[JIRA] (JENKINS-61908) Do not mount Jenkins container volumes on Job containers

[he...@tomlankhorst.nl (JIRA)]

Title: Message Title

Tom Lankhorst created an issue   Jenkins / JENKINS-61908 Do not mount Jenkins container volumes on Job containers Issue Type: Bug Assignee: Unassigned Components: docker-workflow-plugin Created: 2020-04-15 06:40 Environment: Ubuntu 18.04 Jenkins 2.150 docker-workflow 1.21 Priority: Major Reporter: Tom Lankhorst The plugin checks for `containerId.isPresent()`, then tries to mount all volumes mounted on the Jenkins container on the new Job container. This is exactly what I want to prevent since it poses a huge attack surface for untrusted code. https://github.com/jenkinsci/docker-workflow-plugin/blob/1089131014350e11adfa364d34e7717954350261/src/main/java/org/jenkinsci/plugins/docker/workflow/WithContainerStep.java#L168 Suggestion: make this behaviour configurable. Add Comment   This message was sent by Atlassian Jira (v7.13.12#713012-sha1:6e07c38) -- You received this message because you are subscribed to the Google Groups "Jenkins Issues" group. To unsubscribe from this group and stop receiving emails from it, send an email to jenkinsci-issues+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/jenkinsci-issues/JIRA.205780.1586932834000.11356.1586932860111%40Atlassian.JIRA.