-
Notifications
You must be signed in to change notification settings - Fork 26
Dockerfile: changing to non-privileged port #30
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Dockerfile: changing to non-privileged port #30
Conversation
@@ -1,4 +1,4 @@ | |||
FROM ubuntu:16.04 | |||
FROM ubuntu:14.04 |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
rolling back, wasn't helpful downstream
👍 |
echo '[run] enabling web server' | ||
|
||
# Unfortunately, until Dockerhub supports this operation...it has to be done here | ||
setcap cap_net_bind_service=+ep /usr/sbin/nginx |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
dockerhub couldn't run this command, neither can docker 1.11 by default
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Is this just an option that needs to run via root
?
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
its something that allows you to run on privileged port without root on nginx
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Got it, cool
This might require updates to consumers using tugboat, but worth checking just to make sure it grabs this exposed port correctly |
@Attamusc no tugboat change needed. it picks up everything! |
woohoo! |
As long as roll out to existing containers is done carefully and there is no fear of this being auto rolled out. w/ this |
No description provided.