diff --git a/run_container.sh b/run_container.sh index 8fc342c..933d2ca 100755 --- a/run_container.sh +++ b/run_container.sh @@ -44,7 +44,7 @@ fi # Run the container echo "Starting container..." $CONTAINER_CMD run --name ${CONTAINER_NAME} \ - -p 8000:8000 \ + -p 127.0.0.1:8000:8000 \ -v "$SOURCE_DIR":/home/appuser/app/source${VOLUME_FLAG} \ --read-only \ --security-opt no-new-privileges:true \ @@ -52,6 +52,14 @@ $CONTAINER_CMD run --name ${CONTAINER_NAME} \ --user 1000:1000 \ -d ${CONTAINER_NAME}:latest + +echo $(podman inspect ${CONTAINER_NAME} --format '{{.State.Pid}}') + +sudo nsenter -t $(podman inspect ${CONTAINER_NAME} --format '{{.State.Pid}}') -n nft add table inet filter +sudo nsenter -t $(podman inspect ${CONTAINER_NAME} --format '{{.State.Pid}}') -n nft add chain inet filter output { type filter hook output priority 0 \; policy drop \; } +sudo nsenter -t $(podman inspect ${CONTAINER_NAME} --format '{{.State.Pid}}') -n \ + nft add rule inet filter output oif lo accept + # Check if container started successfully if [ $? -eq 0 ]; then echo "Container started successfully!"