Run as non-root user

[porscheme]

Can Nebula docker containers run as non-root user?

[wey-gu]

I didn't try it, but I didn't see obvious obstacles to doing so.
@MegaByte875 do you have more ideas on why we use root user in the container?

[porscheme]

I didn't try it, but I didn't see obvious obstacles to doing so. @MegaByte875 do you have more ideas on why we use root user in the container?

++ hostname
++ hostname
+ exec /usr/local/nebula/bin/nebula-storaged --flagfile=/usr/local/nebula/etc/nebula-storaged.conf --meta_server_addrs=nebula-cluster-metad-0.nebula-cluster-metad-headless.graph.svc.cluster.local:9559,nebula-cluster-metad-1.nebula-cluster-metad-headless.graph.svc.cluster.local:9559,nebula-cluster-metad-2.nebula-cluster-metad-headless.graph.svc.cluster.local:9559 --local_ip=nebula-cluster-storaged-2.nebula-cluster-storaged-headless.graph.svc.cluster.local --ws_ip=nebula-cluster-storaged-2.nebula-cluster-storaged-headless.graph.svc.cluster.local --daemonize=false
Could not create logging file: Permission denied
COULD NOT CREATE A LOGGINGFILE 20221216-215655.1!Could not create logging file: Permission denied
COULD NOT CREATE A LOGGINGFILE 20221216-215655.1!Could not create logging file: Permission denied
COULD NOT CREATE A LOGGINGFILE 20221216-215655.1!E20221216 21:56:55.942567     1 StorageDaemon.cpp:79] Failed to create or open `logs/storaged-stdout.log': Permission denied

my docker file

FROM vesoft/nebula-storaged:v3.3.0

ARG BRANCH
ARG REGION
ARG USER_UID=1000
ARG USER_GID=1000
ARG USERNAME=nebula

# Create the user
RUN groupadd --gid $USER_GID $USERNAME \
    && useradd --uid $USER_UID --gid $USER_GID -m $USERNAME --no-log-init

# SET read, write, and execute
RUN chmod 777 /usr/local/nebula
RUN chown -R $USERNAME /usr/local/nebula

USER $USERNAME
WORKDIR /usr/local/nebula