Mageia Bugzilla – Attachment 9442 Details for
Bug 20100
docker new security issue CVE-2016-9962
Home
|
New
|
Browse
|
Search
|
[?]
|
Reports
|
Requests
|
Help
|
Log In
[x]
|
New Account
|
Forgot Password
First part of learning curve
docker_1.txt (text/plain), 2.42 KB, created by
Len Lawrence
on 2017-06-23 00:06:40 CEST
(
hide
)
Description:
First part of learning curve
Filename:
MIME Type:
Creator:
Len Lawrence
Created:
2017-06-23 00:06:40 CEST
Size:
2.42 KB
patch
obsolete
>Before updating, docker was installed on x86_64 and a tutorial from O'Reilly, "Using Docker" by Adrian Mouat was used for familiarization. These are some of the commands: > >$ sudo systemctl enable docker >$ sudo systemctl start docker >$ systemctl status docker >â docker.service - Docker Application Container Engine > Loaded: loaded (/usr/lib/systemd/system/docker.service; enabled) > Active: active (running) since Thu 2017-06-22 22:10:17 BST; 34min ago > Docs: http://docs.docker.com > Main PID: 22127 (docker) > CGroup: /system.slice/docker.service > ââ22127 /usr/bin/docker -d > ># Give user privileged access to docker by adding her to the docker group. >$ sudo usermod -aG docker <user> ># Remember to logout and login. >$ sudo systemctl restart docker > >$ docker version >Client: > Version: 1.9.1 > API version: 1.21 > Go version: go1.6.2 > Git commit: a34a1d5 > Built: > OS/Arch: linux/amd64 > >Server: > Version: 1.9.1 > API version: 1.21 > Go version: go1.6.2 > Git commit: a34a1d5 > Built: > OS/Arch: linux/amd64 > ># Run a container downloaded from a repository online. >$ docker run debian echo "Hello World" >Unable to find image 'debian:latest' locally >latest: Pulling from library/debian > >13665ace9c20: Pull complete >b7b564987286: Pull complete >Digest: sha256:32bde5f28ba92a68ab7b56cb4185e057c5fda000ab1493e6f26f8e0c741f91f9 >Status: Downloaded newer image for debian:latest >Hello World > ># The debian container is now available locally: >$ docker run debian echo "Hello World" >Hello World > ># Establish a shell in the container: >$ docker run -i -t debian /bin/bash >root@a38e388f2be3:/# echo "Hello from in here!" >Hello from in here! >root@a38e388f2be3:/# exit >exit > ># Rename the container: >$ docker run -h Debby -i -t debian /bin/bash > ># Attempt to break the container... >root@Debby:/# mv /bin /basket >root@Debby:/# ls >basket dev home lib32 libx32 mnt proc run srv tmp var >boot etc lib lib64 media opt root sbin sys usr ># Not what was expected. According to the O'Reilly book the command should have failed, like so: >bash: ls: command not found ># The book was written against version 1.8 whereas we are running 1.9. Perhaps the commands are cached somewhere now. >At this point in the tutorial things diverge markedly. The book says that it is important to install the latest version because the pace of development is so fast; it looks like that applies to the documentation also. > >Pausing to regroup. > > > > >
Before updating, docker was installed on x86_64 and a tutorial from O'Reilly, "Using Docker" by Adrian Mouat was used for familiarization. These are some of the commands: $ sudo systemctl enable docker $ sudo systemctl start docker $ systemctl status docker â docker.service - Docker Application Container Engine Loaded: loaded (/usr/lib/systemd/system/docker.service; enabled) Active: active (running) since Thu 2017-06-22 22:10:17 BST; 34min ago Docs: http://docs.docker.com Main PID: 22127 (docker) CGroup: /system.slice/docker.service ââ22127 /usr/bin/docker -d # Give user privileged access to docker by adding her to the docker group. $ sudo usermod -aG docker <user> # Remember to logout and login. $ sudo systemctl restart docker $ docker version Client: Version: 1.9.1 API version: 1.21 Go version: go1.6.2 Git commit: a34a1d5 Built: OS/Arch: linux/amd64 Server: Version: 1.9.1 API version: 1.21 Go version: go1.6.2 Git commit: a34a1d5 Built: OS/Arch: linux/amd64 # Run a container downloaded from a repository online. $ docker run debian echo "Hello World" Unable to find image 'debian:latest' locally latest: Pulling from library/debian 13665ace9c20: Pull complete b7b564987286: Pull complete Digest: sha256:32bde5f28ba92a68ab7b56cb4185e057c5fda000ab1493e6f26f8e0c741f91f9 Status: Downloaded newer image for debian:latest Hello World # The debian container is now available locally: $ docker run debian echo "Hello World" Hello World # Establish a shell in the container: $ docker run -i -t debian /bin/bash root@a38e388f2be3:/# echo "Hello from in here!" Hello from in here! root@a38e388f2be3:/# exit exit # Rename the container: $ docker run -h Debby -i -t debian /bin/bash # Attempt to break the container... root@Debby:/# mv /bin /basket root@Debby:/# ls basket dev home lib32 libx32 mnt proc run srv tmp var boot etc lib lib64 media opt root sbin sys usr # Not what was expected. According to the O'Reilly book the command should have failed, like so: bash: ls: command not found # The book was written against version 1.8 whereas we are running 1.9. Perhaps the commands are cached somewhere now. At this point in the tutorial things diverge markedly. The book says that it is important to install the latest version because the pace of development is so fast; it looks like that applies to the documentation also. Pausing to regroup.
View Attachment As Raw
Actions:
View
Attachments on
bug 20100
: 9442 |
9443
|
9444