3 ms·
> Or RUN —-mount=type=bind,rw…? This seems to be pretty safe, according to the docs, if I understand them correctly. A bind mount can only mount "context direc
by ptx 1y ago
> Or RUN —-mount=type=bind,rw…?
This seems to be pretty safe, according to the docs, if I understand them correctly. A bind mount can only mount "context directories" and the rw option will discard the written data, it says.
- amluto 1y agoNo way, you're right, they actually tried to make it kind of sensible. Too bad there's also: Steal my credentials (temporarily, but still...) to access remote systems without restriction: RUN --mount=type=ssh Access TCP and UDP ports without restriction, including anything exported by any other container I'm running, because Docker has no real security model RUN --network=host Outright pwn me, but only if "entitiled": RUN --security=insecure