Difference between revisions of "ReadOnlyRootFilesystem"
Jump to navigation
Jump to search
Tags: Mobile web edit, Mobile edit |
Tags: Mobile web edit, Mobile edit |
||
| (9 intermediate revisions by the same user not shown) | |||
| Line 1: | Line 1: | ||
{{lc}} | {{lc}} | ||
| + | <code>[[ReadOnlyRootFilesystem]]</code> in <code>[[spec.containers.securityContext]]</code> | ||
| + | |||
| + | |||
{{ContainerSecurityContext ex}} | {{ContainerSecurityContext ex}} | ||
| Line 5: | Line 8: | ||
* <code>[[allowPrivilegeEscalation]]</code> | * <code>[[allowPrivilegeEscalation]]</code> | ||
* [[Configure a Security Context for a Pod or Container]] | * [[Configure a Security Context for a Pod or Container]] | ||
| + | * Mount <code>[[emptyDir]]</code> to <code>[[/tmp]]</code> | ||
| + | * [[--read-only]] in [[Docker]] | ||
| + | * [[read_only]]: true # in [[docker-compose.yaml]] | ||
== See also == | == See also == | ||
* {{readOnlyRootFilesystem}} | * {{readOnlyRootFilesystem}} | ||
| − | * {{ | + | * {{emptyDir}} |
| + | * {{SecurityContext}} | ||
| − | [[Category:K8s]] | + | [[Category:K8s security]] |
Latest revision as of 08:22, 3 June 2026
ReadOnlyRootFilesystem in spec.containers.securityContext
containerSecurityContext: enabled: true runAsUser: 11111 runAsGroup: 11111 allowPrivilegeEscalation: false capabilities: drop: - all readOnlyRootFilesystem: false runAsNonRoot: true
Related[edit]
allowPrivilegeEscalation- Configure a Security Context for a Pod or Container
- Mount
emptyDirto/tmp - --read-only in Docker
- read_only: true # in docker-compose.yaml
See also[edit]
Advertising:
