Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Shield host's localhost from containers in (network host) mode #77

Open
kit-ty-kate opened this issue Aug 20, 2021 · 1 comment
Open

Shield host's localhost from containers in (network host) mode #77

kit-ty-kate opened this issue Aug 20, 2021 · 1 comment

Comments

@kit-ty-kate
Copy link
Contributor

Currently localhost is shared between all containers in (network host) mode.
This is a security issue as well as a reliability one for packages that use the local network for testing purpose.

See opencontainers/runc#201 for discussions and possible solutions. e.g.:
@talex5
Copy link
Contributor

talex5 commented Apr 19, 2022

In ocaml-ci, we perform downloading and testing in separate steps so this shouldn't be a problem (only the download step uses (network host)). Tests should be able to run without access to the Internet.

kit-ty-kate added a commit to ocurrent/opam-repo-ci that referenced this issue Jan 27, 2023
@kit-ty-kate
Hackish workaround for ocurrent/obuilder#77
f56091f
kit-ty-kate added a commit to ocurrent/opam-repo-ci that referenced this issue Jan 27, 2023
@kit-ty-kate
fixup! Hackish workaround for ocurrent/obuilder#77
5a3b7bc
kit-ty-kate added a commit to ocurrent/opam-repo-ci that referenced this issue Jan 27, 2023
@kit-ty-kate
fixup! Hackish workaround for ocurrent/obuilder#77
f509ab3
kit-ty-kate added a commit to kit-ty-kate/opam-repo-ci that referenced this issue Feb 28, 2023
@kit-ty-kate
Hackish workaround for ocurrent/obuilder#77
329e716
kit-ty-kate added a commit to kit-ty-kate/opam-repo-ci that referenced this issue Feb 28, 2023
@kit-ty-kate
fixup! Hackish workaround for ocurrent/obuilder#77
98782d5
kit-ty-kate added a commit to kit-ty-kate/opam-repo-ci that referenced this issue Feb 28, 2023
@kit-ty-kate
fixup! Hackish workaround for ocurrent/obuilder#77
717c488
kit-ty-kate added a commit to kit-ty-kate/opam-repo-ci that referenced this issue Feb 28, 2023
@kit-ty-kate
Hackish workaround for ocurrent/obuilder#77
3ebc8ed
kit-ty-kate added a commit to kit-ty-kate/opam-repo-ci that referenced this issue Feb 28, 2023
@kit-ty-kate
fixup! Hackish workaround for ocurrent/obuilder#77
6835438
kit-ty-kate added a commit to kit-ty-kate/opam-repo-ci that referenced this issue Feb 28, 2023
@kit-ty-kate
fixup! Hackish workaround for ocurrent/obuilder#77
241f96b
kit-ty-kate added a commit to kit-ty-kate/opam-repo-ci that referenced this issue Feb 28, 2023
@kit-ty-kate
Hackish workaround for ocurrent/obuilder#77
0d61f36
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
2 participants
@talex5 @kit-ty-kate