-
Notifications
You must be signed in to change notification settings - Fork 52
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Add application service support to blueprints #74
Conversation
Split out from #68
79216e5
to
cf4d8e9
Compare
internal/docker/builder.go
Outdated
var buf bytes.Buffer | ||
tw := tar.NewWriter(&buf) | ||
err = tw.WriteHeader(&tar.Header{ | ||
Name: fmt.Sprintf("/appservices/%s.yaml", asID), |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Please can we do filepath escapes here, as I would like to in the future allow untrusted Blueprint input.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I assume you mean using client.GjsonEscape
?
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I mean path escaping so you can't have an asID
like ../../../etc/passwd
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Love it, just a few minor issues to resolve!
- Seems like the `Volumes` syntax is to create an anonymous volume, https://stackoverflow.com/a/58916037/796832 - And lots of people not knowing what `Volumes` syntax is or what to do. Seems like Mounts is the thing to use - fsouza/go-dockerclient#155 - https://stackoverflow.com/questions/55718603/golang-docker-library-mounting-host-directory-volumes - https://stackoverflow.com/questions/48470194/defining-a-mount-point-for-volumes-in-golang-docker-sdk
5ca8a8a
to
1b19990
Compare
LGTM |
Woot! Thanks for the review @kegsay 🐊 |
Add application service support to blueprints
as_token
to interact with the homserver APInamespaces
part of the app service registration configURL
Split out from #68