Make scripts invisible to session users

Author: liqiang-fit2cloud

Dockerfile

@@ -29,17 +29,17 @@ RUN apt-get update && \
     chmod +x /usr/bin/gotty && \
     DEBIAN_FRONTEND=noninteractive apt-get autoremove -y && \
     DEBIAN_FRONTEND=noninteractive apt-get clean && rm -rf /var/lib/apt/lists/* /tmp/* /var/tmp/* && \
-    chmod 755 /tmp
+    chmod 755 /tmp && mkdir -p /opt/webkubectl
+
+COPY start-webkubectl.sh /opt/webkubectl
+COPY start-session.sh /opt/webkubectl
+COPY init-kubectl.sh /opt/webkubectl
+RUN chmod -R 700 /opt/webkubectl
+
 
 ENV SESSION_STORAGE_SIZE=10M
 ENV WELCOME_BANNER="Welcome to Web Kubectl, try kubectl --help."
 ENV KUBECTL_INSECURE_SKIP_TLS_VERIFY=true
 ENV GOTTY_OPTIONS="--port 8080 --permit-write --permit-arguments"
 
-COPY start-webkubectl.sh /
-RUN chmod +x /start-webkubectl.sh
-COPY start-session.sh /
-RUN chmod +x /start-session.sh
-COPY init-kubectl.sh /
-RUN chmod +x /init-kubectl.sh
-CMD ["sh","/start-webkubectl.sh"]
+CMD ["sh","/opt/webkubectl/start-webkubectl.sh"]

README.md

@@ -3,8 +3,7 @@
 ![License](https://img.shields.io/badge/License-Apache%202.0-red)
 ![Dockerized](https://img.shields.io/badge/Dockerized-yes-brightgreen)
 ![Version](https://img.shields.io/badge/Version-v1.3-yellow)
-![Total visitor](https://visitor-count-badge.herokuapp.com/total.svg?repo_id=webkubectl-webkubectl)
-![Visitors in today](https://visitor-count-badge.herokuapp.com/today.svg?repo_id=webkubectl-webkubectl)
+![HitCount](http://hits.dwyl.io/webkubectl/webkubectl.svg)
 
 ![webkubectl](https://raw.githubusercontent.com/webkubectl/web-resources/master/webkubectl.gif)
 

start-session.sh

@@ -16,4 +16,4 @@ if [[ $all == ERROR:* ]]; then
     exit 1
 fi
 
-unshare --fork --pid --mount-proc --mount /init-kubectl.sh ${all}
+unshare --fork --pid --mount-proc --mount /opt/webkubectl/init-kubectl.sh ${all}

start-webkubectl.sh

@@ -12,4 +12,4 @@ if [ ${KUBECTL_INSECURE_SKIP_TLS_VERIFY} == "true" ];then
 fi
 
 
-gotty ${GOTTY_OPTIONS} /start-session.sh
+gotty ${GOTTY_OPTIONS} /opt/webkubectl/start-session.sh