How can i secure docker container frappe

Frappe Framework
1

I created a docker image for others to download and run containers. However, when they use docker exec, they can access and use the bench command and can change my administrator password. How do I protect it? Thanks everyone

2

That’s kinda expected, isn’t it? If you need full control, you’ll have to run the software yourself.

3

@rmeyer with dockerfile, can i deny user type “bench …”. it is possible ?

4

Do not share docker permissions with user.
If user is able to access root shell on vm then you can’t do anything and user can even change the root password of VM.

If user is non root user with no control over vm, do not add that user to docker group.

5

@revant_one, i see, but since it’s a customer’s vm, so I have to give the root account