Created Running docker container with non-root user (markdown)
parent
5d12bd2613
commit
926d2eee1e
|
@ -0,0 +1,29 @@
|
||||||
|
By default `mprasil/bitwarden` is using root user to run service inside the container. There are few things you need to set to run the container as non-root user if you wish to do so:
|
||||||
|
|
||||||
|
1. Make sure that the directory, you're mounting inside the container will be writable by the user. For example if you decide to run as `nobody`, the directory needs to be writable by user with id 65534. For other ways to specify user inside the container, see the [docker documentation](https://docs.docker.com/engine/reference/run/#user), in our examples here we will use `nobody`.
|
||||||
|
|
||||||
|
```bash
|
||||||
|
# Make the directory on the host, change this to you preferred path
|
||||||
|
sudo mkdir /bw-data
|
||||||
|
|
||||||
|
# Set the owner using user id.
|
||||||
|
# Note that the ownership must match user in /etc/passwd *inside* the container, not on your host
|
||||||
|
sudo chown 65534 /bw-data
|
||||||
|
|
||||||
|
# Give the owner full rights to the folder
|
||||||
|
sudo chmod u+rwx /bw-data
|
||||||
|
```
|
||||||
|
|
||||||
|
2. Start the container with proper parameters. Define the user and make sure to start with port set to `1024` or higher.
|
||||||
|
|
||||||
|
```bash
|
||||||
|
docker run -d \
|
||||||
|
--name bitwarden \
|
||||||
|
--user nobody \
|
||||||
|
-e ROCKET_PORT=1024 \
|
||||||
|
-v /bw-data/:/data/ \
|
||||||
|
-p 80:1024 \
|
||||||
|
mprasil/bitwarden:latest
|
||||||
|
```
|
||||||
|
|
||||||
|
Notice that the port mapping (`-p 80:1024`) reflects the `ROCKET_PORT` setting.
|
Loading…
Reference in New Issue