Skip to content

Commit 6e89f39

Browse files
tianontianon
committed
Merge pull request docker-library#48 from infosiftr/hba
Update pg_hba generation
2 parents baf8069 + 8f80834 commit 6e89f39

File tree

7 files changed

+49
-7
lines changed

7 files changed

+49
-7
lines changed

‎8.4/docker-entrypoint.sh‎

Lines changed: 7 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -19,6 +19,12 @@ if [ "$1" = 'postgres' ]; then
1919
cat >&2 <<-'EOWARN'
2020
****************************************************
2121
WARNING: No password has been set for the database.
22+
This will allow anyone with access to the
23+
Postgres port to access your database. In
24+
Docker's default configuration, this is
25+
effectively any other container on the same
26+
system.
27+
2228
Use "-e POSTGRES_PASSWORD=password" to set
2329
it in "docker run".
2430
****************************************************
@@ -44,7 +50,7 @@ if [ "$1" = 'postgres' ]; then
4450
EOSQL
4551
echo
4652

47-
{ echo; echo "host all \"$POSTGRES_USER\" 0.0.0.0/0 $authMethod"; } >> "$PGDATA"/pg_hba.conf
53+
{ echo; echo "host all all 0.0.0.0/0 $authMethod"; } >> "$PGDATA"/pg_hba.conf
4854

4955
if [ -d /docker-entrypoint-initdb.d ]; then
5056
for f in /docker-entrypoint-initdb.d/*.sh; do

‎9.0/docker-entrypoint.sh‎

Lines changed: 7 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -19,6 +19,12 @@ if [ "$1" = 'postgres' ]; then
1919
cat >&2 <<-'EOWARN'
2020
****************************************************
2121
WARNING: No password has been set for the database.
22+
This will allow anyone with access to the
23+
Postgres port to access your database. In
24+
Docker's default configuration, this is
25+
effectively any other container on the same
26+
system.
27+
2228
Use "-e POSTGRES_PASSWORD=password" to set
2329
it in "docker run".
2430
****************************************************
@@ -44,7 +50,7 @@ if [ "$1" = 'postgres' ]; then
4450
EOSQL
4551
echo
4652

47-
{ echo; echo "host all \"$POSTGRES_USER\" 0.0.0.0/0 $authMethod"; } >> "$PGDATA"/pg_hba.conf
53+
{ echo; echo "host all all 0.0.0.0/0 $authMethod"; } >> "$PGDATA"/pg_hba.conf
4854

4955
if [ -d /docker-entrypoint-initdb.d ]; then
5056
for f in /docker-entrypoint-initdb.d/*.sh; do

‎9.1/docker-entrypoint.sh‎

Lines changed: 7 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -19,6 +19,12 @@ if [ "$1" = 'postgres' ]; then
1919
cat >&2 <<-'EOWARN'
2020
****************************************************
2121
WARNING: No password has been set for the database.
22+
This will allow anyone with access to the
23+
Postgres port to access your database. In
24+
Docker's default configuration, this is
25+
effectively any other container on the same
26+
system.
27+
2228
Use "-e POSTGRES_PASSWORD=password" to set
2329
it in "docker run".
2430
****************************************************
@@ -44,7 +50,7 @@ if [ "$1" = 'postgres' ]; then
4450
EOSQL
4551
echo
4652

47-
{ echo; echo "host all \"$POSTGRES_USER\" 0.0.0.0/0 $authMethod"; } >> "$PGDATA"/pg_hba.conf
53+
{ echo; echo "host all all 0.0.0.0/0 $authMethod"; } >> "$PGDATA"/pg_hba.conf
4854

4955
if [ -d /docker-entrypoint-initdb.d ]; then
5056
for f in /docker-entrypoint-initdb.d/*.sh; do

‎9.2/docker-entrypoint.sh‎

Lines changed: 7 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -19,6 +19,12 @@ if [ "$1" = 'postgres' ]; then
1919
cat >&2 <<-'EOWARN'
2020
****************************************************
2121
WARNING: No password has been set for the database.
22+
This will allow anyone with access to the
23+
Postgres port to access your database. In
24+
Docker's default configuration, this is
25+
effectively any other container on the same
26+
system.
27+
2228
Use "-e POSTGRES_PASSWORD=password" to set
2329
it in "docker run".
2430
****************************************************
@@ -44,7 +50,7 @@ if [ "$1" = 'postgres' ]; then
4450
EOSQL
4551
echo
4652

47-
{ echo; echo "host all \"$POSTGRES_USER\" 0.0.0.0/0 $authMethod"; } >> "$PGDATA"/pg_hba.conf
53+
{ echo; echo "host all all 0.0.0.0/0 $authMethod"; } >> "$PGDATA"/pg_hba.conf
4854

4955
if [ -d /docker-entrypoint-initdb.d ]; then
5056
for f in /docker-entrypoint-initdb.d/*.sh; do

‎9.3/docker-entrypoint.sh‎

Lines changed: 7 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -19,6 +19,12 @@ if [ "$1" = 'postgres' ]; then
1919
cat >&2 <<-'EOWARN'
2020
****************************************************
2121
WARNING: No password has been set for the database.
22+
This will allow anyone with access to the
23+
Postgres port to access your database. In
24+
Docker's default configuration, this is
25+
effectively any other container on the same
26+
system.
27+
2228
Use "-e POSTGRES_PASSWORD=password" to set
2329
it in "docker run".
2430
****************************************************
@@ -44,7 +50,7 @@ if [ "$1" = 'postgres' ]; then
4450
EOSQL
4551
echo
4652

47-
{ echo; echo "host all \"$POSTGRES_USER\" 0.0.0.0/0 $authMethod"; } >> "$PGDATA"/pg_hba.conf
53+
{ echo; echo "host all all 0.0.0.0/0 $authMethod"; } >> "$PGDATA"/pg_hba.conf
4854

4955
if [ -d /docker-entrypoint-initdb.d ]; then
5056
for f in /docker-entrypoint-initdb.d/*.sh; do

‎9.4/docker-entrypoint.sh‎

Lines changed: 7 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -19,6 +19,12 @@ if [ "$1" = 'postgres' ]; then
1919
cat >&2 <<-'EOWARN'
2020
****************************************************
2121
WARNING: No password has been set for the database.
22+
This will allow anyone with access to the
23+
Postgres port to access your database. In
24+
Docker's default configuration, this is
25+
effectively any other container on the same
26+
system.
27+
2228
Use "-e POSTGRES_PASSWORD=password" to set
2329
it in "docker run".
2430
****************************************************
@@ -44,7 +50,7 @@ if [ "$1" = 'postgres' ]; then
4450
EOSQL
4551
echo
4652

47-
{ echo; echo "host all \"$POSTGRES_USER\" 0.0.0.0/0 $authMethod"; } >> "$PGDATA"/pg_hba.conf
53+
{ echo; echo "host all all 0.0.0.0/0 $authMethod"; } >> "$PGDATA"/pg_hba.conf
4854

4955
if [ -d /docker-entrypoint-initdb.d ]; then
5056
for f in /docker-entrypoint-initdb.d/*.sh; do

‎docker-entrypoint.sh‎

Lines changed: 7 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -19,6 +19,12 @@ if [ "$1" = 'postgres' ]; then
1919
cat >&2 <<-'EOWARN'
2020
****************************************************
2121
WARNING: No password has been set for the database.
22+
This will allow anyone with access to the
23+
Postgres port to access your database. In
24+
Docker's default configuration, this is
25+
effectively any other container on the same
26+
system.
27+
2228
Use "-e POSTGRES_PASSWORD=password" to set
2329
it in "docker run".
2430
****************************************************
@@ -44,7 +50,7 @@ if [ "$1" = 'postgres' ]; then
4450
EOSQL
4551
echo
4652

47-
{ echo; echo "host all \"$POSTGRES_USER\" 0.0.0.0/0 $authMethod"; } >> "$PGDATA"/pg_hba.conf
53+
{ echo; echo "host all all 0.0.0.0/0 $authMethod"; } >> "$PGDATA"/pg_hba.conf
4854

4955
if [ -d /docker-entrypoint-initdb.d ]; then
5056
for f in /docker-entrypoint-initdb.d/*.sh; do

0 commit comments

Comments
 (0)