Don't run Docker image as root

[alexanderadam]

It would be nice if the Dockerfile would create a non privileged user and switch to it using the Docker USER directive instead of using root.

For example like described here.

You might also take this advice from the official Docker documentation:

If a service can run without privileges, use USER to change to a non-root user.

PS: Thank you for Docker registry manager!

[ticpu]

You can enforce the same thing by using MANAGER_PORT=8080 and adding --cap-drop ALL
That way, you don't depend on the Dockerfile to do the right thing.

[alexanderadam]

Nice, I didn't know about that. A more default image would be better nevertheless. 😉