Skip to content
This repository has been archived by the owner on Aug 24, 2021. It is now read-only.

Add option to run under specific UID/GID #27

Open
edgard opened this issue Sep 17, 2017 · 3 comments
Open

Add option to run under specific UID/GID #27

edgard opened this issue Sep 17, 2017 · 3 comments

Comments

@edgard
Copy link

edgard commented Sep 17, 2017

Is this possible right now? Can't find. I'm not all too comfortable running it as root. That would be a great addition!

@marcoraddatz
Copy link
Owner

I think that this might relate to issues, where plugin dependencies cannot get installed. Since the scripts only get called on container start, I don't see much potential for container takeovers. Do you have any special concerns or see potential attacks?

@edgard
Copy link
Author

edgard commented Sep 25, 2017

My concerns are not specifically to homebridge per se, but it was proven before that it's possible to get out of the container, so I got used to not run anything that is not needed as root inside Docker.

If you take a look at linuxserver.io containers, you can pass environment variables (UID/GID) to the container and it will do all necessary things as root (like installing scripts) but whenever run the actual program (homebridge in this case), they switch the id/gid to whatever you specified on the variables. This seems like a sensible approach that might be applicable to this case, I guess.

@marcoraddatz
Copy link
Owner

I can understand you concerns, but won't be able to add such feature via env variable any time soon. Feel free to add a PR!

Repository owner deleted a comment from github-actions bot Nov 3, 2020
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Projects
None yet
Development

No branches or pull requests

2 participants