ArchiveBox / ArchiveBox/docker-archivebox

Include paxtest in the image

Open
#3 0 comments 0 reactions 0 assignees View on GitHub
Dominant language
No language data
Stars
58
Forks
12
PR merge metrics
No merged PRs in 30d

Description

Hi,

It would be convenient to have paxtest included in the image:

```
FROM ${DOCKER_IMAGE:-archivebox/archivebox:master}

RUN apt-get update && apt-get install -y \
paxctl && rm -rf /var/lib/apt/lists/*

RUN paxctl -cm /usr/bin/node
```

When running node applications in hardened environments (or building them in such environments) 'node' needs to be able to create memory mappings for JIT. It's a security trade-off, thus you can likely skip adding the paxctl step. This will make it easier to build/adjust the images in network-restricted environments.

Contributor guide

No contributing guide indexed for this repository

Research direction

Start by locating the Docker image build definition and the existing package-install steps, then compare them with the Dockerfile snippet in the issue. Determine whether adding paxctl or paxtest is intended, and verify that the resulting image supports the described Node.js use case without unnecessary package-cache files.

Written by the indexing model from the issue text.

Assessment

Tech stack
docker, node.js
Domain
devops, infrastructure
Issue type
Feature
Difficulty
2/5
Estimated time
1-3 hours
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
45/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.