Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

fix(container): update security settings of favonia/cloudflare-ddns #2418

Open
wants to merge 1 commit into
base: main
Choose a base branch
from

Conversation

favonia
Copy link

@favonia favonia commented Jul 27, 2024

Thanks for using my DDNS updater. Since version 1.13.0 (released on 16 July), the updater has stopped dropping superuser privileges by itself, instead relying on Docker's built-in mechanism to drop those privileges. The new way is safer, cleaner, and more reliable; but it requires an update to the configuration. In particular, the environment variables PUID=uid and PGID=gid should be replaced by user: "uid:gid" or --user uid:gid. I am on a mission to eliminate the old template from the internet. Please help me promote security best practices!

For more information about this design change, please read the CHANGELOG. If copyright ever matters, this PR itself is licensed under CC0, which should allow you to do whatever you want. Thank you again for your interest in the updater.

PS: I know you are using an older version of the updater, but the template works even for older ones. (An upgrade is recommended, though.)
PPS: I do not have a VyOS to test the script. Please let me know whether it works or not. BTW, it’s sad that VyOS does not seem to provide many other useful protections such as “dropping all Linux capabilities” or “making the filesystem read-only”.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant