deer-flow

mirror of https://github.com/bytedance/deer-flow.git synced 2026-06-14 03:15:58 +00:00

Files

T

Xinmin Zeng 5d61718c80 fix(security): mount host Docker socket only in aio (DooD) sandbox mode (#3517 )

* fix(security): mount host Docker socket only in aio (DooD) sandbox mode

The default Compose stack mounted /var/run/docker.sock read-write into the
root gateway container in every sandbox mode, including the default `local`
mode that never uses it -- an unnecessary host-escape surface (DooD =
root-equivalent host control). deploy.sh already gated the socket *check* on
sandbox_mode != local, but the Compose files mounted it unconditionally.

Move the socket mount to an opt-in docker/docker-compose.dood.yaml overlay
that deploy.sh / docker.sh append only when detect_sandbox_mode() returns
`aio`. Default (local) and provisioner/Kubernetes modes no longer expose the
host daemon. Tighten the socket existence check from != local to == aio.
Document the DooD threat model in SECURITY.md.

Reported by @greatmengqi.

* refactor(docker): address review on socket-hardening PR

- docker.sh: use absolute path for the dood overlay (match deploy.sh, drop cwd dependency)
- deploy.sh: drop now-dead DEER_FLOW_DOCKER_SOCKET exports in down/build paths
- docker-compose.yaml: fix stale header comment to point at the overlay

Addresses codex + reviewer feedback on #3517.

---------

Co-authored-by: Willem Jiang <willem.jiang@gmail.com>

2026-06-14 11:03:50 +08:00

nginx

feat(channels): enhance Discord with mention-only mode, thread routing, and typing indicators (#2842 )

2026-05-15 22:30:05 +08:00

provisioner

docs: document custom AIO sandbox images (#3548 )

2026-06-13 22:50:51 +08:00

dev-entrypoint.sh

fix(dev): create backend/sandbox before uvicorn reload-exclude (#3459 ) (#3460 )

2026-06-09 15:29:40 +08:00

docker-compose-dev.yaml

fix(security): mount host Docker socket only in aio (DooD) sandbox mode (#3517 )