diff options
| author | Jan Friedli | 2020-04-05 20:51:38 +0200 |
|---|---|---|
| committer | Jan Friedli | 2020-05-09 21:25:45 +0200 |
| commit | 4122460dfd659d568acad4c3cb700ed919b875cf (patch) | |
| tree | 86100bd4a4004116a8a199930770fe6341295835 | |
| parent | 1406e00069b5f6bad70c95ed1a0b26059ca61358 (diff) | |
document the no-new-privileges flag
| -rw-r--r-- | README.md | 2 |
1 files changed, 1 insertions, 1 deletions
| @@ -202,7 +202,7 @@ This does mount the upload folder as tmpfs and servers the app on `localhost:818 | |||
| 202 | ##### Podman | 202 | ##### Podman |
| 203 | Build: `podman build -f Dockerfile.production -t matweb-podman .` | 203 | Build: `podman build -f Dockerfile.production -t matweb-podman .` |
| 204 | 204 | ||
| 205 | Run: `podman run -ti -p8181:8080 --read-only --tmpfs /tmp --tmpfs /run/uwsgi --tmpfs=/app/upload matweb-podman:latest` | 205 | Run: `podman run -ti -p8181:8080 --read-only --tmpfs /tmp --tmpfs /run/uwsgi --tmpfs=/app/upload --security-opt=no-new-privileges matweb-podman:latest` |
| 206 | 206 | ||
| 207 | # Configuration | 207 | # Configuration |
| 208 | 208 | ||