{"version":"1.0","provider_name":"Docker-Profis","provider_url":"https:\/\/dockerpros.com\/de","title":"Dockerfile -security-opt - Dockerpros","type":"rich","width":600,"height":338,"html":"<blockquote class=\"wp-embedded-content\" data-secret=\"ldj86eDU33\"><a href=\"https:\/\/dockerpros.com\/de\/wiki\/dockerfile-security-opt\/\">Dockerfile \u2013security-opt\n\nIn einer Dockerfile k\u00f6nnen Sie die Option `--security-opt` verwenden, um Sicherheitseinstellungen f\u00fcr den Container festzulegen. Diese Option erm\u00f6glicht es Ihnen, verschiedene Sicherheitsparameter zu konfigurieren, die das Verhalten des Containers beeinflussen.\n\nHier sind einige Beispiele f\u00fcr die Verwendung von `--security-opt` in einer Dockerfile:\n\n1. **Seccomp-Profil festlegen:**\n   ```dockerfile\n   FROM ubuntu:latest\n   RUN echo \"Seccomp-Profil wird festgelegt\"\n   SECURITY OPT seccomp=unconfined\n   ```\n\n2. **AppArmor-Profil festlegen:**\n   ```dockerfile\n   FROM ubuntu:latest\n   RUN echo \"AppArmor-Profil wird festgelegt\"\n   SECURITY OPT apparmor=docker-default\n   ```\n\n3. **Capabilities einschr\u00e4nken:**\n   ```dockerfile\n   FROM ubuntu:latest\n   RUN echo \"Capabilities werden eingeschr\u00e4nkt\"\n   SECURITY OPT no-new-privileges:true\n   ```\n\n4. **Read-Only Root Filesystem:**\n   ```dockerfile\n   FROM ubuntu:latest\n   RUN echo \"Read-Only Root Filesystem wird aktiviert\"\n   SECURITY OPT ro-rootfs:true\n   ```\n\n5. **Seccomp und AppArmor kombinieren:**\n   ```dockerfile\n   FROM ubuntu:latest\n   RUN echo \"Seccomp und AppArmor werden kombiniert\"\n   SECURITY OPT seccomp=unconfined\n   SECURITY OPT apparmor=docker-default\n   ```\n\nDiese Beispiele zeigen, wie Sie die `--security-opt` Option in einer Dockerfile verwenden k\u00f6nnen, um die Sicherheitseinstellungen f\u00fcr Ihren Container zu konfigurieren. Beachten Sie, dass die genauen Optionen und deren Syntax je nach Docker-Version und Betriebssystem variieren k\u00f6nnen.<\/a><\/blockquote><iframe sandbox=\"allow-scripts\" security=\"restricted\" src=\"https:\/\/dockerpros.com\/de\/wiki\/dockerfile-security-opt\/embed\/#?secret=ldj86eDU33\" width=\"600\" height=\"338\" title=\"\u201eDockerfile \u2013security-opt\u201c \u2013 Dockerpros\" data-secret=\"ldj86eDU33\" frameborder=\"0\" marginwidth=\"0\" marginheight=\"0\" scrolling=\"no\" class=\"wp-embedded-content\"><\/iframe><script>\n\/**\n * WordPress inline HTML embed\n *\n * @since 4.4.0\n * @output wp-includes\/js\/wp-embed.js\n *\n * Single line comments should not be used since they will break\n * the script when inlined in get_post_embed_html(), specifically\n * when the comments are not stripped out due to SCRIPT_DEBUG\n * being turned on.\n *\/\n(function ( window, document ) {\n\t'use strict';\n\n\t\/* Abort for ancient browsers. *\/\n\tif ( ! document.querySelector || ! window.addEventListener || typeof URL === 'undefined' ) {\n\t\treturn;\n\t}\n\n\t\/** @namespace wp *\/\n\twindow.wp = window.wp || {};\n\n\t\/* Abort if script was already executed. *\/\n\tif ( !! window.wp.receiveEmbedMessage ) {\n\t\treturn;\n\t}\n\n\t\/**\n\t * Receive embed message.\n\t *\n\t * @param {MessageEvent} e\n\t *\/\n\twindow.wp.receiveEmbedMessage = function( e ) {\n\t\tvar data = e.data;\n\n\t\t\/* Verify shape of message. *\/\n\t\tif (\n\t\t\t! ( data || data.secret || data.message || data.value ) ||\n\t\t\t\/[^a-zA-Z0-9]\/.test( data.secret )\n\t\t) {\n\t\t\treturn;\n\t\t}\n\n\t\tvar iframes = document.querySelectorAll( 'iframe[data-secret=\"' + data.secret + '\"]' ),\n\t\t\tblockquotes = document.querySelectorAll( 'blockquote[data-secret=\"' + data.secret + '\"]' ),\n\t\t\tallowedProtocols = new RegExp( '^https?:$', 'i' ),\n\t\t\ti, source, height, sourceURL, targetURL;\n\n\t\tfor ( i = 0; i < blockquotes.length; i++ ) {\n\t\t\tblockquotes[ i ].style.display = 'none';\n\t\t}\n\n\t\tfor ( i = 0; i < iframes.length; i++ ) {\n\t\t\tsource = iframes[ i ];\n\n\t\t\tif ( e.source !== source.contentWindow ) {\n\t\t\t\tcontinue;\n\t\t\t}\n\n\t\t\tsource.removeAttribute( 'style' );\n\n\t\t\tif ( 'height' === data.message ) {\n\t\t\t\t\/* Resize the iframe on request. *\/\n\t\t\t\theight = parseInt( data.value, 10 );\n\t\t\t\tif ( height > 1000 ) {\n\t\t\t\t\theight = 1000;\n\t\t\t\t} else if ( ~~height < 200 ) {\n\t\t\t\t\theight = 200;\n\t\t\t\t}\n\n\t\t\t\tsource.height = height;\n\t\t\t} else if ( 'link' === data.message ) {\n\t\t\t\t\/* Link to a specific URL on request. *\/\n\t\t\t\tsourceURL = new URL( source.getAttribute( 'src' ) );\n\t\t\t\ttargetURL = new URL( data.value );\n\n\t\t\t\tif (\n\t\t\t\t\tallowedProtocols.test( targetURL.protocol ) &&\n\t\t\t\t\ttargetURL.host === sourceURL.host &&\n\t\t\t\t\tdocument.activeElement === source\n\t\t\t\t) {\n\t\t\t\t\twindow.top.location.href = data.value;\n\t\t\t\t}\n\t\t\t}\n\t\t}\n\t};\n\n\tfunction onLoad() {\n\t\tvar iframes = document.querySelectorAll( 'iframe.wp-embedded-content' ),\n\t\t\ti, source, secret;\n\n\t\tfor ( i = 0; i < iframes.length; i++ ) {\n\t\t\t\/** @var {IframeElement} *\/\n\t\t\tsource = iframes[ i ];\n\n\t\t\tsecret = source.getAttribute( 'data-secret' );\n\t\t\tif ( ! secret ) {\n\t\t\t\t\/* Add secret to iframe *\/\n\t\t\t\tsecret = Math.random().toString( 36 ).substring( 2, 12 );\n\t\t\t\tsource.src += '#?secret=' + secret;\n\t\t\t\tsource.setAttribute( 'data-secret', secret );\n\t\t\t}\n\n\t\t\t\/*\n\t\t\t * Let post embed window know that the parent is ready for receiving the height message, in case the iframe\n\t\t\t * loaded before wp-embed.js was loaded. When the ready message is received by the post embed window, the\n\t\t\t * window will then (re-)send the height message right away.\n\t\t\t *\/\n\t\t\tsource.contentWindow.postMessage( {\n\t\t\t\tmessage: 'ready',\n\t\t\t\tsecret: secret\n\t\t\t}, '*' );\n\t\t}\n\t}\n\n\twindow.addEventListener( 'message', window.wp.receiveEmbedMessage, false );\n\tdocument.addEventListener( 'DOMContentLoaded', onLoad, false );\n})( window, document );\n\/\/# sourceURL=https:\/\/dockerpros.com\/wp-includes\/js\/wp-embed.js\n<\/script>","thumbnail_url":"https:\/\/dockerpros.com\/wp-content\/uploads\/2024\/07\/dockerfile-security-opt_1344.jpg","thumbnail_width":800,"thumbnail_height":600,"description":"The `--security-opt` flag in a Dockerfile allows users to specify security options for containers, enhancing isolation and control. It supports features like AppArmor, SELinux, and seccomp configurations."}