github-starred/open-webui
2
0
Fork 0
mirror of https://github.com/open-webui/open-webui.git synced 2026-05-06 10:58:17 -05:00
Code Issues 1.3k Packages Projects Releases 126 Wiki Activity

[GH-ISSUE #8137] [privacy/security enhancement]: Maximum isolated cli for Docker #15016

New Issue
Closed
opened 2026-04-19 21:18:24 -05:00 by GiteaMirror · 1 comment
GiteaMirror commented 2026-04-19 21:18:24 -05:00
Owner
Copy Link

Originally created by @gwpl on GitHub (Dec 27, 2024).
Original GitHub issue: https://github.com/open-webui/open-webui/issues/8137

As community had discussion with statements like: "This is fairly concerning. This project has the potential to allow people to actually have privacy while using AI but some of the design choices do not seem to focus on privacy."
or "Don't trust our word for it; We encourage you to examine/audit our code",
considering that auditing whole codebase it not economically feasible for most users,
here https://github.com/open-webui/open-webui/discussions/1966#discussioncomment-11676778
I linked to this proposal:

Could you provide commandline (in some e.g. bash script file or some README), that runs things in docker with maxium isolation! What does it mean?

Topic of isolating programs running in Docker for security purposes, is explored here:

It basically means to set all isolation parameters as strict as possible, and allow only the most necessary minium.

Additionally one could consider additional even more enhanced setup where all traffic goes through firewall/gateway running in another docker container (e.g. both can be in same docker network and docker-compose?), so all external connections to whatever destinations would have to go thought approved whitelist and be audited/logged (?).

Originally created by @gwpl on GitHub (Dec 27, 2024). Original GitHub issue: https://github.com/open-webui/open-webui/issues/8137 As community had discussion with statements like: "This is fairly concerning. This project has the potential to allow people to actually have privacy while using AI but some of the design choices do not seem to focus on privacy." or "Don't trust our word for it; We encourage you to examine/audit our code", considering that auditing whole codebase it not economically feasible for most users, here https://github.com/open-webui/open-webui/discussions/1966#discussioncomment-11676778 I linked to this proposal: Could you provide commandline (in some e.g. bash script file or some README), that runs things in docker with maxium isolation! What does it mean? Topic of isolating programs running in Docker for security purposes, is explored here: * https://github.com/jessfraz/dotfiles/blob/master/.dockerfunc - bash functions wrapping calls * https://github.com/jessfraz/dockerfiles - docker files for above file * https://youtu.be/cYsVvV1aVss - lecture by Jess Fraz about using "Docker as a Desktop" to run everything in Dockers with increased isolation. It basically means to set all isolation parameters as strict as possible, and allow only the most necessary minium. Additionally one could consider additional even more enhanced setup where all traffic goes through firewall/gateway running in another docker container (e.g. both can be in same docker network and docker-compose?), so all external connections to whatever destinations would have to go thought approved whitelist and be audited/logged (?).
GiteaMirror commented 2026-04-19 21:18:26 -05:00
Author
Owner
Copy Link

@gaby commented on GitHub (Dec 27, 2024):

I don't think this is Open-WebUI job to implement. They are already limited given a lot of these tools require root to access the GPU's and resources.

The Docker image allows overriding the UID/GID but it's not tested.

See here: https://github.com/open-webui/open-webui/blob/main/Dockerfile#L19

Regarding firewall, that's the job of the dev/team using Open-WebUI to control access to their instance.

<!-- gh-comment-id:2563700408 --> @gaby commented on GitHub (Dec 27, 2024): I don't think this is Open-WebUI job to implement. They are already limited given a lot of these tools require root to access the GPU's and resources. The Docker image allows overriding the UID/GID but it's not tested. See here: https://github.com/open-webui/open-webui/blob/main/Dockerfile#L19 Regarding firewall, that's the job of the dev/team using Open-WebUI to control access to their instance.
Sign in to join this conversation.
No Branch/Tag Specified
Branches Tags
Labels
Clear labels
bug
confirmed
confirmed issue
core
documentation
enhancement
good first issue
help wanted
non-core
pull-request
Mirrored from GitHub Pull Request
 python
question
testing wanted
No Label
Milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
GiteaMirror ninjasurge
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: github-starred/open-webui#15016
Delete Branch "%!s()"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?