adobe-apiplatform / apigateway

A Performant API Gateway based on NGINX and Openresty
MIT License
301 stars 57 forks source link

Execute commands inside the container only with unprivileged users #77

Open selfxp opened 4 years ago

selfxp commented 4 years ago

The apigateway container needs to run with root privileges as some of the commands executed inside the container are executed by root. Example here. One way to fix this would be to create a new user beside the api-gateway one, in the same usergroup, and only execute commands inside container with these two existing users.