StackStorm/st2-docker

De root the applications and containers

開放

#187 建立於 2020年3月3日

 (8 則留言) (1 個反應) (0 位負責人)Shell (169 個分叉)auto 404
bugenhancementhelp wantedsecurity

倉庫指標

星標
 (205 顆星)
PR 合併指標
 (PR 指標待抓取)

描述

Is your feature request related to a problem? Please describe. Since st2 uses a lot of root files, any underlying k8s configuration that blocks running containers as root (such as openshift) prevents the container from running at all because of all the configuration that is held in the roots (/etc, /root, /opt). It is also a massive security flaw to run the containers as root as any RCE can be used on the underlying host.

Describe the solution you'd like De-root the containers and applications. Contain it to it's own folderspace instead of using system folders for configuration.

Describe alternatives you've considered Not really any that I can think of for not running as root.

貢獻者指南