Use read-only root for docker containers.

2023-08-31 21:21:14 -04:00
parent 9bf2a912d6
commit 4a556bc84f
2 changed files with 2 additions and 2 deletions
--- a/scripts/launch_docker.bash
+++ b/scripts/launch_docker.bash
@@ -6,7 +6,7 @@ DIR="$( cd "$( dirname "${BASH_SOURCE[0]}" )" && pwd )"

 function main {
    make --directory "$DIR/../docker"
-    exec docker run --init --rm --publish 3000:3000/tcp org-investigation
+    exec docker run --init --rm --read-only --mount type=tmpfs,destination=/tmp --publish 3000:3000/tcp org-investigation
 }

 main "${@}"