Browse Source

Do not grant localstack access to host's docker.sock (#448)

* Do not grant localstack access to host's docker.sock

* Remove access to host's docker socket as requested by @karolsojko
mfridge 2 năm trước cách đây
mục cha
commit
815d5460e7

+ 0 - 2
docker-compose.ci.yml

@@ -19,12 +19,10 @@ services:
     restart: unless-stopped
     restart: unless-stopped
     environment:
     environment:
       - SERVICES=sns,sqs
       - SERVICES=sns,sqs
-      - DOCKER_HOST=unix:///var/run/docker.sock
       - HOSTNAME_EXTERNAL=localstack
       - HOSTNAME_EXTERNAL=localstack
       - LS_LOG=warn
       - LS_LOG=warn
     volumes:
     volumes:
       - ./docker/localstack_bootstrap.sh:/etc/localstack/init/ready.d/localstack_bootstrap.sh
       - ./docker/localstack_bootstrap.sh:/etc/localstack/init/ready.d/localstack_bootstrap.sh
-      - /var/run/docker.sock:/var/run/docker.sock
     networks:
     networks:
       - standardnotes_self_hosted
       - standardnotes_self_hosted
 
 

+ 0 - 2
docker-compose.example.yml

@@ -20,12 +20,10 @@ services:
     restart: unless-stopped
     restart: unless-stopped
     environment:
     environment:
       - SERVICES=sns,sqs
       - SERVICES=sns,sqs
-      - DOCKER_HOST=unix:///var/run/docker.sock
       - HOSTNAME_EXTERNAL=localstack
       - HOSTNAME_EXTERNAL=localstack
       - LS_LOG=warn
       - LS_LOG=warn
     volumes:
     volumes:
       - ./localstack_bootstrap.sh:/etc/localstack/init/ready.d/localstack_bootstrap.sh
       - ./localstack_bootstrap.sh:/etc/localstack/init/ready.d/localstack_bootstrap.sh
-      - /var/run/docker.sock:/var/run/docker.sock
     networks:
     networks:
       - standardnotes_self_hosted
       - standardnotes_self_hosted