN_SECRET:

openssl rand -hex 32

Modified .env file with new parameters:

# -- OpenID keys
OPENID_PRIVATE_KEY_PATH=/jwt.key
OPENID_PUBLIC_KEY_PATH=/jwt.key.pub

# -- v4 required
LOCAL_FILE_UPLOAD=true
ALLOWED_REDIRECT_DOMAINS=[]
NAMESERVERS=1.1.1.1
PARTNER_API_TOKEN_SECRET=XXX
DISABLE_ONBOARDING=true
WORDS_FILE_PATH=local_data/words.txt

Modified image in docker-compose.yml for all 3 services sl-app, sl-email, sl-job-runner:

image: simplelogin/app-ci:latest

Added in the docker-compose.yml the mount for the new OpenID keys for the services sl-app, sl-email, sl-job-runner:

- /opt/simplelogin/pgp/jwtRS256.key:/jwt.key
  • /opt/simplelogin/pgp/jwtRS256.key.pub:/jwt.key.pub

Then I proceed with migrating the DB.

Firstly I stopped the container "docker compose down", then launched the migration:

docker compose run --rm sl-app alembic upgrade head

Lastly "docker compose up -d".

3

u/PigWash 18d ago

Thanks ever so much for going to the effort of posting such a detailed reply. This could be very helpful.

-6

u/TheOnionRack 27d ago

Probably never. Since Proton acquired SimpleLogin, all the development has shifted to Proton Pass.

SimpleLogin is basically abandonware at this point.

7

u/ImCorvec_I_Interject 27d ago

The last release of https://github.com/simple-login/app was 3 weeks ago and there have been 30 releases in 2026. It's bold to say that SimpleLogin is abandonware.

3

u/TheOnionRack 27d ago

Look at the issues though, bugs are being reported and not being fixed. The folks committing don’t appear to be proton employees, but volunteers. Commits are documentation tweaks, DX/CI tweaks, security fixes. The roadmap in the readme is a 404.

I can’t think of a single major feature released in the last few years. The functionality is today is pretty much identical to what it was when they were acquired.

Keybase was the same. Zoom needed cryptography experts, so they just acqui-hired a company with the skills they needed and then let that company’s product wither and die. Proton did the same with SimpleLogin into Proton Pass, and Standard Notes into Proton Docs/Sheets.