Hi,
It would be convenient to have paxtest included in the image:
FROM ${DOCKER_IMAGE:-archivebox/archivebox:master}
RUN apt-get update && apt-get install -y \
paxctl && rm -rf /var/lib/apt/lists/*
RUN paxctl -cm /usr/bin/node
When running node applications in hardened environments (or building them in such environments) 'node' needs to be able to create memory mappings for JIT. It's a security trade-off, thus you can likely skip adding the paxctl step. This will make it easier to build/adjust the images in network-restricted environments.
Hi,
It would be convenient to have paxtest included in the image:
When running node applications in hardened environments (or building them in such environments) 'node' needs to be able to create memory mappings for JIT. It's a security trade-off, thus you can likely skip adding the paxctl step. This will make it easier to build/adjust the images in network-restricted environments.