docker-novolume-plugin - Block container starts with local volumes defined
Website: | https://github.com/projectatomic/docker-novolume-plugin |
---|---|
License: | MIT |
Vendor: | CentOS |
- Description:
When a volume in provisioned via the `VOLUME` instruction in a Dockerfile or via `docker run -v volumename`, host's storage space is used. This could lead to an unexpected out of space issue which could bring down everything. There are situations where this is not an accepted behavior. PAAS, for instance, can't allow their users to run their own images without the risk of filling the entire storage space on a server. One solution to this is to deny users from running images with volumes. This way the only storage a user gets can be limited and PAAS can assign quota to it. This plugin solves this issue by disallowing starting a container with local volumes defined. In particular, the plugin will block `docker run` with: - `--volumes-from` - images that have `VOLUME`(s) defined - volumes early provisioned with `docker volume` command The only thing allowed will be just bind mounts.
Packages
docker-novolume-plugin-1.13.1-210.git7d71120.el7.centos.x86_64 [1.9 MiB] |
Changelog
by Jindrich Novy (2024-02-29):
- update runc to latest content of docker-1.31.1-rhel branch - drop upstreamed docker-2000782.patch |
docker-novolume-plugin-1.13.1-209.git7d71120.el7.centos.x86_64 [1.9 MiB] |
Changelog
by Jindrich Novy (2021-10-01):
- update to runc-8891bca22c049cd2dcf13ba2438c0bac8d7f3343 - update to containerd-46b69ea4c3d2d965e2116ef47e20e5584a3c2741 - apply https://github.com/projectatomic/runc/pull/56 - drop applied patches - Related: #2000782 |
docker-novolume-plugin-1.13.1-208.git7d71120.el7_9.x86_64 [1.9 MiB] |
Changelog
by Jindrich Novy (2021-06-04):
- propagate mounts to the host - fix regression introduced by fix of CVE-2021-30465 - Resolves: #1966968 |
docker-novolume-plugin-1.13.1-206.git7d71120.el7_9.x86_64 [1.9 MiB] |
Changelog
by Jindrich Novy (2021-05-18):
- fix CVE-2021-30465 - Related: #1959475 |
docker-novolume-plugin-1.13.1-205.git7d71120.el7.centos.x86_64 [1.9 MiB] |
Changelog
by Jindrich Novy (2021-03-31):
- fix mounting volume with incorrect permission - fix dockerd leaking SELinux MCS labels - Resolves: #1734482 - Resolves: #1896883 |
docker-novolume-plugin-1.13.1-204.git0be3e21.el7.x86_64 [1.9 MiB] |
Changelog
by Jindrich Novy (2021-02-12):
- fix CollectMode again - Related: #1787148 |
docker-novolume-plugin-1.13.1-203.git0be3e21.el7.centos.x86_64 [1.9 MiB] |
Changelog
by Jindrich Novy (2020-10-27):
- do not enable CollectMode support yet because it is not still present in 7.6-ALT - Related: #1766665 |
docker-novolume-plugin-1.13.1-162.git64e9980.el7.centos.x86_64 [1.9 MiB] |
Changelog
by Jindrich Novy (2020-06-22):
- rebuilt |
docker-novolume-plugin-1.13.1-161.git64e9980.el7_8.x86_64 [1.9 MiB] |
Changelog
by Jindrich Novy (2020-03-03):
- make failure message for CVE-2020-1702 more obvious (#1804024) - drop patch for #1734482 as it breaks compilation |
docker-novolume-plugin-1.13.1-109.gitcccb291.el7.centos.x86_64 [1.9 MiB] |
Changelog
by Jindrich Novy (2020-01-30):
- use runc sources off 66aedde7 commit in docker-1.13.1-rhel branch (#1793486) - use docker sources off cccb291 commit in docker-1.13.1-rhel branch - do not use CollectMode systemd property in RHEL7 - whitelist statx(2) syscall in docker (#1784228) - assure thread safety for gpgme library (#1792243) |
docker-novolume-plugin-1.13.1-108.git4ef4b30.el7.centos.x86_64 [1.9 MiB] |
Changelog
by Jindrich Novy (2019-12-13):
- bump release to not to clash with RHEL7.8 |
docker-novolume-plugin-1.13.1-103.git7f2769b.el7.centos.x86_64 [1.9 MiB] |
Changelog
by Johnny Hughes (2019-09-15):
- Manual CentOS Debrnading |
docker-novolume-plugin-1.13.1-102.git7f2769b.el7.centos.x86_64 [1.9 MiB] |
Changelog
by Johnny Hughes (2019-08-05):
- Manual CentOS Debranding |
docker-novolume-plugin-1.13.1-96.gitb2f74b2.el7.centos.x86_64 [1.9 MiB] |
Changelog
by Johnny Hughes (2019-05-01):
- Manual CentOS Debranding |
docker-novolume-plugin-1.13.1-94.gitb2f74b2.el7.centos.x86_64 [1.9 MiB] |
Changelog
by Johnny Hughes (2019-03-12):
- Manual CentOS Debranding |
docker-novolume-plugin-1.13.1-91.git07f3374.el7.centos.x86_64 [1.9 MiB] |
Changelog
by Johnny Hughes (2019-02-13):
- Manual CentOS Debranding |
docker-novolume-plugin-1.13.1-88.git07f3374.el7.centos.x86_64 [1.8 MiB] |
Changelog
by Johnny Hughes (2018-12-07):
- Manual CentOS Debranding |
docker-novolume-plugin-1.13.1-84.git07f3374.el7.centos.x86_64 [1.7 MiB] |
Changelog
by Johnny Hughes (2018-11-29):
- Manual CentOS Debranding |
docker-novolume-plugin-1.13.1-75.git8633870.el7.centos.x86_64 [1.7 MiB] |
Changelog
by Johnny Hughes (2018-09-28):
- Manual CentOS Debranding |
docker-novolume-plugin-1.13.1-74.git6e3bb8e.el7.centos.x86_64 [1.7 MiB] |
Changelog
by Johnny Hughes (2018-08-21):
- Manual CentOS Branding |
docker-novolume-plugin-1.13.1-68.gitdded712.el7.centos.x86_64 [1.7 MiB] |
Changelog
by Johnny Hughes (2018-07-16):
- Manual CentOS Debranding |
docker-novolume-plugin-1.13.1-63.git94f4240.el7.centos.x86_64 [1.7 MiB] |
Changelog
by Johnny Hughes (2018-05-18):
- Manual CentOS Debranding |
docker-novolume-plugin-1.13.1-58.git87f2fab.el7.centos.x86_64 [1.7 MiB] |
Changelog
by Johnny Hughes (2018-05-11):
- Manual CentOS Debranding |
docker-novolume-plugin-1.13.1-53.git774336d.el7.centos.x86_64 [1.6 MiB] |
Changelog
by Johnny Hughes (2018-03-07):
- Manual CentOS Debranding |
docker-novolume-plugin-1.12.6-71.git3e8e77d.el7.centos.1.x86_64 [1.6 MiB] |
Changelog
by Johnny Hughes (2018-01-29):
- Manual CentOS Debranding |
docker-novolume-plugin-1.12.6-71.git3e8e77d.el7.centos.x86_64 [1.6 MiB] |
Changelog
by Johnny Hughes (2018-01-29):
- Manual CentOS Debranding |
docker-novolume-plugin-1.12.6-68.gitec8512b.el7.centos.x86_64 [1.6 MiB] |
Changelog
by Lokesh Mandvekar (2017-11-16):
- revert some docker.sysconfig deletions wrongly done in commit 3b003db |
docker-novolume-plugin-1.12.6-61.git85d7426.el7.centos.x86_64 [1.6 MiB] |
Changelog
by Johnny Hughes (2017-10-24):
- Manual CentOS Debranding |
docker-novolume-plugin-1.12.6-55.gitc4618fb.el7.centos.x86_64 [1.6 MiB] |
Changelog
by Johnny Hughes (2017-09-21):
- Manual CentOS Debranding |
docker-novolume-plugin-1.12.6-48.git0fdc778.el7.centos.x86_64 [1.6 MiB] |
Changelog
by Johnny Hughes (2017-09-07):
- Manual CentOS Debranding |
docker-novolume-plugin-1.12.6-32.git88a4867.el7.centos.x86_64 [1.4 MiB] |
Changelog
by Johnny Hughes (2017-07-03):
- Manual CentOS Debranding |
docker-novolume-plugin-1.12.6-28.git1398f24.el7.centos.x86_64 [1.4 MiB] |
Changelog
by Johnny Hughes (2017-05-26):
- Manual CentOS Debranding |
docker-novolume-plugin-1.12.6-16.el7.centos.x86_64 [1.4 MiB] |
Changelog
by Johnny Hughes (2017-04-14):
- Manual CentOS Debranding |
docker-novolume-plugin-1.12.6-11.el7.centos.x86_64 [1.9 MiB] |
Changelog
by Johnny Hughes (2017-03-06):
- Manual CentOS Branding Changes |
docker-novolume-plugin-1.12.5-14.el7.centos.x86_64 [1.9 MiB] |
Changelog
by Johnny Hughes (2017-01-23):
- Manual CentOS Debranding |
docker-novolume-plugin-1.10.3-59.el7.centos.x86_64 [2.2 MiB] |
Changelog
by Johnny Hughes (2016-12-14):
- Manually CentOS Debranding |
docker-novolume-plugin-1.10.3-46.el7.centos.14.x86_64 [2.2 MiB] |
Changelog
by Johnny Hughes (2016-09-16):
- Manual CentOS Debranding |
docker-novolume-plugin-1.10.3-46.el7.centos.10.x86_64 [2.2 MiB] |
Changelog
by Lokesh Mandvekar (2016-07-26):
- Resolves: #1361673 - update unitfile to remove the need for forward-journald |
docker-novolume-plugin-1.10.3-44.el7.centos.x86_64 [1.7 MiB] |
Changelog
by Johnny Hughes (2016-06-23):
- Manual Debranding |
docker-novolume-plugin-1.10.3-22.2.el7.centos.x86_64 [1.7 MiB] |
Changelog
by Johnny Hughes (2016-06-09):
- CentOS Bug 10987 |
docker-novolume-plugin-1.10.3-22.1el7.centos.x86_64 [1.7 MiB] |
Changelog
by Johnny Hughes (2016-05-16):
- Manual CentOS Debranding |