Hi, I have a basic question when running running a Node.js web server in a Docker container. Is it OK to run the app as user root inside the container? For example from here: http://docs.docker.com/examples/nodejs_web_app/ the last 3 lines are: # Install app dependencies RUN cd /src; npm install…

One issue I’ve come up against is non root processes writing to a docker VOLUME. There’s are posts out there suggesting workarounds like configuring the same userid between the host and container, though a drawback is non-portability. When it comes to webapps would love to hear how others are addr…

Hi, I think some good advice is: The best practice is to combine: running your process as non-privileged user within the containers (docker lets you do that easily) stripping the container from all the potentially dangerous system capabilities (docker does that automatically) running an hardene…

IMO running as root inside a container simplifies things and persists the micro service methodology That being said there are times when it is necessary to switch the user, which you’ve done. It’s always situational.

It’s generally not advisable to use root in a container. If the container is compromised, you can get more issues with root users – the host and the container share the same Linux kernel any way. Root user is easier to be taken advantage to attack the kernel.

[image] rudijs: There’s are posts out there suggesting workarounds like configuring the same userid between the host and container, though a drawback is non-portability. Where did you catch this, if i may ask? Is it this posts on SO: docker - Issue when trying to write to a mounted volume fro…

Could I ask specifically what you mean by “persists the micro service methodology” ?

Have there been any infamous examples of this happening? Been searching around for examples.

Actually, I’ve found that, if you can execute commands as root within a container, and that container has write access to any filesystem on the host system, then I can root the host system quite easily. We’re in the process of deciding how to deal with this issue here before we allow docker to run i…

Since the docker command is already a rooted command its consequences are also rooted. If you can run the command at all then there is a lot of other damage you can do apart from mapping to and then access protected directories through docker. On a related note, the requirement for docker to be roo…

Root user or non-root user inside container

Docker Engine General

belette (Belette) March 10, 2015, 4:14pm 4

Hi Rudi
I noticed as well some messup in permission & owner with Volume between containers and host using a non root user.
I posted a mesage yesterday regarding this and still interesting to get some information!

Topic		Replies	Views
Container security General	7	598	February 3, 2021
Running Docker containers as non-root user General docker , vps , linux	10	1067	March 18, 2026
[Help Needed] How to mount a directory as a non-root user in a container General	14	23701	May 30, 2024
Root permissions for user inside a Docker container General docker	1	3741	September 29, 2015
Rootless Docker: Need to provide write access to a non-root user in docker container for a volume mounted on the host Docker Hub docker	1	2498	July 29, 2023

Root user or non-root user inside container

Related topics