Skip to content
This repository has been archived by the owner on Jan 17, 2023. It is now read-only.

Run as non-root ? #10

Open
drphlux opened this issue May 13, 2018 · 3 comments
Open

Run as non-root ? #10

drphlux opened this issue May 13, 2018 · 3 comments

Comments

@drphlux
Copy link

drphlux commented May 13, 2018

I love this image, but I would like to ask how I can run
it as non-root?

@alinmear
Copy link
Owner

We are talking about running the supervisord process within the container as unpriviledged user, right?

@drphlux
Copy link
Author

drphlux commented May 25, 2018

We are talking about running the supervisord process within the container as unpriviledged user, right?

Exactly.
My knowledge with supervisord is limited.

@TBK
Copy link
Contributor

TBK commented Dec 27, 2018

Should be possible by adding the "user=xxxx" argument to each program in conanexiles.conf - http://supervisord.org/configuration.html#program-x-section-values (find the user subsection).

Otherwise apps such as gosu & su-exec can be used to step-down to a non-privileged user.

I have not done any testing so far so there are probably some kinks that needs to ironed out.

TBK added a commit to JJTC-Containers/conanexiles that referenced this issue Mar 29, 2019
TBK added a commit to JJTC-Containers/conanexiles that referenced this issue Mar 29, 2019
TBK added a commit to JJTC-Containers/conanexiles that referenced this issue Mar 29, 2019
TBK added a commit to JJTC-Containers/conanexiles that referenced this issue Mar 29, 2019
TBK added a commit to JJTC-Containers/conanexiles that referenced this issue Mar 29, 2019
TBK added a commit to JJTC-Containers/conanexiles that referenced this issue Mar 30, 2019
TBK added a commit to JJTC-Containers/conanexiles that referenced this issue Mar 30, 2019
TBK added a commit to JJTC-Containers/conanexiles that referenced this issue Mar 30, 2019
TBK added a commit to JJTC-Containers/conanexiles that referenced this issue Apr 6, 2019
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

No branches or pull requests

3 participants