docker-registry-manager
docker-registry-manager copied to clipboard
Don't run Docker image as root
It would be nice if the Dockerfile
would create a non privileged user and switch to it using the Docker USER
directive instead of using root.
For example like described here.
You might also take this advice from the official Docker documentation:
If a service can run without privileges, use
USER
to change to a non-root user.
PS: Thank you for Docker registry manager!
You can enforce the same thing by using MANAGER_PORT=8080 and adding --cap-drop ALL That way, you don't depend on the Dockerfile to do the right thing.
Nice, I didn't know about that. A more default image would be better nevertheless. :wink: