Mdthbs

My colleague treats me like he's my boss, yet we're on the same level

Is there anything in the universe that cannot be compressed?

Ideas behind the 8.Bd3 line in the 4.Ng5 Two Knights Defense

How to get frequency counts using column breaks by row?

Power supply circuit for a PIC16F88 Microchip

In what language did Túrin converse with Mím?

Divide Numbers by 0

Why haven't the British protested Brexit as ardently as the Hong Kong protesters?

How many possible file types in the output `ls -l` command?

Does using composite keys violate 2NF

Who declared the Last Alliance to be the "last" and why?

How can I store milk for long periods of time?

How were US credit cards verified in-store in the 1980's?

How to differentiate between two people with the same name in a story?

Can you use Apple Care+ without any checks (bringing just MacBook)?

Heuristic argument for the Riemann Hypothesis

How is the anglicism "jackpot" commonly expressed in French?

How would a disabled person earn their living in a medieval-type town?

How to investigate an unknown 1.5GB file named "sudo" in my Linux home directory?

What is the chance of getting a Red Cabbage in year 1?

Did NASA/JPL get "waning" and "waxing" backwards in this video?

I failed to respond to a potential advisor

Modeling an M1A2 Smoke Grenade Launcher

Received email from ISP saying one of my devices has malware

Restricted shell within docker container

Docker Container Volumes Synced Locallybash not resizing correctly within interactive Docker containeriptables limit inbound connections to Docker containerCrontab in docker containerDo `docker container rm` and `docker container kill` effectively achieve the same?Does every docker container directly present only a shell?'pthread_create: Resource temporarily unavailable' when running multiple docker instancesUser switching within a Docker container's context

.everyoneloves__top-leaderboard:empty,.everyoneloves__mid-leaderboard:empty,.everyoneloves__bot-mid-leaderboard:empty{ margin-bottom:0;
}

0

Some context for my question: I am working on a pty NodeJS server running in docker where I want to provide users connecting to the shell an isolated environment where they can play around with commands without affecting any other users connected to the docker container.

I have looked into cgroups, namespaces, jailkit and chroot but not sure where to start. There is a site called tutorialspoint which provides a bash playground and this is pretty much what I am trying to achieve https://www.tutorialspoint.com/execute_bash_online.php

So in conclusion I want to run a docker container where I can easily spawn new shells for any amount of users. The shells should be restricted to having only write access in the users home folder and I want to limit the commands a user can run. In the world of Unix, what would I use to achieve this?

Thank you so much in advance!

EDIT: One thing that confused me is that if I run the following commands in the bash playground on tutorialspoint:

id

cat /etc/passwd

I do not see the current user in the passwd list. Why is it that the passwd on tutorialspoint does not include the connected users? How does that work together with the Unix permission model?

docker chroot limit pty jails

share|improve this question

edited 1 hour ago

Joakim Hansson

asked 2 hours ago

Joakim HanssonJoakim Hansson

10122 bronze badges

New contributor

Joakim Hansson is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.

• 
  
  
  

  
  

  
  
  
  
  
  

  
  
  Technically it would be a lot simpler/safer to spawn a container per user. Containers are not VMs, they are mere processes.
  
  – xenoid
  1 hour ago
  

  
  
  
  


• 
  
  
  

  
  

  
  
  
  
  
  

  
  
  @xenoid Thank you, I think this is where I am heading. I just tried starting a container as a different user docker run --rm -it --name test --user 1000 debian bash and It's close to what I am looking for
  
  – Joakim Hansson
  1 hour ago
  

  
  
  
  

add a comment | 

0

Some context for my question: I am working on a pty NodeJS server running in docker where I want to provide users connecting to the shell an isolated environment where they can play around with commands without affecting any other users connected to the docker container.

I have looked into cgroups, namespaces, jailkit and chroot but not sure where to start. There is a site called tutorialspoint which provides a bash playground and this is pretty much what I am trying to achieve https://www.tutorialspoint.com/execute_bash_online.php

So in conclusion I want to run a docker container where I can easily spawn new shells for any amount of users. The shells should be restricted to having only write access in the users home folder and I want to limit the commands a user can run. In the world of Unix, what would I use to achieve this?

Thank you so much in advance!

EDIT: One thing that confused me is that if I run the following commands in the bash playground on tutorialspoint:

id

cat /etc/passwd

I do not see the current user in the passwd list. Why is it that the passwd on tutorialspoint does not include the connected users? How does that work together with the Unix permission model?

docker chroot limit pty jails

share|improve this question

edited 1 hour ago

Joakim Hansson

asked 2 hours ago

Joakim HanssonJoakim Hansson

10122 bronze badges

New contributor

Joakim Hansson is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.

• 
  
  
  

  
  

  
  
  
  
  
  

  
  
  Technically it would be a lot simpler/safer to spawn a container per user. Containers are not VMs, they are mere processes.
  
  – xenoid
  1 hour ago
  

  
  
  
  


• 
  
  
  

  
  

  
  
  
  
  
  

  
  
  @xenoid Thank you, I think this is where I am heading. I just tried starting a container as a different user docker run --rm -it --name test --user 1000 debian bash and It's close to what I am looking for
  
  – Joakim Hansson
  1 hour ago
  

  
  
  
  

add a comment | 

Some context for my question: I am working on a pty NodeJS server running in docker where I want to provide users connecting to the shell an isolated environment where they can play around with commands without affecting any other users connected to the docker container.

I have looked into cgroups, namespaces, jailkit and chroot but not sure where to start. There is a site called tutorialspoint which provides a bash playground and this is pretty much what I am trying to achieve https://www.tutorialspoint.com/execute_bash_online.php

So in conclusion I want to run a docker container where I can easily spawn new shells for any amount of users. The shells should be restricted to having only write access in the users home folder and I want to limit the commands a user can run. In the world of Unix, what would I use to achieve this?

Thank you so much in advance!

EDIT: One thing that confused me is that if I run the following commands in the bash playground on tutorialspoint:

id

cat /etc/passwd

I do not see the current user in the passwd list. Why is it that the passwd on tutorialspoint does not include the connected users? How does that work together with the Unix permission model?

docker chroot limit pty jails

share|improve this question

edited 1 hour ago

Joakim Hansson

asked 2 hours ago

Joakim HanssonJoakim Hansson

10122 bronze badges

New contributor

Joakim Hansson is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.

id

cat /etc/passwd

share|improve this question

edited 1 hour ago

Joakim Hansson

asked 2 hours ago

Joakim HanssonJoakim Hansson

10122 bronze badges

New contributor

Joakim Hansson is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.

share|improve this question

edited 1 hour ago

Joakim Hansson

asked 2 hours ago

Joakim HanssonJoakim Hansson

10122 bronze badges

New contributor

Joakim Hansson is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.

asked 2 hours ago

Joakim HanssonJoakim Hansson

10122 bronze badges

New contributor

Joakim Hansson is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.

asked 2 hours ago

Joakim HanssonJoakim Hansson

10122 bronze badges