docker-socket-proxy: allowed read/write/exec of files for AppAPI for ExApps containers - Githubissues

nextcloud / all-in-one

📦 The official Nextcloud installation method. Provides easy deployment and maintenance with most features included in this one Nextcloud instance.

https://hub.docker.com/r/nextcloud/all-in-one

GNU Affero General Public License v3.0

5.64k stars 654 forks source link

docker-socket-proxy: allowed read/write/exec of files for AppAPI for ExApps containers #5622

Open oleksandr-nc opened 2 days ago

oleksandr-nc commented 2 days ago

Required for https://github.com/nextcloud/app_api/pull/448 for the upcoming Nextcloud 31 release. Changes are the same as here: https://github.com/nextcloud/docker-socket-proxy/pull/41

In brief:

PUT containers/%s/archive allows AppAPI to write files to the ExApp container.
POST containers/%s/update will allows to change ContainerRestart policy in future. Docker API
POST containers/%s/exec is used to create execution object.
POST exec/%s allows to start execution object.

First three endpoints is limited to with usual secure mask nc_app_[a-zA-Z0-9_.-]+ to allow access only to ExApps.