slimtoolkit / slim

Slim(toolkit): Don't change anything in your container image and minify it by up to 30x (and for compiled languages even more) making it secure too! (free and open source)
Apache License 2.0
19.21k stars 716 forks source link

sensor: Fix up target app HOME env var when run as user #426

Closed iximiuz closed 1 year ago

iximiuz commented 1 year ago

Sensor typically needs to run as root while the target app may need to use a less privileged user. By default, conainer runtimes (like Docker) set the HOME env var upon container startup based on the container's user and the corresponding record in the /etc/passwd file in the image (if any, "/" otherwser). However, instrumented container's user is often different from the target app's user. Thus, sensor needs extra logic to restore the right HOME var doing similar computations.

NB: Having HOME env var set is mandatory in accordance with POSIX.

ghost commented 1 year ago
👇 Click on the image for a new way to code review - Make big changes easier — review code in small groups of related files - Know where to start — see the whole change at a glance - Take a code tour — explore the change with an interactive tour - Make comments and review — all fully sync’ed with github [Try it now!](https://app.codesee.io/r/reviews?pr=426&src=https%3A%2F%2Fgithub.com%2Fdocker-slim%2Fdocker-slim)

Review these changes using an interactive CodeSee Map

Legend

CodeSee Map Legend