-
Notifications
You must be signed in to change notification settings - Fork 2.8k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
White-list build images #1061
Comments
This was referenced Jan 28, 2016
@bradrydzewski can we maybe get this in 0.5? Trying to appease our security team so we have a set of images that are OK. |
We should check and see if there is a native solution to this in Docker. I think you can configure your Docker daemon to use a mirror, which may give you the ability through the mirror to limit which external images are pulled. |
Sign up for free
to subscribe to this conversation on GitHub.
Already have an account?
Sign in.
I have recently started testing drone and it is great! I want to know how to restrict the containers that drone can execute, because as it appears to be set up at the moment anyone can modify the
.drone.yml
file and download and execute any container from the main docker registry, which I don't really want to enable on my build bot.Is it possible to limit the containers that can be executed to either a whitelist, or just to disable download from the registry, so the containers have to be locally built / cached?
Thanks
The text was updated successfully, but these errors were encountered: