localstack
feature request: Support Running LocalStack Docker Container as Non-Root User
Is there an existing issue for this?
- [x] I have searched the existing issues
Feature description
Description:
In our organization, security policies mandate that Docker containers must not run as the root user. Currently, the localstack/localstack Docker image operates with root privileges by default, which prevents us from integrating it into our development and CI/CD environments.
Attempts to run the container with a non-root user result in permission errors, particularly when accessing directories like /var/lib/localstack/logs and /opt/code/localstack/localstack/infra/dynamodb/log4j2.xml. GitHub
Request:
We kindly request that the LocalStack Docker image be modified to support execution as a non-root user. This could involve adjusting file and directory permissions, setting appropriate ownerships, and configuring the image to drop root privileges or specify a non-root user in the Dockerfile. LocalStack Discuss
Implementing this feature would enhance security and allow organizations with strict policies to adopt LocalStack without additional workarounds.
Thank you for considering this request.
🧑💻 Implementation
No response
Anything else?
No response
Welcome to LocalStack! Thanks for reporting your first issue and our team will be working towards fixing the issue for you or reach out for more background information. We recommend joining our Slack Community for real-time help and drop a message to LocalStack Support if you are a licensed user! If you are willing to contribute towards fixing this issue, please have a look at our contributing guidelines.
