dashy icon indicating copy to clipboard operation
dashy copied to clipboard

[REVERT][REVERRT] Add group and user in dockerfile to run container as unprivileged

Open Lissy93 opened this issue 2 years ago • 5 comments

Medium Lissy93 /revert-501-revert-495-master → Lissy93/dashy Commits: 2 | Files Changed: 4 | Additions: 16 Quality Checklist 🚫 Merge Conflicts

PR to re-apply @Singebob's changes originally released in #495.

There was an issue that caused breaking changes for users, as raised in #498 and #499

Before merging, I need to either fix this, or update the documentation appropriately.

Lissy93 avatar Feb 20 '22 12:02 Lissy93

✔️ Deploy Preview for dashy-dev ready!

🔨 Explore the source changes: 39dbb4c4fcd69c993fd54ceade18b439ede9b473

🔍 Inspect the deploy log: https://app.netlify.com/sites/dashy-dev/deploys/6212c4e69a4b220008d6cd09

😎 Browse the preview: https://deploy-preview-502--dashy-dev.netlify.app

netlify[bot] avatar Feb 20 '22 12:02 netlify[bot]

Changes preview:

Legend:

👀 Review pull request on Viezly

viezly[bot] avatar Feb 20 '22 12:02 viezly[bot]

This PR is stale because it has been open 6 weeks with no activity. Either remove the stale label or comment below with a short update, otherwise this PR will be closed in 5 days.

liss-bot avatar Apr 06 '22 01:04 liss-bot

In my testing to run Dashy in my Kubernetes cluster, I can't get the app to run as a non-root user. There are two main issues:

  1. Default port is 80, which is not usable by a non-root user. Easy to fix by setting the PORT variable to a higher number (8080 works).
  2. Part of the startup process does an rmdir /app/dist. If I run the code as a non-root user, it doesn't have the permissions to do this and the startup fails. I don't have a workaround for this one.

I'm not sure the changes in this PR would fix the second issue.

bmonty avatar Apr 20 '22 20:04 bmonty

This PR is stale because it has been open 6 weeks with no activity. Either remove the stale label or comment below with a short update, otherwise this PR will be closed in 5 days.

liss-bot avatar May 21 '22 01:05 liss-bot