Block a user
dockerfiles (docker-run)
Published 2025-10-21 17:29:21 +08:00 by core
Installation
docker pull git.coocn.cn/core/dockerfiles:docker-runsha256:8db162023ab8f7e0640546e175de4ef4a7b8030b3910c848bb1faac4d5190f65Image Layers
| # debian.sh --arch 'amd64' out/ 'bullseye' '@1760918400' |
| RUN /bin/sh -c apt-get update && apt-get install -y ca-certificates && rm -rf /var/lib/apt/lists/* # buildkit |
| RUN /bin/sh -c groupadd -r glot && useradd -r -g glot glot # buildkit |
| WORKDIR /app |
| COPY /app/target/release/docker-run /app/docker-run # buildkit |
| COPY run.sh /app/run.sh # buildkit |
| RUN /bin/sh -c chmod +x /app/docker-run /app/run.sh # buildkit |
| RUN /bin/sh -c mkdir -p /var/log/docker-run && mkdir -p /tmp/docker-run && chown -R glot:glot /app /var/log/docker-run /tmp/docker-run # buildkit |
| USER root |
| ENV SERVER_LISTEN_ADDR=0.0.0.0 |
| ENV SERVER_LISTEN_PORT=8088 |
| ENV SERVER_WORKER_THREADS=10 |
| ENV DOCKER_UNIX_SOCKET_PATH=/var/run/docker.sock |
| ENV DOCKER_UNIX_SOCKET_READ_TIMEOUT=3 |
| ENV DOCKER_UNIX_SOCKET_WRITE_TIMEOUT=3 |
| ENV DOCKER_CONTAINER_HOSTNAME=glot |
| ENV DOCKER_CONTAINER_USER=glot |
| ENV DOCKER_CONTAINER_MEMORY=1000000000 |
| ENV DOCKER_CONTAINER_NETWORK_DISABLED=true |
| ENV DOCKER_CONTAINER_ULIMIT_NOFILE_SOFT=90 |
| ENV DOCKER_CONTAINER_ULIMIT_NOFILE_HARD=100 |
| ENV DOCKER_CONTAINER_ULIMIT_NPROC_SOFT=90 |
| ENV DOCKER_CONTAINER_ULIMIT_NPROC_HARD=100 |
| ENV DOCKER_CONTAINER_CAP_DROP=MKNOD NET_RAW NET_BIND_SERVICE |
| ENV DOCKER_CONTAINER_READONLY_ROOTFS=true |
| ENV DOCKER_CONTAINER_TMP_DIR_PATH=/tmp |
| ENV DOCKER_CONTAINER_TMP_DIR_OPTIONS=rw,exec,nosuid,size=65536k |
| ENV DOCKER_CONTAINER_WORK_DIR_PATH=/home/glot |
| ENV DOCKER_CONTAINER_WORK_DIR_OPTIONS=rw,exec,nosuid,size=131072k |
| ENV RUN_MAX_EXECUTION_TIME=10 |
| ENV RUN_MAX_OUTPUT_SIZE=100000 |
| ENV DEBUG_KEEP_CONTAINER=false |
| ENV RUST_LOG=info |
| HEALTHCHECK &{["CMD-SHELL" "curl -f http://localhost:8088/ || exit 1"] "30s" "10s" "5s" "0s" '\x03'} |
| EXPOSE map[8088/tcp:{}] |
| CMD ["/app/docker-run"] |
Details
2025-10-21 17:29:21 +08:00
Versions (2)
View all
Container
0
OCI / Docker
linux/amd64
38 MiB
docker-run
2025-10-21
glot-www
2025-10-21