Tecnativa / Tecnativa/docker-socket-proxy
Update documentation/tags to make docker-socket-proxy more secure for novice users
Nobody has claimed this yet.
- Dominant language
- Python
- Stars
- 2.8k
- Forks
- 207
- PR merge metrics
- No merged PRs in 30d
Description
The README.md shows this usage example:
docker container run \
-d --privileged \
--name dockerproxy \
-v /var/run/docker.sock:/var/run/docker.sock \
-p 127.0.0.1:2375:2375 \
tecnativa/docker-socket-proxy
In my optioning the example contains two security risks:
tecnativa/docker-socket-proxyon Docker Hub (link) defaults tolatest, which is already 3 years old. Please either updatelatesttag on Docker Hub to a more current version or add theedgetag to the usage example.- The example uses
-privileged, which gives a lot of permissions to the container, even though this is not required, it runs without any issue on plain Debian without the parameter. If there are exceptions, they should be noted, but--privilegedshould not be assumed to be default, and in 2024 there should be more granular options.
Combining a 3 year old image with --privileged seems to be a very insecure usage example for novice users. The project is intended to improve security, but the example seems very counter-productive.
Contributor guide
No contributing guide indexed for this repository
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Read README.md and inspect the documented docker container run example, then check the linked Docker Hub tags for the image version referenced by the example. Confirm the least-privileged invocation and the intended image tag with project guidance; done means the novice-facing example no longer implies an unnecessarily privileged or outdated setup, with exceptions documented if needed.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- docker
- Domain
- documentation, security
- Issue type
- Documentation
- Difficulty
- 2/5
- Estimated time
- 1-3 hours
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 48/100