dunglas / dunglas/symfony-docker
Run container as an unprivileged user
Nobody has claimed this yet.
- Dominant language
- Dockerfile
- Stars
- 3.2k
- Forks
- 874
- Avg merge
- 1h 55m
- Merged PRs (30d)
- 4
Description
Hi,
Thx for this template, very useful ! 🙏
Many resources suggest using an unprivileged user in container in order to prevent privilege escalation attacks(e.g. OWASP https://cheatsheetseries.owasp.org/cheatsheets/Docker_Security_Cheat_Sheet.html#rule-2-set-a-user or Docker docs https://docs.docker.com/build/building/best-practices/#user).
It seems it's not the case on this template with FrankenPHP and based on its doc, FrankenPHP can be used with an unprivileged user. Is it on purpose, or is it a feature that can be added to this template ?
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start by reading the template's Docker and FrankenPHP container configuration, then compare it with FrankenPHP's documented unprivileged-user setup and the linked Docker security guidance. Done means the template runs the container without unnecessary privileges while retaining its existing functionality.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- docker, php
- Domain
- devops, security
- Issue type
- Feature
- Difficulty
- 3/5
- Estimated time
- 1-2 days
- Activity status
- Quiet
- Clarity
- Mostly clear
- Newbie friendliness
- 52/100