The Frigate docker image is generally nasty. It’s huge (5.5 GB), bundles and runs a ton of different things whether you use them or not, uses s6 as init and supervisor which is a piece of crap, and it cannot be secured – it won’t run as a non-privileged user, it won’t drop caps, you can’t make it read-only because some genius configured nginx to put temporary files in with the app files, it conveniently includes apt so the attacker can install anything they might want inside the container, and in fact recommends running in privileged mode(!).
I think it’s the most security-hostile docker image I have ever seen.
Shimitar@downonthestreet.eu
lemmyvore@feddit.nl 10 hours ago
I’ve tried LazyNVR but I couldn’t figure out how to make it work with my cameras. There seem to be no real instructions. I don’t even get how it’s supposed to find the cameras, there’s no place to put an IP.
Have you read the readme? There is literally a text config file to fill with the camera info (url of image).
Feel free to open a ticket on codeberg or DM/PM me for any additional detail.
Indeed documentation could be better…
lemmyvore@feddit.nl 8 hours ago
This camera (Reolink E330) doesn’t have HTTP (80 or 443), just RTSP (554), ONVIF (8000) and the proprietary interface that their own app uses (9000).
That sucks… Maybe a good update to LazyNVR would let grab the RTSP stream…