designs
designs copied to clipboard
Proposal on non-root container images
The following will improve security for users:
- Enable all .NET images to be run as a non-root user.
- Exposed ports (via
ASPNETCORE_URLS) are constant across all image types. - Images do not use privileged resources by default.
- It is easy to use any combination of root and non-root images in a deployment.
https://github.com/dotnet/aspnetcore/pull/44194