Skip to content

[FEAT] Add CONTAINER_ID as filter #49

Closed as not planned
Closed as not planned

Description

@deathlef

Is this a new feature request?

  • I have searched the existing issues

Wanted change

I'd like to introduce the CONTAINER_ID parameter as filter. This parameter needs to enable/disable the /containers/{id}/ endpoint.

Reason for change

This suggestion has been discussed in the past see #12 and #13 in 2024, however the treat landscape keeps changing and as adoption of this solution is picking up its becoming more relevant.

Today this container is being used often with solutions such as Traefik resulting in near public exposure of the socket-proxy. The /containers/{id}/ endpoint allows access to sensitive endpoint such as the ENV variables of a container. Therefore I'd like to ask you to reconsider earlier position as stated in the issues #12 and #13 and add this feature.

Proposed code change

No response

Activity

  1. github-actions commented on Jun 22, 2026

    @github-actions

    Thanks for opening your first issue here! Be sure to follow the relevant issue templates, or risk having this issue marked as invalid.

  2. aptalca commented on Jun 22, 2026

    @aptalca
    Member

    I don't follow the part about Traefik resulting in near public exposure of the socket-proxy. What exactly do you mean? Are you reverse proxying it?

  3. deathlef commented on Jun 23, 2026

    @deathlef
    Author

    Apologies for my poor phrasing. The case I'm trying to make is that generally speaking Traefik is exposed to the internet. This exposure leads to risks, one of these is compromise of Traefik, which has access to the Docker socket with the docker-socket-proxy container.

    In order to mitigate, or at least reduce, the risk we could decrease the access Traefik has to the Docker socket by removing its access to sensitive information. As such I'd suggest (but perhaps you've got a better suggestion to mitigate this) to introduce an additional parameter that enables/disables the /containers/{id}/ API endpoint of Docker.

  4. LinuxServer-CI commented on Aug 1, 2026

    @LinuxServer-CI
    Contributor

    This issue has been automatically marked as stale because it has not had recent activity. This might be due to missing feedback from OP. It will be closed if no further activity occurs. Thank you for your contributions.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Type

    No type

    Projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions