mirrors/overleaf-toolkit
1
0
Fork 0
mirror of https://github.com/overleaf/toolkit.git synced 2025-04-19 07:18:06 +02:00
Code Activity

Loud warning for SIBLING_CONTAINERS_ENABLED=false

Browse source
This commit is contained in:
Jakob Ackermann 2024-08-28 13:17:45 +01:00
parent b7af392f9a
commit 293c8366ba
No known key found for this signature in database
GPG key ID: 30C56800FCA3828A
4 changed files with 30 additions and 5 deletions
Download patch file Download diff file Expand all files Collapse all files

8
doc/sandboxed-compiles.md
View file

@ -1,6 +1,12 @@
# Sandboxed Compiles
In Server Pro, it is possible to have each LaTeX project be compiled in a separate docker container, achieving sandbox isolation between projects.
In Server Pro, it is possible to have each LaTeX project be compiled in a separate docker container, achieving sandbox isolation between projects.
This feature is also known as "Sibling containers" as LaTeX compiles are running in a sibling container next to the Server Pro docker container.
When not using Sandboxed Compiles, users have full read and write access to the `sharelatex` container resources (filesystem, network, environment variables) when running LaTeX compiles.
Note: Sibling containers are not available in Community Edition, which is intended for use in environments where all users are trusted. Community Edition is not appropriate for scenarios where isolation of users is required.
## How It Works