search

slimtoolkit / slim

Slim(toolkit): Don't change anything in your container image and minify it by up to 30x (and for compiled languages even more) making it secure too! (free and open source)
Apache License 2.0
18.98k stars 706 forks source link

Seccomp profiling of Mongo/postgres and others docker run not working #40

Open Da5hes opened 6 years ago

Da5hes commented 6 years ago

Hi there!

i am trying to profile a mongo container after creating the profile and executing the command docker run --security-opt seccomp:/home/da5h/Desktop/dist_linux/.images/39f5c173b5d403baaf377eb0af4ad8b3db1952a18308b55d51fe56a7e67808e1/artifacts/mongo-seccomp.json there is nothing, no errors no logs no running container i just receive the bash console back and that's it

the same happens with postgres image and both are from the official docker hub

another issue that i've noticed: if i try to execute the minified image of mongo i receive an error: chown: invalid user: 'mongodb' i guess the second issue is related to the non-root user issue but would like to confirm

kcq commented 6 years ago

Thank you for the report! I really appreciate it! Can you add references to those mongodb and postgresql images, just in case? Minifying data stores is not a well tested area, so it's not surprising that you are seeing this behavior.

Da5hes commented 6 years ago

sure https://hub.docker.com/_/postgres/ https://hub.docker.com/_/mongo/ with both the latest tag has been used when testing