Skip to content

[Feature]: Make app run as non-root in container #207

@rugk

Description

@rugk

Related Problem

It is a security best practice to make your service run as non-root inside the container: https://docs.docker.com/build/building/best-practices/#user

Especially when it is executed in a rootful way this increases the security.

Proposed Feature

Adjust the Dockerfile to drop permissions when not necessary (anymore).

Alternatives Considered

No response

Benefits

See https://stackoverflow.com/a/68190847/5008962

Additional Context

No response

Metadata

Metadata

Assignees

No one assigned

    Labels

    enhancementNew feature or request

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions