Hi, I'm setting up my own overleaf instance and in the docker-compose.yml I see the privileged directive set to true. It is known to cause security issues so I was wondering what's the reasoning behind that and if I can set it to false without breaking something ?
Thank you
ShellCode33
All 4 comments
Hi! Thanks for getting in touch. I've passed this on to other engineers who will be able to elaborate on why the privileged flag is set. We'll try to get back to you shortly.
ShaneKilkelly
on 23 Apr 2020
Any update on this? I'm looking to host my own instance of Overleaf, but am turned off by the privileged directive. 鈽癸笍
mpfaff
on 13 May 2020
Sorry for the delay! We think this flag is only required when using docker-in-docker to run sandboxed compiles _inside_ the main Overleaf container, which is a method that we don't actually support anymore.
I'd suggest removing the privileged flag and going ahead with setting up Overleaf. We'll most likely remove that flag from the default configuration in an upcoming release.
ShaneKilkelly
on 13 May 2020
I removed that line from the docker-compose file and have been running Overleaf without privileged for several weeks now. There don't seem to be any issues during normal operations. I also would be interested why this flag was deemed necessary, its a big security risk.
@ShaneKilkelly Didn't see your answer before replying, thanks for clarifying!
AgentOak
on 13 May 2020
Related issues
marcAC
路
6Comments
BenediktBertsch
路
8Comments
tacruc
路
3Comments
kromsam
路
10Comments
Zeawiel
路
5Comments
Most helpful comment
I removed that line from the docker-compose file and have been running Overleaf without privileged for several weeks now. There don't seem to be any issues during normal operations. I also would be interested why this flag was deemed necessary, its a big security risk.
@ShaneKilkelly Didn't see your answer before replying, thanks for clarifying!