[GH-ISSUE #968] Dockerfiles run services as the root user #686

New issue

Closed

opened 2026-03-03 02:02:11 +03:00 by kerem · 5 comments

kerem commented 2026-03-03 02:02:11 +03:00

Owner

Copy link

Originally created by @xhalo32 on GitHub (Apr 16, 2020).
Original GitHub issue: https://github.com/dani-garcia/vaultwarden/issues/968

Subject of the issue

Shouldn't use the root user to run the services inside the containers.

https://medium.com/@mccode/processes-in-containers-should-not-run-as-root-2feae3f0df3b

Originally created by @xhalo32 on GitHub (Apr 16, 2020). Original GitHub issue: https://github.com/dani-garcia/vaultwarden/issues/968 <!-- Please fill out the following template to make solving your problem easier and faster for us. This is only a guideline. If you think that parts are unneccessary for your issue, feel free to remove them. Remember to hide/obfuscate personal and confidential information, such as names, global IP/DNS adresses and especially passwords, if neccessary. --> ### Subject of the issue Shouldn't use the root user to run the services inside the containers. https://medium.com/@mccode/processes-in-containers-should-not-run-as-root-2feae3f0df3b

kerem closed this issue 2026-03-03 02:02:12 +03:00

kerem commented 2026-03-03 02:02:12 +03:00

Author

Owner

Copy link

@jjlin commented on GitHub (Jun 11, 2020):

As noted in https://github.com/dani-garcia/bitwarden_rs/pull/1014#issuecomment-637965744, this probably isn't a good default for bitwarden_rs, but I've now added documentation on how to run as non-root:

https://github.com/dani-garcia/bitwarden_rs/wiki/Hardening-Guide#run-as-a-non-root-user

<!-- gh-comment-id:642459718 --> @jjlin commented on GitHub (Jun 11, 2020): As noted in https://github.com/dani-garcia/bitwarden_rs/pull/1014#issuecomment-637965744, this probably isn't a good default for bitwarden_rs, but I've now added documentation on how to run as non-root: https://github.com/dani-garcia/bitwarden_rs/wiki/Hardening-Guide#run-as-a-non-root-user

kerem commented 2026-03-03 02:02:13 +03:00

Author

Owner

Copy link

@Stampede10343 commented on GitHub (Jun 11, 2020):

As noted in #1014 (comment), this probably isn't a good default for bitwarden_rs, but I've now added documentation on how to run as non-root:

https://github.com/dani-garcia/bitwarden_rs/wiki/Hardening-Guide#run-as-a-non-root-user

Should this remove the listing here, since its basically the same, and better suited in the Hardening Guide, IMO.

<!-- gh-comment-id:642835270 --> @Stampede10343 commented on GitHub (Jun 11, 2020): > As noted in [#1014 (comment)](https://github.com/dani-garcia/bitwarden_rs/pull/1014#issuecomment-637965744), this probably isn't a good default for bitwarden_rs, but I've now added documentation on how to run as non-root: > > https://github.com/dani-garcia/bitwarden_rs/wiki/Hardening-Guide#run-as-a-non-root-user Should this remove the [listing here](https://github.com/dani-garcia/bitwarden_rs/wiki/Running-the-server-with-non-root-user), since its basically the same, and better suited in the Hardening Guide, IMO.

kerem commented 2026-03-03 02:02:13 +03:00

Author

Owner

Copy link

@jjlin commented on GitHub (Jun 11, 2020):

@Stampede10343 I didn't notice that page, but I think it has a few additional things that would be good to mention. I'll merge it into the hardening guide page tonight. Thanks for calling attention to that.

<!-- gh-comment-id:642839474 --> @jjlin commented on GitHub (Jun 11, 2020): @Stampede10343 I didn't notice that page, but I think it has a few additional things that would be good to mention. I'll merge it into the hardening guide page tonight. Thanks for calling attention to that.

kerem commented 2026-03-03 02:02:13 +03:00

Author

Owner

Copy link

@jjlin commented on GitHub (Jun 11, 2020):

It's updated now.

<!-- gh-comment-id:642984579 --> @jjlin commented on GitHub (Jun 11, 2020): It's updated now.

kerem commented 2026-03-03 02:02:13 +03:00

Author

Owner

Copy link

@BlackDex commented on GitHub (Oct 8, 2020):

Thx for the updated wiki, closing this issue.

<!-- gh-comment-id:705855846 --> @BlackDex commented on GitHub (Oct 8, 2020): Thx for the updated wiki, closing this issue.

Sign in to join this conversation.

No Branch/Tag specified

Branches Tags

main

revert-7033-patch-1

cached-config-operations

test_dylint

1.35.8

1.35.7

1.35.6

1.35.5

1.35.4

1.35.3

1.35.2

1.35.1

1.35.0

1.34.3

1.34.2

1.34.1

1.34.0

1.33.2

1.33.1

1.33.0

1.32.7

1.32.6

1.32.5

1.32.4

1.32.3

1.32.2

1.32.1

1.32.0

1.31.0

1.30.5

1.30.4

1.30.3

1.30.2

1.30.1

1.30.0

1.29.2

1.29.1

1.29.0

1.28.1

1.28.0

1.27.0

1.26.0

1.25.2

1.25.1

1.25.0

1.24.0

1.23.1

1.23.0

1.22.2

1.22.1

1.22.0

1.21.0

1.20.0

1.19.0

1.18.0

1.17.0

1.16.3

1.16.2

1.16.1

1.16.0

1.15.1

1.15.0

1.14.2

1.14.1

1.14

1.13.1

1.13.0

1.12.0

1.11.0

1.10.0

1.9.1

1.9.0

1.8.0

1.7.0

1.6.1

1.6.0

1.5.0

1.4.0

1.3.0

1.2.0

1.1.0

1.0.0

0.13.0

0.12.0

0.11.0

0.10.0

0.9.0

Labels

Clear labels   

SSO

  

Third party

  

better for forum

  

bug

  

bug

  

documentation

  

duplicate

  

enhancement

  

future Vault

  

future Vault

  

future Vault

  

good first issue

  

help wanted

  

low priority

  

notes

  

pull-request

Mirrored from GitHub Pull Request

  

question

  

troubleshooting

  

wontfix

No labels

SSO

Third party

better for forum

bug

bug

documentation

duplicate

enhancement

future Vault

future Vault

future Vault

good first issue

help wanted

low priority

notes

pull-request

question

troubleshooting

wontfix

Milestone

Clear milestone

No items

No milestone

Projects

Clear projects

No items

No project

Assignees

Clear assignees

No assignees

1 participant

Notifications

Subscribe

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference

starred/vaultwarden#686

No description provided.