From ab40949ce1cbb8e1e5b2b7911f1ff4d3aeb352b9 Mon Sep 17 00:00:00 2001 From: konsthol Date: Tue, 5 Sep 2023 16:34:47 +0300 Subject: [PATCH] Who knows... --- harden | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/harden b/harden index 9079253..6a2e489 100755 --- a/harden +++ b/harden @@ -7,7 +7,7 @@ # Using set to make the script safer set -e # Exit on error set -u # Exit on undefined variable -set -x # Print commands for debugging +# set -x # Print commands for debugging set -a # Export all variables set -C # Disable overwriting of files set -o pipefail # Exit on pipe error @@ -325,9 +325,9 @@ EOF # The runsc option --network=host and --ignore-cgroups=true will help with running runsc # with rootless docker without much hassle sudo runuser - secdep -c 'mkdir -p /home/secdep/.config/docker' -# "icc": false to disable inter-container communication, does not work without br_netfilter module loaded -# and it is sometimes prohibited by the hosting provider -# so we'll leave it out + # "icc": false to disable inter-container communication, does not work without br_netfilter module loaded + # and it is sometimes prohibited by the hosting provider + # so we'll leave it out of the daemon config DOCKERD_CONFIG=$(cat <<'EOF' { "no-new-privileges": true,