bug: localstack ignores docker volume mount in docker-compose file when running in Github actions about localstack HOT 4 CLOSED

Hi @santoshpavan,
Yes, I meant security hardened. To ls the socket doesn't mean you can communicate with it unfortunately.
I'd recommend to get in touch with your org's SA and/or Security to verify if the user used in the pipeline has permission to communicate with the socket and find a solution with them as they know best what security measures are in place.
Unfortunately I have no option to run the workload on a dedicated runner and I have no control over the versions in public ones.
Please let us know if you have further questions and share your findings if you have the opportunity.

from localstack.

Hi @santoshpavan,
Thanks for reaching out. I've built a minimal sample Lambda application based on your docker-compose file and GHA pipeline sample and I was unable to reproduce your issue on a shared runner with the following docker version:

Client: Docker Engine - Community
 Version:    24.0.7
 Context:    default
 Debug Mode: false
 Plugins:
  buildx: Docker Buildx (Docker Inc.)
    Version:  v0.12.1
    Path:     /usr/libexec/docker/cli-plugins/docker-buildx
  compose: Docker Compose (Docker Inc.)
    Version:  v2.23.3
    Path:     /usr/libexec/docker/cli-plugins/docker-compose

Could you try to rerun your workload on a runner that has these minor versions?
Additionally, could it be that you run your workload on a dedicated/local runner that might have been hardened?

from localstack.

Hi @lakkeger . Apologies for the delay. I am running on my organization's GHA runner. I am not sure with what you mean by "hardened". If it means that it may have some security limitations preventing localstack from finding the docker.sock file, then maybe you're right.

Forgive my ignorance here, but I don't know why localstack would not be able to find docker.sock file if I am able to ls to locate it on the same path that I have added in my docker-compose file.

Also, I tried to rerun with the minor versions that you suggested, but I've not been able to. I tried to manually install those specific plugin versions, manually, but because of my org's security limitations, it's preventing me to replace the existing versions. Would it be possible for you to run using the versions that I shared?

from localstack.

Hello 👋! It looks like this issue hasn’t been active in longer than two weeks. We encourage you to check if this is still an issue in the latest release. In the absence of more information, we will be closing this issue soon. If you find that this is still a problem, please feel free to provide a comment or upvote with a reaction on the initial post to prevent automatic closure. If the issue is already closed, please feel free to open a new one.

from localstack.