docker ps shows kurtosis is binding on 0.0.0.0

[dai1975]

Background & motivation

The kurtosis inspect shows bind on 127.0.0.1 but docker ps shows 0.0.0.0
Because 0.0.0.0 has security risk so I want to bind 127.0.0.1, but I cannot find how to do it.

Desired behaviour

If there are way to set bind address, please describe it on document, or if not, please implements that features.

How important is this to you?

Nice to have; this feature would make using Kurtosis more enjoyable.

What area of the product does this pertain to?

CLI: the Command Line Interface

[tedim52]

Happy to accept a contribution for making this configurable! Otherwise you can fork Kurtosis and change that value here:

kurtosis/container-engine-lib/lib/backend_impls/docker/docker_manager/docker_manager.go

Line 1848 in 86b6a58

HostIP: hostIp,

[minhd-vu]

@tedim52

I tried changing this value, but I'm not seeing the changes reflected when running docker ps. Here's what I'm running:

		case automaticPublishing:
			portMap[containerPort] = []nat.PortBinding{
				// Leaving this struct empty will cause Docker to automatically choose an interface IP & port on the host machine
				{
					HostIP:   "127.0.0.1",
					HostPort: "",
				},
			}
		case manualPublishing:
			manualSpec, ok := publishSpec.(*manuallySpecifiedPortPublishSpec)
			if !ok {
				return nil, stacktrace.NewError(
					"The port publish spec had type '%v', but downcasting it failed; this is very strange!",
					publishSpecType,
				)
			}
			hostMachinePortNumStr := fmt.Sprintf("%v", manualSpec.getHostMachinePortNum())
			portMap[containerPort] = []nat.PortBinding{
				{
					HostIP:   "127.0.0.1",
					HostPort: hostMachinePortNumStr,
				},
			}

Here are the commands I'm running:

./scripts/build.sh && \
  ./cli/cli/scripts/launch-cli.sh clean --all && \
  ./cli/cli/scripts/launch-cli.sh run github.com/kurtosis-tech/prometheus-package

After running docker ps, I'm not seeing the bind address changing. Any thoughts?

UUID           Name         Ports                                      Status
c087b007a130   prometheus   http: 9090/tcp -> http://127.0.0.1:58665   RUNNING

555c08c3f111   prom/prometheus:latest          "/bin/prometheus --c…"   18 seconds ago   Up 17 seconds   0.0.0.0:58665->9090/tcp                                                            prometheus--c087b007a13045d9bc07be9c5f228928

[minhd-vu]

Also another note, is that default docker behaviour is also the bind on 0.0.0.0.

# docker run -it --rm --publish-all minhdvu/status-checker /bin/bash
a7449f8dbe2b   minhdvu/status-checker          "/bin/bash"              3 seconds ago   Up 2 seconds   0.0.0.0:55001->9090/tcp                                                            nostalgic_mclaren