Kjeld Schouten
Kjeld Schouten
@J0WI The problem with the Wordpress (and LinuxServer) design, is the fact is isn't compatible with the docker "user" setting. For those two it's acceptable, because the settings is relatively...
> Hey! There is something that bother me in this pr, it's the `chown` and `chgrp`. This could lead to multiple issues and I don't think that is the job...
It's absolutely trivial... This seems to be all the code for kubernetes deployment at least: ``` image: {{ .Values.imaginaryImage.repository }}:{{ .Values.imaginaryImage.tag }} imagePullPolicy: '{{ .Values.image.pullPolicy }}' securityContext: runAsUser: 33 runAsGroup:...
"Rootless" means all code(!) is executed as non-root. There is simply no privilage-escalation allowed after the container is started. So, no this cannot be done. As root also cannot magically...
Please just don't. S6_overlay makes it rather hard (and sometimes impossible) to apply some/most of the common-best practices for docker hardening, makes it impossible to use sane Kubernetes securityContext settings...
Sanitisation of input needs a complete overhaul. @panos-stavrianos Could you send-in a PR for this?
Is this bot vaporware or is there actually someone solving anything? @probot
@helinanever and @Hixie You guys do notice you didn't use the recommended syntax in the config file do you? `closeComment: >-` Where the recommended syntax is: `closeComment: >`
> (Though... why would it _sometimes_ work in that case?) Thats a very good question! For which i've no answer... Don't expect this to magically fix your problem, but at...
I used this work as my basis for [jailmanager/jailman](https://github.com/jailmanager/jailman). Actually updating this work as one of my reasons to start JailMan to begin with: Updating can as be easy as:...