Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Risky Dockerfile example #318

Open
ryan0x44 opened this issue Aug 30, 2024 · 0 comments
Open

Risky Dockerfile example #318

ryan0x44 opened this issue Aug 30, 2024 · 0 comments

Comments

@ryan0x44
Copy link

The examples/Dockerfile file, while an example, I think is risky to have as-is given many folks out there may not realise the security implications of this line:

COPY server.key /etc/mysql/conf.d/server-key.pem

which stores a copy of the private key in the docker image.

At the very least, there should be some kind of warning around this file to say this shouldn't be done in production. Better would be to not do this in the first place and instead provide an example of how to volume mount the keys into the container at runtime.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant