microsoft / microsoft/AzureTRE
Run Gitea as non-root user
Open
Nobody has claimed this yet.
- Dominant language
- Python
- Stars
- 235
- Forks
- 192
- Avg merge
- 1d 23h
- Merged PRs (30d)
- 13
Description
The current Gitea template runs the container as root, which triggers a security finding. I would like to check if the template can be updated to run as a non-root user, similar to the recent changes made for Guacamole.
Suggestions:
- Switch the container to a non-root user after system-level setup (certificate installation, file permissions, etc.).
- Ensure configure_gitea.sh and the Gitea entrypoint operate correctly under the non-root user.
- Adjust any required permissions or s6-related paths as needed.
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Locate the Gitea template, configure_gitea.sh, the Gitea entrypoint, and the s6-related paths. Compare them with the recent Guacamole non-root changes and verify which setup steps must remain privileged. Done means the container runs as a non-root user while certificate installation, permissions, configuration, entrypoint behavior, and s6 paths continue to work.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- docker, shell
- Domain
- devops, infrastructure, security
- Issue type
- Bug
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 45/100