From 19dd5a26d96f543a6eeca359773cd9897e6dd4f2 Mon Sep 17 00:00:00 2001 From: Stavros Kois <47820033+stavros-k@users.noreply.github.com> Date: Sun, 3 Apr 2022 16:15:13 +0300 Subject: [PATCH] fix(wireshark): rw root fs / hostnet (#2389) * fix(wireshark): rw root fs / netadmin / hostnet * chore(sqlitebrowser): use different port to avoid conflicts * remove net_admin from wireshark, don't set hostnetwork on zerotier on gui * bump common --- charts/stable/heimdall/Chart.yaml | 2 +- charts/stable/sqlitebrowser/Chart.yaml | 2 +- charts/stable/sqlitebrowser/questions.yaml | 2 +- charts/stable/sqlitebrowser/values.yaml | 2 +- charts/stable/wireshark/Chart.yaml | 4 ++-- charts/stable/wireshark/questions.yaml | 6 +++--- charts/stable/wireshark/values.yaml | 5 ++++- 7 files changed, 13 insertions(+), 10 deletions(-) diff --git a/charts/stable/heimdall/Chart.yaml b/charts/stable/heimdall/Chart.yaml index 738204a8df1..5931782d370 100644 --- a/charts/stable/heimdall/Chart.yaml +++ b/charts/stable/heimdall/Chart.yaml @@ -19,7 +19,7 @@ name: heimdall sources: - https://github.com/linuxserver/Heimdall/ type: application -version: 10.0.8 +version: 10.0.9 annotations: truecharts.org/catagories: | - organizers diff --git a/charts/stable/sqlitebrowser/Chart.yaml b/charts/stable/sqlitebrowser/Chart.yaml index 9dfa0949fce..fee1feb76bd 100644 --- a/charts/stable/sqlitebrowser/Chart.yaml +++ b/charts/stable/sqlitebrowser/Chart.yaml @@ -23,7 +23,7 @@ sources: - https://github.com/linuxserver/docker-sqlitebrowser - https://sqlitebrowser.org/ type: application -version: 2.0.8 +version: 2.0.9 annotations: truecharts.org/catagories: | - media diff --git a/charts/stable/sqlitebrowser/questions.yaml b/charts/stable/sqlitebrowser/questions.yaml index 2f3b957e499..a47286a2073 100644 --- a/charts/stable/sqlitebrowser/questions.yaml +++ b/charts/stable/sqlitebrowser/questions.yaml @@ -103,7 +103,7 @@ questions: description: "This port exposes the container port on the service" schema: type: int - default: 3000 + default: 10137 required: true - variable: advanced label: "Show Advanced settings" diff --git a/charts/stable/sqlitebrowser/values.yaml b/charts/stable/sqlitebrowser/values.yaml index f4ab464207b..358df410689 100644 --- a/charts/stable/sqlitebrowser/values.yaml +++ b/charts/stable/sqlitebrowser/values.yaml @@ -15,7 +15,7 @@ service: main: ports: main: - port: 3000 + port: 10137 targetPort: 3000 persistence: diff --git a/charts/stable/wireshark/Chart.yaml b/charts/stable/wireshark/Chart.yaml index b7564ed6cac..8e539895d9e 100644 --- a/charts/stable/wireshark/Chart.yaml +++ b/charts/stable/wireshark/Chart.yaml @@ -1,7 +1,7 @@ apiVersion: v2 kubeVersion: ">=1.16.0-0" name: wireshark -version: 1.0.9 +version: 1.0.10 appVersion: "3.4.13" description: Wireshark is the world’s foremost and widely-used network protocol analyzer. type: application @@ -15,7 +15,7 @@ sources: dependencies: - name: common repository: https://library-charts.truecharts.org - version: 9.2.6 + version: 9.2.7 # condition: maintainers: - email: info@truecharts.org diff --git a/charts/stable/wireshark/questions.yaml b/charts/stable/wireshark/questions.yaml index 6773f1e5a54..b3b13826b38 100644 --- a/charts/stable/wireshark/questions.yaml +++ b/charts/stable/wireshark/questions.yaml @@ -104,7 +104,7 @@ questions: description: "This port exposes the container port on the service" schema: type: int - default: 10137 + default: 3000 required: true - variable: advanced label: "Show Advanced settings" @@ -159,7 +159,7 @@ questions: label: "Host-Networking (Complicated)" schema: type: boolean - default: false + default: true # Include{serviceExpert} @@ -266,7 +266,7 @@ questions: label: "ReadOnly Root Filesystem" schema: type: boolean - default: true + default: false - variable: allowPrivilegeEscalation label: "Allow Privilege Escalation" schema: diff --git a/charts/stable/wireshark/values.yaml b/charts/stable/wireshark/values.yaml index 7be7f08765f..71bc609d252 100644 --- a/charts/stable/wireshark/values.yaml +++ b/charts/stable/wireshark/values.yaml @@ -4,8 +4,11 @@ image: tag: v3.4.13 securityContext: + readOnlyRootFilesystem: false runAsNonRoot: false +hostNetwork: true + podSecurityContext: runAsUser: 0 runAsGroup: 0 @@ -15,7 +18,7 @@ service: ports: main: targetPort: 3000 - port: 10137 + port: 3000 persistence: varrun: