mirror of
https://github.com/goharbor/harbor.git
synced 2024-11-05 18:20:37 +01:00
fefb955cfe
Drop all capabilities when starting containers by modifying docker-compose files to avoid security issue Signed-off-by: Wenkai Yin <yinw@vmware.com>
43 lines
949 B
Smarty
43 lines
949 B
Smarty
version: '2'
|
|
services:
|
|
core:
|
|
networks:
|
|
harbor-chartmuseum:
|
|
aliases:
|
|
- harbor-core
|
|
redis:
|
|
networks:
|
|
harbor-chartmuseum:
|
|
aliases:
|
|
- redis
|
|
chartmuseum:
|
|
container_name: chartmuseum
|
|
image: goharbor/chartmuseum-photon:__chartmuseum_version__
|
|
restart: always
|
|
cap_drop:
|
|
- ALL
|
|
cap_add:
|
|
- CHOWN
|
|
- DAC_OVERRIDE
|
|
- SETGID
|
|
- SETUID
|
|
networks:
|
|
- harbor-chartmuseum
|
|
dns_search: .
|
|
depends_on:
|
|
- redis
|
|
volumes:
|
|
- /data/chart_storage:/chart_storage:z
|
|
- ./common/config/chartserver:/etc/chartserver:z
|
|
- ./common/config/custom-ca-bundle.crt:/harbor_cust_cert/custom-ca-bundle.crt:z
|
|
logging:
|
|
driver: "syslog"
|
|
options:
|
|
syslog-address: "tcp://127.0.0.1:1514"
|
|
tag: "chartmuseum"
|
|
env_file:
|
|
./common/config/chartserver/env
|
|
networks:
|
|
harbor-chartmuseum:
|
|
external: false
|