You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Need a way to signal the service that a backup is requested.
Need the service to act on that signal.
The work for #93 would provide the means to do the signaling.
There would be some thinking required related to security here, as there are some denial-of-service attacks that would be possible if this was available over the HTTP endpoint. Perhaps triggering this should require a token that is only stored inside the container and not accessible via the usual volume mount points. So while someone could do something like docker exec -it minecraft_backup /start-backup.sh, where the script can read the token and provide it to the service, an attacker would already need access to the container filesystem in which case they could attack the backup folder directly anyways.
The text was updated successfully, but these errors were encountered:
#97 brought up the issue of On Demand backups.
Some requirements to bring this about:
The work for #93 would provide the means to do the signaling.
There would be some thinking required related to security here, as there are some denial-of-service attacks that would be possible if this was available over the HTTP endpoint. Perhaps triggering this should require a token that is only stored inside the container and not accessible via the usual volume mount points. So while someone could do something like
docker exec -it minecraft_backup /start-backup.sh
, where the script can read the token and provide it to the service, an attacker would already need access to the container filesystem in which case they could attack the backup folder directly anyways.The text was updated successfully, but these errors were encountered: