You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: docs/images/docker-cura.md
+5-4Lines changed: 5 additions & 4 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -63,6 +63,8 @@ By default, this container has no authentication. The optional `CUSTOM_USER` and
63
63
64
64
The web interface includes a terminal with passwordless `sudo` access. Any user with access to the GUI can gain root control within the container, install arbitrary software, and probe your local network.
65
65
66
+
While not generally recommended, certain legacy environments specifically those with older hardware or outdated Linux distributions may require the deactivation of the standard seccomp profile to get containerized desktop software to run. This can be achieved by utilizing the `--security-opt seccomp=unconfined` parameter. It is critical to use this option only when absolutely necessary as it disables a key security layer of Docker, elevating the potential for container escape vulnerabilities.
67
+
66
68
### Options in all Selkies-based GUI containers
67
69
68
70
This container is based on [Docker Baseimage Selkies](https://github.com/linuxserver/docker-baseimage-selkies), which provides the following environment variables and run configurations to customize its functionality.
@@ -207,8 +209,6 @@ services:
207
209
cura:
208
210
image: lscr.io/linuxserver/cura:latest
209
211
container_name: cura
210
-
security_opt:
211
-
- seccomp:unconfined #optional
212
212
environment:
213
213
- PUID=1000
214
214
- PGID=1000
@@ -218,6 +218,7 @@ services:
218
218
ports:
219
219
- 3000:3000
220
220
- 3001:3001
221
+
shm_size: "1gb"
221
222
restart: unless-stopped
222
223
```
223
224
@@ -226,13 +227,13 @@ services:
226
227
```bash
227
228
docker run -d \
228
229
--name=cura \
229
-
--security-opt seccomp=unconfined `#optional` \
230
230
-e PUID=1000 \
231
231
-e PGID=1000 \
232
232
-e TZ=Etc/UTC \
233
233
-p 3000:3000 \
234
234
-p 3001:3001 \
235
235
-v /path/to/config:/config \
236
+
--shm-size="1gb" \
236
237
--restart unless-stopped \
237
238
lscr.io/linuxserver/cura:latest
238
239
```
@@ -266,7 +267,7 @@ Containers are configured using parameters passed at runtime (such as those abov
266
267
267
268
| Parameter | Function |
268
269
| :-----: | --- |
269
-
|`--security-opt seccomp=unconfined`|For Docker Engine only, many modern gui apps need this to function on older hosts as syscalls are unknown to Docker. |
270
+
|`--shm-size=`|Recommended for all desktop images. |
270
271
271
272
## Environment variables from files (Docker secrets)
0 commit comments