I’ve made a apparmor profiles for the docker container "searxng " it works really great for me i’d like people test it to see if you have some issue with it or not
- To use it go take the file at my repo Cigarettes through the window of a quart, and there’s. (? why my link have this name wtf?)
- Take the profile for “docker” and go to “containers” and take “docker-searxng”
- Place them
sudo mv docker /etc/apparmor.d/ && sudo mv docker-searxng /etc/apparmor.d/ && sudo aa-enforce /etc/apparmor.d/docker && sudo aa-enforce /etc/apparmor.d/docker-searxng - If u have a error protocol complaining run the aa-enforce command again it’s a bug i opened a issue about that in the gitlab of apparmor Apparmor 4.1.0-1 in Qubes OS Profile does not conform to protocol error (#592) · Issues · AppArmor / apparmor · GitLab
- Then go into your dispvm or appvm or whatever and run this command
docker run --security-opt apparmor=docker-searxng -p 80:8080 -d --name apparmor-docker-searxng searxng/searxng
- You can replace the port with the port you would like to use
- As sudo do aa-status you must see something like this
Tell me if it worked for you it was really hard to create this apparmor profiles because the official documentation AppArmor security profiles for Docker | Docker Docs do not explain how to create apparmor profiles for docker containers… i spend like 2 hours to learn how to do that