devcontainers / devcontainers/cli

`seccomp=profile.json` path isn't relative to `devcontainer-feature.json` or `compose.yml`

Open
#210 7 comments 0 reactions 1 assignee Claimed by @chrmarti View on GitHub
feature-request
Dominant language
TypeScript
Stars
3k
Forks
457
Avg merge
13h 17m
Merged PRs (30d)
6

Description

# How is a path to a seccomp profile file specificed?

This doesn't work when **seccomp.json** is in same folder as **devcontainer-feature.json**
```jsonc
// devcontainer-feature.json
{
"securityOpt": ["seccomp=seccomp.json"]
}
```

This doesn't work when **seccomp.json** is in same folder as **compose.yml**
```jsonc
// devcontainer.json
{
"dockerComposeFile": "compose.yml",
// rest omitted...
}
```
```yml
# compose.yml
services:
app:
security_opt:
- seccomp:seccomp.json
```

seccomp accepts a path https://docs.docker.com/engine/security/seccomp/

```
$ docker run --rm \
-it \
--security-opt seccomp=/path/to/seccomp/profile.json \
hello-world
```

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.