You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Would it be possible to add support for the environment flags PUID and PGID to the docker container?
These flags make managing permissions of persistent container data easier as well as provide a decent barrier of security by allowing the process within the container to run as a non root user, reducing the risk of lateral movement to other containers or compromise of the host itself.
Thanks for the post. You can do that using the docker compose file itself so there is no need to update the docker image. The link you shared explains how to configure the compose file already.
Note that even if docker container is running as root, the apps running inside the container can access files only on the mounted volumes. So any attacker getting access to the container can only access these files on volume. Any change they make otherwise stays inside the container itself and does not affect your host system in any way. They do not get root access on the host system via the container.
Would it be possible to add support for the environment flags PUID and PGID to the docker container?
These flags make managing permissions of persistent container data easier as well as provide a decent barrier of security by allowing the process within the container to run as a non root user, reducing the risk of lateral movement to other containers or compromise of the host itself.
References:
https://docs.linuxserver.io/general/understanding-puid-and-pgid/
The text was updated successfully, but these errors were encountered: