4 ms·
Docker shall be addressed soon! We'll probably end up sitting on your host and taking a peek inside your container filesystems.
by phillmv 11y ago
Docker shall be addressed soon!
We'll probably end up sitting on your host and taking a peek inside your container filesystems.
- sandGorgon 11y ago@phillmv - +1 for the Docker+supervisord version ! Would strongly recommend an "in-container" version, so that I can bake your agent into my Docker VMs. Remember that if I run my Docker VM on CoreOS, then it is very hard to install something on the host.
- shazow 11y agoIt could be a separate docker container with a volume mount to the docker sock. That's probably the best option, a bit better than baking it into all of your images.
- justizin 11y agoi was wondering if there's an interactive version of this I could run in CI (e.g. test-kitchen), so that I can fail CI when the results of a fresh CM build is vulnerable.