From 8825ca2e66c0eb7e321c6e7e94864bb72282e19f Mon Sep 17 00:00:00 2001 From: Ian Campbell Date: Fri, 13 Oct 2017 10:41:17 +0100 Subject: [PATCH] Disable network in `dockerRun` AFAICT none of the callers (which all involve one of `linuxkit/mkimage-*`) have any reason to hit the network. Signed-off-by: Ian Campbell --- src/moby/docker.go | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/moby/docker.go b/src/moby/docker.go index e00be6f62..b51ad45a3 100644 --- a/src/moby/docker.go +++ b/src/moby/docker.go @@ -28,7 +28,7 @@ func dockerRun(input io.Reader, output io.Writer, args ...string) error { if err != nil { return errors.New("Docker does not seem to be installed") } - args = append([]string{"run", "--rm", "-i"}, args...) + args = append([]string{"run", "--network=none", "--rm", "-i"}, args...) cmd := exec.Command(docker, args...) cmd.Stdin = input cmd.Stdout = output