From a7c05f41f1f213daff93a253412aa30d2c3769c0 Mon Sep 17 00:00:00 2001 From: Maxwell Bloch Date: Wed, 12 Sep 2018 19:11:10 -0400 Subject: [PATCH] Handle userns security - Adds `--userns=host` when `userns-remap` is set Signed-off-by: Maxwell Bloch --- script/run/run.sh | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/script/run/run.sh b/script/run/run.sh index fe253875e..6b004606c 100755 --- a/script/run/run.sh +++ b/script/run/run.sh @@ -55,4 +55,9 @@ else DOCKER_RUN_OPTIONS="$DOCKER_RUN_OPTIONS -i" fi +# Handle userns security +if [ ! -z "$(docker info 2>/dev/null | grep userns)" ]; then + DOCKER_RUN_OPTIONS="$DOCKER_RUN_OPTIONS --userns=host" +fi + exec docker run --rm $DOCKER_RUN_OPTIONS $DOCKER_ADDR $COMPOSE_OPTIONS $VOLUMES -w "$(pwd)" $IMAGE "$@"