Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

docs: rootless Docker images with no capabilities #779

Merged
merged 1 commit into from
May 13, 2024
Merged

Conversation

dunglas
Copy link
Owner

@dunglas dunglas commented May 13, 2024

Closes #777.

@dunglas dunglas merged commit cd2049f into main May 13, 2024
13 checks passed
@dunglas dunglas deleted the docs/fix-777 branch May 13, 2024 09:11
@razvanphp
Copy link

Can't we also do something like this inside the Caddyfile?

# Drop privileges to www-data user after binding to ports
setuid www-data

This way, no CAP has to be set?

@dunglas
Copy link
Owner Author

dunglas commented May 27, 2024

@razvanphp I'm not sure, but PR welcome!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Can't run rootless with no capabilities
2 participants