gsadmin/rustguac
1
0
Fork 0
mirror of https://github.com/sol1/rustguac.git synced 2026-10-25 21:19:45 +00:00
Code Issues Packages Projects Releases Wiki Activity

docker: ship the seccomp profile in the image

Browse Source 
Copy contrib/docker/seccomp-chromium.json to
/opt/rustguac/seccomp-chromium.json so users of the published image can
extract the profile that matches their image version, the same way the
docs already extract config.toml.default:

  docker run --rm --entrypoint cat <image> \
    /opt/rustguac/seccomp-chromium.json > seccomp-chromium.json

The file is only read by the Docker client when the container is
created; nothing inside the container uses it.

Refs #307
This commit is contained in:
Jad Seifeddine
2026-10-19 14:48:27 +07:00
parent 397770fd72
commit f432b2bc07
1 changed files with 4 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
Dockerfile
+4
View File
@@ -120,6 +120,10 @@ COPY --from=rust-builder /build/target/release/rustguac /opt/rustguac/bin/rustgu
# Install static web assets
COPY static/ /opt/rustguac/static/
# Seccomp profile that lets Chromium's sandbox start, for the host to pass to
# `docker run --security-opt seccomp=...` (see docs/web-sessions.md)
COPY contrib/docker/seccomp-chromium.json /opt/rustguac/seccomp-chromium.json
# Library path for guacd
RUN echo "/opt/rustguac/lib" > /etc/ld.so.conf.d/rustguac.conf && ldconfig