8000 Run image with a random user and readOnly root filesystem · Issue #418 · PrestaShop/docker · GitHub
[go: up one dir, main page]
More Web Proxy on the site http://driver.im/
Skip to content
Run image with a random user and readOnly root filesystem #418
Open
@jgaube

Description

@jgaube

I want to run a Prestashop on a secured Kubernetes clusters with some constraints :

  • Random user id
  • No capabilities
  • Readonly filesystem

I was able to change the default listening ports, by using Configmap to overrides "ports.conf".

But I've got a problem trying to put emptyDir where apache must write logs and lock file, because it needs to write in "/tmp".

But if I add an emptyDir on "/tmp", I love all scripts.

Is these possible to think about :

  • Use environment variable to configure listening port of apache
  • Put all scripts in another folder than "/tmp" ? (but continue to use "/tmp" for any writing operations)

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions

      0