search

ossf / package-analysis

Open Source Package Analysis
Apache License 2.0
720 stars 48 forks source link

Run analysis image as non-root user #394

Open maxfisher-g opened 1 year ago

maxfisher-g commented 1 year ago

Most of the time, developers install and run packages as non-root users. Currently, commands inside the analysis container run as root which is easy to set up but not as realistic. It would be ideal to have things running as a non-root user, but with (passwordless) sudo access (see #393)

maxfisher-g commented 1 year ago

Previously there was an upstream issue with gVisor which blocked this, but it's been fixed as of https://github.com/google/gvisor/commit/8e4cb261486ad84bc5657b1cee0288018f693d01