3 ms·
docker run --privileged -ti \ gcr.io/ossf-malware-analysis/analysis I'm sure it's more complicated than it looks, but seeing "--privileged" and "malwar
by mdaniel 5y ago
docker run --privileged -ti \
gcr.io/ossf-malware-analysis/analysis
I'm sure it's more complicated than it looks, but seeing "--privileged" and "malware-analysis" in the same command made me chuckle
docker run \
-v /var/tmp/fake.docker.sock:/var/run/docker.sock \
-e DOCKER_HOST=unix:///var/run/docker.sock \
would be some next-level runtime analysis, eh?
- calebbrown 5y agoAuthor here. It's running a Podman container (like Docker but daemon-less) with a GVisor runtime for isolation inside the docker container. The outer container is privileged, but doesn't run any attacker controlled code. But, yeah, seeing those two strings together in the same command is certainly amusing.
- metanull 5y agoHello! Cool project. Wonder why you need the —privileged for?
- calebbrown 5y agoThanks! `--privileged` is needed to run the container inside a container. e.g. https://www.docker.com/blog/docker-can-now-run-within-docker/ https://www.docker.com/blog/docker-can-now-run-within-docker... This is particularly useful for using Kubernetes to manage a cluster of instances.