Closed jcross-linkup closed 6 years ago
Feedback
Happy to take a pull request!
In implementing the ENTRYPOINT bit, be sure to keep https://github.com/docker-library/official-images/blob/master/README.md#consistency in mind. :wink:
Thanks for the tip! I'll work on a pull request.
Hello,
I see that most of the changes suggested by jcross have already been implemented -- aside from the non-root UID. Is there any chance of seeing that changed in this upstream Dockerfile, or are there concerns regarding backwards compatibility?
Thanks, Charles
Most of the official docker images seem to not use random UIDs instead root. Changing it now could cause issues for people due to the ownership of the files being different in an existing volume. There is now a way to avoid the root UID problem with the fairly recent addition of docker user namespaces: https://success.docker.com/KBase/Introduction_to_User_Namespaces_in_Docker_Engine
Before user namespaces, the root UID issue was a bigger annoyance for those of us that didn't want docker processes running as root.
Thanks @jcross-linkup - Configuring the container to run as unprivileged is easy enough... Bringing this up only because Openshift applies security constraints to applications without a service account; preventing them from accessing root.
I've been ramping up docker use within my company, and we happen to be starting to use Areospike as well. I'd thought I'd put my 2 cents in on how the Dockerfile could be improved and better align with Docker best practices. I could create pull requests for all these, but I wasn't sure if that would be over kill for these little items. If there are good reasons to not do these things, I'd like to know too since I'm still learning how to write proper Dockerfiles.