Skip to content

Introduces immutability to IPP-USB OCI image #106

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
wants to merge 9 commits into
base: master
Choose a base branch
from

Conversation

im0vishal
Copy link
Contributor

@im0vishal im0vishal commented Mar 19, 2025

Enhanced Security, Persistence, and Documentation for IPP-USB

This PR improves the security, reliability, and usability of the ipp-usb container by refining access controls, ensuring persistent storage, and updating documentation for clarity.

Key Improvements:

  • Runs as a non-root user (_daemon_) to minimize security risks.
  • Restricts write access to system directories (/usr, /etc) to maintain immutability.
  • Uses separate Docker volumes for configuration and state files to ensure persistence across restarts.
  • Proper USB device access with necessary mounts and permissions for seamless printer discovery.
  • Updated documentation to provide clear guidelines on storage, logging, and secure usage.

These changes enhance security, maintainability, and ensure ipp-usb operates reliably in a containerized environment.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant