Skip to content

Make it possible to run container as nonRootUser #87

@sleccese

Description

@sleccese

Hi,
I have the constrains to run images with nonRootUser.
I tried to set the securityContext in my Deployment.yaml as following:

kind: Deployment
....
spec:
  template:
    spec:
      securityContext:
        nonRootUser: true
        fsGroup: 1000
        runAsUser: 1000

However, as I started the image I found out that in the default entrypoint and default CMD there is sudo required which will not work with nonRootUser. I am not to fimilar with PHP and PHP-FPM so I do not know if it is possible to remove this sudo parts.

Following lines in the php base image are in my opinion the problem:
399 ENTRYPOINT ["/docker-entrypoint.sh"]
400 CMD ["sudo", "-E", "LD_PRELOAD=/usr/lib/preloadable_libiconv.so", "php-fpm"]

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions