English 中文(简体)
用户需要哪些许可才能暴露一个cker集装箱港口?
原标题:What permissions should a user have to expose a docker container port?

I m setting up puppeteer on a docker container. Tried to do it according to their troubleshooting page https://github.com/GoogleChrome/puppeteer/blob/master/docs/troubleshooting.md#running-on-alpine.

但是,在创建和使用新的用户(用户)之后,服务器由于用户没有许可,因此可能会暴露80号港口。 傲慢:聆听EACCES0.0:80。

www.un.org/Depts/DGACM/index_spanish.htm 无法找到关于允许我增加这一用户的明确文件,以便用户能够购买美元。

三方增加用户以起诉,而那又不了工作,但另一方面,即使这样做,我假定这是错误的,因为它带来安全风险。

在开始使用新用户之前对港口进行三边挖掘,这也失败了。

Dockerfile

FROM node

# Installs latest Chromium (72) package.
RUN apk update && apk upgrade && 
    echo @edge http://nl.alpinelinux.org/alpine/edge/community >> /etc/apk/repositories && 
    echo @edge http://nl.alpinelinux.org/alpine/edge/main >> /etc/apk/repositories && 
    apk add --no-cache 
      chromium@edge 
      nss@edge 
      freetype@edge 
      harfbuzz@edge 
      ttf-freefont@edge 
      udev

RUN mkdir -p /app
WORKDIR /app

# Tell Puppeteer to skip installing Chrome. We ll be using the installed package.
ENV PUPPETEER_SKIP_CHROMIUM_DOWNLOAD true

# Add user so we don t need --no-sandbox.
RUN addgroup -S pptruser && adduser -S -g pptruser pptruser 
    && mkdir -p /home/pptruser/Downloads 
    && chown -R pptruser:pptruser /home/pptruser 
    && chown -R pptruser:pptruser /app


ENV PORT 80
ENV HTTP_PORT $PORT
ENV HTTPS_PORT 443

EXPOSE $HTTP_PORT
EXPOSE $HTTPS_PORT

USER pptruser


CMD [ "页: 1" ]

页: 1

#!/bin/sh

PORT="${HTTP_PORT:-80}"

node "app/bin/server.js"

误差

 Error: listen EACCES 0.0.0.0:80
at Object.exports._errnoException (util.js:1020:11)
at exports._exceptionWithHostPort (util.js:1043:20)
at Server._listen2 (net.js:1258:19)
at listen (net.js:1307:10)
at Server.listen (net.js:1403:5)
at appServer.app.then.then.then (/app/bin/server.js:69:12)

任何帮助

问题回答

这一错误与你使用<代码>EXPOSE有任何关系。

传统上,只有<代码>root 用户可对1024岁以下的港口进行约束,在您的集装箱内,可以重新运行,成为的用户。

然而,我认为你认为,这确实是你特别使用的案例。 提供服务的港口:inside a 集装箱码头与边远客户连接的港口有任何关系。 对“在集装箱内听觉的港口”进行测绘,通过Docker s /port 机制进行。

举例来说,你将召集你的工作,听取80港以外的事项。

在你经营集装箱时,将80号港口放在你所在的港口,在你集装箱内808080号港口:

docker run -p 80:8080 ...

现在,你可以到你所在的80港上班。 你可以以同样的方式处理443港口。

请注意,<代码>EXPOSE, 您的Dockerfile中的关键词基本上没有必要。 在典型的Docker环境中,这种环境是一种禁忌,只是信息。 无论是否为<条码>EXPOSEd,你均可公布港口。

页: 1





相关问题
Not authorized to write to this feed

I am calling service.insert(new URL(getContentFeedUrl()), newAttachment); for Google sites file upload using MediaStreamSource in servlet and get following exception com.google.gdata.util....

php javascript permissions problem

Kind of a weird problem... not something ive ever run into before. So, i am using CKeditor, and am creating the upload and browse functions for users to upload and use images in the rich text editor. ...

Limiting Access by Permission

thanks for viewing this. I have a db that has users, roles & user_roles. What I am trying to achieve is a login that will select users who have Admin or Associate permissions. The login then uses ...

SQL Agent not kicking off an SSIS package

I have a server that has a SQL Agent job setup to run a two part datawarehouse build and Analysis Services cube build. The job ran successfully until there was a problem with Management Studio and ....

SharePoint : web service permission error

I have a sharepoint site, and I am calling a standard sharepoint web service. I create the web service request like this : wsDws.Url = this.SiteAddress + @"/_vti_bin/Dws.asmx"; When I use ...

热门标签