mirror of
https://github.com/Tecnativa/docker-socket-proxy
synced 2025-01-05 05:10:54 +00:00
c73447028f
This allows haproxy to read the socket, whilst running as a non-privileged user. The container itself needs to run as root to create the group, but haproxy itself changes its own group after startup.
40 lines
695 B
Docker
40 lines
695 B
Docker
FROM haproxy:lts-alpine
|
|
|
|
USER root
|
|
|
|
EXPOSE 2375
|
|
ENV ALLOW_RESTARTS=0 \
|
|
AUTH=0 \
|
|
BUILD=0 \
|
|
COMMIT=0 \
|
|
CONFIGS=0 \
|
|
CONTAINERS=0 \
|
|
DISTRIBUTION=0 \
|
|
EVENTS=1 \
|
|
EXEC=0 \
|
|
GRPC=0 \
|
|
IMAGES=0 \
|
|
INFO=0 \
|
|
LOG_LEVEL=info \
|
|
NETWORKS=0 \
|
|
NODES=0 \
|
|
PING=1 \
|
|
PLUGINS=0 \
|
|
POST=0 \
|
|
SECRETS=0 \
|
|
SERVICES=0 \
|
|
SESSION=0 \
|
|
SOCKET_PATH=/var/run/docker.sock \
|
|
SWARM=0 \
|
|
SYSTEM=0 \
|
|
TASKS=0 \
|
|
VERSION=1 \
|
|
VOLUMES=0
|
|
|
|
COPY docker-entrypoint.sh /docker-entrypoint.sh
|
|
ENTRYPOINT [ "/docker-entrypoint.sh" ]
|
|
|
|
COPY haproxy.cfg /usr/local/etc/haproxy/haproxy.cfg
|
|
|
|
CMD ["haproxy", "-f", "/usr/local/etc/haproxy/haproxy.cfg"]
|