Docker-Socket-Proxy

Docker-Socket-Proxy

Docker 应用程序 from grtgbln's Repository

概述

The Socket Proxy is a security-enhanced proxy which allows you to apply access rules to the Docker socket, limiting the attack surface for containers such as watchtower or Traefik that need to use it.

运行时参数

网络
bridge
特权
true
额外参数
--read-only --tmpfs /run

模板配置

Allow POSTVariable

When set to 0, only GET and HEAD operations are allowed, making API access read-only.

目标
POST
默认值
0|1
Allow Container StartsVariable

Allow starting containers.

目标
ALLOW_START
默认值
0|1
Allow Container StopsVariable

Allow stopping containers.

目标
ALLOW_STOP
默认值
0|1
Allow Container RestartsVariable

Allow restarting containers.

目标
ALLOW_RESTARTS
默认值
0|1
Allow Auth EndpointVariable

Allow access to the auth endpoint.

目标
AUTH
默认值
0|1
Allow Build EndpointVariable

Allow access to the build endpoint.

目标
BUILD
默认值
0|1
Allow Commit EndpointVariable

Allow access to the commit endpoint.

目标
COMMIT
默认值
0|1
Allow Configs EndpointVariable

Allow access to the configs endpoint.

目标
CONFIGS
默认值
0|1
Allow Containers EndpointVariable

Allow access to the containers endpoint.

目标
CONTAINERS
默认值
0|1
Allow Distribution EndpointVariable

Allow access to the distribution endpoint.

目标
DISTRIBUTION
默认值
0|1
Disable IPv6Variable

Set to 1 to prevent binding to the IPv6 interface for legacy systems that cannot support IPv6.

目标
DISABLE_IPV6
默认值
0|1
Allow Events EndpointVariable

Allow access to the events endpoint.

目标
EVENTS
默认值
1|0
Allow Exec EndpointVariable

Allow access to the exec endpoint.

目标
EXEC
默认值
0|1
Allow Images EndpointVariable

Allow access to the images endpoint.

目标
IMAGES
默认值
0|1
Allow Info EndpointVariable

Allow access to the info endpoint.

目标
INFO
默认值
0|1
Allow Networks EndpointVariable

Allow access to the networks endpoint.

目标
NETWORKS
默认值
0|1
Allow Nodes EndpointVariable

Allow access to the nodes endpoint.

目标
NODES
默认值
0|1
Allow Ping EndpointVariable

Allow access to the ping endpoint.

目标
PING
默认值
1|0
Allow Plugins EndpointVariable

Allow access to the plugins endpoint.

目标
PLUGINS
默认值
0|1
Allow Secrets EndpointVariable

Allow access to the secrets endpoint.

目标
SECRETS
默认值
0|1
Allow Services EndpointVariable

Allow access to the services endpoint.

目标
SERVICES
默认值
0|1
Allow Session EndpointVariable

Allow access to the session endpoint.

目标
SESSION
默认值
0|1
Allow Swarm EndpointVariable

Allow access to the swarm endpoint.

目标
SWARM
默认值
0|1
Allow System EndpointVariable

Allow access to the system endpoint.

目标
SYSTEM
默认值
0|1
Allow Tasks EndpointVariable

Allow access to the tasks endpoint.

目标
TASKS
默认值
0|1
Allow Version EndpointVariable

Allow access to the version endpoint.

目标
VERSION
默认值
1|0
Allow Volumes EndpointVariable

Allow access to the volumes endpoint.

目标
VOLUMES
默认值
0|1
Docker socketPathrw

Path to the Docker socket

目标
/var/run/docker.sock
默认值
/var/run/docker.sock
价值
/var/run/docker.sock
Log LevelVariable

Set the log level for the proxy.

目标
LOG_LEVEL
默认值
info|debug|notice|warning|err|crit|alert|emerg

下载统计数据

575,530
下载总数
61,635
本月
55,937
平均每月

长期下载总量

加载图表...

详细信息

存储库
lscr.io/linuxserver/socket-proxy:latest
最后更新2026-05-01
初见2025-06-07

在Unraid 上运行 Docker-Socket-Proxy 。

Docker-Socket-Proxy 已被列入Unraid OS 的社区应用程序。探索Unraid ,构建灵活的家庭服务器、NAS 或家庭实验室。