Using Docker Runner without --net=host option

[Cloudnaut]

Hi,

I am wondering if it is possible to customize the Docker Runner Run Command. Unfortunately the bamboo agents use the --net=host option which makes it impossible to harden some security features (using namespaces) and makes it difficult to use gVisor.

Happy for any recommendations

[Daniel Santos]

Hi @Cloudnaut

It is not possible to customize it. There is a feature request to allow the custom configuration:

• [BAM-19793] Allow use of arguments for Docker Runner

I advise you to vote on that feature request and set yourself as a watcher to receive updates. At the moment I can't think of any workaround for this.