search

PaloAltoNetworks / pan-cnc

CNC: Chevy's, not Cadillacs. Rapid UI prototyping for all Palo Alto Networks WWSE demos and pocs.
Apache License 2.0
3 stars 3 forks source link

pan-cnc apps should not run as root in containers #17

Open nembery opened 5 years ago

nembery commented 5 years ago

currently we use manage.py runserver and celery both running as root, which is no bueno. issue to track converting over to full blown nginx + gunicorn + django + adding non root user in dockerfile and ensuring celery runs as non-privileged user as well.

nembery commented 5 years ago

good example project here: https://github.com/dockerfiles/django-uwsgi-nginx