Add security options to docker-compose files

opea-project · Nov 15, 2024 · 5d70a01 · 5d70a01
1 parent 66b42bb
commit 5d70a01
Show file tree

Hide file tree

Showing 2 changed files with 6 additions and 0 deletions.
diff --git a/comps/dataprep/opensearch/langchain/docker-compose-dataprep-only.yaml b/comps/dataprep/opensearch/langchain/docker-compose-dataprep-only.yaml
@@ -18,6 +18,8 @@ services:
       TEI_ENDPOINT: ${TEI_ENDPOINT}
       HUGGINGFACEHUB_API_TOKEN: ${HUGGINGFACEHUB_API_TOKEN}
     restart: unless-stopped
+    security_opt:
+      - no-new-privileges:true
 
 networks:
   default:

diff --git a/comps/dataprep/opensearch/langchain/docker-compose-dataprep-opensearch.yaml b/comps/dataprep/opensearch/langchain/docker-compose-dataprep-opensearch.yaml
@@ -28,6 +28,8 @@ services:
       - 9600:9600 # required for Performance Analyzer
     networks:
       - opensearch-net
+    security_opt:
+      - no-new-privileges:true
   tei-embedding-service:
     image: ghcr.io/huggingface/text-embeddings-inference:cpu-1.5
     container_name: tei-embedding-server
@@ -56,6 +58,8 @@ services:
       TEI_ENDPOINT: ${TEI_ENDPOINT}
       HUGGINGFACEHUB_API_TOKEN: ${HUGGINGFACEHUB_API_TOKEN}
     restart: unless-stopped
+    security_opt:
+      - no-new-privileges:true
 
 networks:
   default: