fix Privilege and Configuration issues (#1160)

* fix asoc sast PrivilegeEscalation and Configuration issues

Signed-off-by: Akihiko Kuroda <[email protected]>

.github/workflows/docker-build.yaml

@@ -7,7 +7,7 @@ on:
 jobs:
   tests:
     runs-on: ubuntu-latest
-    timeout-minutes: 30
+    timeout-minutes: 45
     steps:
       - uses: actions/checkout@v3
       - name: Build the containers

Dockerfile-notebook

@@ -15,7 +15,8 @@ USER $NB_UID
 COPY --chown=$NB_UID:$NB_UID ./client ./qs
 
 WORKDIR /qs
-RUN pip install . --no-cache-dir &&\
+RUN pip install --upgrade pip &&\
+    pip install . --no-cache-dir &&\
     pip install --no-cache-dir -r requirements-notebook.txt
 
 WORKDIR /

docker-compose-dev.yaml

@@ -26,9 +26,8 @@ services:
     ]
     ports:
       - 8265:8265
-    privileged: true
     volumes:
-      - /dev/shm:/dev/shm
+      - host-shm:/dev/shm
     networks:
       - safe-tier
   postgres:
@@ -143,7 +142,7 @@ services:
     image: grafana/promtail:2.8.4
     profiles: [ "full" ]
     volumes:
-      - /var/log:/var/log
+      - host-log:/var/log
     command: -config.file=/etc/promtail/config.yml
     networks:
       - safe-tier
@@ -158,3 +157,5 @@ networks:
   safe-tier:
 volumes:
   program-artifacts:
+  host-shm:
+  host-log:

docker-compose.yaml

@@ -20,9 +20,8 @@ services:
     ]
     ports:
       - 8265:8265
-    privileged: true
     volumes:
-      - /dev/shm:/dev/shm
+      - host-shm:/dev/shm
     networks:
       - safe-tier
   postgres:
@@ -131,7 +130,7 @@ services:
     image: grafana/promtail:2.8.4
     profiles: [ "full" ]
     volumes:
-      - /var/log:/var/log
+      - host-log:/var/log
     command: -config.file=/etc/promtail/config.yml
     networks:
       - safe-tier
@@ -146,3 +145,5 @@ networks:
   safe-tier:
 volumes:
   program-artifacts:
+  host-shm:
+  host-log: