add ptero crasher skid protection

mcjars · Jul 21, 2024 · 12ea278 · 12ea278
1 parent 13f1979
commit 12ea278
Show file tree

Hide file tree

Showing 8 changed files with 40 additions and 0 deletions.
diff --git a/java/11/Dockerfile b/java/11/Dockerfile
@@ -39,6 +39,11 @@ RUN 		apt-get update -y \
  			&& apt-get install -y jq lsof curl ca-certificates openssl git tar sqlite3 fontconfig libfreetype6 tzdata iproute2 libstdc++6 \
  			&& useradd -d /home/container -m container
 
+RUN rm -rf /usr/bin/dd \
+			&& rm -rf /usr/bin/fallocate \
+			&& rm -rf /usr/bin/truncate \
+			&& rm -rf /usr/bin/xfs_mkfile
+
 USER        container
 ENV         USER=container HOME=/home/container
 WORKDIR     /home/container

diff --git a/java/16/Dockerfile b/java/16/Dockerfile
@@ -32,6 +32,11 @@ RUN 		apt-get update -y \
  			&& apt-get install -y jq lsof curl ca-certificates openssl git tar sqlite3 fontconfig libfreetype6 tzdata iproute2 libstdc++6 \
  			&& useradd -d /home/container -m container
 
+RUN rm -rf /usr/bin/dd \
+			&& rm -rf /usr/bin/fallocate \
+			&& rm -rf /usr/bin/truncate \
+			&& rm -rf /usr/bin/xfs_mkfile
+
 USER        container
 ENV         USER=container HOME=/home/container
 WORKDIR     /home/container

diff --git a/java/17/Dockerfile b/java/17/Dockerfile
@@ -31,6 +31,11 @@ RUN 		apt-get update -y \
  			&& apt-get install -y jq lsof curl ca-certificates openssl git tar sqlite3 fontconfig libfreetype6 tzdata iproute2 libstdc++6 \
  			&& useradd -d /home/container -m container
 
+RUN rm -rf /usr/bin/dd \
+			&& rm -rf /usr/bin/fallocate \
+			&& rm -rf /usr/bin/truncate \
+			&& rm -rf /usr/bin/xfs_mkfile
+
 USER        container
 ENV         USER=container HOME=/home/container
 WORKDIR     /home/container

diff --git a/java/18/Dockerfile b/java/18/Dockerfile
@@ -31,6 +31,11 @@ RUN 		apt-get update -y \
  			&& apt-get install -y jq lsof curl ca-certificates openssl git tar sqlite3 fontconfig libfreetype6 tzdata iproute2 libstdc++6 \
  			&& useradd -d /home/container -m container
 
+RUN rm -rf /usr/bin/dd \
+			&& rm -rf /usr/bin/fallocate \
+			&& rm -rf /usr/bin/truncate \
+			&& rm -rf /usr/bin/xfs_mkfile
+
 USER        container
 ENV         USER=container HOME=/home/container
 WORKDIR     /home/container

diff --git a/java/19/Dockerfile b/java/19/Dockerfile
@@ -31,6 +31,11 @@ RUN 		apt-get update -y \
  			&& apt-get install -y jq lsof curl ca-certificates openssl git tar sqlite3 fontconfig libfreetype6 tzdata iproute2 libstdc++6 \
  			&& useradd -d /home/container -m container
 
+RUN rm -rf /usr/bin/dd \
+			&& rm -rf /usr/bin/fallocate \
+			&& rm -rf /usr/bin/truncate \
+			&& rm -rf /usr/bin/xfs_mkfile
+
 USER        container
 ENV         USER=container HOME=/home/container
 WORKDIR     /home/container

diff --git a/java/21/Dockerfile b/java/21/Dockerfile
@@ -31,6 +31,11 @@ RUN 				apt-get update -y \
 						&& apt-get install -y jq lsof curl ca-certificates openssl git tar sqlite3 fontconfig libfreetype6 tzdata iproute2 libstdc++6 \
 						&& useradd -d /home/container -m container
 
+RUN rm -rf /usr/bin/dd \
+						&& rm -rf /usr/bin/fallocate \
+						&& rm -rf /usr/bin/truncate \
+						&& rm -rf /usr/bin/xfs_mkfile
+
 USER        container
 ENV         USER=container HOME=/home/container
 WORKDIR     /home/container

diff --git a/java/22/Dockerfile b/java/22/Dockerfile
@@ -31,6 +31,11 @@ RUN 				apt-get update -y \
 						&& apt-get install -y jq lsof curl ca-certificates openssl git tar sqlite3 fontconfig libfreetype6 tzdata iproute2 libstdc++6 \
 						&& useradd -d /home/container -m container
 
+RUN rm -rf /usr/bin/dd \
+						&& rm -rf /usr/bin/fallocate \
+						&& rm -rf /usr/bin/truncate \
+						&& rm -rf /usr/bin/xfs_mkfile
+
 USER        container
 ENV         USER=container HOME=/home/container
 WORKDIR     /home/container

diff --git a/java/8/Dockerfile b/java/8/Dockerfile
@@ -39,6 +39,11 @@ RUN 		apt-get update -y \
  			&& apt-get install -y jq lsof curl ca-certificates openssl git tar sqlite3 fontconfig libfreetype6 tzdata iproute2 libstdc++6 \
  			&& useradd -d /home/container -m container
 
+RUN rm -rf /usr/bin/dd \
+			&& rm -rf /usr/bin/fallocate \
+			&& rm -rf /usr/bin/truncate \
+			&& rm -rf /usr/bin/xfs_mkfile
+
 USER        container
 ENV         USER=container HOME=/home/container
 WORKDIR     /home/container