Merge pull request #10 from samply/prevent-volumes

Don't write to disk
samply · Aug 7, 2023 · c3a7475 · c3a7475
2 parents 5c86706 + fa951d5
commit c3a7475
Show file tree

Hide file tree

Showing 3 changed files with 11 additions and 1 deletion.
diff --git a/Dockerfile b/Dockerfile
@@ -1,5 +1,6 @@
 FROM ubuntu/squid:latest
 ADD ./entrypoint.sh ./proxify.sh /docker/
+ADD dont_write_to_disk.conf /etc/squid/conf.d/
 RUN apt-get update -y && apt-get install -y \
     proxychains4 \
     && rm -rf /var/lib/apt/lists/*

diff --git a/docker-compose.yml b/docker-compose.yml
@@ -7,4 +7,7 @@ services:
     ports:
       - "3128:3128"
     volumes:
-      - "./custom-certs:/docker/custom-certs"
+      - "./custom-certs:/docker/custom-certs:ro"
+    tmpfs:
+      - /var/log/squid
+      - /var/spool/squid
diff --git a/dont_write_to_disk.conf b/dont_write_to_disk.conf
@@ -0,0 +1,6 @@
+# This is intended to prevent squid from writing to disk.
+
+coredump_dir /tmp/
+access_log none
+cache_log /tmp/squid_cache.log
+netdb_filename none