Run as non-root user about chia-docker HOT 4 CLOSED

not worth the effort. The user space inside the container doesn't really matter that much IMO.

from chia-docker.

I respectfully disagree, there is no good reason to run as root in this container.

Worse, it makes it easy for an attacker if they manage to break into the container to do whatever they want in there, but potentially also to break things for the host system.

See https://engineering.bitnami.com/articles/why-non-root-containers-are-important-for-security.html or many other blogs.

from chia-docker.

Went to the trouble of setting up users to run this container as only to discover there was no easy way to do it. Took a look at the user mapping mentioned above but it all seemed a bit much for someone who has a fairly rudimentary knowledge of docker...

from chia-docker.

@justinengland What about the poor machine that is hosting the container?

from chia-docker.