docker-library
/
docs
mirror of https://github.com/docker-library/docs.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Add note that "hello-world" can run as an arbitrary user

This commit is contained in:
Tianon Gravi 2022-09-30 14:55:22 -07:00
parent 6dd87162d9
commit b84ae8ceba
2 changed files with 10 additions and 12 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
hello-world/content.md
View File

@ -27,7 +27,7 @@ For more examples and ideas, visit:
$ docker images %%IMAGE%%
REPOSITORY TAG IMAGE ID SIZE
hello-world latest feb5d9fea6a5 13256
hello-world latest feb5d9fea6a5 13.26kB
```
%%LOGO%%
@ -35,3 +35,5 @@ hello-world latest feb5d9fea6a5 13256
# How is this image created?
This image is a prime example of using the [`scratch`](https://hub.docker.com/_/scratch/) image effectively. See [`hello.c`](%%GITHUB-REPO%%/blob/master/hello.c) in %%GITHUB-REPO%% for the source code of the `hello` binary included in this image.
Because this image consists of nothing but a single static binary which prints some text to standard output, it can trivially be run as any arbitrary user (`docker run --user $RANDOM:$RANDOM %%IMAGE%%`, for example).

16
hello-world/update.sh
View File

@ -15,20 +15,16 @@ echo '$ docker run %%IMAGE%%'
docker run --rm hello-world
echo
echo '$ docker images %%IMAGE%%'
{
id="$(docker image inspect --format '{{ .Id }}' "$image:latest" | sed -r 's/^sha256:([a-f0-9]{12})[a-f0-9]+$/\1/')"
size="$(docker image inspect --format '{{ .VirtualSize }}' "$image:latest")"
echo $'REPOSITORY\tTAG\tIMAGE ID\tSIZE'
echo "$image"$'\tlatest\t'"$id"$'\t'"$size"
} | column -t -s$'\t'
docker image ls --format 'table {{ .Repository }}\t{{ .Tag }}\t{{ .ID }}\t{{ .VirtualSize }}' "$image:latest"
echo '```'
echo
echo '%%LOGO%%'
echo
cat <<'EOF'
%%LOGO%%
# How is this image created?
This image is a prime example of using the [`scratch`](https://hub.docker.com/_/scratch/) image effectively. See [`hello.c`](%%GITHUB-REPO%%/blob/master/hello.c) in %%GITHUB-REPO%% for the source code of the `hello` binary included in this image.
Because this image consists of nothing but a single static binary which prints some text to standard output, it can trivially be run as any arbitrary user (`docker run --user $RANDOM:$RANDOM %%IMAGE%%`, for example).
EOF