docker-jitsi-meet icon indicating copy to clipboard operation
docker-jitsi-meet copied to clipboard

Published 20 hours ago • verified publisher icon jitsi

Is there any plan to run container as non root user?

Open ghost opened this issue 3 years ago • 6 comments

ghost avatar Nov 24 '22 07:11 ghost

Yes, but it hasn't been a priority.

If you are willing to help, he first step would be to upgrade the s6 overlay to v3, which does allow running as non-root.

Once that is done, switching to non-root would be a next step.

saghul avatar Nov 24 '22 08:11 saghul

@saghul is it gonna be a priority this year?

bsobbe avatar Mar 24 '23 11:03 bsobbe

I don't have any indication to believe it will be. As I mentioned earlier (https://github.com/jitsi/docker-jitsi-meet/issues/1447#issuecomment-1326094680) migrating to S6 v3 is a pre-requisite to that.

saghul avatar Apr 03 '23 09:04 saghul

@saghul I have successfully migrated docker-jitsi-meet's base image to the latest version of s6-overlay (v3.1.5.0). After a few days of refactoring some of the cont-init and services.d and of course, some changes in Dockerfiles, seems like all the services are now running error-free with the new base. I am going to do a few more tests during the week just to be sure before moving to add support for non-root users. I will make sure to create a PR after it's ready, but meanwhile don't hesitate to let me know if there are any specific tests I need to perform.

bsobbe avatar Jul 19 '23 09:07 bsobbe

This is awesome, thank you!

saghul avatar Jul 19 '23 09:07 saghul

@saghul I made the PR just now: https://github.com/jitsi/docker-jitsi-meet/pull/1584 Looking forward to getting some feedback.

bsobbe avatar Aug 01 '23 14:08 bsobbe