Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

docker container processes running as root #2113

Closed
2 tasks done
nopoz opened this issue Sep 21, 2022 · 2 comments · Fixed by #2086
Closed
2 tasks done

docker container processes running as root #2113

nopoz opened this issue Sep 21, 2022 · 2 comments · Fixed by #2086
Labels
feature-request Request for new features to be added

Comments

@nopoz
Copy link

nopoz commented Sep 21, 2022

⚠️ Please verify that this bug has NOT been raised before.

  • I checked and didn't find similar issue

🛡️ Security Policy

Description

It's considered bad practice to run a container's processes as the root user.

Two possible solutions:

  1. Give the user the ability to set the container process user and group on container creation
  2. Run the process as a non-privileged default user. See linuxserver's implementation where the processes run as user "abc" and the mounted file permissions can be set with environment variables PUID and PGID: https://github.com/linuxserver/docker-plex

Setting the user in a compose file like user: "1068:100" does not work. The container fails to start.

👟 Reproduction steps

n/a

👀 Expected behavior

Don't run process as root

😓 Actual Behavior

Process is running as root

🐻 Uptime-Kuma Version

1.18.0

💻 Operating System and Arch

docker

🌐 Browser

n/a

🐋 Docker Version

20.10.3

🟩 NodeJS Version

n/a

📝 Relevant log output

No response

@nopoz nopoz added the bug Something isn't working label Sep 21, 2022
@louislam louislam added feature-request Request for new features to be added and removed bug Something isn't working labels Sep 21, 2022
@louislam louislam linked a pull request Sep 21, 2022 that will close this issue
8 tasks
@louislam
Copy link
Owner

True rootless image will be support in the future. #2086

@CommanderStorm
Copy link
Collaborator

#2086 was merged and will be available in the upcoming v2.0-release as a seperate option next to root

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
feature-request Request for new features to be added
Projects
None yet
Development

Successfully merging a pull request may close this issue.

3 participants