Nginx: running master process back at root

[bryanlatten]

Removing /dev/stdout hacks in order to make this work. Unnecessary precaution for unconnected master process, further mitigated with user namespaces going forward.

Works around:

• /dev/stdout is inaccessible by an unprivileged user in a container started as root moby/moby#31243
• unable to modify permissions of /dev/stdout without tty moby/moby#31106

Allow running in Docker 1.12+ with user namespaces enabled and selinux in enforcing mode

[ko-be]

👍 😞

[bryanlatten]

@ko-be can't be too sad. its only the master nginx process, not the workers

[bryanlatten]

root       195  0.0  0.1  32168  4892 ?        S    20:39   0:00      \_ nginx: master process nginx -g d
www-data   206  0.0  0.0  32556  2412 ?        S    20:39   0:00          \_ nginx: worker process

[mikeklein13]

👍

[mannytoledo]

👍