25 lines
561 B
Docker
25 lines
561 B
Docker
FROM alpine:latest
|
|
|
|
# CRITICAL: Using latest tag
|
|
# INFO: Should use specific version like alpine:3.19
|
|
|
|
RUN apk add --no-cache curl bash docker-cli
|
|
|
|
# HIGH: Installing Docker CLI inside container (likely needs docker.sock)
|
|
# This pattern usually means they'll mount docker socket
|
|
|
|
# MEDIUM: Running as root
|
|
WORKDIR /app
|
|
|
|
COPY entrypoint.sh /app/
|
|
RUN chmod 777 /app/entrypoint.sh
|
|
|
|
# MEDIUM: World-writable permissions
|
|
|
|
# Note: The "privileged" part would be in docker run or compose
|
|
# This Dockerfile enables that pattern
|
|
|
|
EXPOSE 9000
|
|
|
|
CMD ["/app/entrypoint.sh"]
|