blob: 9c625a7b6a66c82bd8584a6dde5c1a799bc1911e (
plain) (
blame)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
|
#!/bin/sh
set -e
[ -n "$DEBUG" ] && set -x
target=
img=""
dockerfile="${PWD}/Dockerfile"
priv=
opts=
become=
verbose=
usage() {
printf "usage: %s OPTIONS -- [ARGS]\n" "$(basename "$0")"
printf "\n"
printf " -t TARGET\n"
printf " -i IMAGE\n"
printf " -f DOCKERFILE\n"
printf " -o EXTRA OPTIONS\n"
printf " -D (run with elevated privileged, but not privileged)\n"
printf " -B (don't reassign uid/gid)\n"
printf " -v (be verbose)\n"
printf "\n"
printf "Enter the container defined in Dockerfile, with \$PWD mounted at /src\n"
exit 2
}
while getopts t:i:f:o:vBDh o; do
case $o in
t) target="$OPTARG" ;;
i) img="$OPTARG" ;;
f) dockerfile="$OPTARG" ;;
o) opts="$OPTARG" ;;
D) priv=1 ;;
B) become=1 ;;
v) verbose=1 ;;
h|?) usage ;;
esac
done
shift $((OPTIND - 1))
if [ -z "$img" ]; then
img="$(basename "$(dirname "$(readlink -f -- "$dockerfile")")")"
# allow setting this to some non-file value to skip building
# > enter -i alpine -f none
# for a quick alpine based container with $PWD mounted in
[ -f "$dockerfile" ] && \
docker build --tag="$img" --target="$target" --file="$dockerfile" "$PWD"
fi
extra_args=
[ -n "$become" ] && extra_args="${extra_args} "
[ -n "$priv" ] && {
extra_args="${extra_args} \
--tmpfs=/run --tmpfs=/sys/fs/cgroup \
--sysctl=net.ipv4.ip_forward=1 \
--security-opt=apparmor:unconfined --security-opt=seccomp:unconfined \
--cap-add NET_ADMIN --cap-add SYS_ADMIN --cap-add SYS_RESOURCE \
--tmpfs=/var/lib/docker";
}
# make the container transparent
[ -z "$priv" ] && {
extra_args="${extra_args} \
--privileged \
--mount=type=bind,src=${HOME},target=/home/robert,ro \
--network=host";
}
[ -n "$opts" ] && extra_args="${extra_args} ${opts}"
[ -z "$become" ] && \
extra_args="${extra_args} --user="$(id -u):$(id -g)""
ep="sh"
[ -n "$1" ] && { ep="$1"; shift; }
[ -n "$verbose" ] && { set -x; }
exec docker run --rm -it \
--entrypoint="$ep" \
--mount=type=bind,src="$PWD",dst=/src -w /src $extra_args "$img" $@
|
