disable docker socket support until we have security in place
Signed-off-by: Andrea Luzzardi <aluzzardi@gmail.com>
This commit is contained in:
parent
ac34df319a
commit
2671e5f321
@ -468,11 +468,6 @@ func (p *Pipeline) mount(ctx context.Context, dest string, mnt *compiler.Value)
|
||||
llb.Scratch(),
|
||||
llb.Tmpfs(),
|
||||
), nil
|
||||
case "docker.sock":
|
||||
return llb.AddSSHSocket(
|
||||
llb.SSHID(solver.DockerSocketID),
|
||||
llb.SSHSocketTarget(dest),
|
||||
), nil
|
||||
default:
|
||||
return nil, fmt.Errorf("invalid mount source: %q", s)
|
||||
}
|
||||
|
@ -52,7 +52,7 @@ package op
|
||||
// `true` means also ignoring the mount cache volumes
|
||||
always?: true | *false
|
||||
dir: string | *"/"
|
||||
mount: [string]: "tmpfs" | "cache" | "docker.sock" | {from: _, path: string | *"/"} | {secret: _}
|
||||
mount: [string]: "tmpfs" | "cache" | {from: _, path: string | *"/"} | {secret: _}
|
||||
// Map of hostnames to ip
|
||||
hosts?: [string]: string
|
||||
// User to exec with (if left empty, will default to the set user in the image)
|
||||
|
@ -107,6 +107,7 @@ setup() {
|
||||
}
|
||||
|
||||
@test "compute: docker socket" {
|
||||
skip "docker socket support disabled"
|
||||
run "$DAGGER" compute "$TESTDIR"/compute/dockersocket
|
||||
}
|
||||
|
||||
|
Reference in New Issue
Block a user