NethermindEth / NethermindEth/sedge

Be able to run the container as a non root user

Open
#367 0 comments 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

Dominant language
Go
Stars
195
Forks
68
Avg merge
19h 53m
Merged PRs (30d)
1

Description

Is your feature request related to a problem? Please describe.
It is related to security. I would like the resulting docker containers to run as a non root user so the files accessed do not need to be owned by root

Describe the solution you'd like
I would like the generated docker-compose to be able to use a non root user. If this is not possible the fixuid can be implemented at the build stage.

Describe alternatives you've considered
I tried to add the user tag into the docker compose but this would not run as it could not access the files in the container

Additional context

Contributor guide

Open the contributing guide

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

Start by locating the Go entry point that generates docker-compose files, then reproduce the reported permission failure with a generated container and a non-root user. Review how container users and mounted files are configured; done means the generated compose setup can run as a non-root user without losing required file access.

Written by the indexing model from the issue text.

Assessment

Tech stack
docker, docker-compose, go
Domain
devops, security
Issue type
Feature
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.