[ECS] [request]: Run ecs-agent container as a non-root user
- Dominant language
- Shell
- Stars
- 5.4k
- Forks
- 334
- PR merge metrics
- No merged PRs in 30d
Description
### Community Note
* Please vote on this issue by adding a 👍 [reaction](https://blog.github.com/2016-03-10-add-reactions-to-pull-requests-issues-and-comments/) to the original issue to help the community and maintainers prioritize this request
* Please do not leave "+1" or "me too" comments, they generate extra noise for issue followers and do not help prioritize the request
* If you are interested in working on this issue or have submitted a pull request, please leave a comment
**Tell us about your request**
ECS agent container runs as a non-root user by default.
**Which service(s) is this request for?**
ECS
**Tell us about the problem you're trying to solve. What are you trying to do, and why is it hard?**
The ecs-agent container runs as `root` by default and there is no way to configure it otherwise. Running it as non-root user will have better complicance with seucrity best practices. This is related to #1059 but not exactly the same. This is about the ecs-agent container's running user, not the [Docker daemon's](https://docs.docker.com/engine/security/rootless/).
Contributor guide
Assessment
This issue has not been assessed yet.