arangodb-docker icon indicating copy to clipboard operation
arangodb-docker copied to clipboard

Let service run as application user instead of root user

Open vanthome opened this issue 4 years ago • 2 comments
trafficstars

In the docker world it's best practice to let a containerized service run as non-root. For example Postgres create a postgres user and then in the Dockerfile use USER postgres to let the workload run under that user.. I recommend you also introduce such a user for the official ArangoDB container images.

vanthome avatar Jan 27 '21 08:01 vanthome

Will you solve this or is this to be maintained as is?

vanthome avatar Feb 24 '21 12:02 vanthome

Hi, since this will be a breaking change for existing users we may only do this with an arangodb 4.0 release.

I also remember this being trouble some for mac/windows docker users.

There are two options to have to fix this for you right now:

  • derive the container
  • start the container with --uid ?

dothebart avatar Mar 19 '21 14:03 dothebart