fix(ml): disable core dumps (#5770)

* update dockerfile * remove sysctl line
2023-12-16 21:30:29 +07:00 · 2023-12-16 21:30:29 +07:00 · 09402eb6d0
parent d9b5adf0f7
commit 09402eb6d0
1 changed files with 5 additions and 0 deletions
--- a/machine-learning/Dockerfile
+++ b/machine-learning/Dockerfile
@ -25,6 +25,11 @@ ENV NODE_ENV=production \
  PATH="/opt/venv/bin:$PATH" \
  PYTHONPATH=/usr/src

+# prevent core dumps
+RUN echo "hard core 0" >> /etc/security/limits.conf && \
+    echo "fs.suid_dumpable 0" >> /etc/sysctl.conf && \
+    echo 'ulimit -S -c 0 > /dev/null 2>&1' >> /etc/profile
+
 COPY --from=builder /opt/venv /opt/venv
 COPY start.sh log_conf.json ./
 COPY app .