search

jlesage / docker-baseimage-gui

A minimal docker baseimage to ease creation of X graphical application containers
MIT License
1.2k stars 179 forks source link

Run Container as root #130

Closed fish-not-phish closed 5 months ago

fish-not-phish commented 5 months ago

I know this technically is a security concern, however I am trying to run this in AWS ECS, and I cannot run it with the option --privileged, so that leaves the only option either:

I added some extra packages (certbot and iptables) that I cannot run without using root. I did notice that the container utilizes "app" user, is it possible to change this to the "root" user instead?

I am using your firefox image, but I know it pulls from this one, which is where I found the init user script [10-init-users.sh]. However I can't find where the container indicates which user will be used within the container startup.

fish-not-phish commented 5 months ago

Correction, this is relevant for your baseimage, not the baseimage-gui, but question remains the same, as the baseimage-gui pulls from your baseimage :)

fish-not-phish commented 5 months ago

Disregard, I read another issue that solved my problem. To anyone else running into this issue, just add a new init script as specified here. The init scripts are ran as root.