News for hackers. Stuff that matters.

A comment on A lesson in dockerizing shell scripts. Parent comment

Re:A lesson in dockerizing shell scripts by coldtea on Saturday February 03, 2024 @06:58PM (#39246002)
>Then you still didn't audit anything. What you need to do is inspect the docker file, follow everything it pulls in and audit that

You don't need to audit anything it pulls in INSIDE the container. Who cares? Just what kind of access it gives the container to the host.

[ Parent | on HN ]
Re:A lesson in dockerizing shell scripts by stirfish on Saturday February 03, 2024 @07:04PM (#39246048)
This sounds like fine a way to mine Bitcoin for someone else
[ Parent | on HN ]
Re:A lesson in dockerizing shell scripts by tomjakubowski on Saturday February 03, 2024 @07:47PM (#39246343)
You can use quotas to mitigate that risk, and monitoring to discover it. You'd be monitoring CPU usage anyway, whether or not you build your own images or write your own Dockerfiles.
[ Parent | on HN ]
Re:A lesson in dockerizing shell scripts by coldtea on Saturday February 03, 2024 @09:09PM (#39246847)
The whole point is that you checked that the container gets no access to the network.

Not to mention why wouldn't you let a shell script container keep running?

[ Parent | on HN ]