Skip to content

Conversation

@cliffhall
Copy link
Member

@cliffhall cliffhall commented Aug 25, 2025

  • In README.md
    • Add the command to start the Inspector UI in a Docker container
  • In Dockerfile
    • use current-alpine3.22 as the base image

Motivation and Context

Instruction on how to launch in container is currently missing from the README. I was holding off to see if the container base image would be fixed, as 24-slim has a high vulnerability CVE which remains unfixed which allows running commands on the host as root. I chose the alpine image because all the slim variants have medium and low vulnerabilities. This image was the lowest vulnerability level running Node 24.

Screenshot 2025-08-25 at 11 34 06 AM Screenshot 2025-08-25 at 11 36 53 AM

How Has This Been Tested?

This is testing the command added to the README with the current version in ghcr.io. We'll have to test the build with alpine after merge.
Screenshot 2025-08-25 at 10 18 14 AM

Screenshot 2025-08-25 at 10 18 31 AM

Breaking Changes

Nope.

Types of changes

  • Bug fix (non-breaking change which fixes an issue)
  • New feature (non-breaking change which adds functionality)
  • Breaking change (fix or feature that would cause existing functionality to change)
  • Documentation update

Checklist

  • I have read the MCP Documentation
  • My code follows the repository's style guidelines
  • New and existing tests pass locally
  • I have added appropriate error handling
  • I have added or updated documentation as needed

Additional context

@cliffhall cliffhall requested a review from olaservo August 25, 2025 14:19
@cliffhall cliffhall marked this pull request as draft August 25, 2025 15:28
- use current-alpine3.22 AS builder
- The node:24-slim has a high vulnerability CVE as yet unfixed which allows running commands on the host as root
- use current-alpine3.22 AS builder
- The node:24-slim has a high vulnerability CVE as yet unfixed which allows running commands on the host as root
@cliffhall cliffhall marked this pull request as ready for review August 25, 2025 15:47
@olaservo olaservo merged commit 616d9fa into modelcontextprotocol:main Aug 26, 2025
5 checks passed
@cliffhall cliffhall deleted the docker-readme branch August 26, 2025 15:38
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants