From 307ca32ad54e26edd20c791b72fc472380a395ea Mon Sep 17 00:00:00 2001
From: Sheogorath <sheogorath@shivering-isles.com>
Date: Fri, 10 Apr 2020 01:15:50 +0200
Subject: [PATCH] Minor README improvements
Update some links extend the README where needed. Nothing really
interesting.
---
README.md | 8 ++++----
1 file changed, 4 insertions(+), 4 deletions(-)
diff --git a/README.md b/README.md
index 2679be7..49cf112 100644
--- a/README.md
+++ b/README.md
@@ -2,7 +2,7 @@
## What?
-This is a security-enhanced proxy for the Docker Socket.
+This is a security-enhanced proxy for the Docker Socket. It's based on the [`docker-socket-proxy` container from Tecnativa](https://github.com/Tecnativa/docker-socket-proxy).
## Why?
@@ -35,10 +35,10 @@ requests that should never happen.
## Usage
-1. Run the API proxy (`--privileged` flag is required here because it connects with the docker socket, which is a privileged connection in some SELinux/AppArmor contexts and would get locked otherwise):
+1. Run the API proxy (`--security-opt label:disable` flag is required here because it connects with the docker socket, which is not labeled with `container_file_t` and should not be relabeled. Therefore cause SELinux to block access to it, if not ran with this flag):
$ docker container run \
- -d --privileged \
+ -d --security-opt label:disable \
--name dockerproxy \
-v /var/run/docker.sock:/var/run/docker.sock \
-p 127.0.0.1:2375:2375 \
@@ -156,4 +156,4 @@ Please send any feedback (issues, questions) to the [issue tracker][].
[Alpine]: https://alpinelinux.org/
[HAProxy]: http://www.haproxy.org/
-[issue tracker]: https://github.com/Tecnativa/docker-socket-proxy/issues
+[issue tracker]: https://git.shivering-isles.com/container-library/docker-socket-proxy/issues
--
GitLab