-
Notifications
You must be signed in to change notification settings - Fork 20.2k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Use non-privileged user in Dockerfile #15816
Comments
Wouldn't the package management (i.e. |
Privileges could be dropped after the package installation and setup has been completed |
This issue had been """"""""""""""fixed"""""""""""""" in the worst possible way issue should be reopen |
this task should be reopen |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Currently, the Dockerfile used to build the official Docker images runs geth as root.
This is not required as far as I can tell from my usage and not a good practice security wise.
I suggest using the Dockerfile directive "USER" or switching to a low privileged user using gosu.
The text was updated successfully, but these errors were encountered: