Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add security_opt in dockercompose.yml #28

Closed
wants to merge 1 commit into from
Closed

Add security_opt in dockercompose.yml #28

wants to merge 1 commit into from

Conversation

hannibalpostumus
Copy link

@hannibalpostumus hannibalpostumus commented Nov 24, 2023

The terminal within the docker image is unable to execute any bash commands due to a privilege issue.
See the following link and a followup here.

@Aterfax
Copy link
Owner

Aterfax commented Nov 24, 2023

Ultimately the setting for unconfined is documented on the webtop image this container is built on but I've not seen this issue pop up where I have tested. I am curious what you've ran this with (podman perhaps?) and on what host OS.

As this is an issue which appears to be caused by the configuration of the host machine / OS I am not inclined to default the security to being weaker for everyone because some systems/environments have problems.

This said, I am 100% in favour of informing people if they have an issue, they can choose to unconfine it so I will look at amending the documentation and the compose files to make this clearer.

@Aterfax Aterfax closed this Nov 24, 2023
@Aterfax
Copy link
Owner

Aterfax commented Nov 24, 2023

Merging in: #30

@hannibalpostumus
Copy link
Author

That's actually a much better option. I didn't do enough reading and assumed it was a cross platform issue. I'm running Ubuntu Server 20.04.6 LTS and Docker 24.0.0.

Thanks for adding this into comments. A great project by the way, I've been following it since the Reddit thread and did think I should put it on github at some point so thank you!

@Aterfax
Copy link
Owner

Aterfax commented Nov 25, 2023

I've been testing mainly on Ubuntu 22.04 / Docker 24.0.7 and Rocky / CentOS Stream 8. Interesting it is the older versions with issues!

@hannibalpostumus hannibalpostumus deleted the fix-security-opt branch January 22, 2024 09:07
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants