Record · corpus.blog/posts/01a0d112-0532-7176-a7f4-2e7eceb26017

Lessons learned from stracing a password manager in Docker | Blog | Guillaume Endignoux

gendignoux.com · published 28 September 2025

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at gendignoux.com Wayback capture

0blogs citing

First cited: —
Most recent: —
Rank this month: not ranked
Links from this post: 44
Words captured: 6,693

Cited by

No blog we hold has cited this post yet.

Links from this post

Link

Host

https://gendignoux.com/blog/tags.html

gendignoux.com

https://www.docker.com/resources/what-container

docker.com

https://man7.org/linux/man-pages/man1/strace.1.html

man7.org

https://man7.org/linux/man-pages/man2/prctl.2.html

man7.org

Docker Containers on the Desktop Read at the source ↗

blog.jessfraz.com

Tutorial: Profiling Rust applications in Docker with perf | Blog | Guillaume Endignoux Read at the source ↗

gendignoux.com

https://keepassxc.org/

keepassxc.org

https://github.com/keepassxreboot/keepassxc

github.com

https://github.com/jessfraz/dockerfiles/blob/master/keepassxc/Dockerfile

github.com

https://gendignoux.com/assets/docker/strace-docker-password-manager/read-only/Dockerfile

gendignoux.com

https://docs.docker.com/engine/reference/commandline/build/

docs.docker.com

https://man7.org/linux/man-pages/man1/dmesg.1.html

man7.org

https://en.wikipedia.org/wiki/X_Window_System

en.wikipedia.org

https://docs.docker.com/engine/reference/commandline/run/

docs.docker.com

https://en.wikipedia.org/wiki/Unix_domain_socket

en.wikipedia.org

https://en.wikipedia.org/wiki/X_Window_authorization

en.wikipedia.org

https://theinvisiblethings.blogspot.com/2011/04/linux-security-circus-on-gui-isolation.html

theinvisiblethings.blogspot.com

https://linux.die.net/man/7/xsecurity

linux.die.net

https://gitlab.freedesktop.org/xorg/app/xauth/-/blob/aaf037ec5c576e46318935feaf6e2b7407ff11a0/process.c

gitlab.freedesktop.org

https://man7.org/linux/man-pages/man2/umask.2.html

man7.org

https://en.wikipedia.org/wiki/Race_condition

en.wikipedia.org

https://docs.docker.com/storage/tmpfs/

docs.docker.com

https://gendignoux.com/assets/docker/strace-docker-password-manager/strace/Dockerfile

gendignoux.com

https://man7.org/linux/man-pages/man2/ptrace.2.html

man7.org

https://github.com/keepassxreboot/keepassxc/search?q=ptrace

github.com

https://github.com/keepassxreboot/keepassxc/blob/bcb64a231fa6ba45a7f42edd3733f70e9a19cfdc/src/core/Bootstrap.cpp

github.com

https://github.com/keepassxreboot/keepassxc/blob/5c2a1a4284c1bccfcd99a861336559105ed3db7d/src/core/Database.cpp

github.com

https://en.wikipedia.org/wiki/Qt_%28software%29

en.wikipedia.org

https://nullprogram.com/blog/2018/06/23/

nullprogram.com

https://github.com/skeeto/ptrace-examples

github.com

Write yourself an strace in 70 lines of code Read at the source ↗

blog.nelhage.com

http://system.joekain.com/2015/07/15/rust-load-and-ptrace.html

system.joekain.com

https://github.com/gs0510/rustrace

github.com

https://docs.rs/nix/0.18.0/nix/sys/ptrace/index.html

docs.rs

https://crates.io/crates/nix

crates.io

https://man7.org/linux/man-pages/man7/capabilities.7.html

man7.org

https://docs.docker.com/engine/security/seccomp/

docs.docker.com

https://github.com/moby/moby/blob/master/profiles/seccomp/default.json

github.com

https://jvns.ca/blog/2020/04/29/why-strace-doesnt-work-in-docker/

jvns.ca

https://www.kernel.org/doc/html/latest/admin-guide/LSM/Yama.html

kernel.org

https://kernelnewbies.org/Linux_3.4

kernelnewbies.org

https://bugzilla.redhat.com/show_bug.cgi?id=1209492

bugzilla.redhat.com

https://docs-stage.docker.com/engine/security/seccomp/

docs-stage.docker.com

https://twitter.com/GEndignoux/status/1302661495143247872

twitter.com