While Rustwide technically already allows to run a build with an arbitrary container image, it forces you to use (a fork of) crates-build-env as it integrated with it (through the MAP_USER_ID environment variable) to drop privileges inside the container.
This PR lifts that restriction by using Docker's --user flag to drop privileges, instead of the entrypoint in crates-build-env.
pietroalbini
commented
4 years ago
While Rustwide technically already allows to run a build with an arbitrary container image, it forces you to use (a fork of)
crates-build-envas it integrated with it (through theMAP_USER_IDenvironment variable) to drop privileges inside the container.This PR lifts that restriction by using Docker's
--userflag to drop privileges, instead of the entrypoint incrates-build-env.