use nobody user for the container, minor readme changes

This commit is contained in:
Marcel Wysocki 2017-12-13 22:00:54 +01:00
parent 8563f15123
commit daf97c5336
2 changed files with 8 additions and 5 deletions

View file

@ -5,12 +5,14 @@ RUN apt update; apt install -y wget; \
echo 'deb http://apt.llvm.org/xenial/ llvm-toolchain-artful-5.0 main' >> /etc/apt/sources.list ; apt update;\
apt install -y clang-5.0 lldb-5.0 lld-5.0 libc++-dev git cmake python-pip liblz4-dev; apt clean all
RUN mkdir /build; chown nobody:nogroup /build
USER nobody
RUN cd ~; git clone https://github.com/reswitched/unicorn.git;\
RUN cd /build; git clone https://github.com/reswitched/unicorn.git;\
cd unicorn;\
UNICORN_ARCHS="aarch64" ./make.sh;\
./make.sh install;\
cd ~; git clone https://github.com/reswitched/Mephisto.git; \
cd /build; git clone https://github.com/reswitched/Mephisto.git; \
cd Mephisto;\
pip install -r requirements.txt;\
make
@ -18,5 +20,5 @@ RUN cd ~; git clone https://github.com/reswitched/unicorn.git;\
EXPOSE 24689
ENTRYPOINT ["/root/Mephisto/ctu"]
ENTRYPOINT ["/build/Mephisto/ctu"]
CMD ["${*}"]

View file

@ -78,14 +78,15 @@ docker build -t reswitched/mephisto .
To run Mephisto it needs access to your NSO/NRO files, make sure to bind mount the location into the container.
__Example:__
```bash
docker run -ti --rm -p 24689:24689 -v /home/$USER:/home/$USER reswitched/mephisto --load-nro /$HOME/Coding/libtransistor/build/test/test_helloworld.nro
docker run -ti --rm -p 24689:24689 -v $HOME:$HOME reswitched/mephisto --load-nro $HOME/Coding/libtransistor/build/test/test_helloworld.nro
```
You can also create a bash alias.
```
alias ctu='docker run -ti --rm -p 24689:24689 -v /home/$USER:/home/$USER reswitched/mephisto'
alias ctu='docker run -ti --rm -p 24689:24689 -v $HOME:$HOME reswitched/mephisto'
```
Now you can simply run `ctu` with your desired arguments.