White-list build images

[Cadair]

I have recently started testing drone and it is great! I want to know how to restrict the containers that drone can execute, because as it appears to be set up at the moment anyone can modify the .drone.yml file and download and execute any container from the main docker registry, which I don't really want to enable on my build bot.

Is it possible to limit the containers that can be executed to either a whitelist, or just to disable download from the registry, so the containers have to be locally built / cached?

Thanks

[donny-dont]

@bradrydzewski can we maybe get this in 0.5? Trying to appease our security team so we have a set of images that are OK.

[bradrydzewski]

We should check and see if there is a native solution to this in Docker. I think you can configure your Docker daemon to use a mirror, which may give you the ability through the mirror to limit which external images are pulled.