Use non-root user for Docker image whenever possible

[jauderho]

Right now, not all of the images are built with a non-root user. More testing/validation will have to be done to determine which images can run as non-root.

Images that have to run as root should have capabilities limited to the needed subset.

[MaxPeal]

any update on this?
or can i help you with it?

[jauderho]

@MaxPeal Pull requests are very welcome as I have to test and make sure that builds are not broken as a result of specifying a non-root user.

In general, I'm looking at adding the following on an as-needed basis:

# EXPOSE
# ENV
# STOPSIGNAL
HEALTHCHECK NONE
# USER