use nobody user for the container, minor readme changes

This commit is contained in:
Marcel Wysocki 2017-12-13 22:00:54 +01:00
parent 8563f15123
commit daf97c5336
2 changed files with 8 additions and 5 deletions

View file

@ -5,12 +5,14 @@ RUN apt update; apt install -y wget; \
echo 'deb http://apt.llvm.org/xenial/ llvm-toolchain-artful-5.0 main' >> /etc/apt/sources.list ; apt update;\ echo 'deb http://apt.llvm.org/xenial/ llvm-toolchain-artful-5.0 main' >> /etc/apt/sources.list ; apt update;\
apt install -y clang-5.0 lldb-5.0 lld-5.0 libc++-dev git cmake python-pip liblz4-dev; apt clean all apt install -y clang-5.0 lldb-5.0 lld-5.0 libc++-dev git cmake python-pip liblz4-dev; apt clean all
RUN mkdir /build; chown nobody:nogroup /build
USER nobody
RUN cd ~; git clone https://github.com/reswitched/unicorn.git;\ RUN cd /build; git clone https://github.com/reswitched/unicorn.git;\
cd unicorn;\ cd unicorn;\
UNICORN_ARCHS="aarch64" ./make.sh;\ UNICORN_ARCHS="aarch64" ./make.sh;\
./make.sh install;\ ./make.sh install;\
cd ~; git clone https://github.com/reswitched/Mephisto.git; \ cd /build; git clone https://github.com/reswitched/Mephisto.git; \
cd Mephisto;\ cd Mephisto;\
pip install -r requirements.txt;\ pip install -r requirements.txt;\
make make
@ -18,5 +20,5 @@ RUN cd ~; git clone https://github.com/reswitched/unicorn.git;\
EXPOSE 24689 EXPOSE 24689
ENTRYPOINT ["/root/Mephisto/ctu"] ENTRYPOINT ["/build/Mephisto/ctu"]
CMD ["${*}"] CMD ["${*}"]

View file

@ -78,14 +78,15 @@ docker build -t reswitched/mephisto .
To run Mephisto it needs access to your NSO/NRO files, make sure to bind mount the location into the container. To run Mephisto it needs access to your NSO/NRO files, make sure to bind mount the location into the container.
__Example:__
```bash ```bash
docker run -ti --rm -p 24689:24689 -v /home/$USER:/home/$USER reswitched/mephisto --load-nro /$HOME/Coding/libtransistor/build/test/test_helloworld.nro docker run -ti --rm -p 24689:24689 -v $HOME:$HOME reswitched/mephisto --load-nro $HOME/Coding/libtransistor/build/test/test_helloworld.nro
``` ```
You can also create a bash alias. You can also create a bash alias.
``` ```
alias ctu='docker run -ti --rm -p 24689:24689 -v /home/$USER:/home/$USER reswitched/mephisto' alias ctu='docker run -ti --rm -p 24689:24689 -v $HOME:$HOME reswitched/mephisto'
``` ```
Now you can simply run `ctu` with your desired arguments. Now you can simply run `ctu` with your desired arguments.