Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Run commands inside docker container as a non root user #3255

Closed
vblagoje opened this issue Sep 21, 2022 · 0 comments · Fixed by #3702
Closed

Run commands inside docker container as a non root user #3255

vblagoje opened this issue Sep 21, 2022 · 0 comments · Fixed by #3702
Assignees
Labels
P1 High priority, add to the next sprint topic:docker

Comments

@vblagoje
Copy link
Member

vblagoje commented Sep 21, 2022

Is your feature request related to a problem? Please describe.
We currently run gunicorn as a root user, exposing not only the contents of the docker image to potential attackers but also leaving a backdoor open for an attacker to gain access to the host machine.

Describe the solution you'd like
Run all internet-facing commands as non-root user thus limiting potential security issues for the Haystack deployments.

Describe alternatives you've considered
N/A

For more context and a brief introduction refer to this excellent article

@masci masci changed the title Run Internet facing commands inside docker container as a non root user Run commands inside docker container as a non root user Nov 25, 2022
@masci masci added the P1 High priority, add to the next sprint label Nov 25, 2022
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
P1 High priority, add to the next sprint topic:docker
Projects
None yet
Development

Successfully merging a pull request may close this issue.

2 participants