From c6b5702bb5bc72bee232135a622096b51bfb9c64 Mon Sep 17 00:00:00 2001 From: Nullum <87717780+Nullum-Idea@users.noreply.github.com> Date: Sat, 1 Aug 2026 16:12:17 +0200 Subject: [PATCH 1/2] Fix security options in transform-runner configuration Updated security options for the transform-runner container. --- res/TRMNL Hackathon/Self host larapaper.md | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/res/TRMNL Hackathon/Self host larapaper.md b/res/TRMNL Hackathon/Self host larapaper.md index 9e4bc17..792437b 100644 --- a/res/TRMNL Hackathon/Self host larapaper.md +++ b/res/TRMNL Hackathon/Self host larapaper.md @@ -28,7 +28,10 @@ services: transform-runner: container_name: transform-runner image: ghcr.io/spark-hpi/larapaper-serverless-runner:latest - security_opt: [seccomp=unconfined] + security_opt: + - seccomp=unconfined + - no-new-privileges=false + - apparmor=unconfined environment: - TRANSFORM_TIMEOUT=30 # maximum time a transform may run - TRANSFORM_MEMORY_LIMIT=134217728 # (128MB) the amount of memory a single transform may use, killed if the limit is exceeded From 286044bcb5157a6e086bbf34e2e09be2e7fd2b1c Mon Sep 17 00:00:00 2001 From: Oskar Manhart <52569953+oskardotglobal@users.noreply.github.com> Date: Sat, 1 Aug 2026 16:15:46 +0200 Subject: [PATCH 2/2] Update Self host larapaper.md --- res/TRMNL Hackathon/Self host larapaper.md | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) diff --git a/res/TRMNL Hackathon/Self host larapaper.md b/res/TRMNL Hackathon/Self host larapaper.md index 792437b..0316b79 100644 --- a/res/TRMNL Hackathon/Self host larapaper.md +++ b/res/TRMNL Hackathon/Self host larapaper.md @@ -30,8 +30,9 @@ services: image: ghcr.io/spark-hpi/larapaper-serverless-runner:latest security_opt: - seccomp=unconfined - - no-new-privileges=false - - apparmor=unconfined + # try adding the following flags if you get errors about permissions when executing transforms + # - no-new-privileges=false + # - apparmor=unconfined environment: - TRANSFORM_TIMEOUT=30 # maximum time a transform may run - TRANSFORM_MEMORY_LIMIT=134217728 # (128MB) the amount of memory a single transform may use, killed if the limit is exceeded