Skip to content

Use non-privileged user in Dockerfile #15816

New issue

Have a question about this project? # for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “#”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? # to your account

Closed
Doctor-love opened this issue Jan 5, 2018 · 4 comments
Closed

Use non-privileged user in Dockerfile #15816

Doctor-love opened this issue Jan 5, 2018 · 4 comments

Comments

@Doctor-love
Copy link

Currently, the Dockerfile used to build the official Docker images runs geth as root.
This is not required as far as I can tell from my usage and not a good practice security wise.

I suggest using the Dockerfile directive "USER" or switching to a low privileged user using gosu.

@alexkohler
Copy link

Wouldn't the package management (i.e. apk add) still require root permissions?

@Doctor-love
Copy link
Author

Privileges could be dropped after the package installation and setup has been completed

@fjl fjl closed this as completed in #16052 Apr 5, 2018
@jeanlucmongrain
Copy link

This issue had been """"""""""""""fixed"""""""""""""" in the worst possible way issue should be reopen

@jeanlucmongrain
Copy link

#16052 (comment)

this task should be reopen

# for free to join this conversation on GitHub. Already have an account? # to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

3 participants