search

jitsi / docker-jitsi-meet

Jitsi Meet on Docker
https://hub.docker.com/u/jitsi/
Apache License 2.0
3.08k stars 1.37k forks source link

Is there any plan to run container as non root user? #1447

Open ghost opened 1 year ago

saghul commented 1 year ago

Yes, but it hasn't been a priority.

If you are willing to help, he first step would be to upgrade the s6 overlay to v3, which does allow running as non-root.

Once that is done, switching to non-root would be a next step.

bsobbe commented 1 year ago

@saghul is it gonna be a priority this year?

saghul commented 1 year ago

I don't have any indication to believe it will be. As I mentioned earlier (https://github.com/jitsi/docker-jitsi-meet/issues/1447#issuecomment-1326094680) migrating to S6 v3 is a pre-requisite to that.

bsobbe commented 1 year ago

@saghul I have successfully migrated docker-jitsi-meet's base image to the latest version of s6-overlay (v3.1.5.0). After a few days of refactoring some of the cont-init and services.d and of course, some changes in Dockerfiles, seems like all the services are now running error-free with the new base. I am going to do a few more tests during the week just to be sure before moving to add support for non-root users. I will make sure to create a PR after it's ready, but meanwhile don't hesitate to let me know if there are any specific tests I need to perform.

saghul commented 1 year ago

This is awesome, thank you!

bsobbe commented 1 year ago

@saghul I made the PR just now: https://github.com/jitsi/docker-jitsi-meet/pull/1584 Looking forward to getting some feedback.