update docker compose to make docker sock read only

2025-10-18 17:29:28 +08:00 · 2024-07-23 15:21:03 -04:00
parent 844b95dfd0
commit e787b6ea1b
2 changed files with 2 additions and 2 deletions
--- a/agent/docker-compose.yml
+++ b/agent/docker-compose.yml
@@ -5,7 +5,7 @@ services:
    restart: unless-stopped
    network_mode: host
    volumes:
-      - /var/run/docker.sock:/var/run/docker.sock
+      - /var/run/docker.sock:/var/run/docker.sock:ro
    environment:
      PORT: 45876
      KEY: 'ssh-ed25519 YOUR_PUBLIC_KEY'