eve icon indicating copy to clipboard operation
eve copied to clipboard

[WIP] Make vtpm run as a non-root user

Open shjala opened this issue 2 years ago • 3 comments

I'm trying to make vtpm run with a non-root user, I have tried the USER configuration in docker file and also in the docker-compose file, but for some reason unknown to me it is not respected, and no matter what it gets executed as root user in run-time.

This is a hacky way to make it run as a non-root user and be functional.

any alternative solution?

shjala avatar Feb 23 '23 13:02 shjala

@rouming

shjala avatar Feb 23 '23 13:02 shjala

@shjala with apparmor in place, are you still pursuing this PR? If so we need to pull in @deitch to figure out the issues.

eriknordmark avatar Jul 11 '23 13:07 eriknordmark

@eriknordmark yes I would like to have both DAC and MAC properly in place, I will try once more and then ask Avi if unsuccessful.

shjala avatar Jul 12 '23 13:07 shjala