Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Feature Request: Add support for PGID and GUID to docker container #1163

Open
gawainXX opened this issue Dec 24, 2024 · 1 comment
Open

Feature Request: Add support for PGID and GUID to docker container #1163

gawainXX opened this issue Dec 24, 2024 · 1 comment

Comments

@gawainXX
Copy link

gawainXX commented Dec 24, 2024

Would it be possible to add support for the environment flags PUID and PGID to the docker container?

These flags make managing permissions of persistent container data easier as well as provide a decent barrier of security by allowing the process within the container to run as a non root user, reducing the risk of lateral movement to other containers or compromise of the host itself.

References:
https://docs.linuxserver.io/general/understanding-puid-and-pgid/

@ShreyasZare
Copy link
Member

Thanks for the post. You can do that using the docker compose file itself so there is no need to update the docker image. The link you shared explains how to configure the compose file already.

Note that even if docker container is running as root, the apps running inside the container can access files only on the mounted volumes. So any attacker getting access to the container can only access these files on volume. Any change they make otherwise stays inside the container itself and does not affect your host system in any way. They do not get root access on the host system via the container.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants