You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
It would be convenient to have paxtest included in the image:
FROM ${DOCKER_IMAGE:-archivebox/archivebox:master}
RUN apt-get update && apt-get install -y \
paxctl && rm -rf /var/lib/apt/lists/*
RUN paxctl -cm /usr/bin/node
When running node applications in hardened environments (or building them in such environments) 'node' needs to be able to create memory mappings for JIT. It's a security trade-off, thus you can likely skip adding the paxctl step. This will make it easier to build/adjust the images in network-restricted environments.
The text was updated successfully, but these errors were encountered:
Hi,
It would be convenient to have paxtest included in the image:
When running node applications in hardened environments (or building them in such environments) 'node' needs to be able to create memory mappings for JIT. It's a security trade-off, thus you can likely skip adding the paxctl step. This will make it easier to build/adjust the images in network-restricted environments.
The text was updated successfully, but these errors were encountered: