-
Notifications
You must be signed in to change notification settings - Fork 20.8k
Use non-privileged user in Dockerfile #15816
New issue
Have a question about this project? # for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “#”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? # to your account
Comments
Wouldn't the package management (i.e. |
Privileges could be dropped after the package installation and setup has been completed |
This issue had been """"""""""""""fixed"""""""""""""" in the worst possible way issue should be reopen |
this task should be reopen |
# for free
to join this conversation on GitHub.
Already have an account?
# to comment
Currently, the Dockerfile used to build the official Docker images runs geth as root.
This is not required as far as I can tell from my usage and not a good practice security wise.
I suggest using the Dockerfile directive "USER" or switching to a low privileged user using gosu.
The text was updated successfully, but these errors were encountered: