search

key-networks / ztncui-containerized

A Docker image that contains ZeroTier One and ztncui to set up a standalone ZeroTier network controller with a web user interface in a container.
426 stars 83 forks source link

ztncui-aio running in RootLess Docker? #27

Open jradxl opened 2 years ago

jradxl commented 2 years ago

In regard to https://github.com/key-networks/ztncui-aio, but that does not have issues option.

Do you have any thoughts on a version of ztncui-aio for a running in RootLess Docker? In this case, both Zerotier and Ztncui could run as root in the container, simplifying the permissions for the host mounts. So, that means gosu is no longer needed and Zerotier can be run with the -U option.

I do in fact have this working, both as a Network Controller and a Moon. It's been quite a brain challenge understanding Zerotier's documentation but I'm confident it is working as I have a Green ONLINE status in Peer Status, and zerotier-cli peers shows my Moon and a direct connection (UFW port 9993/udp is open) to my public VM

Would you have any objection if I make available here on Github? Although it's taken me a couple of days, I'm sure it's something you could (or others have which I didn't find) in a few hours.

However, there is a pitfall... If I do, someone could use this version in Rooted Docker, circumventing the security you've built in

Perhaps you have advice as to the wisdom of an RootLess version?

Thx

kmahyyg commented 2 years ago

Hello, ztncui-aio is maintained by me. I still have no idea why you need this one... Could you please open a issue at https://github.com/kmahyyg/ztncui-aio instead of here to explain the situation you are currently facing and meanwhile what you want to achieve and how you think about it much more detailed?

Thanks for your help.