aws / aws/credentials-fetcher

Containers not running as root (Informational)

Open
#68 6 comments 0 reactions 0 assignees View on GitHub
Dominant language
Go
Stars
133
Forks
34
PR merge metrics
No merged PRs in 30d

Description

Dockerfile images that contain something of the following so within the container is run as non root user:
RUN adduser -u 5678 --disabled-password --gecos "" appuser && chown -R appuser /app

This will cause the kerberos client inside the container to not have access to the TGT created on the host by credentials-fetcher.

Contributor guide

Open the contributing guide

Research direction

The issue names Dockerfile images that create a non-root appuser, but no repository file, test, entry point, or requested change. First clarify the expected behavior for non-root containers, then reproduce whether the Kerberos client can access the host-created TGT and define verification criteria.

Written by the indexing model from the issue text.

Assessment

Tech stack
docker
Domain
authentication, security
Issue type
Bug
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
30/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.