ContainerSSH / ContainerSSH/containerssh.github.io

Docker execution mode "session" prevents variable/file injection via authz/config

Open
#54 0 comments 0 reactions 0 assignees View on GitHub
documentation
Dominant language
Python
Stars
32
Forks
23
PR merge metrics
No merged PRs in 30d

Description

## What would you like to add/change in the documentation?

This is directed at git tag v0.5.

Neither [docs/reference/image.md](https://github.com/ContainerSSH/containerssh.github.io/blob/v0.5/docs/reference/image.md), nor the "Other options" section of [docs/reference/docker.md](https://github.com/ContainerSSH/containerssh.github.io/blob/v0.5/docs/reference/docker.md) mention that setting the `docker:execution:mode` to `session` will forgo injection of environment variables or files.

This took me some time to chase down, as I assumed it was my configuration server response, then I assumed it was how I built my guest image, then I tried switching from a configuration server to an authorization server. There is no warning, info, or debug statement in the logs that authz/config options returned in the response are ignored or incompatible with other configuration settings, which I suppose might be a feature request, separate from this issue.

## Where did you try to find the information?

I would expect a warning/caveat/note to be presented in either:
* [docs/reference/image.md](https://github.com/ContainerSSH/containerssh.github.io/blob/v0.5/docs/reference/image.md)
* [docs/reference/docker.md](https://github.com/ContainerSSH/containerssh.github.io/blob/v0.5/docs/reference/docker.md)

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.