Upload 12 files

Dockerfile

@@ -19,6 +19,8 @@ RUN useradd -m -s /bin/bash tunneluser
 
 WORKDIR /app
 
+USER root
+
 COPY . /app
 
 RUN chmod +x entrypoint.sh

entrypoint.sh

@@ -16,7 +16,7 @@ fi
 echo "Detected public IP: $PUBLIC_IP"
 
 # Configure SSH server
-sudo cp /app/ssh-config/sshd_config /etc/ssh/sshd_config
+cp /app/ssh-config/sshd_config /etc/ssh/sshd_config
 chmod 600 /etc/ssh/sshd_config
 
 # Generate SSH host keys if they don't exist
@@ -30,7 +30,7 @@ fi
 echo "SSH server started."
 
 # Configure Dante SOCKS5 server
-sudo cp /app/socks5-config/danted.conf /etc/danted.conf
+cp /app/socks5-config/danted.conf /etc/danted.conf
 chmod 644 /etc/danted.conf
 
 # Start Dante SOCKS5 server

huggingface_fixes.md

@@ -71,3 +71,35 @@ When deploying to Hugging Face Spaces:
 
 These fixes should resolve the common issues encountered when running the SSH/SOCKS5 NAT Gateway application in Hugging Face Spaces or similar containerized environments.
 
+
+
+### 3. `sudo: The "no new privileges" flag is set` Error
+
+**Error:**
+```
+sudo: The "no new privileges" flag is set, which prevents sudo from running as root.
+sudo: If sudo is running in a container, you may need to adjust the container configuration to disable the flag.
+```
+
+**Root Cause:** 
+This error occurs in containerized environments like Hugging Face Spaces when the `no_new_privs` security flag is enabled. This flag prevents processes from gaining new privileges, which `sudo` attempts to do.
+
+**Resolution:**
+- Removed `sudo` from `cp` commands in `entrypoint.sh`.
+- Set the `USER` directive in the Dockerfile to `root` before copying files and executing commands that require root privileges. This ensures that the `entrypoint.sh` script and other commands run as the `root` user directly, bypassing the need for `sudo` and avoiding the `no_new_privs` restriction.
+
+**Changes Made:**
+```bash
+# In entrypoint.sh - changed from:
+sudo cp /app/ssh-config/sshd_config /etc/ssh/sshd_config
+sudo cp /app/socks5-config/danted.conf /etc/danted.conf
+
+# To:
+cp /app/ssh-config/sshd_config /etc/ssh/sshd_config
+cp /app/socks5-config/danted.conf /etc/danted.conf
+
+# In Dockerfile - added after WORKDIR /app:
+USER root
+```
+
+