jim3692

Please use $HOME instead of this. There are configurations that do not rely on the usual /home/$USER format. The root user is a good example, having their $HOME set to /root.

/{username}//home/{username}


What is this path supposed to be?

Make homeless colorful again

I just wanted to show how Docker can be abused for privilege escalation, when it’s not properly configured

docker run --rm -it --privileged --pid=host debian:12 nsenter -a -t1 "$(which bash)"


If your user is in the docker group, and you are not running rootless Docker, this command opens a bash shell as root.


How it works:


docker run --rm -it creates a temporary container and attaches it to the running terminal
--privileged disables some of the container’s protections
--pid=host attaches the container to the host’s PID namespace, allowing it to access all running processes
debian:12 uses the Debian 12 image
nsenter -a -t1 enters all the namespaces of the process with PID 1, which is the host’s init since we use --pid=host
"$(which bash)" finds the path of the host’s bash and runs it inside the namespaces (plain bash may not work on NixOS hosts)

I have managed to get to locked out of my own Nextcloud. It was encrypted, and I didn’t know that I had to keep a backup of the keys in its config files. I only had a RAID1 for the user data.

I had to remove my PPE to hear it

Kirk Charlie

No, there is only one definition for open source:


opensource.org/osd