Joshua Powers

I'm going to close this, but let us know if there are any outstanding questions.

> ls -ln /var/run/docker.sock | awk '{print $4}' > 1 That's an odd group ID for the docker socket. Are you certain it is 1? Can you show `stat /var/run/docker.sock`?...

Hi, If you are asking about the containers hosted on [bitnami](https://bitnami.com/stack/telegraf/containers), those are not produced or controlled by us. We push directly to DockerHub. On DockerHub, it looks like both...

> Unfortunately, if you are root, that id will get the groups associated with root, not telegraf. I think it needs to be changed to: hmm doing so would break...

Hi. > It found CVE-2018-12976 As a best practice, it is preferred to disclose CVEs to a security team versus a public issue. You can check out our disclosure steps...

The CVE in question references [github.com/golang/gddo](https://github.com/golang/gddo). This package is imported in InfluxDB in the [go.mod](https://github.com/influxdata/influxdb/blob/master/go.mod#L24) and used by [http/telegraf.go](https://github.com/influxdata/influxdb/blob/master/http/telegraf.go#L10) specifically [github.com/golang/gddo/httputil](https://github.com/golang/gddo/tree/master/httputil) module with one call to `httputil.NegotiateContentType()` As mentioned in...

Hi, Can you provide some more details, like what container image you are using? How you are launching that container? A docker file if applicable? Thanks

> has nothing to do with the compose file but here it is anyways This repo contains docker files for more than one product. Based on your initial post it...

> Can you help me understand? I reviewed and merged a PR to update some docs. Looks like it was tagged to fix this issue and per a previous comment...

If @julesroussel3 has interest in continue working on it sure