[GH-ISSUE #615] [FEATURE] Run Docker container as a non-root user #393

Closed
opened 2026-02-25 20:35:38 +03:00 by kerem · 0 comments
Owner

Originally created by @ras07 on GitHub (Jan 18, 2022).
Original GitHub issue: https://github.com/benbusby/whoogle-search/issues/615

Describe the feature you'd like to see added
Would be more secure to run the Docker container as a non-root user (and it almost works as is ...)

Additional context
I've been trying to modify the Dockerfile to run as a non-root user, and it doesn't take much. The /config directory (volume) needs to be writable by non-root users, and then you can create a new user and run as it.
I'm going to submit two pull requests - the first is to just make /config writable by all (simple and risk-free, and allows for an easy downstream modification by the end user); the second, to create a non-root user and run as it (works as far as I can tell, but needs more testing).

Originally created by @ras07 on GitHub (Jan 18, 2022). Original GitHub issue: https://github.com/benbusby/whoogle-search/issues/615 **Describe the feature you'd like to see added** Would be more secure to run the Docker container as a non-root user (and it *almost* works as is ...) **Additional context** I've been trying to modify the Dockerfile to run as a non-root user, and it doesn't take much. The /config directory (volume) needs to be writable by non-root users, and then you can create a new user and run as it. I'm going to submit two pull requests - the first is to just make /config writable by all (simple and risk-free, and allows for an easy downstream modification by the end user); the second, to create a non-root user and run as it (works as far as I can tell, but needs more testing).
kerem 2026-02-25 20:35:38 +03:00
Sign in to join this conversation.
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
starred/whoogle-search#393
No description provided.