Project

General

Profile

Actions
Copy link

Feature #5319

open

Non-root user in container images

Added by Davide Pesavento 6 months ago.

Status:
New
Priority:
Normal
Assignee:
-
Category:
Build
Target version:
-
Start date:
Due date:
% Done:

0%

Estimated time:
Tags:
docker

Description

As a security best practice, it is generally recommended to have a non-root user in the container image and run the app/service/whatever as that user.

For our images, this means:

  • in ndn-cxx-runtime, create a dedicated user and group with an explicit UID/GID
  • in downstream images, set USER accordingly, after any additional dependencies are installed

No data to display

Actions
Copy link

Also available in: Atom PDF