[PR #1014] [CLOSED] Run bitwarden-rs as non-root user #2857

New issue

Closed

opened 2026-03-03 09:08:38 +03:00 by kerem · 0 comments

kerem commented

2026-03-03 09:08:38 +03:00

Owner

📋 Pull Request Information

Original PR: https://github.com/dani-garcia/vaultwarden/pull/1014
Author: @Stampede10343
Created: 6/2/2020
Status: ❌ Closed

Base: master ← Head: feature/run-bitwarden-rs-as-non-root

📝 Commits (1)

514ecea Run bitwarden-rs as non-root user

📊 Changes

15 files changed (+42 additions, -28 deletions)

View changed files

📝 README.md (+2 -1)
📝 docker/Dockerfile.j2 (+3 -2)
📝 docker/aarch64/mysql/Dockerfile (+3 -2)
📝 docker/aarch64/sqlite/Dockerfile (+3 -2)
📝 docker/amd64/mysql/Dockerfile (+3 -2)
📝 docker/amd64/mysql/Dockerfile.alpine (+3 -2)
📝 docker/amd64/postgresql/Dockerfile (+3 -2)
📝 docker/amd64/postgresql/Dockerfile.alpine (+3 -2)
📝 docker/amd64/sqlite/Dockerfile (+3 -2)
📝 docker/amd64/sqlite/Dockerfile.alpine (+3 -2)
📝 docker/armv6/mysql/Dockerfile (+3 -2)
📝 docker/armv6/sqlite/Dockerfile (+3 -2)
📝 docker/armv7/mysql/Dockerfile (+3 -2)
📝 docker/armv7/sqlite/Dockerfile (+3 -2)
📝 docker/healthcheck.sh (+1 -1)

📄 Description

Updated the Dockerfiles to switch to UID 999 before running. Because
non-root users cannot bind to ports below 1024, I also updated the
ROCKET_PORT to 8080.

This should address #968

_{🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.}

## 📋 Pull Request Information **Original PR:** https://github.com/dani-garcia/vaultwarden/pull/1014 **Author:** [@Stampede10343](https://github.com/Stampede10343) **Created:** 6/2/2020 **Status:** ❌ Closed **Base:** `master` ← **Head:** `feature/run-bitwarden-rs-as-non-root` --- ### 📝 Commits (1) - [`514ecea`](https://github.com/dani-garcia/vaultwarden/commit/514ecea36b73e81b1674a621907b6dad3354a881) Run bitwarden-rs as non-root user ### 📊 Changes **15 files changed** (+42 additions, -28 deletions) <details> <summary>View changed files</summary> 📝 `README.md` (+2 -1) 📝 `docker/Dockerfile.j2` (+3 -2) 📝 `docker/aarch64/mysql/Dockerfile` (+3 -2) 📝 `docker/aarch64/sqlite/Dockerfile` (+3 -2) 📝 `docker/amd64/mysql/Dockerfile` (+3 -2) 📝 `docker/amd64/mysql/Dockerfile.alpine` (+3 -2) 📝 `docker/amd64/postgresql/Dockerfile` (+3 -2) 📝 `docker/amd64/postgresql/Dockerfile.alpine` (+3 -2) 📝 `docker/amd64/sqlite/Dockerfile` (+3 -2) 📝 `docker/amd64/sqlite/Dockerfile.alpine` (+3 -2) 📝 `docker/armv6/mysql/Dockerfile` (+3 -2) 📝 `docker/armv6/sqlite/Dockerfile` (+3 -2) 📝 `docker/armv7/mysql/Dockerfile` (+3 -2) 📝 `docker/armv7/sqlite/Dockerfile` (+3 -2) 📝 `docker/healthcheck.sh` (+1 -1) </details> ### 📄 Description Updated the Dockerfiles to switch to UID 999 before running. Because non-root users cannot bind to ports below 1024, I also updated the ROCKET_PORT to 8080. This should address #968 --- <sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>