Its official, we have gone fully rootless. (technically the master process of nginx spawns as root and only the workers drop their privs and run as nginx:nginx, but it is good to keep it this way because the alternative makes the bind mount for socks more tricky)
Its official, we have gone fully rootless. (technically the master process of nginx spawns as root and only the workers drop their privs and run as nginx:nginx, but it is good to keep it this way because the alternative makes the bind mount for socks more tricky)