gitlab ci (self hosted), docker, access to other containers

Even if i’m not allowed to access a specific repo (or if i have low perms (cant see ci/cd vars)) i still can create one and do something like:

variables:   USER: gitlab build:   stage: build   image: docker:latest   script:     - docker ps -a     - docker images 

Then when i have what i need, i can:

variables:   USER: gitlab build:   stage: build   image: docker:latest     - docker exec <container> /bin/cat /var/www/html/config.php     - docker exec <container> /usr/bin/env 

How to avoid this kind of stuff?

PS: This is on a self hosted gitlab server.

PS2: Originaly post on stackoverflow, but im asking here since i didnt have any answer.

Self signed SSL certificate usage [duplicate]

My scenario is about a closed system utilising a db driven website. It’s not supposed to be open to the public and the URL is hidden.

Currently I use Commodo certs to do the SSL, but I’m wondering since it a closed system whether it makes sense to use a self signed one. Is there any danger to this? I control all the end users computers so could easily install the cert in their browsers.

This is very different from the question marked as a dupe, it’s not a LAN environment.

Is the “Way of the Astral Self” Monk’s extra punch useless?

Martial arts for monks states that when you take the attack action you can make 1 unarmed strike as a bonus action. However Astral monks at third level says the same thing: “you can make 1 unarmed strike as a bonus action.”

I know at higher levels that increases but I’m asking about only level 3. Because you only get 1 bonus action does that make that extra attack feature from one or the other useless?

Also, flurry of blows makes 2 strikes as a bonus action so if you use that are both these abilities rendered pointless. Finally, at level 11 of astral monk you can make 2 strikes as a bonus action. Would this make flurry of blows a pointless ability? Have I understood this correctly or would all these abilities stack on top of each other?

C++ STL: How does the distance() method work for a set/ multiset (stored internally as a self balancing tree)?

I’m working on the problem: Count smaller elements on right side using Set in C++ STL

The solution is to add each element to the set and then to count the elements on the left, the distance function is called.

This is the algo:

1. Traverse the array element from i=len-1 to 0 and insert every element in a set. 2. Find the first element that is lower than A[i] using lower_bound function. 3. Find the distance between above found element and the beginning of the set using distance function. 4. Store the distance in another array Lets say CountSmaller. 4. Print that array 

I’m having a hard time to visualize or understand how can distance function be used with a set like structure since internally, the set data is stored as a self balanced tree (Red Black Tree). Whats the concept of distance for a self balancing tree and how does calling distance() give us the count of smaller elements on the right side?

How many scrolls do I need to keep the spell Disguise Self all the time?

I plan to create a dragonborn wizard disguising as an elf as the society there is racist towards anyone but elves.


  • The character is level 1.
  • I can’t have any feat.

As far as I know, I have two slots of level 1 spells, and the spell disguise self lasts for 1 hour.

If I wanted to keep my slots for other spells, How many scrolls of Disguise self do I need if I want to keep my elf form for 30 days?

Is there an item in DND 5e that will cast Alter Self?

The 5th level party I DM for just found a Hat of Disguise. Our Rogue (Thief Archetype) is fascinated by the endless possibilities, but slightly put off by the shortcomings of the Disguise Self spell it casts. She has had a conversation with our spellcasters, and her player has asked me whether they could find an item that would cast the more powerful Alter Self spell. I see much potential for entertaining mayhem in this.

Is there an item that casts Alter Self, say, once a day? Even homebrew? (If I can’t find anything official, I’ll homebrew it anyway.)

I have skimmed through the DMG and only found the Wand of Polymorph, which isn’t quite what we had in mind. The Infiltrator’s Key is way overpowered for this.

How to make Google understand that is not self serving reviews?

I run a blog where I write reviews of restaurant and/or pubs, and also user can leave rating (aggregateRating)

For years, my reviewRating was indexed fine.

Some months ago, in serp reviewRating has been replaced in favor of aggregateRating, I think because of this google rule

Ratings must be sourced directly from users. [*]

Now, also aggregateRating was removed, I suppose because of this?

Pages using LocalBusiness or any other type of Organization structured data are ineligible for star review feature if the entity being reviewed controls the reviews about itself. For example, a review about entity A is placed on the website of entity A, either directly in their structured data or >through an embedded third-party widget. [*]

My blog has a lot of reviews of many different places. How can I make google understand that these are not self serving reviews?

This is an example of my page markup:

{  "@context": "",  "@type": "LocalBusiness",  "name": "Resturant Name",  "description": "orem ipsum dolor sit amet, consectetur adipiscing elit. Nunc eu eros sed eros gravida fermentum non sed...",  "image": {    "@type": "ImageObject",    "url": "",    "width": 700,    "height": 525  },  "Review": {    "@type": "Review",    "name": "Resturant Name",    "reviewBody": "Lorem ipsum dolor sit amet, consectetur adipiscing elit. Nunc eu eros sed eros gravida fermentum non sed ante. Maecenas malesuada orci sapien, vitae hendrerit mauris eleifend in. Integer facilisis dignissim scelerisque. Nam quis dictum metus. .",    "author": {      "@type": "Person",      "name": "Jhon Doe"    },    "datePublished": "2013-11-08T14:41:19+01:00",    "dateModified": "2020-06-02T21:24:19+02:00",    "reviewRating": {      "@type": "Rating",      "ratingValue": "4.3",      "bestRating": 5,      "worstRating": 1    }  },  "aggregateRating": {    "@type": "AggregateRating",    "ratingValue": 3.4,    "ratingCount": 32,    "bestRating": 5,    "worstRating": 1  },  "address": "Street Address",  "priceRange": "€€",  "telephone": "12346789" } 

When tested with Structured Data Testing Tool I’ve no error and the previews shows aggregateRating indeed

What if I also add “publisher” property? Would be it helpful?

[*] from google technical guidelines

Can a Human Disguise Self into a Grung?

I want to pretend I’m the grung goddess Nangnang, and I thought of using Disguise Self to make that illusion. My party will support me with Daylight, Minor Illusion, yelling Grung phrases into a horn that amplifies and distorts them, Fog Cloud and a Griffon for a stylish landing, and an invisible Imp touching the Grung King as I pretend to touch him from a distance (to avoid physical inspection).

Disguise Self states that

You make yourself look different until the spell ends. You can seem 1 foot shorter or taller and can appear thin, fat, or in between. You can’t change your body type, so you must adopt a form that has the same basic arrangement of limbs. Otherwise, the extent of the illusion is up to you.

Now, Grungs are fairly different from regular humans, but they are still humanoid, have similar limbs, etc. I would become a very big Grung, but that is to be expected, I’m a damn Goddess! Is this plan feasible?

How does the Hashalaq Quori’s Disguise Self work?

The Hashalaq Quori is an aberration that looks very different from the humanoids that typically get access to disguise self. It is unclear to me what forms are available to them when they use this spell.

The key restriction from the spell is:

You can’t change your body type, so you must adopt a form that has the same basic arrangement of limbs.

But the hashalaqs have no “basic arrangement of limbs”:

In their natural form, hashalaqs are composed of hundreds of translucent tendrils. They can compress and configure these tendrils to form a wide range of simple shapes.

As well, the creatures don’t have the line of text that allows the lamia, for example, to use humanoid forms.

How, then, should ability be interpreted? Can the hashalaq reconfigure its natural form to be humanoid in shape, allowing it to take the form of a humanoid with disguise self? Can it only transform into a different-looking amorphous creature? Or is there a different interpretation that works better here?