- portlar
- chiqarilmagan — faqat ichki tarmoq
- healthcheck
- yo'q
- restart
- no (standart)
- user
- root (standart)
- volume
- /var/run/docker.sock → /var/run/docker.sock
- tarmoq
- default
~/labs / docker-sockback
Xavfsizlik6/16
docker.sock ulangan — bu host'ga root kirish
o'rta
Docker socket'iga kirish = Docker daemon'ga buyruq berish = host'da root. Bu ulanish hech qachon oddiy ilovaga berilmaydi.
docker.sockulanishini olib tashlang.cap_drop: [ALL]qo'shing.
…
docker-compose.yml
1234567
services: api: image: python:3.12-alpine command: uvicorn app:app --host 0.0.0.0 volumes: - /var/run/docker.sock:/var/run/docker.sock
! 1 ta muammo —
Tab ichkariga · Shift+Tab tashqariga⌘/Ctrl+Enter tekshirishEsc maydondan chiqish
1 servis · 0 tarmoq · 0 volume · 1 ta muammo
Muammolar 1
- lab siyosati rad etadi
/var/run/docker.sock— host papkasi ulanmoqdalab siyosati: faqat nomlangan volume'lar
Servislar 1
Ishga tushish tartibi
- 1apihech kimni kutmaydi
learner@lab: ~/app
learner@lab:~/app$
help — buyruqlar ro'yxati. Yuqori/pastki strelkalar — tarix, Tab — to'ldirish (bo'sh qatorda keyingi elementga o'tadi), Ctrl+C — to'xtatish.
hisobot shu yerda chiqadi
tekshirish uchun avval
tekshirish uchun avval