-
-
Notifications
You must be signed in to change notification settings - Fork 303
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
Merge branch 'main' into Include-only-needed-sources
- Loading branch information
Showing
9 changed files
with
108 additions
and
11 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,39 @@ | ||
--- | ||
name: Security | ||
on: # yamllint disable-line rule:truthy | ||
pull_request: | ||
workflow_dispatch: | ||
schedule: | ||
- cron: 0 0 * * * | ||
|
||
jobs: | ||
container-scanning: | ||
name: Container - Scan | ||
runs-on: ubuntu-latest | ||
steps: | ||
|
||
- name: Checkout | ||
uses: actions/checkout@v4 | ||
|
||
- name: Set up Docker Buildx | ||
uses: docker/setup-buildx-action@v3 | ||
|
||
- name: Build and export to Docker | ||
uses: docker/build-push-action@v5 | ||
with: | ||
file: ./Dockerfile | ||
load: true | ||
tags: security | ||
|
||
- name: Run Trivy vulnerability scanner | ||
uses: aquasecurity/trivy-action@master | ||
with: | ||
image-ref: 'security' | ||
ignore-unfixed: true | ||
format: 'sarif' | ||
output: 'trivy-results.sarif' | ||
|
||
- name: Upload Trivy scan results to GitHub Security tab | ||
uses: github/codeql-action/upload-sarif@v2 | ||
with: | ||
sarif_file: 'trivy-results.sarif' |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
|
@@ -2,4 +2,5 @@ palworld | |
.idea | ||
!charts/* | ||
values*.yaml | ||
.env | ||
.env | ||
.vscode |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
25 changes: 25 additions & 0 deletions
25
...s/i18n/de/docusaurus-plugin-content-docs/current/guides/pinning-game-version.md
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,25 @@ | ||
--- | ||
sidebar_position: 7 | ||
--- | ||
|
||
# Festlegen einer Spielversion | ||
|
||
:::warning | ||
Das Downgraden auf eine niedrigere Spielversion ist möglich, es ist aber unbekannt, welche Auswirkungen dies auf | ||
vorhandene Spielstände haben wird. | ||
|
||
**Verwendung auf eigene Gefahr!** | ||
::: | ||
|
||
Wenn die Umgebungsvariable **TARGET_MANIFEST_ID** gesetzt ist, wird die Serverversion auf ein bestimmtes Manifest | ||
festgelegt. | ||
Ein Manifest entspricht einem veröffentlichten Zustand des Spiels an einem gewissen Datum. Manifeste können mithilfe | ||
von SteamCMD oder Websites wie [SteamDB](https://steamdb.info/depot/2394012/manifests/) gefunden werden. | ||
|
||
## Spielversion zu Manifest-ID | ||
|
||
| Version | Manifest-ID | | ||
|---------|----------------------| | ||
| 1.3.0 | 1354752814336157338 | | ||
| 1.4.0 | 4190579964382773830 | | ||
| 1.4.1 | 6370735655629434989 | |
24 changes: 24 additions & 0 deletions
24
...s/i18n/de/docusaurus-plugin-content-docs/current/guides/running-without-root.md
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,24 @@ | ||
--- | ||
sidebar_position: 6 | ||
--- | ||
|
||
# Ausführen ohne Root-Rechte | ||
|
||
Dieser Beitrag richtet sich nur an fortgeschrittene Benutzer! | ||
<!-- markdownlint-disable-next-line --> | ||
Sie können diesen Container ausführen und den Standardbenutzer (root) [überschreiben](https://docs.docker.com/engine/reference/run/#user). | ||
|
||
Wenn der Benutzer und die Gruppe angegeben werden, werden `PUID` und `PGID` ignoriert. | ||
|
||
Wie Sie die GID bzw. die UID herausfinden: `id -u` / `id -g` | ||
|
||
Um den Standardbenutzer zu überschreiben muss der Benutzer auf `NUMERISCHE_UID:NUMERISCHE_GID` gesetzt werden. | ||
|
||
Im Folgenden gehen wir davon aus, dass Ihre UID 1000 und Ihre GID 1001 ist: | ||
|
||
* Mit `docker run` fügen Sie `--user 1000:1001 \` über der letzten Zeile des Beispiels hinzu. | ||
* Mit `docker compose` fügen Sie `user: 1000:1001` in die `docker-compose.yml` unter den Ports hinzu. | ||
|
||
Wenn Sie den Container mit einer anderen UID/GID als Ihrer eigenen ausführen möchten, müssen Sie den Besitz des | ||
Verzeichnisses ändern, das eingebunden wird: `chown UID:GID palworld/` oder die Berechtigungen ändern: | ||
`chmod o=rwx palworld/` |