luxolus
/
open-vault
2
0
Fork 0
Code Issues 1 Pull Requests Releases Activity

Remove --privileged recommendation from entrypoint script message (#14027) 

The use of the `--privileged` [flag](https://docs.docker.com/engine/reference/commandline/run/#options) is not recommended, as it does not adhere to the principle of least privilege.
This commit is contained in:
mickael-hc 2022-02-18 16:52:21 -05:00 committed by GitHub
parent e29cc5989f
commit 987c846edc
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
2 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
.release/docker/docker-entrypoint.sh
View File

@ -91,7 +91,7 @@ if [ "$1" = 'vault' ]; then
# In the case vault has been started in a container without IPC_LOCK privileges # In the case vault has been started in a container without IPC_LOCK privileges
if ! vault -version 1>/dev/null 2>/dev/null; then if ! vault -version 1>/dev/null 2>/dev/null; then
>&2 echo "Couldn't start vault with IPC_LOCK. Disabling IPC_LOCK, please use --privileged or --cap-add IPC_LOCK" >&2 echo "Couldn't start vault with IPC_LOCK. Disabling IPC_LOCK, please use --cap-add IPC_LOCK"
setcap cap_ipc_lock=-ep $(readlink -f $(which vault)) setcap cap_ipc_lock=-ep $(readlink -f $(which vault))
fi fi
fi fi

2
scripts/docker/docker-entrypoint.sh
View File

@ -91,7 +91,7 @@ if [ "$1" = 'vault' ]; then
# In the case vault has been started in a container without IPC_LOCK privileges # In the case vault has been started in a container without IPC_LOCK privileges
if ! vault -version 1>/dev/null 2>/dev/null; then if ! vault -version 1>/dev/null 2>/dev/null; then
>&2 echo "Couldn't start vault with IPC_LOCK. Disabling IPC_LOCK, please use --privileged or --cap-add IPC_LOCK" >&2 echo "Couldn't start vault with IPC_LOCK. Disabling IPC_LOCK, please use --cap-add IPC_LOCK"
setcap cap_ipc_lock=-ep $(readlink -f $(which vault)) setcap cap_ipc_lock=-ep $(readlink -f $(which vault))
fi fi
fi fi