Limit access to a folder

[PhaserEditor2D]

It would be great to have a CLI option to limit the access of code-server to a particular folder, so users cannot read or write outside that folder. Something like:

server-code --data-dir $HOME/public-projects

[sr229]

We don't provide that functionality, but if you're a seasoned Linux veteran or taken Red Hat courses regarding Linux permissions, chmod and chown serves this purpose for you.

[sr229]

As for preventing the user to invoke cd to the folder, that's something we can't do. Perhaps container-based development workspaces might be your thing?

[PhaserEditor2D]

Linux permissions, chmod and chown serves this purpose for you.

Yes, it could work for the Terminal. But what about this dialog?

Is there a way we can limit it to a particular folder?

Perhaps container-based development workspaces might be your thing?

Yes, I guess it is the most secure solution. Thanks for your quick answer.

[sr229]

@PhaserEditor2D there's nothing we can solve about that, that's intended by design.

[PhaserEditor2D]

Thanks anyway!

[joeshub]

came here looking for the same thing. Seems weird to give anyone root level access to a server. Has anyone figured out a solution yet?

[nhooyr]

@joeshub Run code-server as a different user and only allow that user to edit those files. Or chroot code-server into that directory.

[vahid-neuralinc]

I would suggest to:

1. Install NginX
2. Run code-server in docker/kubernetes
3. Portforward from NginX to docker/kube nodeport
4. Mount a host OS folder into that docker container as working folder

Though it is a workaround.

The original ask or suggestion to expose a parameter to set the root of code server is a fair ask though.